$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: dlDpsvJui6HfvHXskqhijPtU5Uek9T1vQc2bIlBq/9o= Subject key identifier: 81:18:A6:73:5E:47:94:A5:39:8B:FD:A6:AA:3B:D8:C0:E9:4E:63:88 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 16F4 Signing time: Thu 12 Mar 2026 16:31:07 +0000 Manifest this update: Thu 12 Mar 2026 16:31:06 +0000 Manifest next update: Thu 19 Mar 2026 16:31:06 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: /O2JmcxiI3hcpjOd4LlbeeyfWIdaD+E+Bpl3tSGM55E=) 2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=) 3: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5905 (0x1711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Mar 12 16:31:06 2026 GMT Not After : Mar 19 16:31:06 2026 GMT Subject: CN=69b2ea4a-cf1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:f7:19:2f:20:e5:d8:9f:a7:45:e4:26:20: 42:26:81:ce:21:9e:9e:9d:7e:40:4a:07:23:cd:c9: 7a:cc:01:30:98:bc:fb:30:90:a0:ca:90:82:d4:ce: 8a:a4:f1:8f:b3:87:8c:1e:8b:08:aa:92:e5:00:bc: 35:9a:18:ea:be:51:03:9f:41:86:cf:f7:03:b0:77: 8e:96:0b:32:74:84:b7:7c:6b:2e:fa:64:d6:4b:dd: 01:70:f7:85:ae:9c:66:19:86:a7:fd:c7:10:59:74: b0:7a:49:60:72:ad:bc:da:14:5b:0f:de:9e:d5:30: 0a:d5:22:59:e2:e9:88:f3:10:3f:de:f3:a7:08:bd: 8c:42:6a:8f:6d:06:de:76:95:11:1b:9f:51:f3:57: 78:38:af:1f:d8:c5:9b:c2:13:b4:5e:e7:b3:3d:01: 1d:bf:6d:01:94:99:f3:49:21:14:86:46:9e:0b:51: c2:6b:ea:55:24:a9:ba:52:d5:60:46:58:6e:47:04: d9:d4:9c:c1:9c:c1:dc:22:54:ef:86:53:83:02:3a: 06:70:f6:9e:c6:b8:6f:83:57:cd:fb:76:05:55:40: 3d:e4:71:05:12:ea:5d:d7:7b:29:f0:32:ec:bd:d9: aa:51:af:5b:cb:67:28:26:d6:22:89:20:96:f7:36: df:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:18:A6:73:5E:47:94:A5:39:8B:FD:A6:AA:3B:D8:C0:E9:4E:63:88 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:40:2b:f0:0e:75:0e:d0:47:d1:68:be:33:bc:e1:b3:34:1f: 31:75:da:a4:85:24:c6:d4:50:38:68:1f:e5:80:f8:e8:ba:89: 1e:49:46:90:e0:98:61:4e:de:89:73:01:c2:bb:56:f8:52:8d: ca:fa:3c:db:d4:06:50:b8:d0:69:a6:3f:f2:f8:0f:4f:e4:d6: 81:1b:08:72:f1:b8:2d:be:c1:66:cf:52:4a:4c:b5:26:55:78: 96:d7:f8:f4:95:cd:e7:d9:3b:82:ba:ec:f9:86:23:cf:41:c7: a0:62:64:79:d5:3d:1b:6f:c7:1c:69:e6:9e:01:ca:36:3b:cc: c0:fd:f3:e2:45:9d:92:86:b4:aa:f7:ef:91:b5:75:2c:83:07: fb:3f:94:33:81:89:53:a3:7a:22:b6:62:9d:56:7a:fb:9f:49: bc:df:09:5a:96:44:85:96:b5:90:a8:d2:1d:62:ed:6e:47:72: 7c:66:bb:b4:61:45:e1:c2:de:c7:2e:4a:b4:aa:60:d1:c4:9d: d0:ed:7f:9e:6d:78:dc:88:28:ce:a1:d1:40:55:a8:f0:3f:17: c1:53:c6:3d:04:61:09:e6:3e:fb:f4:28:2c:c6:e2:77:54:dc: 56:6e:58:f4:09:4c:71:26:ac:51:8a:e6:19:26:c1:c5:90:c2: 7f:00:5c:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYwMzEyMTYzMTA2WhcNMjYwMzE5MTYzMTA2WjAYMRYwFAYD VQQDEw02OWIyZWE0YS1jZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3v3GS8g5difp0XkJiBCJoHOIZ6enX5ASgcjzcl6zAEwmLz7MJCgypCC1M6K pPGPs4eMHosIqpLlALw1mhjqvlEDn0GGz/cDsHeOlgsydIS3fGsu+mTWS90BcPeF rpxmGYan/ccQWXSweklgcq282hRbD96e1TAK1SJZ4umI8xA/3vOnCL2MQmqPbQbe dpURG59R81d4OK8f2MWbwhO0XuezPQEdv20BlJnzSSEUhkaeC1HCa+pVJKm6UtVg RlhuRwTZ1JzBnMHcIlTvhlODAjoGcPaexrhvg1fN+3YFVUA95HEFEupd13sp8DLs vdmqUa9by2coJtYiiSCW9zbfxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEYpnNe R5SlOYv9pqo72MDpTmOIMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk0Ar8A51DtBH0Wi+M7zhszQfMXXapIUkxtRQOGgf5YD46LqJHklGkOCYYU7e iXMBwrtW+FKNyvo829QGULjQaaY/8vgPT+TWgRsIcvG4Lb7BZs9SSky1JlV4ltf4 9JXN59k7grrs+YYjz0HHoGJkedU9G2/HHGnmngHKNjvMwP3z4kWdkoa0qvfvkbV1 LIMH+z+UM4GJU6N6IrZinVZ6+59JvN8JWpZEhZa1kKjSHWLtbkdyfGa7tGFF4cLe xy5KtKpg0cSd0O1/nm143IgozqHRQFWo8D8XwVPGPQRhCeY++/QoLMbid1TcVm5Y 9AlMcSasUYrmGSbBxZDCfwBccA== -----END CERTIFICATE-----Generated at Fri Mar 13 03:47:47 2026 by rpki-client