$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json) Hash identifier: vrmfX7iumwUNjfqDGorHU8tuSSIKCbx4aaUmCkUks1k= Subject key identifier: EF:59:A3:F4:A2:C1:3F:CD:DE:29:AB:2A:28:1A:84:57:8D:B3:33:A5 Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft Manifest number: 28 Signing time: Tue 03 Mar 2026 08:28:52 +0000 Manifest this update: Tue 03 Mar 2026 08:28:51 +0000 Manifest next update: Tue 10 Mar 2026 08:28:51 +0000 Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: kUYWEWbOaBhuAkdaoExA1qdiZOjvvCtTc7gHFPuyXFE=) 2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Validity Not Before: Mar 3 08:28:51 2026 GMT Not After : Mar 10 08:28:51 2026 GMT Subject: CN=69a69bc4-99f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:16:f0:b5:40:a9:73:c4:a9:3b:63:ab:ad: 8e:cd:80:be:41:fa:04:a2:4e:ef:fb:80:a2:21:e0: 96:62:a6:c5:83:03:87:f9:74:e1:bd:96:93:bb:73: ad:90:7e:81:f7:b2:b1:72:59:3e:2d:3d:42:44:93: ce:d2:f8:0e:ae:fb:5a:d5:43:c0:ac:1c:c5:b1:20: 44:f4:86:a0:9e:aa:01:dd:ce:5d:47:44:d9:72:31: b5:ab:c6:01:33:92:70:b5:31:19:66:62:a6:f1:9b: d4:0e:4e:6e:b9:32:19:83:ad:b8:d2:f4:eb:0b:5a: c0:8d:a5:7f:29:7d:6a:bc:a9:38:33:ce:85:32:12: 6e:44:b4:0e:57:f2:6a:6a:f9:de:cf:87:da:3e:3a: 44:6d:8d:e4:1d:5d:7a:54:fc:d5:1a:72:3f:47:d7: d3:d0:81:04:c6:43:d5:92:e6:30:4f:92:27:65:b8: e3:9c:8c:6c:20:6c:0f:d6:d2:de:04:db:44:b5:86: 70:b8:83:b6:ea:c9:94:23:e5:1e:f9:3d:69:10:9f: 4f:14:70:33:c3:e1:34:c1:46:e1:d4:8f:01:3f:68: d4:81:84:90:e7:c1:b9:bf:50:58:6d:4e:56:88:cb: 3c:5c:6b:32:6d:d8:fd:c2:6b:8b:e6:fa:8e:43:28: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:59:A3:F4:A2:C1:3F:CD:DE:29:AB:2A:28:1A:84:57:8D:B3:33:A5 X509v3 Authority Key Identifier: keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:30:40:a5:5a:b4:58:9f:88:06:e9:11:96:20:b9:90:87:4c: dc:ae:e1:e2:38:a2:a1:a9:08:41:a6:cf:5c:89:d7:bd:c5:c0: a3:99:6c:6d:c0:e6:fa:05:38:92:ba:4c:75:98:e8:79:32:84: 90:de:68:61:f9:e8:27:a5:aa:a9:e2:ef:4a:cd:e5:36:b8:5b: f2:12:ae:1e:cc:75:15:37:64:50:f6:6f:ee:83:12:14:21:41: 6f:54:a0:27:f6:1f:fc:4c:5e:91:ae:78:46:9c:2a:65:b9:74: 63:57:d7:ba:31:0d:ba:1f:4c:c0:d8:4d:b2:ab:65:eb:6b:e3: 01:7b:76:8f:09:57:28:8e:2b:be:b1:10:92:58:32:57:b2:4f: a4:70:44:7a:ba:be:dd:30:27:cb:b6:dc:35:4c:7f:6d:ba:3b: 9d:13:f7:4f:3f:fd:15:c4:59:39:1f:08:6b:04:29:0a:60:1b: f0:89:f6:3d:fd:4d:45:5b:c8:2a:a6:76:d2:ec:49:18:8c:bd: a8:dc:06:f5:db:73:eb:3f:3a:2f:76:35:a2:6a:9b:87:f2:74: 2c:2c:10:7b:eb:0f:52:82:1a:61:cb:17:c5:18:c9:f8:b4:14: 0c:1a:93:96:b5:b3:5c:19:45:08:48:eb:fe:c7:b5:a0:6f:32: 57:27:e4:cc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzJFQjExMC8GA1UEBRMoMjAwM0VFNDA1MjI5RDg4Qzk0OEI3NkRDMTk1RDQzMEJD MDIwQUYxRTAeFw0yNjAzMDMwODI4NTFaFw0yNjAzMTAwODI4NTFaMBgxFjAUBgNV BAMTDTY5YTY5YmM0LTk5ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSWRbwtUCpc8SpO2OrrY7NgL5B+gSiTu/7gKIh4JZipsWDA4f5dOG9lpO7c62Q foH3srFyWT4tPUJEk87S+A6u+1rVQ8CsHMWxIET0hqCeqgHdzl1HRNlyMbWrxgEz knC1MRlmYqbxm9QOTm65MhmDrbjS9OsLWsCNpX8pfWq8qTgzzoUyEm5EtA5X8mpq +d7Ph9o+OkRtjeQdXXpU/NUacj9H19PQgQTGQ9WS5jBPkidluOOcjGwgbA/W0t4E 20S1hnC4g7bqyZQj5R75PWkQn08UcDPD4TTBRuHUjwE/aNSBhJDnwbm/UFhtTlaI yzxcazJt2P3Ca4vm+o5DKPfvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU71mj9KLB P83eKasqKBqEV42zM6UwHwYDVR0jBBgwFoAUIAPuQFIp2IyUi3bcGV1DC8Agrx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMkVCLzg5OTcyNTEyRTUz NDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5VWkzYmNHVjFEQzhBZ3J4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSUFQdVFGSXAySXlVaTNiY0dWMURDOEFncng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MkVCLzg5OTcyNTEyRTUzNDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5 VWkzYmNHVjFEQzhBZ3J4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpMEClWrRYn4gG6RGWILmQh0zcruHiOKKhqQhBps9cide9xcCjmWxtwOb6BTiS ukx1mOh5MoSQ3mhh+egnpaqp4u9KzeU2uFvyEq4ezHUVN2RQ9m/ugxIUIUFvVKAn 9h/8TF6RrnhGnCpluXRjV9e6MQ26H0zA2E2yq2Xra+MBe3aPCVcojiu+sRCSWDJX sk+kcER6ur7dMCfLttw1TH9tujudE/dPP/0VxFk5HwhrBCkKYBvwifY9/U1FW8gq pnbS7EkYjL2o3Ab123PrPzovdjWiapuH8nQsLBB76w9SghphyxfFGMn4tBQMGpOW tbNcGUUISOv+x7WgbzJXJ+TM -----END CERTIFICATE-----Generated at Wed Mar 4 08:38:33 2026 by rpki-client