$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json) Hash identifier: ZGCEdeWc3fuaz/0Hqwq+/qMivlrSZTjCkj7EJVZ64ZI= Subject key identifier: 14:A3:9A:35:C5:E9:15:B6:EE:D6:A8:51:59:49:37:F9:5E:C2:BA:43 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft Manifest number: 076F Signing time: Thu 26 Mar 2026 21:30:22 +0000 Manifest this update: Thu 26 Mar 2026 21:30:22 +0000 Manifest next update: Thu 02 Apr 2026 21:30:22 +0000 Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: k+MfyKCtoVvemr7lREBK/MkJoA+xCrNpSf7hsQRhmDg=) 2: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Uh0sBPuZpoy8sTTNiUroNOAmNS0FTfsDSQBW+NkNyHo=) 3: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: TFtBaz3XXYr53c4KFkqYw9OsCBY/VjjGiRVEIJaG+ss=) 4: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: v2YonyCo9R/dlcaHZ1jfDPJlrOShqZgPxJ5RkLy9g6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Mar 26 21:30:22 2026 GMT Not After : Apr 2 21:30:22 2026 GMT Subject: CN=69c5a56e-ac92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:6a:40:2b:f9:85:fd:29:a0:f6:70:91:aa: 63:65:f8:1a:26:39:9f:b2:ee:ea:6e:fe:05:c9:e3: 7c:3c:7d:ec:8d:b4:d0:d3:59:17:1d:09:eb:04:1e: 51:58:77:6a:35:07:2e:dc:2a:38:f0:b6:18:ed:26: a0:fe:95:8c:f2:4f:71:bd:76:6d:f7:4a:8c:25:43: 94:a8:9b:46:bb:d6:d7:c1:b1:c6:ab:7c:e3:ea:9f: 1e:51:39:b0:07:f3:62:bc:ef:ab:6a:e6:46:0d:7e: a0:c3:03:f7:04:54:7c:83:48:eb:4a:88:3e:6e:b9: f4:58:ff:b5:0d:4a:d8:f4:64:aa:93:7d:94:7a:dc: b0:db:1c:7e:15:cc:7d:d6:30:ed:85:4b:6b:ce:75: 46:36:ba:01:7a:41:02:e0:0b:0a:4a:86:c6:10:8c: 49:d9:98:ee:0a:24:2f:d3:f3:89:e4:95:fe:d5:ec: 0a:a8:77:77:a9:28:e5:a2:39:b4:5c:0a:8f:37:b0: 10:90:8f:77:68:bf:af:b3:a3:9a:76:d4:36:bb:4b: 2d:81:6e:ac:9f:42:0e:c1:75:5e:cc:42:a8:28:4e: 36:37:3b:a5:48:8a:98:17:9b:cf:45:55:7f:0e:28: d4:27:10:9a:6b:bb:70:28:1a:8e:48:aa:73:2a:a4: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A3:9A:35:C5:E9:15:B6:EE:D6:A8:51:59:49:37:F9:5E:C2:BA:43 X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:6b:f7:c7:a8:b9:97:58:ac:84:74:ce:17:63:2e:07:4e: 13:a3:32:f9:e2:5f:3c:25:3e:bc:de:0d:12:4b:18:6a:7e:11: f4:88:12:ac:23:06:02:df:bf:56:85:3e:b8:26:31:64:42:1e: ad:fe:14:e2:6c:bc:11:2a:c8:4c:47:b2:31:48:23:2e:74:b9: 19:1d:41:db:63:88:1d:37:5d:71:79:20:e1:3a:31:41:6f:30: 5d:89:b9:2e:e6:c0:ae:1b:39:55:3d:7b:02:c2:21:ea:11:57: f1:e6:42:85:b4:ef:06:41:60:99:ff:e5:e4:33:8d:93:07:c6: 08:da:99:9b:b4:b0:73:dc:dc:8d:94:a3:a9:c6:39:67:33:ca: 44:e2:e1:fb:d8:38:32:0e:89:88:c1:50:c6:47:07:22:af:cc: 14:87:f8:0f:fb:10:e8:83:da:65:30:8e:51:29:d8:c5:a6:f3: 8d:d2:c0:90:1d:44:d7:cd:b0:56:1b:2e:a9:91:bb:ef:6a:b6: ac:fb:d9:a8:84:be:d7:bd:fe:d2:ae:dc:11:1d:06:04:2a:e7: 20:e6:5c:cd:80:54:6b:ff:4f:a1:72:c3:a4:56:68:8d:6a:3d: ba:c3:e7:85:3a:88:81:9c:3f:03:9b:10:bd:f7:b0:e8:c0:fb: 3c:f8:86:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYwMzI2MjEzMDIyWhcNMjYwNDAyMjEzMDIyWjAYMRYwFAYD VQQDEw02OWM1YTU2ZS1hYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZBqQCv5hf0poPZwkapjZfgaJjmfsu7qbv4FyeN8PH3sjbTQ01kXHQnrBB5R WHdqNQcu3Co48LYY7Sag/pWM8k9xvXZt90qMJUOUqJtGu9bXwbHGq3zj6p8eUTmw B/NivO+rauZGDX6gwwP3BFR8g0jrSog+brn0WP+1DUrY9GSqk32Uetyw2xx+Fcx9 1jDthUtrznVGNroBekEC4AsKSobGEIxJ2ZjuCiQv0/OJ5JX+1ewKqHd3qSjlojm0 XAqPN7AQkI93aL+vs6OadtQ2u0stgW6sn0IOwXVezEKoKE42NzulSIqYF5vPRVV/ DijUJxCaa7twKBqOSKpzKqSSGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSjmjXF 6RW27taoUVlJN/lewrpDMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5 R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPhhr98eouZdYrIR0zhdjLgdOE6My+eJfPCU+vN4NEksYan4R9IgSrCMGAt+/ VoU+uCYxZEIerf4U4my8ESrITEeyMUgjLnS5GR1B22OIHTddcXkg4ToxQW8wXYm5 LubArhs5VT17AsIh6hFX8eZChbTvBkFgmf/l5DONkwfGCNqZm7Swc9zcjZSjqcY5 ZzPKROLh+9g4Mg6JiMFQxkcHIq/MFIf4D/sQ6IPaZTCOUSnYxabzjdLAkB1E182w VhsuqZG772q2rPvZqIS+173+0q7cER0GBCrnIOZczYBUa/9PoXLDpFZojWo9usPn hTqIgZw/A5sQvfew6MD7PPiG6w== -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:20 2026 by rpki-client