$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: KP9tO/HPzaXInjpJ67Bv022JPBvwu1KSzlCqOX5W1gM= Subject key identifier: FC:C7:1B:9A:C8:E9:C7:23:AD:E2:AA:D4:0E:69:E4:DB:B6:93:A9:39 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 01A3 Signing time: Sat 21 Mar 2026 03:24:26 +0000 Manifest this update: Sat 21 Mar 2026 03:24:26 +0000 Manifest next update: Sat 28 Mar 2026 03:24:26 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: 86fRiMkA6A19dEurs1EladulXBH3dWr8INN5BV5hCKs=) 2: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: UdYA7ysQTtwuAPvC1szdIQjTM7ruBUjRZwFCktSblQQ=) 3: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: k8lZ7CX7mgq/3LVgfyzktUqzG5SajWKj3uNNsmVcBrg=) 4: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: ozs9i/euuZ75VUP6nxuqwBDiZfQIs7H9cQGCWKxhgPs=) 5: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: DHViFPvNbWRkbmTAti4Bf+7PoBd6798WiZLchdU3w8g=) 6: A17C3508168911EFBF38F580C4F9AE02.roa (hash: sy22vtii4K2errt2UOSSRnhaS+2ZGSF4IEAlJ6QMyT8=) 7: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Mar 21 03:24:26 2026 GMT Not After : Mar 28 03:24:26 2026 GMT Subject: CN=69be0f6a-e1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:63:6e:ff:a9:03:66:41:d3:da:2b:bc:d6:a2: 99:54:c3:9d:71:3d:02:d7:d4:5e:d4:1a:72:e0:1d: c7:f5:db:50:ff:09:7d:be:2e:3c:97:51:e5:c1:90: fc:ef:99:65:b7:f7:85:fb:0b:bb:68:4e:88:68:61: 98:b6:57:51:d2:8a:4e:4c:ec:ab:fd:ec:50:42:10: b3:57:f7:d5:3a:73:df:fb:f5:48:eb:6f:db:1d:9c: 3a:9c:95:94:4d:cd:30:cd:e1:c3:1b:e4:80:bd:35: c0:b8:75:f9:37:98:fd:36:28:69:7a:8d:f9:e9:55: 4b:24:b7:20:6a:41:e5:01:21:63:f1:d2:76:e3:24: 2d:f0:b3:e6:c3:74:54:c8:87:fc:c4:f0:b1:17:3c: 6c:2e:b2:e0:c5:7a:b0:0e:42:6e:8b:65:34:e3:96: bd:40:cf:5f:a8:c9:3c:e6:bd:8f:1a:53:5a:4e:19: e3:c9:94:39:91:da:7a:27:3f:58:0a:13:a4:42:a1: 0a:ec:53:8c:b5:f6:68:a6:6e:d5:40:e2:14:8c:18: 42:8f:c6:bb:5a:45:c4:dc:52:72:af:ed:bd:e4:17: 76:1f:30:30:f0:b5:f8:30:7b:b1:6a:32:be:2d:12: 8f:f9:da:dc:b3:65:8a:92:33:97:d4:1e:86:b2:82: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:1B:9A:C8:E9:C7:23:AD:E2:AA:D4:0E:69:E4:DB:B6:93:A9:39 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:2e:e2:1b:e1:18:63:2e:7a:28:18:e9:9e:34:ac:c8:b3:84: 6c:58:10:c3:24:34:4b:ff:7a:f8:b5:fd:3a:39:94:a3:24:0c: d8:f7:51:cf:1b:12:a5:17:6f:17:66:cf:ca:61:0f:64:91:93: 70:5b:58:57:8c:52:b9:1b:5c:a9:59:8f:eb:a2:61:50:ab:89: db:30:06:48:3e:31:a7:c5:8c:7d:8c:33:78:e0:00:bf:72:a4: 74:92:56:cd:4a:0a:31:a9:0b:57:30:1d:7c:70:1f:41:a3:65: d7:ce:03:85:41:d7:79:08:72:49:c8:73:0a:9b:77:63:d9:af: 8f:c4:d2:f8:c0:a5:31:fd:34:40:dd:39:90:d1:b2:7f:04:b0: 00:1a:2f:b2:65:5b:bb:9c:b1:23:32:9c:77:47:07:5c:8b:e9: 88:c9:e0:0e:7d:e0:01:25:eb:e2:6c:6c:fb:5b:c9:e7:74:a5: 09:9e:82:62:69:8f:7c:08:cc:1e:2e:9d:f6:4d:c3:8a:7f:2f: de:49:9a:90:d9:55:a7:36:97:a5:5a:f9:46:09:b0:60:04:76: 25:21:bf:97:50:c5:7d:af:5f:51:3a:1e:f5:1d:68:87:70:de: 4e:de:68:75:89:43:a3:e1:df:72:33:dd:1c:ae:b5:48:ac:58: c1:2f:bd:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjYwMzIxMDMyNDI2WhcNMjYwMzI4MDMyNDI2WjAYMRYwFAYD VQQDEw02OWJlMGY2YS1lMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32Nu/6kDZkHT2iu81qKZVMOdcT0C19Re1Bpy4B3H9dtQ/wl9vi48l1HlwZD8 75llt/eF+wu7aE6IaGGYtldR0opOTOyr/exQQhCzV/fVOnPf+/VI62/bHZw6nJWU Tc0wzeHDG+SAvTXAuHX5N5j9Nihpeo356VVLJLcgakHlASFj8dJ24yQt8LPmw3RU yIf8xPCxFzxsLrLgxXqwDkJui2U045a9QM9fqMk85r2PGlNaThnjyZQ5kdp6Jz9Y ChOkQqEK7FOMtfZopm7VQOIUjBhCj8a7WkXE3FJyr+295Bd2HzAw8LX4MHuxajK+ LRKP+drcs2WKkjOX1B6GsoLkYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzHG5rI 6ccjreKq1A5p5Nu2k6k5MB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFi7iG+EYYy56KBjpnjSsyLOEbFgQwyQ0S/96+LX9OjmUoyQM2PdRzxsSpRdv F2bPymEPZJGTcFtYV4xSuRtcqVmP66JhUKuJ2zAGSD4xp8WMfYwzeOAAv3KkdJJW zUoKMakLVzAdfHAfQaNl184DhUHXeQhySchzCpt3Y9mvj8TS+MClMf00QN05kNGy fwSwABovsmVbu5yxIzKcd0cHXIvpiMngDn3gASXr4mxs+1vJ53SlCZ6CYmmPfAjM Hi6d9k3Din8v3kmakNlVpzaXpVr5RgmwYAR2JSG/l1DFfa9fUToe9R1oh3DeTt5o dYlDo+HfcjPdHK61SKxYwS+9QA== -----END CERTIFICATE-----Generated at Sat Mar 21 18:38:50 2026 by rpki-client