$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: OKqMKWnPg+jVGKllw61Idikt3/w+ldD1c8Fpkk5iTQs= Subject key identifier: 3B:3E:E9:7A:35:87:15:93:37:99:CF:36:DB:E2:14:03:63:42:6D:45 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 082E Signing time: Sat 04 Apr 2026 20:45:00 +0000 Manifest this update: Sat 04 Apr 2026 20:44:59 +0000 Manifest next update: Sat 11 Apr 2026 20:44:59 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: 45q7RThkgQXtK7tHMX3UEtiMqUxzDcRAMsoQEMTEfgA=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: v4yXnV7F6sBRR11FKD6BcY09oXI6+ensN6Z6ZxFBdd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Apr 4 20:44:59 2026 GMT Not After : Apr 11 20:44:59 2026 GMT Subject: CN=69d1784c-fba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:05:da:3e:87:f4:9c:5c:38:da:89:9e:12: 43:4f:69:12:02:b6:42:58:b0:1b:f8:a2:c4:29:9f: 72:35:e8:c7:f2:14:fe:6c:00:5b:28:20:87:91:34: c4:e6:bf:88:cc:03:e9:4b:48:7c:6e:b8:54:33:75: d5:e3:12:1a:d8:a3:2e:7f:34:c7:3d:1c:93:34:3f: c1:49:99:b3:7a:61:b3:54:3a:cd:d7:66:71:39:9a: 4e:01:c6:41:1d:e1:39:92:db:5c:db:4f:a4:fe:97: 3f:4d:6a:db:f3:a8:36:2a:ef:f7:2c:dc:40:b4:b8: 6b:7b:a9:fc:ae:25:04:a4:55:70:86:82:27:5d:a7: 9d:54:75:95:38:2d:78:46:ce:cf:32:c7:1a:c3:83: 17:20:f9:ca:f2:8b:d5:50:1d:25:43:bc:64:43:19: 6f:4b:ea:63:ab:c0:bd:75:a9:78:cd:d2:7c:b1:d4: 81:96:98:9d:84:b7:42:3b:6f:e6:ae:88:08:3d:b6: 99:85:6d:c6:6c:09:09:0c:55:01:8b:e4:96:3e:bf: a8:96:38:9e:b4:a2:25:86:21:fd:74:ae:6c:11:cd: 1e:47:e9:0a:b3:85:91:9a:82:75:e4:c8:63:c7:26: 1b:2f:3c:1b:9c:73:78:64:9b:8d:fe:4f:c5:b7:9d: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3E:E9:7A:35:87:15:93:37:99:CF:36:DB:E2:14:03:63:42:6D:45 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e4:20:1f:db:e1:9d:4c:18:38:bb:2f:e4:b8:8a:b8:13:f9: 42:bd:2e:b1:51:35:ff:6c:3b:05:4a:17:0b:3a:14:e3:5f:b0: 63:cf:35:b8:e9:6e:a9:aa:43:43:e6:da:d6:58:28:49:17:f3: 3c:2b:dd:79:ff:5f:26:cb:0c:67:fe:fb:21:3a:63:87:e3:25: 4e:86:44:ec:5d:08:62:28:2f:4a:df:ff:8b:27:23:31:3a:49: 7b:95:d7:c1:4f:70:26:c0:09:27:56:64:18:d7:cc:81:ca:44: 5d:9a:17:3d:55:28:6b:76:79:ba:b1:ab:c6:ab:8b:da:0a:97: 93:15:90:69:fa:ce:ee:75:71:70:93:b0:ef:d4:57:c6:5e:da: f9:5a:e5:ca:66:16:76:42:6f:14:18:ea:74:6e:45:06:be:af: ea:68:ad:50:f4:45:86:19:74:6a:01:83:da:83:13:09:d0:65: bf:fa:89:89:5c:11:19:e7:a8:3f:d6:98:c3:47:44:af:69:8f: d4:e7:b7:cd:fe:86:0b:19:7c:fa:21:f2:c2:d3:90:0e:a0:49: dc:f3:72:01:c9:9e:3d:9e:fb:29:91:86:08:1b:61:c0:f2:64: 94:5a:f5:f2:e8:de:db:11:dd:53:32:a5:a5:d7:60:c1:8a:23: 42:39:50:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjYwNDA0MjA0NDU5WhcNMjYwNDExMjA0NDU5WjAYMRYwFAYD VQQDEw02OWQxNzg0Yy1mYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuroF2j6H9JxcONqJnhJDT2kSArZCWLAb+KLEKZ9yNejH8hT+bABbKCCHkTTE 5r+IzAPpS0h8brhUM3XV4xIa2KMufzTHPRyTND/BSZmzemGzVDrN12ZxOZpOAcZB HeE5kttc20+k/pc/TWrb86g2Ku/3LNxAtLhre6n8riUEpFVwhoInXaedVHWVOC14 Rs7PMscaw4MXIPnK8ovVUB0lQ7xkQxlvS+pjq8C9dal4zdJ8sdSBlpidhLdCO2/m rogIPbaZhW3GbAkJDFUBi+SWPr+oljietKIlhiH9dK5sEc0eR+kKs4WRmoJ15Mhj xyYbLzwbnHN4ZJuN/k/Ft53QnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDs+6Xo1 hxWTN5nPNtviFANjQm1FMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJOQgH9vhnUwYOLsv5LiKuBP5Qr0usVE1/2w7BUoXCzoU41+wY881uOluqapD Q+ba1lgoSRfzPCvdef9fJssMZ/77ITpjh+MlToZE7F0IYigvSt//iycjMTpJe5XX wU9wJsAJJ1ZkGNfMgcpEXZoXPVUoa3Z5urGrxquL2gqXkxWQafrO7nVxcJOw79RX xl7a+VrlymYWdkJvFBjqdG5FBr6v6mitUPRFhhl0agGD2oMTCdBlv/qJiVwRGeeo P9aYw0dEr2mP1Oe3zf6GCxl8+iHywtOQDqBJ3PNyAcmePZ77KZGGCBthwPJklFr1 8uje2xHdUzKlpddgwYojQjlQtg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:06 2026 by rpki-client