$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: sY3bvt7EdcBzrxV3P3Y29Kgy5D9ZGIi3P/QOxQiDpcY= Subject key identifier: D0:80:FB:3C:8F:FA:96:4A:66:9C:39:D8:A3:A7:F3:78:D1:8F:53:D6 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 01D8 Signing time: Wed 25 Mar 2026 02:52:59 +0000 Manifest this update: Wed 25 Mar 2026 02:52:58 +0000 Manifest next update: Wed 01 Apr 2026 02:52:58 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: DGOCr9Jn3bAnRudLPPHhTpX+5QbRkS7yCJg9xRt2l8Q=) 2: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: 8VCSX3Py1IyN0f9zmOSlchE4nrVyfSkUdTOEL2+Xh+k=) 3: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Mar 25 02:52:58 2026 GMT Not After : Apr 1 02:52:58 2026 GMT Subject: CN=69c34e0a-4d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9a:e4:15:8c:e7:a1:f4:c5:37:50:f3:78:0c: 00:6e:38:45:50:95:90:27:a8:27:15:c2:fd:19:0b: 1b:66:1c:fc:d7:35:cf:b5:c4:df:3f:92:0f:c2:b0: 09:17:ef:e2:d7:be:c5:54:13:3f:02:15:20:ae:83: 18:a0:b6:aa:ea:6b:2c:d7:76:a7:4e:fc:d9:42:e5: 54:29:8b:74:37:9b:a2:56:fd:e5:a4:fd:cc:75:49: 1f:62:0c:d2:c6:1c:34:f3:66:43:5c:10:85:ab:cc: bf:24:9a:82:be:04:58:a7:b3:35:68:ba:7f:99:45: 50:71:0c:7f:b8:d7:e3:9d:8f:87:d9:cb:92:38:99: 5a:71:c5:00:fa:31:a9:70:71:58:a8:fd:46:e5:fd: c1:5a:0e:fb:fd:65:5d:4a:73:e6:cf:ca:5c:49:70: 74:17:79:d0:7a:25:f9:e9:d8:77:32:58:dc:0b:8f: d7:6e:9d:c7:1f:30:a6:87:36:a7:48:42:30:2c:c8: 1a:37:82:ad:ff:80:b4:84:15:ca:e7:9a:3f:56:8f: 01:bd:94:af:16:b5:cf:bf:54:e9:81:38:cf:b6:af: 18:98:0d:dc:2c:b5:fc:2f:4a:6b:6c:76:07:60:5c: 11:a5:3e:bc:a0:71:34:b1:70:4f:e4:03:d9:af:1d: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:80:FB:3C:8F:FA:96:4A:66:9C:39:D8:A3:A7:F3:78:D1:8F:53:D6 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9c:df:9e:66:f4:d2:08:12:c4:9e:1b:fe:24:3e:f8:5c:48: 7c:f6:d5:6b:ea:46:17:18:f0:65:6e:dc:19:aa:8a:d9:d2:dc: 74:ff:b8:fe:2f:93:5c:9c:2a:be:e8:62:41:a9:c8:54:bc:c2: 46:8b:62:ee:f8:e0:1e:ba:66:c4:17:ef:f6:67:cc:4a:50:d3: 86:e1:a3:1a:94:7d:c5:c5:8d:a8:18:34:00:1f:58:07:00:ce: 5b:38:39:a6:7d:56:f7:80:82:78:8d:41:7c:f6:7e:ac:f4:70: 0a:6b:ed:62:ef:46:5d:f9:62:87:9f:3f:75:f6:91:f2:63:8d: 5c:15:fd:11:a2:62:41:70:32:f5:dd:f2:ce:92:96:d7:8c:8a: 8a:d2:5a:75:1f:02:25:9b:40:48:44:5e:6f:a4:28:9f:84:45: c3:2f:e6:0f:af:ff:18:2f:89:e7:c0:13:81:c4:92:ed:33:ff: af:5e:98:ba:f7:72:be:71:d1:f3:4d:a3:20:37:68:94:12:6e: 72:5f:10:26:37:f4:17:1c:b4:b3:7a:5a:a8:24:8c:3e:a8:55: ca:6d:10:b7:3d:47:e8:e4:7f:50:a0:6d:07:8c:d9:30:19:72: 30:f6:89:e4:4a:3e:ed:7d:59:f5:52:b4:4d:10:fe:25:04:6a: f0:48:76:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjYwMzI1MDI1MjU4WhcNMjYwNDAxMDI1MjU4WjAYMRYwFAYD VQQDEw02OWMzNGUwYS00ZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZrkFYznofTFN1DzeAwAbjhFUJWQJ6gnFcL9GQsbZhz81zXPtcTfP5IPwrAJ F+/i177FVBM/AhUgroMYoLaq6mss13anTvzZQuVUKYt0N5uiVv3lpP3MdUkfYgzS xhw082ZDXBCFq8y/JJqCvgRYp7M1aLp/mUVQcQx/uNfjnY+H2cuSOJlaccUA+jGp cHFYqP1G5f3BWg77/WVdSnPmz8pcSXB0F3nQeiX56dh3MljcC4/Xbp3HHzCmhzan SEIwLMgaN4Kt/4C0hBXK55o/Vo8BvZSvFrXPv1TpgTjPtq8YmA3cLLX8L0prbHYH YFwRpT68oHE0sXBP5APZrx3agwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCA+zyP +pZKZpw52KOn83jRj1PWMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFJzfnmb00ggSxJ4b/iQ++FxIfPbVa+pGFxjwZW7cGaqK2dLcdP+4/i+TXJwq vuhiQanIVLzCRoti7vjgHrpmxBfv9mfMSlDThuGjGpR9xcWNqBg0AB9YBwDOWzg5 pn1W94CCeI1BfPZ+rPRwCmvtYu9GXflih58/dfaR8mONXBX9EaJiQXAy9d3yzpKW 14yKitJadR8CJZtASEReb6Qon4RFwy/mD6//GC+J58ATgcSS7TP/r16YuvdyvnHR 802jIDdolBJucl8QJjf0Fxy0s3paqCSMPqhVym0Qtz1H6OR/UKBtB4zZMBlyMPaJ 5Eo+7X1Z9VK0TRD+JQRq8Eh21g== -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:43 2026 by rpki-client