$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: IT71SnFPrntB79AbDRpey5SW4aRUdND2DGVD418OCAw= Subject key identifier: B0:DA:C2:9B:72:EF:68:DC:1F:02:81:98:72:34:44:C0:AC:90:AF:E2 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 0831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 0828 Signing time: Tue 24 Mar 2026 20:43:07 +0000 Manifest this update: Tue 24 Mar 2026 20:43:07 +0000 Manifest next update: Tue 31 Mar 2026 20:43:07 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: pMX0Xwzv14YkwIahCNvi6OUI5bBlLY3T0sLGrRbSggI=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: v4yXnV7F6sBRR11FKD6BcY09oXI6+ensN6Z6ZxFBdd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Mar 24 20:43:07 2026 GMT Not After : Mar 31 20:43:07 2026 GMT Subject: CN=69c2f75b-fd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:9c:28:26:18:15:ca:a3:d6:19:63:e6:fc: 27:c8:3b:24:cd:5e:02:e5:62:eb:13:24:81:8e:b9: e9:dd:07:65:2c:45:79:79:23:2c:07:bb:21:ff:3b: f7:33:1b:ad:c9:4f:08:fe:8a:a7:35:55:5c:e6:81: e4:01:80:24:c2:f9:33:36:ba:ef:46:56:82:8c:41: 1e:3b:91:c2:d7:a0:3d:1e:a4:49:2e:ed:ea:b9:8a: d1:f4:d8:39:2c:a4:8f:a5:e4:0b:2b:82:86:bc:cb: 01:64:c3:d4:bf:71:ba:df:ea:7b:bf:21:ed:1c:52: b7:dc:da:60:87:a8:04:c1:fd:e8:cd:c1:dd:be:3d: 6a:27:dd:2e:9a:5c:e2:c5:d5:a1:38:74:ba:15:b0: 9c:63:02:28:f2:87:e6:5e:f5:70:a3:05:f0:e9:4d: 7c:39:24:80:41:60:20:aa:c6:00:e1:76:84:5b:b4: be:9d:78:b7:67:da:a4:4a:cd:7f:d2:3e:3e:9b:38: c5:ea:33:c7:fe:79:eb:e4:ec:04:37:8b:23:24:08: 0d:69:f4:9d:a7:bc:e8:fe:de:5d:4f:db:4e:16:72: ac:32:6e:3d:5a:6e:48:4c:78:f7:66:e4:c2:d4:1e: e7:6f:03:5a:df:ec:91:92:0f:07:6f:69:53:cb:0b: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:C2:9B:72:EF:68:DC:1F:02:81:98:72:34:44:C0:AC:90:AF:E2 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:df:15:e3:0d:e5:92:e6:9d:ac:f3:6a:aa:d5:29:41:b8:8a: 1a:b2:72:fb:a4:98:bc:df:9c:53:27:11:76:25:01:23:8d:96: 01:eb:3c:2a:d6:90:90:5a:4f:6d:59:20:2b:03:1d:af:25:60: d9:50:44:25:8d:7a:21:f9:e5:4e:ac:33:2a:9f:4d:c6:99:1d: 81:6a:6c:28:36:23:f0:ac:ec:72:59:78:e3:03:eb:4b:81:63: 35:9c:ce:94:f3:d7:c5:1f:89:80:29:93:9d:83:30:ce:cc:ac: 7b:d4:e5:49:31:52:97:35:91:d7:dd:3a:5f:1b:c8:28:d8:ec: 20:64:42:20:3a:96:dd:db:63:aa:b6:40:ca:4e:8e:a9:ed:c6: d6:74:70:a6:25:58:a1:08:31:c0:e2:9c:e6:8c:fd:f9:29:6b: 62:46:eb:80:08:25:50:46:93:d5:71:9f:46:c8:a9:93:68:a0: 35:6f:3b:53:c6:c9:cc:27:15:74:30:df:b0:6a:bd:a9:5f:39: 9d:01:03:31:53:35:ab:65:18:a5:51:59:ff:2a:02:46:4b:31: 7a:6c:23:42:73:e1:b6:9f:f0:ec:21:79:32:e6:1a:1b:46:e0: 66:64:f3:5b:f0:85:f3:40:b8:68:18:f1:eb:25:4f:2f:62:57: 1a:f7:f6:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjYwMzI0MjA0MzA3WhcNMjYwMzMxMjA0MzA3WjAYMRYwFAYD VQQDEw02OWMyZjc1Yi1mZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFOcKCYYFcqj1hlj5vwnyDskzV4C5WLrEySBjrnp3QdlLEV5eSMsB7sh/zv3 MxutyU8I/oqnNVVc5oHkAYAkwvkzNrrvRlaCjEEeO5HC16A9HqRJLu3quYrR9Ng5 LKSPpeQLK4KGvMsBZMPUv3G63+p7vyHtHFK33Npgh6gEwf3ozcHdvj1qJ90umlzi xdWhOHS6FbCcYwIo8ofmXvVwowXw6U18OSSAQWAgqsYA4XaEW7S+nXi3Z9qkSs1/ 0j4+mzjF6jPH/nnr5OwEN4sjJAgNafSdp7zo/t5dT9tOFnKsMm49Wm5ITHj3ZuTC 1B7nbwNa3+yRkg8Hb2lTywtjuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDawpty 72jcHwKBmHI0RMCskK/iMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKt8V4w3lkuadrPNqqtUpQbiKGrJy+6SYvN+cUycRdiUBI42WAes8KtaQkFpP bVkgKwMdryVg2VBEJY16IfnlTqwzKp9NxpkdgWpsKDYj8Kzscll44wPrS4FjNZzO lPPXxR+JgCmTnYMwzsyse9TlSTFSlzWR1906XxvIKNjsIGRCIDqW3dtjqrZAyk6O qe3G1nRwpiVYoQgxwOKc5oz9+SlrYkbrgAglUEaT1XGfRsipk2igNW87U8bJzCcV dDDfsGq9qV85nQEDMVM1q2UYpVFZ/yoCRksxemwjQnPhtp/w7CF5MuYaG0bgZmTz W/CF80C4aBjx6yVPL2JXGvf29Q== -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:49 2026 by rpki-client