$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: AVbRe0lg+FM693L/kz8ZGSx+gnzlrEend3v1EqrJPO0= Subject key identifier: 4F:40:55:86:1B:65:6E:F3:D1:1B:CB:96:90:D7:BE:86:F5:CD:D7:70 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 06D3 Signing time: Tue 24 Mar 2026 22:12:09 +0000 Manifest this update: Tue 24 Mar 2026 22:12:08 +0000 Manifest next update: Tue 31 Mar 2026 22:12:08 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: AQ1RdZ5h2LI9CMdZakrMcEG6Gt1W/qbKEKpWBxXQQNM=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: aaio9X7jltQXqJl+GwT+Oyhu5HboHbxMTjJ0svAwdfQ=) 3: E1201A0422D611EFAE700044C4F9AE02.roa (hash: vKRLCMHI6DzeezZqcA22y1WOCwRUjFKs9GH1QdWcjCQ=) 4: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: pf1K+6UJXd5dAs7JKyICOO/jFMb69psfiJsvXQNbxBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Mar 24 22:12:08 2026 GMT Not After : Mar 31 22:12:08 2026 GMT Subject: CN=69c30c38-1c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:ca:cc:55:00:9b:51:5d:dd:90:29:e5:f7: 12:7a:42:9d:6e:b9:9a:38:a9:b5:70:25:c4:16:5d: e5:1f:38:3c:84:ca:ca:0d:d7:18:e9:90:69:d7:92: 51:8c:dd:26:7f:c4:12:22:24:4e:5a:33:7c:ae:36: b1:8e:91:a8:51:ee:2d:e5:23:08:7e:ac:20:95:f4: 86:8b:57:28:1d:d3:2a:1c:ac:be:b5:10:6b:f3:76: 55:62:44:75:e2:73:8e:60:cd:a8:88:18:43:e0:ac: 2a:f0:0a:95:56:2c:a7:ed:6e:a5:17:c7:3c:57:68: 64:71:70:27:1d:a0:9c:2c:08:08:d7:0d:a4:b5:77: da:0b:96:08:6a:3a:f1:d1:ec:ca:d5:12:fb:63:30: cd:3f:71:de:5b:af:1a:5e:9f:a5:4e:c2:ba:16:cc: ad:79:73:ae:0f:f0:ca:86:b5:7a:ad:5a:54:b2:43: eb:bb:eb:a1:99:6d:2e:85:1e:57:34:cc:17:1e:28: 79:12:30:21:ad:9f:09:a3:29:72:c0:b1:95:9e:37: 74:78:a7:09:66:59:55:54:15:5d:60:97:c3:12:50: 0c:7a:a8:5a:02:e0:00:5b:93:13:9d:60:dd:b1:c1: e9:85:dd:be:09:50:ee:df:a9:0a:db:ba:dc:e7:d9: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:40:55:86:1B:65:6E:F3:D1:1B:CB:96:90:D7:BE:86:F5:CD:D7:70 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:35:a5:30:1d:b2:47:d1:39:34:c0:97:64:ff:a0:7f:01:f0: b9:82:0c:8e:ef:37:5f:90:b2:2b:bb:9f:a9:7f:53:d9:d7:b1: f1:52:36:e9:f4:d4:e8:a3:53:dc:bd:8b:34:0c:8b:c6:ef:50: 52:7f:ba:d3:db:e1:d0:6b:d2:b1:a0:b7:d5:70:a6:18:4a:9a: 1d:08:0e:f5:68:eb:0b:ce:cc:85:4f:6b:e8:aa:51:e1:44:46: 83:16:19:d5:bc:40:63:91:2a:15:be:ae:02:10:8d:f4:4e:49: bf:74:0c:cc:81:d5:14:37:96:c9:6f:64:f2:89:e8:76:da:ba: ba:b1:4f:f8:4d:08:22:d4:cb:00:4d:15:31:1b:5b:fc:3b:ee: 6b:44:88:73:64:d7:f4:b9:52:f9:60:90:d1:29:b0:a1:41:95: b2:1d:b1:33:41:36:2c:e3:61:ac:db:25:28:e7:f5:13:c8:36: ed:3d:88:b3:36:0f:64:aa:ed:07:0f:d8:c5:4c:0b:1f:8f:a6: 61:32:d7:69:61:0e:a0:23:09:fd:6f:c2:41:f8:8e:bf:9b:75: 42:3d:8d:16:35:2a:50:35:46:f6:ec:bd:d6:fb:fa:e3:d0:c6: aa:b1:15:23:8f:4d:0e:b7:6a:97:9f:aa:a1:77:6a:ed:06:9d: 58:04:27:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjYwMzI0MjIxMjA4WhcNMjYwMzMxMjIxMjA4WjAYMRYwFAYD VQQDEw02OWMzMGMzOC0xYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5fKzFUAm1Fd3ZAp5fcSekKdbrmaOKm1cCXEFl3lHzg8hMrKDdcY6ZBp15JR jN0mf8QSIiROWjN8rjaxjpGoUe4t5SMIfqwglfSGi1coHdMqHKy+tRBr83ZVYkR1 4nOOYM2oiBhD4Kwq8AqVViyn7W6lF8c8V2hkcXAnHaCcLAgI1w2ktXfaC5YIajrx 0ezK1RL7YzDNP3HeW68aXp+lTsK6FsyteXOuD/DKhrV6rVpUskPru+uhmW0uhR5X NMwXHih5EjAhrZ8JoylywLGVnjd0eKcJZllVVBVdYJfDElAMeqhaAuAAW5MTnWDd scHphd2+CVDu36kK27rc59n1uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9AVYYb ZW7z0RvLlpDXvob1zddwMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApTWlMB2yR9E5NMCXZP+gfwHwuYIMju83X5CyK7ufqX9T2dex8VI26fTU6KNT 3L2LNAyLxu9QUn+609vh0GvSsaC31XCmGEqaHQgO9WjrC87MhU9r6KpR4URGgxYZ 1bxAY5EqFb6uAhCN9E5Jv3QMzIHVFDeWyW9k8onodtq6urFP+E0IItTLAE0VMRtb /Dvua0SIc2TX9LlS+WCQ0SmwoUGVsh2xM0E2LONhrNslKOf1E8g27T2IszYPZKrt Bw/YxUwLH4+mYTLXaWEOoCMJ/W/CQfiOv5t1Qj2NFjUqUDVG9uy91vv649DGqrEV I49NDrdql5+qoXdq7QadWAQnvw== -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:04 2026 by rpki-client