$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: rnk8XX/I6et0ERjbdrfXOHOWnRWGtY9vEU0zfkyUs8s= Subject key identifier: FC:C8:F9:37:CF:31:2E:C5:42:EF:34:CD:14:BC:F3:39:9B:42:CF:6A Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 3571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 353E Signing time: Thu 26 Mar 2026 14:19:33 +0000 Manifest this update: Thu 26 Mar 2026 14:19:32 +0000 Manifest next update: Thu 02 Apr 2026 14:19:32 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: MMJIhWo9p3VG9+NNdhIfGP/RRrhqU1lBbXUT9N6laHA=) 2: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=) 3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=) 4: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Mar 26 14:19:32 2026 GMT Not After : Apr 2 14:19:32 2026 GMT Subject: CN=69c54075-bdf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:87:e6:f8:05:d7:96:dc:91:4d:06:67:cc:1f: fd:36:e8:9b:a6:aa:9e:96:32:68:8e:0a:c9:64:6c: ba:0f:8f:dd:d8:0f:55:a4:9a:fe:b3:d1:3a:66:11: 50:e1:ea:05:d4:0f:45:3e:ed:b1:29:27:ac:49:5a: cb:67:ca:96:5d:61:50:90:a4:cf:bb:f1:9c:c2:50: 3b:2e:d6:e8:d6:c4:85:ee:c4:54:e1:bc:92:9e:06: 63:7f:4c:46:a7:da:a8:e2:79:50:05:49:71:dc:db: c0:93:86:2e:ac:bd:d0:b4:58:4b:4d:d1:29:49:9f: 26:53:8b:7b:f8:df:c0:6f:db:f5:34:d8:3d:0c:fb: 7c:21:23:74:10:47:74:e3:f4:ea:73:e0:00:08:20: 1a:82:77:20:df:b6:d0:a6:94:44:6b:c1:9e:4b:e9: 5c:3b:c9:e1:dc:18:5c:1e:16:4c:62:fa:c5:9c:3f: f9:96:da:9f:d1:d6:6b:3f:b6:fd:1f:bc:b9:7c:1b: da:a3:25:d9:24:73:31:3f:98:df:a5:44:0c:ec:51: d4:93:ba:a1:33:13:17:0c:cb:e4:cf:37:54:95:3e: 5f:6b:b0:6d:bf:a4:bb:18:19:d0:44:a5:ba:db:a3: 3a:cb:3b:0d:76:44:39:31:f3:37:70:0a:7e:9a:b2: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C8:F9:37:CF:31:2E:C5:42:EF:34:CD:14:BC:F3:39:9B:42:CF:6A X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:62:4e:97:1b:f4:84:bd:0f:cc:1f:23:54:e7:2b:1a:fd:0e: f1:e7:34:7f:ef:9b:cc:ec:f0:cd:d3:43:e8:06:7a:b3:c8:e7: 88:30:67:5c:f0:31:cf:1a:44:57:b0:94:89:cf:a4:d5:91:4f: ec:59:3f:06:ff:73:91:06:4e:71:63:1b:00:45:ff:58:71:e2: 6e:49:15:c8:5a:12:f4:ad:7d:04:37:ab:20:df:12:ac:1b:39: dc:9f:c5:ca:c0:dc:6d:5e:e8:fd:c1:f1:9b:a4:e0:6d:a7:62: 29:1f:fc:98:2c:1d:df:d1:fe:02:49:c1:11:16:18:1e:51:13: 25:d1:5a:c7:ac:80:0d:e8:36:f3:11:7a:53:3e:b8:44:f5:45: 4e:cb:33:34:6a:3c:0c:b7:98:fb:02:6a:74:cc:81:41:57:04: fa:c7:1f:e6:09:4b:97:1f:85:20:18:42:50:cd:64:fa:d5:b9: 10:a6:c9:3a:f8:e0:71:cc:ea:5e:3b:b0:54:96:8c:4f:a4:1e: 07:36:64:54:05:6c:dd:50:0f:7a:8b:9f:94:02:7d:cd:6a:b6: 74:48:91:b7:23:d1:b5:d1:02:59:4c:f2:95:1c:ef:8a:6b:df: 42:74:21:a9:87:0d:a3:ec:11:87:13:dd:dd:99:b6:85:8e:c8: 84:7f:2f:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjYwMzI2MTQxOTMyWhcNMjYwNDAyMTQxOTMyWjAYMRYwFAYD VQQDEw02OWM1NDA3NS1iZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94fm+AXXltyRTQZnzB/9NuibpqqeljJojgrJZGy6D4/d2A9VpJr+s9E6ZhFQ 4eoF1A9FPu2xKSesSVrLZ8qWXWFQkKTPu/GcwlA7Ltbo1sSF7sRU4bySngZjf0xG p9qo4nlQBUlx3NvAk4YurL3QtFhLTdEpSZ8mU4t7+N/Ab9v1NNg9DPt8ISN0EEd0 4/Tqc+AACCAagncg37bQppREa8GeS+lcO8nh3BhcHhZMYvrFnD/5ltqf0dZrP7b9 H7y5fBvaoyXZJHMxP5jfpUQM7FHUk7qhMxMXDMvkzzdUlT5fa7Btv6S7GBnQRKW6 26M6yzsNdkQ5MfM3cAp+mrKF+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzI+TfP MS7FQu80zRS88zmbQs9qMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN2JOlxv0hL0PzB8jVOcrGv0O8ec0f++bzOzwzdND6AZ6s8jniDBnXPAxzxpE V7CUic+k1ZFP7Fk/Bv9zkQZOcWMbAEX/WHHibkkVyFoS9K19BDerIN8SrBs53J/F ysDcbV7o/cHxm6TgbadiKR/8mCwd39H+AknBERYYHlETJdFax6yADeg28xF6Uz64 RPVFTsszNGo8DLeY+wJqdMyBQVcE+scf5glLlx+FIBhCUM1k+tW5EKbJOvjgcczq XjuwVJaMT6QeBzZkVAVs3VAPeouflAJ9zWq2dEiRtyPRtdECWUzylRzvimvfQnQh qYcNo+wRhxPd3Zm2hY7IhH8v6g== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:32 2026 by rpki-client