$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json) Hash identifier: PODUcVZNi95ieeBKLttJmKabB85L5ZN3gcaTd9ZRvs0= Subject key identifier: F1:61:E5:33:11:F2:9D:88:12:8B:0A:B8:A8:59:48:3B:28:75:17:5B Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft Manifest number: 3A Signing time: Fri 27 Mar 2026 08:05:15 +0000 Manifest this update: Fri 27 Mar 2026 08:05:14 +0000 Manifest next update: Fri 03 Apr 2026 08:05:14 +0000 Files and hashes: 1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: NOPPXpwJqmrxZEWdvRhqkvPofFtEnFL3R949K9fbXyY=) 2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: qzSxvuujDmL239/Gh/JLB+28QvjA0lGPnBH2BpP+kM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 08:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Validity Not Before: Mar 27 08:05:14 2026 GMT Not After : Apr 3 08:05:14 2026 GMT Subject: CN=69c63a3a-1883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:28:ba:ae:2f:5b:a8:ff:69:16:a5:1d:56:a7: f7:1e:ad:5e:b7:94:de:7c:69:98:0a:6e:bc:77:c4: 27:91:29:f0:0f:18:db:43:66:80:65:92:a6:51:20: 13:1d:97:2b:4b:86:3d:f8:94:b6:eb:7a:c9:8b:b5: 73:64:c2:43:9d:fe:66:d6:29:46:4e:f8:84:bd:f9: 2e:1e:7e:c4:64:92:ee:fb:c0:13:70:fd:fd:34:78: 52:7d:6e:87:c2:ca:5d:56:63:66:7d:b6:e3:6c:48: 35:0b:01:36:3b:42:07:5e:dc:22:37:c9:09:d2:9e: 45:0f:64:91:9c:61:df:b5:2f:24:8b:e5:e7:54:9c: cb:4d:0d:7e:31:f0:93:34:6d:42:b4:78:21:05:04: 60:df:ac:1c:e1:5f:f6:1f:f3:6c:33:d1:ae:40:11: b5:60:ad:ee:f5:06:7b:33:0f:1c:a5:8c:7e:68:5c: f2:9f:7d:5b:d8:02:d5:d2:4d:19:5d:9a:9f:50:65: eb:0d:6e:59:76:78:c6:00:01:b3:72:31:22:6b:80: 20:63:bd:49:21:e4:8e:65:ce:6a:05:dd:49:aa:f7: eb:b8:02:0f:ed:d8:69:47:d6:36:36:69:91:1c:6f: 64:19:af:d7:95:df:2a:77:a9:95:be:7a:31:a0:f4: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:61:E5:33:11:F2:9D:88:12:8B:0A:B8:A8:59:48:3B:28:75:17:5B X509v3 Authority Key Identifier: keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9e:eb:e5:88:8f:d4:8a:89:be:51:8b:99:ab:3e:3c:57:04: 39:cc:03:d1:c8:8d:54:78:37:32:58:e8:11:c2:7c:fe:3b:43: f6:39:7d:06:6e:2b:79:cc:76:af:87:91:ae:ca:09:bf:75:ad: 93:a6:41:6a:6f:f3:26:4a:c4:d4:3e:02:4d:57:42:95:d0:e2: f4:45:ef:47:7b:e3:a3:06:d8:9b:4a:1c:9a:0a:90:75:76:6c: 1b:be:9a:30:9a:28:6a:bc:5d:46:e8:7c:45:34:4b:af:31:40: 71:d3:c0:c4:ee:fe:e0:d2:29:85:db:3d:52:f8:33:15:c5:15: 66:18:80:a1:9f:fa:c8:be:fb:65:48:be:1d:79:20:8e:0e:94: 54:1d:b0:16:4b:7c:54:e9:ca:ce:2e:bd:5b:1e:4f:f0:64:fc: 84:e5:a3:a4:66:a4:80:07:a2:d6:ec:f2:0f:b3:0c:b0:f8:40: e5:0a:1b:29:41:e3:64:8b:11:b8:ab:f1:e4:4e:e1:21:e0:73: be:38:35:c9:83:d9:b4:6b:dc:52:a1:47:0e:d4:05:c5:d3:e6: 33:88:86:0d:c7:4e:a5:f7:b2:62:73:2c:bc:9a:cf:e8:ee:a1: 13:3c:7b:5f:93:26:2f:90:4d:68:e9:28:5c:87:6c:3f:91:67: 86:e9:11:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODY4MjExMC8GA1UEBRMoMjNFMUU0MjU5RkFCQ0Q0OUZENThDQ0Q0NkNGMjAwQ0Qx MjFFMkVBQzAeFw0yNjAzMjcwODA1MTRaFw0yNjA0MDMwODA1MTRaMBgxFjAUBgNV BAMTDTY5YzYzYTNhLTE4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtKLquL1uo/2kWpR1Wp/cerV63lN58aZgKbrx3xCeRKfAPGNtDZoBlkqZRIBMd lytLhj34lLbresmLtXNkwkOd/mbWKUZO+IS9+S4efsRkku77wBNw/f00eFJ9bofC yl1WY2Z9tuNsSDULATY7Qgde3CI3yQnSnkUPZJGcYd+1LySL5edUnMtNDX4x8JM0 bUK0eCEFBGDfrBzhX/Yf82wz0a5AEbVgre71BnszDxyljH5oXPKffVvYAtXSTRld mp9QZesNbll2eMYAAbNyMSJrgCBjvUkh5I5lzmoF3Umq9+u4Ag/t2GlH1jY2aZEc b2QZr9eV3yp3qZW+ejGg9MPVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8WHlMxHy nYgSiwq4qFlIOyh1F1swHwYDVR0jBBgwFoAUI+HkJZ+rzUn9WMzUbPIAzRIeLqww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NjgyLzA3MjlERDJFRDVC QTExRjBBQjkwREE3Q0M0RjlBRTAyL0ktSGtKWi1yelVuOVdNelViUElBelJJZUxx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSS1Ia0paLXJ6VW45V016VWJQSUF6UkllTHF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NjgyLzA3MjlERDJFRDVCQTExRjBBQjkwREE3Q0M0RjlBRTAyL0ktSGtKWi1yelVu OVdNelViUElBelJJZUxxdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBJnuvliI/Uiom+UYuZqz48VwQ5zAPRyI1UeDcyWOgRwnz+O0P2OX0Gbit5zHav h5Guygm/da2TpkFqb/MmSsTUPgJNV0KV0OL0Re9He+OjBtibShyaCpB1dmwbvpow mihqvF1G6HxFNEuvMUBx08DE7v7g0imF2z1S+DMVxRVmGIChn/rIvvtlSL4deSCO DpRUHbAWS3xU6crOLr1bHk/wZPyE5aOkZqSAB6LW7PIPswyw+EDlChspQeNkixG4 q/HkTuEh4HO+ODXJg9m0a9xSoUcO1AXF0+YziIYNx06l97Jicyy8ms/o7qETPHtf kyYvkE1o6Shch2w/kWeG6RFS -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:38 2026 by rpki-client