$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: mxuat1+ftq3hqWJn5OPQEtuzPAV0H3CdeUZwFfOeJ8w= Subject key identifier: 94:40:D4:CE:36:4B:0F:4A:A9:6C:0C:56:29:8D:76:8B:CA:99:1C:8D Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 19EE Signing time: Tue 24 Mar 2026 17:23:03 +0000 Manifest this update: Tue 24 Mar 2026 17:23:03 +0000 Manifest next update: Tue 31 Mar 2026 17:23:03 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: n8fQuplR+w9+Kxh2PDvD8yrYI2G7xfwQWgrkh70Ry1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Mar 24 17:23:03 2026 GMT Not After : Mar 31 17:23:03 2026 GMT Subject: CN=69c2c877-5759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:6d:84:f0:98:c7:fa:13:71:d3:9b:6d:43: 17:59:9b:52:58:df:04:ff:77:8b:ad:82:9a:3f:84: 89:bb:a7:ed:8c:79:06:ff:db:c1:d7:83:ad:7d:77: e5:51:29:43:4c:ff:ae:84:47:d9:9e:77:bc:a8:18: 96:99:b2:6c:ae:c2:0f:36:a6:eb:1e:64:f3:98:6b: da:47:7e:50:8b:41:33:bb:4e:72:ae:62:ee:ee:73: 0b:72:c6:9a:fd:71:2f:07:6b:53:c3:f2:91:ca:b2: 0f:2a:60:28:30:6d:dd:42:f9:74:1c:76:25:9c:65: fc:0f:36:6f:2d:f6:c8:2a:22:0a:1f:c3:aa:c0:22: 7f:cb:26:77:94:0b:1d:41:91:2f:55:24:b3:11:34: fe:4b:b4:86:68:91:9f:3a:8b:43:76:92:3b:a6:f6: 47:bf:80:12:e0:bd:3a:15:16:a3:73:79:21:02:93: a3:2f:66:78:9f:e3:b9:50:ac:1f:2b:36:7e:7a:d9: c5:1e:c5:3b:56:39:13:eb:e2:ab:a5:f0:f8:b4:15: dc:f4:3d:b9:d6:95:70:26:ab:a4:74:ac:1a:7c:ef: f7:b6:06:c9:42:1a:47:76:24:cb:cf:0d:fb:bc:1d: 9c:21:3c:ec:24:db:eb:42:5a:8c:92:cb:d8:6b:9d: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:40:D4:CE:36:4B:0F:4A:A9:6C:0C:56:29:8D:76:8B:CA:99:1C:8D X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fc:39:83:0d:7a:bd:76:7e:5d:13:29:5d:16:f8:69:e9:96: ba:cf:7a:a2:8a:f6:23:75:56:5a:e8:8f:c5:75:c6:b0:69:e3: b9:83:d2:56:2a:9b:09:73:4d:5a:f5:c8:d7:3a:a5:f4:33:8f: 5e:61:33:50:0d:5f:f9:96:4f:8d:84:21:e8:41:53:57:61:0f: 1f:ab:54:b3:d4:6e:8d:08:28:92:bb:26:e5:4a:0f:dc:08:ca: 8c:ce:2b:c0:07:63:6c:98:ca:f3:96:51:28:44:89:3f:15:13: 3e:dc:d3:b4:65:fa:61:cb:86:34:85:65:b8:5e:2b:35:be:80: 09:c7:52:02:f5:26:c0:2a:b6:9e:2c:f8:a0:9f:42:d4:89:db: 21:7f:e8:a0:ce:54:4e:64:3d:87:8c:62:ec:80:35:11:93:27: f2:30:cd:0b:5e:7b:33:ed:e6:6b:a8:47:c1:1c:46:c1:7a:5c: e0:73:bd:7f:15:7e:b7:7c:d1:f0:04:1f:de:52:4d:72:5a:1d: c7:35:76:d8:b3:86:fd:dd:e7:4c:41:07:c0:0e:03:77:84:75: da:a8:13:7d:f9:8d:cb:43:31:45:a7:5d:55:bf:d2:28:fc:bf: a8:db:8d:a7:40:ab:f6:d8:b7:c7:78:aa:b7:33:d2:de:32:de: e6:46:24:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjYwMzI0MTcyMzAzWhcNMjYwMzMxMTcyMzAzWjAYMRYwFAYD VQQDEw02OWMyYzg3Ny01NzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK5thPCYx/oTcdObbUMXWZtSWN8E/3eLrYKaP4SJu6ftjHkG/9vB14OtfXfl USlDTP+uhEfZnne8qBiWmbJsrsIPNqbrHmTzmGvaR35Qi0Ezu05yrmLu7nMLcsaa /XEvB2tTw/KRyrIPKmAoMG3dQvl0HHYlnGX8DzZvLfbIKiIKH8OqwCJ/yyZ3lAsd QZEvVSSzETT+S7SGaJGfOotDdpI7pvZHv4AS4L06FRajc3khApOjL2Z4n+O5UKwf KzZ+etnFHsU7VjkT6+KrpfD4tBXc9D251pVwJqukdKwafO/3tgbJQhpHdiTLzw37 vB2cITzsJNvrQlqMksvYa50QbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRA1M42 Sw9KqWwMVimNdovKmRyNMB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW/w5gw16vXZ+XRMpXRb4aemWus96oor2I3VWWuiPxXXGsGnjuYPSViqbCXNN WvXI1zql9DOPXmEzUA1f+ZZPjYQh6EFTV2EPH6tUs9RujQgokrsm5UoP3AjKjM4r wAdjbJjK85ZRKESJPxUTPtzTtGX6YcuGNIVluF4rNb6ACcdSAvUmwCq2niz4oJ9C 1InbIX/ooM5UTmQ9h4xi7IA1EZMn8jDNC157M+3ma6hHwRxGwXpc4HO9fxV+t3zR 8AQf3lJNclodxzV22LOG/d3nTEEHwA4Dd4R12qgTffmNy0MxRaddVb/SKPy/qNuN p0Cr9ti3x3iqtzPS3jLe5kYkjw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:57:57 2026 by rpki-client