$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft File: IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json) Hash identifier: +rhXPopo/a1SwglrJZrtHeCKlRv6GBIg+Q//9UCmPh0= Subject key identifier: B2:D5:44:57:36:70:07:AC:BD:2B:D2:08:E4:2E:DF:D2:7E:DC:4F:89 Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63 Certificate issuer: /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft Manifest number: 16 Signing time: Wed 25 Mar 2026 08:12:06 +0000 Manifest this update: Wed 25 Mar 2026 08:12:05 +0000 Manifest next update: Wed 01 Apr 2026 08:12:05 +0000 Files and hashes: 1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: nOn+vQK//ClXgZVhWL+r5I3cRiyPb6ZrICl0/p/HIGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263 Validity Not Before: Mar 25 08:12:05 2026 GMT Not After : Apr 1 08:12:05 2026 GMT Subject: CN=69c398d6-832a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bb:76:92:21:e5:56:d9:33:42:80:d7:27:af: 71:bd:20:0b:62:91:2e:07:ca:5f:99:6f:0e:06:ab: 1d:f0:55:90:6b:d7:19:25:8a:30:8c:ba:96:07:92: cf:87:9b:b0:23:ee:bc:e2:5b:92:1f:8c:93:21:6c: 2b:09:df:bf:f5:c3:25:fe:23:c7:42:cb:7d:74:dc: d0:e0:b2:21:dd:ba:60:7f:7d:3a:7c:30:de:83:56: e9:7e:a8:b7:33:ef:f2:dc:a0:06:58:0d:15:7e:4a: 06:10:8f:f8:8d:fc:b2:31:93:c7:1b:b6:6a:d0:cc: 0a:3d:58:04:67:7c:0f:b7:94:94:31:1e:0b:11:8d: db:dd:98:32:ad:5f:3d:3d:f9:e9:ae:08:a4:af:c6: 0c:e2:b8:e1:41:36:9b:14:27:80:27:df:06:f1:9a: 26:c2:8c:b5:9d:2e:a9:8b:1d:c9:0c:99:c1:c6:93: 9b:2a:bd:1b:54:7d:de:48:5a:78:49:74:f1:de:96: f1:17:c6:f8:13:db:64:b2:4b:1e:38:4d:ee:d4:ab: 91:70:96:de:a4:07:21:d3:0c:43:30:f3:db:9c:5f: 26:95:57:f6:97:54:71:db:ab:b4:f8:23:6d:1e:1d: 09:8a:67:fb:e3:4e:f0:df:1e:41:01:99:3b:5a:6d: 67:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D5:44:57:36:70:07:AC:BD:2B:D2:08:E4:2E:DF:D2:7E:DC:4F:89 X509v3 Authority Key Identifier: keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:94:3d:c7:14:b3:dc:d9:90:be:66:4b:19:40:e6:e7:6a:ce: ce:94:a7:88:f6:d6:7c:11:79:33:dc:0c:5e:62:9f:f3:d8:5d: 27:a2:f8:4f:91:5a:d0:e7:8f:72:36:c0:49:c4:0c:0a:5e:fd: 2e:f3:6d:cf:0b:e7:5b:49:41:10:47:20:c1:57:4e:63:f1:dd: b3:07:48:1c:a0:56:82:fa:43:fe:90:d8:2a:66:9c:75:84:f1: 70:7a:8a:9d:66:a6:41:02:c8:f9:52:83:f3:00:b9:d2:3c:0b: 7e:c6:16:0a:9e:16:0c:35:88:95:4d:53:8c:85:05:07:55:2b: 52:8f:af:e3:64:da:10:92:21:19:14:5e:a0:af:83:70:e3:39: 0b:42:9f:b4:de:97:0f:34:3e:31:21:f6:f5:01:1c:e5:25:59: 62:fd:18:31:a0:02:74:2c:22:37:ce:89:d3:2b:5c:94:64:73: c6:df:74:7c:4c:25:a8:b4:54:d8:0d:a1:34:20:a9:5d:bd:39: 9d:bd:74:46:d6:14:7d:89:d9:15:a2:ca:7e:2c:fc:6f:0f:57: 68:01:bc:45:46:b5:01:b8:bb:2d:a5:79:3c:45:8a:88:b5:0f: 9a:62:ca:47:fc:87:1e:aa:48:c6:7e:20:d0:a5:b9:a2:de:06: bb:4d:20:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkJCQTExMC8GA1UEBRMoMjIzQkU0MkNFM0E5RDhBNjU2MjA3OUU1MTA3NDdDMEZG QzQ1MjI2MzAeFw0yNjAzMjUwODEyMDVaFw0yNjA0MDEwODEyMDVaMBgxFjAUBgNV BAMTDTY5YzM5OGQ2LTgzMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwu3aSIeVW2TNCgNcnr3G9IAtikS4Hyl+Zbw4Gqx3wVZBr1xklijCMupYHks+H m7Aj7rziW5IfjJMhbCsJ37/1wyX+I8dCy3103NDgsiHdumB/fTp8MN6DVul+qLcz 7/LcoAZYDRV+SgYQj/iN/LIxk8cbtmrQzAo9WARnfA+3lJQxHgsRjdvdmDKtXz09 +emuCKSvxgziuOFBNpsUJ4An3wbxmibCjLWdLqmLHckMmcHGk5sqvRtUfd5IWnhJ dPHelvEXxvgT22SySx44Te7Uq5Fwlt6kByHTDEMw89ucXyaVV/aXVHHbq7T4I20e HQmKZ/vjTvDfHkEBmTtabWddAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUstVEVzZw B6y9K9II5C7f0n7cT4kwHwYDVR0jBBgwFoAUIjvkLOOp2KZWIHnlEHR8D/xFImMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0EyQ0E0M0RDMEQy MjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMktaV0lIbmxFSFI4RF94Rklt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWp2a0xPT3AyS1pXSUhubEVIUjhEX3hGSW1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QkJBL0EyQ0E0M0RDMEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMkta V0lIbmxFSFI4RF94RkltTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAlD3HFLPc2ZC+ZksZQObnas7OlKeI9tZ8EXkz3AxeYp/z2F0novhPkVrQ549y NsBJxAwKXv0u823PC+dbSUEQRyDBV05j8d2zB0gcoFaC+kP+kNgqZpx1hPFweoqd ZqZBAsj5UoPzALnSPAt+xhYKnhYMNYiVTVOMhQUHVStSj6/jZNoQkiEZFF6gr4Nw 4zkLQp+03pcPND4xIfb1ARzlJVli/RgxoAJ0LCI3zonTK1yUZHPG33R8TCWotFTY DaE0IKldvTmdvXRG1hR9idkVosp+LPxvD1doAbxFRrUBuLstpXk8RYqItQ+aYspH /IceqkjGfiDQpbmi3ga7TSDT -----END CERTIFICATE-----Generated at Thu Mar 26 03:13:36 2026 by rpki-client