$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json) Hash identifier: /JIvrGRb6G7WQzmZx4kGOYTAg3KkTYtAuS72cKSxakE= Subject key identifier: C2:6A:23:59:88:D6:FA:F8:D2:46:22:5A:39:0F:E5:45:BC:2D:F4:04 Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft Manifest number: 6A Signing time: Fri 27 Mar 2026 07:31:14 +0000 Manifest this update: Fri 27 Mar 2026 07:31:13 +0000 Manifest next update: Fri 03 Apr 2026 07:31:13 +0000 Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: opEWlyKTsbNfZom2xLAqoC8dBynjVEz6XNPJPDTmc48=) 2: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: Yhm7+m6I9lWu4bRq4rLXmeSCG3dRSGkgkhbHl5g6RH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Mar 27 07:31:13 2026 GMT Not After : Apr 3 07:31:13 2026 GMT Subject: CN=69c63242-771e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:7f:d6:66:2a:d1:a3:f4:01:3e:c9:f6:66: 39:4f:73:95:44:00:77:7d:3f:4a:28:61:ab:9a:ae: 36:2b:d9:51:2b:3e:2f:bc:1d:cb:b4:4e:47:09:ba: de:97:74:8e:a6:44:f7:d6:bb:df:6a:42:11:3a:c5: 27:25:92:15:c9:35:99:c8:bb:16:da:01:e1:1a:7c: fa:c7:7b:cb:63:f3:a3:60:96:46:7e:c1:ad:7b:f5: 60:2a:28:6a:99:4f:11:49:35:aa:b5:c1:8f:f4:f5: 17:a8:0f:2c:e1:f0:14:ff:1a:97:39:95:cc:a9:ec: f3:27:77:13:96:c3:75:e7:34:4d:37:3e:52:89:75: 7a:97:7c:af:2e:92:df:8e:8b:a3:9c:f5:20:56:cd: cd:92:62:7c:35:87:2d:d9:2c:a8:68:75:93:e5:dd: 5d:5c:52:93:6e:98:ba:42:08:33:9e:fb:e2:51:36: fb:53:16:74:99:ed:83:0c:9e:ac:de:b0:18:ad:a6: 44:f0:be:38:84:57:26:e0:21:0b:9b:7d:d9:74:2c: 02:c3:03:68:2b:36:74:4d:a6:c0:24:13:24:df:f3: b5:50:aa:81:e5:37:d9:2e:dd:a3:04:2e:32:f6:fe: ce:c8:c4:61:f6:cd:38:e3:96:f8:d0:a7:4b:24:94: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6A:23:59:88:D6:FA:F8:D2:46:22:5A:39:0F:E5:45:BC:2D:F4:04 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5e:3a:cf:7a:29:61:0b:86:d8:79:ad:a0:42:93:26:6b:25: f1:e7:ab:69:cd:08:32:39:4d:2c:3d:7c:fa:dc:4e:e8:5a:12: 25:50:a1:60:88:5a:be:55:0e:d5:b3:90:1a:96:75:dd:ab:72: c0:12:ba:9e:81:91:07:c3:c1:05:c1:85:c0:ae:53:9c:22:85: d5:57:0f:62:e6:ef:f7:b9:05:68:25:aa:c1:20:03:0f:ad:46: 5b:5e:13:9d:c9:68:85:c3:0a:44:80:6d:14:29:de:93:d0:6c: ea:df:80:75:e5:ae:89:1d:7a:eb:b8:91:84:2d:98:d1:9c:a2: 9a:b3:7c:f3:b5:15:55:89:3f:35:98:4d:e9:0d:9d:69:b1:31: 6a:ad:46:28:cc:79:02:a8:3b:ed:9d:3c:68:40:6c:8a:55:3e: 00:c0:de:1a:89:00:c5:8f:f3:19:df:94:ec:c6:d1:be:5a:fc: 5f:49:7b:b9:bc:8a:59:9d:48:12:bf:22:ce:8c:be:10:ae:7f: 17:c1:5f:2b:df:4a:bf:f2:16:7b:61:84:1c:aa:0f:66:e5:a2: 46:61:ad:3c:cb:3c:37:0d:6a:ea:f3:f7:85:1e:66:e0:4f:44: 94:81:33:b0:33:00:df:ab:38:47:6b:99:b7:2d:f6:d5:7d:d2: 45:89:71:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzYxNTExMC8GA1UEBRMoMjM3NDc4NkU4N0M0QTBFQzNENkZBNEMwQjc4NEU0MkZF RTAwM0E2RDAeFw0yNjAzMjcwNzMxMTNaFw0yNjA0MDMwNzMxMTNaMBgxFjAUBgNV BAMTDTY5YzYzMjQyLTc3MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8tn/WZirRo/QBPsn2ZjlPc5VEAHd9P0ooYauarjYr2VErPi+8Hcu0TkcJut6X dI6mRPfWu99qQhE6xSclkhXJNZnIuxbaAeEafPrHe8tj86NglkZ+wa179WAqKGqZ TxFJNaq1wY/09ReoDyzh8BT/Gpc5lcyp7PMndxOWw3XnNE03PlKJdXqXfK8ukt+O i6Oc9SBWzc2SYnw1hy3ZLKhodZPl3V1cUpNumLpCCDOe++JRNvtTFnSZ7YMMnqze sBitpkTwvjiEVybgIQubfdl0LALDA2grNnRNpsAkEyTf87VQqoHlN9ku3aMELjL2 /s7IxGH2zTjjlvjQp0sklOfNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwmojWYjW +vjSRiJaOQ/lRbwt9AQwHwYDVR0jBBgwFoAUI3R4bofEoOw9b6TAt4TkL+4AOm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NjE1L0JBRjM4RThBOTFG NTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9t MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNSNGJvZkVvT3c5YjZUQXQ0VGtMLTRBT20wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 NjE1L0JBRjM4RThBOTFGNTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093 OWI2VEF0NFRrTC00QU9tMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9XjrPeilhC4bYea2gQpMmayXx56tpzQgyOU0sPXz63E7oWhIlUKFgiFq+VQ7V s5AalnXdq3LAErqegZEHw8EFwYXArlOcIoXVVw9i5u/3uQVoJarBIAMPrUZbXhOd yWiFwwpEgG0UKd6T0Gzq34B15a6JHXrruJGELZjRnKKas3zztRVViT81mE3pDZ1p sTFqrUYozHkCqDvtnTxoQGyKVT4AwN4aiQDFj/MZ35TsxtG+WvxfSXu5vIpZnUgS vyLOjL4Qrn8XwV8r30q/8hZ7YYQcqg9m5aJGYa08yzw3DWrq8/eFHmbgT0SUgTOw MwDfqzhHa5m3LfbVfdJFiXFF -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:35 2026 by rpki-client