$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: 12ALHiOuLWJsIyn6yIDGFTbP4Hn/gfom7h3OKZBALII= Subject key identifier: CA:50:0B:E7:52:35:A6:05:64:3B:7F:DF:6A:88:1D:FA:2A:63:0E:0D Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0D04 Signing time: Tue 24 Mar 2026 17:59:53 +0000 Manifest this update: Tue 24 Mar 2026 17:59:52 +0000 Manifest next update: Tue 31 Mar 2026 17:59:52 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: 0DESjF0Qvq2qKW8xwOW4T0Vt0Cyy17A/B6RsSBSXvcM=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: 157ABxUfeCDadV2j9/u0VY6yaJP4yo2wFFqe5ja4Lwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Mar 24 17:59:52 2026 GMT Not After : Mar 31 17:59:52 2026 GMT Subject: CN=69c2d119-1c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5f:cc:81:42:69:f1:67:9b:ae:5d:bf:7f:dd: e6:e9:70:27:dc:6e:cd:8f:9a:d4:07:37:ad:e2:48: a5:a8:2e:7e:6d:b0:15:14:89:a1:76:e9:42:2e:46: cf:64:0e:bf:38:df:df:ac:65:2f:78:20:29:fc:04: 5e:aa:d6:1f:19:89:8f:f4:07:39:01:72:f0:93:61: 5f:e1:d4:91:3c:75:9c:a3:3a:19:ee:4f:64:a3:df: 87:00:fb:93:f7:d5:cd:d6:67:d8:b3:3b:c1:ba:9a: a0:05:3e:8e:35:e0:6e:b5:c9:46:27:45:8f:2a:10: 00:b3:75:53:a0:20:ca:55:35:fc:15:ae:fe:99:cf: 6e:44:ef:eb:d8:38:d0:99:4f:c0:ac:14:93:0b:14: 7b:ae:fc:30:80:92:89:e9:58:ab:55:c4:27:e8:b7: ab:55:39:99:17:a6:de:e4:94:03:1f:f5:ed:93:f1: ed:f2:ac:05:7e:08:57:33:1a:98:d1:ed:08:cb:23: 5d:30:ca:6e:18:dc:34:e7:3f:55:32:54:cd:d7:68: 91:94:21:ce:28:cc:e2:fd:de:19:1b:f7:e6:7c:f2: 0f:f1:f7:00:56:95:59:14:79:6c:fb:1e:ae:9d:14: c4:c2:2f:b4:ea:66:d1:8e:b4:65:89:7c:5d:72:5b: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:50:0B:E7:52:35:A6:05:64:3B:7F:DF:6A:88:1D:FA:2A:63:0E:0D X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2c:e3:67:02:5b:dc:ae:f9:3e:1c:6e:c8:a6:47:74:8d:bc: a6:93:02:04:84:66:90:21:ac:aa:cf:f7:ad:97:55:5e:da:b4: 16:04:1e:8a:a3:55:07:c9:ee:24:95:d9:1a:91:6f:f8:f8:65: b9:23:ec:0d:13:1d:3a:b3:22:fc:18:b6:8e:d7:76:c5:8f:ff: 48:4d:cf:0f:1d:4d:a4:5b:e7:d4:ea:d8:aa:3c:ed:1f:57:29: 5f:e2:ab:5a:34:7a:f4:0c:f0:af:68:58:c9:ff:b6:40:3c:b1: 2a:e5:1e:02:19:7b:2b:95:3f:fc:2d:22:93:59:a0:c9:e1:f6: 8e:17:da:00:56:4d:4d:40:91:25:e5:22:7b:46:c2:1d:4c:ae: 25:b9:2b:a5:5b:6a:0b:35:f5:5f:a8:5f:66:87:6b:3a:7c:7b: 48:e6:90:91:db:11:a3:1d:1e:59:52:69:be:59:6f:01:e3:ab: bb:24:43:94:de:4f:81:2f:75:f5:93:45:c2:a4:26:06:6f:2b: f1:10:20:3f:a7:39:9f:de:71:d3:6e:7a:bf:be:9f:56:e8:77: 7c:7e:b0:7a:1b:93:2a:68:2f:4b:4e:98:aa:57:2b:4c:8b:77: 97:26:8b:2e:39:04:51:10:50:ee:52:b0:e9:e9:81:f5:49:63: 7b:fd:07:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjYwMzI0MTc1OTUyWhcNMjYwMzMxMTc1OTUyWjAYMRYwFAYD VQQDEw02OWMyZDExOS0xYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81/MgUJp8Webrl2/f93m6XAn3G7Nj5rUBzet4kilqC5+bbAVFImhdulCLkbP ZA6/ON/frGUveCAp/AReqtYfGYmP9Ac5AXLwk2Ff4dSRPHWcozoZ7k9ko9+HAPuT 99XN1mfYszvBupqgBT6ONeButclGJ0WPKhAAs3VToCDKVTX8Fa7+mc9uRO/r2DjQ mU/ArBSTCxR7rvwwgJKJ6VirVcQn6LerVTmZF6be5JQDH/Xtk/Ht8qwFfghXMxqY 0e0IyyNdMMpuGNw05z9VMlTN12iRlCHOKMzi/d4ZG/fmfPIP8fcAVpVZFHls+x6u nRTEwi+06mbRjrRliXxdclti2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpQC+dS NaYFZDt/32qIHfoqYw4NMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeizjZwJb3K75PhxuyKZHdI28ppMCBIRmkCGsqs/3rZdVXtq0FgQeiqNVB8nu JJXZGpFv+PhluSPsDRMdOrMi/Bi2jtd2xY//SE3PDx1NpFvn1OrYqjztH1cpX+Kr WjR69Azwr2hYyf+2QDyxKuUeAhl7K5U//C0ik1mgyeH2jhfaAFZNTUCRJeUie0bC HUyuJbkrpVtqCzX1X6hfZodrOnx7SOaQkdsRox0eWVJpvllvAeOruyRDlN5PgS91 9ZNFwqQmBm8r8RAgP6c5n95x0256v76fVuh3fH6wehuTKmgvS06YqlcrTIt3lyaL LjkEURBQ7lKw6emB9Ulje/0H+g== -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:31 2026 by rpki-client