$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft File: iDcigo7Pno3d_SRvPGeOnwUV-dI.mft (raw, json) Hash identifier: gkIuCCwSTj1MOluHjZaefKOeFGFQAvGsamrLI7hvQY8= Subject key identifier: 75:24:9A:96:F2:A4:41:28:C0:55:55:37:67:CD:B9:74:43:91:56:CD Authority key identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2 Certificate issuer: /CN=A91F4130/serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 09:55:26 +0000 Manifest this update: Sun 01 Mar 2026 09:55:26 +0000 Manifest next update: Sun 08 Mar 2026 09:55:26 +0000 Files and hashes: 1: iDcigo7Pno3d_SRvPGeOnwUV-dI.crl (hash: 9qfBd0PdBfa2/T4t8DdX+2KcfKWHtphGmQtl8vrWi3I=) 2: B27ED5E6C11311F089B2CF23C4F9AE02.roa (hash: +u62azMd4pOnj3CpAjZP1k28yAPQXoJe4iMoi3wUC8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4130, serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2 Validity Not Before: Mar 1 09:55:26 2026 GMT Not After : Mar 8 09:55:26 2026 GMT Subject: CN=69a40d0e-3ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:c2:ec:fc:90:3e:c1:db:0c:f9:07:35:bf: 8c:f3:0a:a4:8d:9a:72:f7:5d:f5:04:6d:07:13:3f: 7d:27:4c:e9:51:8e:d9:c0:28:c3:4d:89:4c:f4:55: 8a:81:74:73:9d:42:1e:f2:a6:28:83:03:af:96:6a: d5:7d:6b:f3:3c:59:12:13:42:ef:35:98:69:d9:5c: 27:28:ea:5f:41:81:98:84:b6:ee:17:60:1b:a0:aa: 67:82:d1:ba:70:8f:c0:b6:9e:0f:86:ea:d1:e5:94: 01:b6:39:0b:d8:f6:08:e9:47:8d:88:98:a8:41:27: c3:4c:f8:9c:c2:7b:a7:49:7d:5d:ff:31:54:35:e2: 03:24:41:98:e6:8c:0b:1d:19:17:cc:58:01:85:54: 50:5b:ff:d2:09:d9:95:2d:ed:0a:b1:c6:ae:d9:63: e1:3f:fb:ec:00:f8:c4:00:f7:86:0c:67:c6:52:95: ce:ff:9f:10:f6:01:4c:07:a5:cc:62:68:a5:0a:dc: 10:e6:a3:9a:5d:a9:93:61:84:80:bb:05:6e:d5:67: 6e:c4:1e:d6:84:16:76:b0:ce:b5:f7:50:c7:5a:9c: 69:6d:a1:5b:00:66:c5:c9:15:00:7a:08:d9:0c:48: 52:ff:34:41:57:b8:d3:74:03:4f:1e:08:af:63:24: 35:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:24:9A:96:F2:A4:41:28:C0:55:55:37:67:CD:B9:74:43:91:56:CD X509v3 Authority Key Identifier: keyid:88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:02:a2:77:f4:02:74:86:e9:92:f9:b8:6d:d2:43:79:4d:d4: 0c:93:7c:56:5a:40:35:8f:d3:ac:10:b2:d7:e5:b7:9c:24:22: 0d:c2:a5:72:4b:86:7b:a5:ad:39:90:f6:59:fc:72:6f:65:b0: ec:0c:18:8f:46:a8:cf:34:92:a0:a7:fd:cc:d8:f6:65:d3:d8: 1f:f2:2f:33:89:4d:1a:66:1c:1b:ca:43:d9:69:e2:b2:58:37: ee:b5:9f:3e:3b:42:cd:92:b0:87:b7:98:7c:0a:de:c5:7b:be: a0:34:0e:29:90:65:b7:98:a1:c8:5d:37:7b:51:29:99:da:59: d6:54:a1:31:1c:b0:e0:ea:b6:58:ba:2b:a0:18:02:60:dc:e6: e0:66:78:fc:bb:71:42:f5:77:2f:3f:a0:03:9d:b0:56:59:a9: f1:a5:8e:ac:d5:82:b0:ff:78:13:a0:b7:51:d4:96:a3:ee:5b: 8f:e8:fe:27:05:61:ad:c4:cb:da:8f:df:bc:44:29:d0:7c:c4: 04:e4:df:e5:5a:b4:4a:7a:a1:9b:d2:fa:bc:e5:d5:62:86:2f: 52:f2:46:fa:85:c8:fc:64:f7:e2:60:af:62:23:cf:39:35:d8: 0d:22:a2:a0:ce:13:64:6c:5b:a9:e7:f6:ac:2f:cb:9e:4c:a0: c4:55:54:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDEzMDExMC8GA1UEBRMoODgzNzIyODI4RUNGOUU4RERERkQyNDZGM0M2NzhFOUYw NTE1RjlEMjAeFw0yNjAzMDEwOTU1MjZaFw0yNjAzMDgwOTU1MjZaMBgxFjAUBgNV BAMTDTY5YTQwZDBlLTNjYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkM8Ls/JA+wdsM+Qc1v4zzCqSNmnL3XfUEbQcTP30nTOlRjtnAKMNNiUz0VYqB dHOdQh7ypiiDA6+WatV9a/M8WRITQu81mGnZXCco6l9BgZiEtu4XYBugqmeC0bpw j8C2ng+G6tHllAG2OQvY9gjpR42ImKhBJ8NM+JzCe6dJfV3/MVQ14gMkQZjmjAsd GRfMWAGFVFBb/9IJ2ZUt7Qqxxq7ZY+E/++wA+MQA94YMZ8ZSlc7/nxD2AUwHpcxi aKUK3BDmo5pdqZNhhIC7BW7VZ27EHtaEFnawzrX3UMdanGltoVsAZsXJFQB6CNkM SFL/NEFXuNN0A08eCK9jJDVrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdSSalvKk QSjAVVU3Z825dEORVs0wHwYDVR0jBBgwFoAUiDcigo7Pno3d/SRvPGeOnwUV+dIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MTMwL0Y0MEVFODRFQzEx MjExRjBCQjVBMTQyMEM0RjlBRTAyL2lEY2lnbzdQbm8zZF9TUnZQR2VPbndVVi1k SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaURjaWdvN1BubzNkX1NSdlBHZU9ud1VWLWRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 MTMwL0Y0MEVFODRFQzExMjExRjBCQjVBMTQyMEM0RjlBRTAyL2lEY2lnbzdQbm8z ZF9TUnZQR2VPbndVVi1kSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCWAqJ39AJ0humS+bht0kN5TdQMk3xWWkA1j9OsELLX5becJCINwqVyS4Z7pa05 kPZZ/HJvZbDsDBiPRqjPNJKgp/3M2PZl09gf8i8ziU0aZhwbykPZaeKyWDfutZ8+ O0LNkrCHt5h8Ct7Fe76gNA4pkGW3mKHIXTd7USmZ2lnWVKExHLDg6rZYuiugGAJg 3ObgZnj8u3FC9XcvP6ADnbBWWanxpY6s1YKw/3gToLdR1Jaj7luP6P4nBWGtxMva j9+8RCnQfMQE5N/lWrRKeqGb0vq85dVihi9S8kb6hcj8ZPfiYK9iI885NdgNIqKg zhNkbFup5/asL8ueTKDEVVSs -----END CERTIFICATE-----Generated at Mon Mar 2 05:40:58 2026 by rpki-client