$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: y1arQeXei/wPYp1Y77/+zD1URQrc8aByQvhDPp5ur40= Subject key identifier: 5B:2E:04:DB:BD:5E:18:78:82:54:47:8D:E4:94:E3:2C:E5:3F:EF:F1 Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 356A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 3537 Signing time: Thu 12 Mar 2026 14:19:29 +0000 Manifest this update: Thu 12 Mar 2026 14:19:29 +0000 Manifest next update: Thu 19 Mar 2026 14:19:29 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: T4tHjhe6QfZHj2D2DfAYL2EaYG+TToHeHhO+myb80Rs=) 2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=) 3: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=) 4: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 14:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13674 (0x356a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Mar 12 14:19:29 2026 GMT Not After : Mar 19 14:19:29 2026 GMT Subject: CN=69b2cb71-7b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:fb:8e:0e:14:63:49:8f:8f:af:a6:fb:8a: ad:ac:19:b5:4a:25:64:ae:b7:21:99:9d:38:38:0d: 1d:34:9c:8e:dd:0a:5c:52:1b:5f:9f:ef:68:ea:11: 6f:79:14:32:ad:2a:71:c7:88:4e:43:5f:0c:19:1c: 28:e1:5e:37:e8:ae:37:5d:af:33:75:a2:c2:0a:81: b0:18:ae:f0:3d:fe:39:35:71:1f:6c:22:08:f6:4d: a1:89:25:d0:91:24:34:4f:35:dc:c2:5e:df:49:41: d7:0f:34:07:a1:a5:bc:fa:44:2f:e4:d4:1f:a3:9f: 45:2a:54:19:13:18:6c:dc:ac:da:cf:52:f3:f3:a1: 61:6f:8a:a5:54:0f:e9:17:bd:b1:ba:7b:09:91:8a: ed:53:be:4f:d8:02:27:7f:93:df:d9:fd:4b:c0:06: 8d:c6:1e:24:71:59:ea:52:ad:de:71:34:f4:e8:95: 4e:f7:4d:39:0d:4c:15:fe:4f:ea:5d:d0:7f:0f:f5: e2:20:17:38:34:dc:0b:0c:d8:da:e4:c2:65:fc:23: c9:85:24:34:f4:dd:a2:59:4f:a5:b9:20:2e:0b:2b: 8d:bf:ba:a3:fc:fa:5a:9a:6d:0f:28:2d:5a:77:98: e7:88:aa:45:48:85:2e:6e:57:59:1a:7f:dd:1e:6f: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2E:04:DB:BD:5E:18:78:82:54:47:8D:E4:94:E3:2C:E5:3F:EF:F1 X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6c:bb:e0:4e:7a:6d:c7:b9:d4:dc:ce:58:8e:fb:79:b8:86: 82:bf:65:dc:80:3c:b8:9d:e1:db:9b:9d:c3:aa:15:37:6e:a9: 30:aa:44:92:3d:68:16:4e:2b:b6:76:b8:eb:ec:76:84:01:c8: eb:30:13:06:55:1b:a6:37:8c:d4:68:6f:d6:02:a8:78:7c:ea: c2:71:ab:2f:03:85:db:48:76:8a:61:e8:1f:42:d6:ee:22:39: 67:11:8f:85:23:af:cb:52:82:21:34:8a:33:ef:65:2a:c0:e1: fd:49:cf:4f:ee:37:d2:64:c3:b5:8d:bd:d1:11:b0:6d:49:35: 10:50:b9:3f:7a:41:2c:c6:36:c5:fe:f2:37:b6:4d:fd:5c:b0: 6e:12:c1:e6:28:c1:f2:ba:9d:30:da:b7:de:da:69:d7:39:99: 99:56:62:88:00:5d:af:9c:a9:09:71:54:a6:28:cb:47:37:03: b6:d5:08:6e:7b:73:ca:e7:f5:5c:9b:76:4e:47:5c:7b:b0:e2: ad:e2:37:45:63:8c:25:05:99:46:c4:4b:e3:c9:b8:15:52:25: 4b:b3:6b:f0:e3:c3:2d:f9:27:34:c6:61:9a:14:b4:5d:ca:e5: 81:02:1e:b2:0f:5e:2c:1d:8e:af:c4:fb:75:9a:4e:f8:88:05: af:e5:42:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjYwMzEyMTQxOTI5WhcNMjYwMzE5MTQxOTI5WjAYMRYwFAYD VQQDEw02OWIyY2I3MS03YjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVL7jg4UY0mPj6+m+4qtrBm1SiVkrrchmZ04OA0dNJyO3QpcUhtfn+9o6hFv eRQyrSpxx4hOQ18MGRwo4V436K43Xa8zdaLCCoGwGK7wPf45NXEfbCII9k2hiSXQ kSQ0TzXcwl7fSUHXDzQHoaW8+kQv5NQfo59FKlQZExhs3Kzaz1Lz86Fhb4qlVA/p F72xunsJkYrtU75P2AInf5Pf2f1LwAaNxh4kcVnqUq3ecTT06JVO9005DUwV/k/q XdB/D/XiIBc4NNwLDNja5MJl/CPJhSQ09N2iWU+luSAuCyuNv7qj/Ppamm0PKC1a d5jniKpFSIUubldZGn/dHm/ZDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsuBNu9 Xhh4glRHjeSU4yzlP+/xMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2y74E56bce51NzOWI77ebiGgr9l3IA8uJ3h25udw6oVN26pMKpEkj1oFk4r tna46+x2hAHI6zATBlUbpjeM1Ghv1gKoeHzqwnGrLwOF20h2imHoH0LW7iI5ZxGP hSOvy1KCITSKM+9lKsDh/UnPT+430mTDtY290RGwbUk1EFC5P3pBLMY2xf7yN7ZN /VywbhLB5ijB8rqdMNq33tpp1zmZmVZiiABdr5ypCXFUpijLRzcDttUIbntzyuf1 XJt2Tkdce7DireI3RWOMJQWZRsRL48m4FVIlS7Nr8OPDLfknNMZhmhS0XcrlgQIe sg9eLB2Or8T7dZpO+IgFr+VCKw== -----END CERTIFICATE-----Generated at Fri Mar 13 00:14:41 2026 by rpki-client