$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: 93boc+MWEbCpmicxnXm4HtZ+CiveyrNH9ZROABk4cWE= Subject key identifier: 05:3D:32:53:9E:E3:C5:3D:2D:05:5F:57:27:33:E4:AD:BF:99:2A:B4 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: 6D Signing time: Sun 01 Mar 2026 09:19:17 +0000 Manifest this update: Sun 01 Mar 2026 09:19:17 +0000 Manifest next update: Sun 08 Mar 2026 09:19:17 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: AC4oeRgNDgwrxCEhjIYvrGRA6Rw43WTvrzKW6ZF5N+8=) 2: 399480C4ACD011F08828DD7BC4F9AE02.roa (hash: Mnd71Ffk/psJgLiSkChk25qvX5F/utFXFDACcylb68Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Mar 1 09:19:17 2026 GMT Not After : Mar 8 09:19:17 2026 GMT Subject: CN=69a40495-e07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:cb:da:71:11:a1:50:5d:3a:86:a3:7c:40: cf:a8:63:d4:d3:91:b0:df:73:bb:e0:2d:ab:48:dc: 6e:1d:05:01:9b:5c:bf:03:c9:c3:54:8c:25:9c:f0: d9:74:bd:1e:a1:3a:39:a7:50:6a:9e:e3:95:c5:9d: 6e:fa:f2:ef:20:f4:33:67:29:82:33:1a:fb:bf:cc: 07:ee:47:60:bf:cb:2e:6c:a3:b2:d1:67:4c:72:16: be:92:0f:c7:0a:a3:c1:35:1a:cb:b7:91:7a:5c:f2: 73:18:e8:01:2a:b3:ba:33:15:2f:c9:b9:44:a8:44: 6e:86:d9:cf:46:79:21:cc:3f:27:85:25:0d:e0:8e: 5e:33:28:4a:57:77:9a:a9:ae:ce:c0:01:45:52:64: bd:fe:80:43:92:ee:51:fa:92:3c:2a:a1:76:ca:0d: b8:50:62:ce:82:3f:95:c5:05:16:12:d3:5f:2e:7a: 7e:23:40:ff:9e:a6:54:30:61:a7:bf:c6:40:14:88: 42:ec:db:d7:05:8a:b1:b4:b8:83:7c:70:ad:fc:d0: dd:f9:28:2d:3e:c9:c7:8c:1c:8d:d4:f2:9c:1d:b7: e9:fa:b1:1e:e1:1d:3a:5f:d9:89:10:c3:48:0b:97: 99:1c:a9:c7:77:29:25:8d:e8:7e:57:e7:28:a3:5a: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3D:32:53:9E:E3:C5:3D:2D:05:5F:57:27:33:E4:AD:BF:99:2A:B4 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:38:29:79:c2:6d:07:bf:e0:31:a1:54:fe:cc:89:97:57:d7: d6:7f:13:a8:4f:27:9e:d9:97:d9:7b:94:05:be:f9:73:df:48: bf:b4:3e:6f:cd:85:4f:b8:22:b0:72:23:03:2b:33:f7:25:39: 85:34:d9:65:a0:05:b9:76:ab:4b:3c:d1:e1:65:da:99:40:90: c4:c0:84:7d:a5:64:ef:31:ce:24:ae:41:6e:96:01:6d:a1:24: 4e:45:bf:fb:58:e2:d2:ae:f3:27:17:eb:4c:5c:fd:f0:30:95: c0:65:73:2a:7f:28:57:75:14:61:71:23:ad:b3:45:a3:69:b4: 74:b4:3c:86:3a:3d:58:9a:bb:76:98:a2:70:ed:d0:7d:f8:33: 41:0d:20:c6:3b:7d:0c:92:8a:c3:9f:ab:e3:df:e5:59:75:0c: ee:a8:a0:47:9b:61:f2:30:b9:30:3d:ed:7a:cf:a4:ba:a3:9f: cd:74:9c:0a:9e:19:3e:9d:b4:70:51:b8:26:62:4d:a4:10:57: a4:6f:1c:82:03:3a:a0:dd:d1:0b:6c:f5:09:1e:31:2e:99:8b: 08:4b:36:52:84:26:fc:23:2a:69:29:17:bf:8f:92:20:2f:c5: e7:b4:37:3a:22:6d:ad:9a:9b:42:a5:f8:45:b3:fb:09:54:54: fd:c7:29:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDBFMDExMC8GA1UEBRMoODk3MDc3QjcxRjJDNUFFRERFNkMxREQ0OTU0N0RDQzk5 NTJDREFCRTAeFw0yNjAzMDEwOTE5MTdaFw0yNjAzMDgwOTE5MTdaMBgxFjAUBgNV BAMTDTY5YTQwNDk1LWUwN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLhMvacRGhUF06hqN8QM+oY9TTkbDfc7vgLatI3G4dBQGbXL8DycNUjCWc8Nl0 vR6hOjmnUGqe45XFnW768u8g9DNnKYIzGvu/zAfuR2C/yy5so7LRZ0xyFr6SD8cK o8E1Gsu3kXpc8nMY6AEqs7ozFS/JuUSoRG6G2c9GeSHMPyeFJQ3gjl4zKEpXd5qp rs7AAUVSZL3+gEOS7lH6kjwqoXbKDbhQYs6CP5XFBRYS018uen4jQP+eplQwYae/ xkAUiELs29cFirG0uIN8cK380N35KC0+yceMHI3U8pwdt+n6sR7hHTpf2YkQw0gL l5kcqcd3KSWN6H5X5yijWnA5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBT0yU57j xT0tBV9XJzPkrb+ZKrQwHwYDVR0jBBgwFoAUiXB3tx8sWu3ebB3UlUfcyZUs2r4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MEUwLzNGQkI1RTA0N0I1 MzExRjA5QjU0ODQ1RkM0RjlBRTAyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhCM3R4OHNXdTNlYkIzVWxVZmN5WlVzMnI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 MEUwLzNGQkI1RTA0N0I1MzExRjA5QjU0ODQ1RkM0RjlBRTAyL2lYQjN0eDhzV3Uz ZWJCM1VsVWZjeVpVczJyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEOCl5wm0Hv+AxoVT+zImXV9fWfxOoTyee2ZfZe5QFvvlz30i/tD5vzYVPuCKw ciMDKzP3JTmFNNlloAW5dqtLPNHhZdqZQJDEwIR9pWTvMc4krkFulgFtoSRORb/7 WOLSrvMnF+tMXP3wMJXAZXMqfyhXdRRhcSOts0WjabR0tDyGOj1Ymrt2mKJw7dB9 +DNBDSDGO30MkorDn6vj3+VZdQzuqKBHm2HyMLkwPe16z6S6o5/NdJwKnhk+nbRw UbgmYk2kEFekbxyCAzqg3dELbPUJHjEumYsISzZShCb8IyppKRe/j5IgL8XntDc6 Im2tmptCpfhFs/sJVFT9xykE -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:15 2026 by rpki-client