$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: KMnSJPxyOa5N7NCG+wBsKGeJQEnHn4/Ob3rLJR0sI84= Subject key identifier: 5A:E2:86:99:26:B9:C6:48:7E:63:C5:80:9B:CF:23:3C:B8:44:20:C0 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 082E Signing time: Tue 24 Mar 2026 20:44:50 +0000 Manifest this update: Tue 24 Mar 2026 20:44:50 +0000 Manifest next update: Tue 31 Mar 2026 20:44:50 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: BndtRsAsLetv340NKHktDm3w/h+Now0Fz9rjUgcK6HY=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: FELlTiK0zkTPaIvuZPqjSFuesBh1m/szylRmww5rrlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Mar 24 20:44:50 2026 GMT Not After : Mar 31 20:44:50 2026 GMT Subject: CN=69c2f7c2-ce4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:1c:c3:95:61:3d:52:d9:ca:6e:bc:d4:7c: 80:da:ef:c1:ae:d5:35:fb:ca:ae:2c:75:9a:0e:c6: c2:3c:07:3d:df:09:34:00:62:b7:a5:c8:b3:52:c6: 27:ba:f1:b5:d3:54:c9:31:a4:6d:f4:54:46:af:1a: 11:fd:e2:45:7a:7e:79:ff:62:c8:71:c2:13:53:23: b1:f4:8d:b1:94:64:9e:7f:78:ef:7b:92:84:87:2a: d4:bc:59:8b:e1:28:2e:ee:8c:f1:ea:ba:fb:17:cb: cf:d2:95:b4:2e:2a:38:5e:ef:56:89:a7:a2:38:57: ae:70:ea:01:b1:23:21:fe:1d:ae:dd:32:cf:18:9f: 76:49:0e:ca:ec:63:41:23:81:5d:74:e0:9f:6d:3f: c8:cc:6d:6d:c4:2c:6b:48:34:57:de:fb:97:f2:c2: a9:72:cf:78:68:71:4c:50:f7:40:c9:c9:52:3b:7e: 3c:16:bc:3d:1c:ca:69:32:30:ff:2d:eb:80:b8:15: 29:7f:e3:1d:31:f9:25:8e:e9:c2:ec:8e:ac:02:36: e1:f3:a7:f5:4f:d3:8e:eb:20:5a:51:96:94:b1:2c: f4:9b:05:f9:de:f7:f7:73:ba:12:1c:09:c5:80:a1: d1:45:b1:61:9a:c5:59:ec:c0:b1:9f:18:72:58:d0: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:86:99:26:B9:C6:48:7E:63:C5:80:9B:CF:23:3C:B8:44:20:C0 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f2:ec:23:44:33:b8:30:3e:9b:55:f5:34:f6:10:ee:bc:03: 3d:06:96:c2:7d:60:0b:2f:84:80:a2:7d:73:af:50:cf:a1:3a: 19:8e:96:de:a8:c2:5a:95:20:af:42:9b:34:a5:e5:bc:b6:f4: e7:51:bf:3c:36:4f:7d:93:f8:0e:88:67:dc:8b:b0:f8:95:be: d8:0f:72:82:0a:f0:d1:cf:fb:f7:1a:ee:3f:09:2f:5b:b5:8b: 11:4f:87:4c:72:61:ec:f7:99:bd:aa:33:75:92:a4:3d:01:f6: bf:19:8e:64:29:a7:04:04:84:94:41:b1:bc:ec:bd:04:95:9e: 61:fc:40:1d:33:0d:71:c1:2e:c0:3d:cc:1e:92:5a:90:b8:47: 73:00:e7:f1:76:69:00:7b:c5:74:81:20:dc:1a:82:cd:49:f3: c5:9f:88:80:c3:dd:02:fd:1f:74:15:cd:e1:c9:0f:9b:51:4f: a0:9f:e0:9d:ef:55:e9:80:af:2f:8f:8b:db:cd:11:c6:7b:32: 5d:85:3a:58:99:76:f6:e3:d1:31:29:87:e8:99:37:6e:f1:5d: f3:42:96:13:a8:29:a2:12:24:ca:98:cd:01:89:15:b3:d9:9f: 7b:1b:b3:5d:b7:6f:70:d9:90:09:b9:74:84:fb:14:8f:bf:03: 86:bf:f4:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjYwMzI0MjA0NDUwWhcNMjYwMzMxMjA0NDUwWjAYMRYwFAYD VQQDEw02OWMyZjdjMi1jZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowAcw5VhPVLZym681HyA2u/BrtU1+8quLHWaDsbCPAc93wk0AGK3pcizUsYn uvG101TJMaRt9FRGrxoR/eJFen55/2LIccITUyOx9I2xlGSef3jve5KEhyrUvFmL 4Sgu7ozx6rr7F8vP0pW0Lio4Xu9WiaeiOFeucOoBsSMh/h2u3TLPGJ92SQ7K7GNB I4FddOCfbT/IzG1txCxrSDRX3vuX8sKpcs94aHFMUPdAyclSO348Frw9HMppMjD/ LeuAuBUpf+MdMfkljunC7I6sAjbh86f1T9OO6yBaUZaUsSz0mwX53vf3c7oSHAnF gKHRRbFhmsVZ7MCxnxhyWNAcOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrihpkm ucZIfmPFgJvPIzy4RCDAMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlvLsI0QzuDA+m1X1NPYQ7rwDPQaWwn1gCy+EgKJ9c69Qz6E6GY6W3qjCWpUg r0KbNKXlvLb051G/PDZPfZP4Dohn3Iuw+JW+2A9yggrw0c/79xruPwkvW7WLEU+H THJh7PeZvaozdZKkPQH2vxmOZCmnBASElEGxvOy9BJWeYfxAHTMNccEuwD3MHpJa kLhHcwDn8XZpAHvFdIEg3BqCzUnzxZ+IgMPdAv0fdBXN4ckPm1FPoJ/gne9V6YCv L4+L280RxnsyXYU6WJl29uPRMSmH6Jk3bvFd80KWE6gpohIkypjNAYkVs9mfexuz XbdvcNmQCbl0hPsUj78Dhr/0og== -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:55 2026 by rpki-client