$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json) Hash identifier: tPhsPttX4oscRkVFQPz4xKhYVIfvcQYQpb0uXpyqK5U= Subject key identifier: 30:1D:2A:73:C3:41:57:D6:6D:9E:EE:0D:FA:5C:72:A6:57:9A:43:98 Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft Manifest number: 61 Signing time: Wed 25 Mar 2026 07:14:01 +0000 Manifest this update: Wed 25 Mar 2026 07:14:01 +0000 Manifest next update: Wed 01 Apr 2026 07:14:01 +0000 Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: Y+HrtDbvFn8OHGCauwNr361lVjYie9dNxOk7/UYwyBw=) 2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B Validity Not Before: Mar 25 07:14:01 2026 GMT Not After : Apr 1 07:14:01 2026 GMT Subject: CN=69c38b39-1708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:15:05:c2:1f:d8:0c:63:26:ef:29:3f:3e: 65:9a:81:26:d2:47:72:87:7b:87:41:7c:77:31:8f: 53:0a:30:4d:e4:28:2a:a2:83:02:c9:ac:a7:e6:fb: 35:b8:58:d2:22:19:1f:8f:67:0b:f2:e6:7e:5a:cc: 58:87:8c:bb:74:d8:72:aa:49:0f:65:d0:9a:b3:83: 6a:12:58:35:35:18:4a:72:0a:b2:78:19:da:b4:2f: 77:50:cc:59:75:43:7b:c7:f1:80:e5:7a:7c:64:b1: b7:5a:8e:93:9b:14:c2:13:31:52:1a:47:50:79:10: 67:a8:65:ae:66:68:c3:89:7d:58:ce:0f:0f:3b:6a: 5e:4c:b8:ae:a7:8b:af:49:ab:17:a7:d9:89:be:40: 2e:9f:4a:5b:a2:de:cd:4d:ce:ad:4c:30:54:a0:72: bd:64:38:d1:ee:6e:33:64:4f:32:95:51:60:f8:12: 3b:93:82:d6:3b:c4:8d:7a:3a:35:c1:01:60:0a:ea: d5:76:a7:d6:ae:cf:05:b9:2d:fd:af:cb:7a:21:26: 4a:c2:b9:1d:c8:3f:42:70:2d:95:89:20:50:8f:19: 0c:ef:cb:a3:69:ee:17:3b:6a:4e:36:c5:ec:7b:4d: 75:90:9d:5d:c0:19:fe:1c:f4:f4:9b:02:d4:a8:21: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1D:2A:73:C3:41:57:D6:6D:9E:EE:0D:FA:5C:72:A6:57:9A:43:98 X509v3 Authority Key Identifier: keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:8f:2a:01:39:11:71:ad:b7:c4:a7:07:51:94:b2:8b:e1:bd: b9:23:bb:c6:2f:08:85:d8:cf:22:7a:d5:18:81:2c:d6:b4:0e: ec:da:f5:51:80:d4:e4:2d:7d:c4:1a:c3:f5:f7:48:ce:e1:28: 9a:b9:79:c0:22:c6:50:0a:28:1b:b1:81:43:1b:42:5f:89:ae: 11:b9:ba:e2:01:76:0c:82:11:b9:e3:74:0b:f6:86:47:3a:ab: a4:c5:2f:f3:28:71:20:99:ca:6c:e4:69:9c:5e:39:f6:57:f8: 00:33:89:4d:f5:e6:29:d3:de:5a:a7:10:49:de:e5:5d:5c:92: 41:7a:61:6f:55:a9:11:05:ed:08:e0:fb:e4:a2:ef:4f:2f:21: 1f:c9:6d:5c:29:3a:56:8f:b9:eb:a1:dd:01:17:48:32:a7:ff: 6a:fd:ca:d4:40:50:75:18:d1:76:f2:c5:72:f3:09:97:01:a4: 83:b7:62:86:88:d0:53:88:7a:8b:cc:12:96:b4:08:fb:0a:0b: cb:0e:51:40:7d:5a:60:e5:72:86:4f:9b:82:6a:b1:24:4f:6d: 1c:5e:3a:72:12:5d:d5:48:d5:fb:74:dd:2f:8c:f8:4b:bc:61: 40:cb:64:2f:b4:ba:b2:72:32:bb:51:e7:c2:38:7b:4b:95:9a: 18:32:24:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUY3MjExMC8GA1UEBRMoOEE1MUVBNThDNDVDMkY0NDYwRTNBQjEzRUI2QTY3NDU0 NjVEQUY4QjAeFw0yNjAzMjUwNzE0MDFaFw0yNjA0MDEwNzE0MDFaMBgxFjAUBgNV BAMTDTY5YzM4YjM5LTE3MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7ShUFwh/YDGMm7yk/PmWagSbSR3KHe4dBfHcxj1MKME3kKCqigwLJrKfm+zW4 WNIiGR+PZwvy5n5azFiHjLt02HKqSQ9l0Jqzg2oSWDU1GEpyCrJ4Gdq0L3dQzFl1 Q3vH8YDlenxksbdajpObFMITMVIaR1B5EGeoZa5maMOJfVjODw87al5MuK6ni69J qxen2Ym+QC6fSlui3s1Nzq1MMFSgcr1kONHubjNkTzKVUWD4EjuTgtY7xI16OjXB AWAK6tV2p9auzwW5Lf2vy3ohJkrCuR3IP0JwLZWJIFCPGQzvy6Np7hc7ak42xex7 TXWQnV3AGf4c9PSbAtSoIQ7TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMB0qc8NB V9Ztnu4N+lxypleaQ5gwHwYDVR0jBBgwFoAUilHqWMRcL0Rg46sT62pnRUZdr4sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRjcyLzgwOUNDNEJBOTdB QzExRjA5MTVFNEUyOEM0RjlBRTAyL2lsSHFXTVJjTDBSZzQ2c1Q2MnBuUlVaZHI0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWxIcVdNUmNMMFJnNDZzVDYycG5SVVpkcjRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RjcyLzgwOUNDNEJBOTdBQzExRjA5MTVFNEUyOEM0RjlBRTAyL2lsSHFXTVJjTDBS ZzQ2c1Q2MnBuUlVaZHI0cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDAjyoBORFxrbfEpwdRlLKL4b25I7vGLwiF2M8ietUYgSzWtA7s2vVRgNTkLX3E GsP190jO4SiauXnAIsZQCigbsYFDG0Jfia4RubriAXYMghG543QL9oZHOqukxS/z KHEgmcps5GmcXjn2V/gAM4lN9eYp095apxBJ3uVdXJJBemFvVakRBe0I4Pvkou9P LyEfyW1cKTpWj7nrod0BF0gyp/9q/crUQFB1GNF28sVy8wmXAaSDt2KGiNBTiHqL zBKWtAj7CgvLDlFAfVpg5XKGT5uCarEkT20cXjpyEl3VSNX7dN0vjPhLvGFAy2Qv tLqycjK7UefCOHtLlZoYMiRi -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:15 2026 by rpki-client