$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: +q147BKMlRln0ngD0bI2Of2HN0ekiCBdDQ9Vf30iTls= Subject key identifier: 7F:A9:D7:C5:28:32:72:F2:6A:75:96:6D:7F:96:77:E5:5B:DD:49:8A Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: 9F Signing time: Mon 02 Mar 2026 19:44:39 +0000 Manifest this update: Mon 02 Mar 2026 19:44:38 +0000 Manifest next update: Mon 09 Mar 2026 19:44:38 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: WeCZaUnt5ZykbOV62h9207C+mkALpBC+PaSfWlNZKes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 19:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Mar 2 19:44:38 2026 GMT Not After : Mar 9 19:44:38 2026 GMT Subject: CN=69a5e8a7-057e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:2d:d2:3d:c4:64:c9:a0:77:ed:a6:b4:4f: ba:45:1f:b6:62:67:fa:57:11:05:2b:4f:8b:e0:12: 26:5b:3a:ef:53:7d:34:c1:9d:9f:c4:40:a9:9d:08: d3:23:6b:ca:18:fd:8c:12:7a:84:4c:d4:0e:49:bf: 04:21:d2:83:3b:27:2d:16:cb:5e:4f:71:40:19:38: 9d:0b:63:10:d3:47:9a:2b:9d:35:68:b0:37:45:25: 88:bf:90:f1:82:7a:c7:f4:24:e5:71:cb:b0:58:17: 11:28:02:23:4d:8d:94:f3:d1:84:3e:7c:d7:9e:31: 97:48:41:dd:7b:ef:ed:59:a3:6b:47:22:9e:d1:3f: f5:25:f3:fa:c9:28:5c:77:69:02:e1:52:4e:47:08: 4c:0b:e0:87:f4:58:08:f3:fb:43:f4:64:2d:73:7f: af:9c:83:c5:89:8a:58:fd:8e:b9:9a:4e:3f:f4:b3: 22:bc:bd:23:4d:d4:9d:bb:f6:bf:48:02:37:38:34: 06:ba:9a:cc:83:e4:9a:04:9e:d7:3e:09:26:47:94: dc:c0:99:f6:3d:97:64:12:f5:88:a3:53:50:88:87: 93:74:72:1e:93:29:41:e7:dd:b3:c0:16:f8:a2:56: 35:ad:c5:4a:01:4b:08:55:64:1c:fa:c0:34:1d:a7: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A9:D7:C5:28:32:72:F2:6A:75:96:6D:7F:96:77:E5:5B:DD:49:8A X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:69:82:0c:18:6f:de:fa:63:82:5d:40:0d:34:f9:8a:90:2a: 17:c6:0f:bd:ae:95:69:69:79:d4:c8:33:3b:db:8b:77:3f:e1: 9b:cd:3f:40:01:d6:4b:3e:9c:1a:e1:a2:61:17:86:6c:6b:1d: 10:e3:80:4f:e7:46:27:8f:7e:53:0b:a6:0c:18:6f:67:62:15: fa:3e:62:13:94:e1:26:89:57:5d:0b:19:52:c3:1b:97:6a:23: c5:96:ab:af:0c:3d:1b:76:dd:bc:d3:b6:0a:0d:97:89:5e:f7: b2:90:29:79:2a:b2:4f:1b:6b:9a:8e:81:f8:94:c8:ea:6e:b3: b0:6d:17:ea:b3:d6:25:6b:93:0e:62:f4:5e:75:b1:cc:bc:d9: ab:7a:a3:25:19:d8:44:42:f3:c1:09:41:e4:20:c6:3b:7e:26: 1b:41:97:3c:31:5e:11:73:db:bb:f8:d2:ae:70:93:c9:97:9e: 3a:63:57:97:86:57:f7:15:77:db:0a:d1:01:0f:19:ec:f3:dc: cf:99:ef:29:d5:e6:de:59:54:c6:03:16:37:d5:8c:98:12:68: 6c:f6:81:90:68:97:59:d9:3d:81:b8:8a:9c:6a:a9:9a:ee:67: 52:4b:97:fb:a8:b0:04:6f:90:a7:c0:c2:f4:4d:b6:5e:7f:2f: 49:c6:f3:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMEYxMTAvBgNVBAUTKDhBMTFFQjc2NEIxNTc4NTM5RDZFRDNCMjkwM0JGNjFG NEMwODAwN0MwHhcNMjYwMzAyMTk0NDM4WhcNMjYwMzA5MTk0NDM4WjAYMRYwFAYD VQQDEw02OWE1ZThhNy0wNTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfEt0j3EZMmgd+2mtE+6RR+2Ymf6VxEFK0+L4BImWzrvU300wZ2fxECpnQjT I2vKGP2MEnqETNQOSb8EIdKDOyctFsteT3FAGTidC2MQ00eaK501aLA3RSWIv5Dx gnrH9CTlccuwWBcRKAIjTY2U89GEPnzXnjGXSEHde+/tWaNrRyKe0T/1JfP6yShc d2kC4VJORwhMC+CH9FgI8/tD9GQtc3+vnIPFiYpY/Y65mk4/9LMivL0jTdSdu/a/ SAI3ODQGuprMg+SaBJ7XPgkmR5TcwJn2PZdkEvWIo1NQiIeTdHIekylB592zwBb4 olY1rcVKAUsIVWQc+sA0HacSQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+p18Uo MnLyanWWbX+Wd+Vb3UmKMB8GA1UdIwQYMBaAFIoR63ZLFXhTnW7TspA79h9MCAB8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi80OUU5OTZDNDJD NjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVGT2RidE95a0R2Mkgwd0lB SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MwRi80OUU5OTZDNDJDNjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVG T2RidE95a0R2Mkgwd0lBSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP2mCDBhv3vpjgl1ADTT5ipAqF8YPva6VaWl51MgzO9uLdz/hm80/QAHWSz6c GuGiYReGbGsdEOOAT+dGJ49+UwumDBhvZ2IV+j5iE5ThJolXXQsZUsMbl2ojxZar rww9G3bdvNO2Cg2XiV73spApeSqyTxtrmo6B+JTI6m6zsG0X6rPWJWuTDmL0XnWx zLzZq3qjJRnYRELzwQlB5CDGO34mG0GXPDFeEXPbu/jSrnCTyZeeOmNXl4ZX9xV3 2wrRAQ8Z7PPcz5nvKdXm3llUxgMWN9WMmBJobPaBkGiXWdk9gbiKnGqpmu5nUkuX +6iwBG+Qp8DC9E22Xn8vScbzqA== -----END CERTIFICATE-----Generated at Wed Mar 4 08:38:43 2026 by rpki-client