$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft File: iuWu7yqR89-GYD7cVP6ExbtXnBU.mft (raw, json) Hash identifier: 7Ms5YSORWiTvuHVNPLxBLa4EaY9oZ20qhYKTCPF26NE= Subject key identifier: 7E:FB:8E:D3:7C:D6:D5:F9:B2:33:60:AE:E0:B7:22:0D:C1:94:69:19 Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15 Certificate issuer: /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft Manifest number: 0156 Signing time: Wed 25 Mar 2026 04:18:36 +0000 Manifest this update: Wed 25 Mar 2026 04:18:36 +0000 Manifest next update: Wed 01 Apr 2026 04:18:36 +0000 Files and hashes: 1: iuWu7yqR89-GYD7cVP6ExbtXnBU.crl (hash: IjgcXGdYIlaGXq4YaquubNq2w35aGLCq16YAnhmKm/M=) 2: DC857BE8843111F09719836AC4F9AE02.roa (hash: O+A6fzSJr2TZ+7/KCaZLr98G06DnnuKn1Adew/Owyqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15 Validity Not Before: Mar 25 04:18:36 2026 GMT Not After : Apr 1 04:18:36 2026 GMT Subject: CN=69c3621c-dcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:9f:4a:4b:b7:57:f2:be:f9:a2:92:e4:a0: 2f:df:53:90:f8:37:0f:41:4d:0c:d8:98:b9:65:45: 5d:e8:f3:0e:94:1b:ac:5b:4f:7b:04:d7:e2:ca:9c: 16:bb:82:52:1a:28:1e:18:8e:a5:a6:0d:dc:f8:42: bf:12:21:00:d0:fb:28:c6:83:cd:7a:56:6a:45:f3: eb:43:bf:85:5e:70:e0:35:8e:8f:27:21:42:df:6d: 12:79:26:9a:d1:30:30:d4:2f:f5:de:b5:e0:10:7d: 70:15:e1:c5:50:8a:e1:68:8f:5b:16:39:f4:f6:e2: 77:b1:bb:f7:c3:3e:46:c6:a7:59:b2:c4:93:e7:b1: 0e:ea:b1:04:da:10:98:d5:67:a9:78:13:58:5f:6b: df:65:bc:b9:05:85:20:cc:93:ef:5e:80:4d:45:e5: 86:91:22:eb:59:48:67:18:33:04:8c:aa:01:9b:52: 83:58:52:c6:76:34:9f:61:03:fe:1e:fc:4b:34:8c: a6:27:06:28:24:d7:c6:27:82:46:d2:0e:f8:df:a2: 6f:fc:ed:a3:30:9e:31:53:4e:df:99:71:16:e2:09: 5f:9a:c6:f3:7d:b5:e2:01:26:d0:9c:23:2b:af:a5: f6:eb:28:cd:4c:29:52:d6:8f:84:c4:93:b6:e4:7e: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FB:8E:D3:7C:D6:D5:F9:B2:33:60:AE:E0:B7:22:0D:C1:94:69:19 X509v3 Authority Key Identifier: keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:65:79:4c:0d:7f:6c:b0:cd:cf:5e:92:0e:fa:e2:b3:c2:75: a7:12:b7:50:30:90:b8:d7:2b:35:ec:ea:67:9c:51:3b:87:0d: 12:15:a5:19:92:85:f5:33:6d:87:7e:54:27:4a:95:fe:32:a9: 33:f8:49:cb:82:23:be:40:8f:27:57:6a:35:d3:79:da:d5:22: c1:9e:91:41:8f:40:0f:b4:75:8c:e0:19:1d:a7:81:9f:30:ac: 8c:0a:2b:9c:85:23:46:4e:39:5a:38:bb:0a:6e:17:7a:a3:39: 4b:eb:b4:ab:e4:19:1a:93:4d:5c:1d:a3:00:f9:03:00:2f:0a: ae:d2:aa:52:3e:81:12:9a:59:c8:47:d5:be:5c:3f:79:5c:79: d9:9c:f8:68:8a:c7:d7:d7:8a:c5:d2:fa:2b:9d:e6:90:cd:e1: b8:56:bb:8c:32:a3:7b:a4:7e:22:39:9b:87:9c:79:77:d8:86: 4d:61:f1:53:10:fa:5a:3e:b8:7d:51:f7:bb:89:7d:d0:ac:9c: 12:57:17:ab:69:c4:e8:8c:e2:1c:21:36:72:ac:3d:68:32:7b: 80:c3:eb:0a:e1:cc:14:61:7e:fb:72:8c:16:39:a9:5d:f0:8d: c0:59:89:4d:1a:9b:7e:36:fe:fc:94:ff:34:bd:b5:03:5e:28: 6e:d9:22:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQjUxMTAvBgNVBAUTKDhBRTVBRUVGMkE5MUYzREY4NjYwM0VEQzU0RkU4NEM1 QkI1NzlDMTUwHhcNMjYwMzI1MDQxODM2WhcNMjYwNDAxMDQxODM2WjAYMRYwFAYD VQQDEw02OWMzNjIxYy1kY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRSfSku3V/K++aKS5KAv31OQ+DcPQU0M2Ji5ZUVd6PMOlBusW097BNfiypwW u4JSGigeGI6lpg3c+EK/EiEA0PsoxoPNelZqRfPrQ7+FXnDgNY6PJyFC320SeSaa 0TAw1C/13rXgEH1wFeHFUIrhaI9bFjn09uJ3sbv3wz5GxqdZssST57EO6rEE2hCY 1WepeBNYX2vfZby5BYUgzJPvXoBNReWGkSLrWUhnGDMEjKoBm1KDWFLGdjSfYQP+ HvxLNIymJwYoJNfGJ4JG0g7436Jv/O2jMJ4xU07fmXEW4glfmsbzfbXiASbQnCMr r6X26yjNTClS1o+ExJO25H64KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH77jtN8 1tX5sjNgruC3Ig3BlGkZMB8GA1UdIwQYMBaAFIrlru8qkfPfhmA+3FT+hMW7V5wV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NCNS9FRkQ0N0Q1NDIy NTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5LUdZRDdjVlA2RXhidFhu QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l1V3U3eXFSODktR1lEN2NWUDZFeGJ0WG5CVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NCNS9FRkQ0N0Q1NDIyNTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5 LUdZRDdjVlA2RXhidFhuQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH2V5TA1/bLDNz16SDvris8J1pxK3UDCQuNcrNezqZ5xRO4cNEhWlGZKF9TNt h35UJ0qV/jKpM/hJy4IjvkCPJ1dqNdN52tUiwZ6RQY9AD7R1jOAZHaeBnzCsjAor nIUjRk45Wji7Cm4XeqM5S+u0q+QZGpNNXB2jAPkDAC8KrtKqUj6BEppZyEfVvlw/ eVx52Zz4aIrH19eKxdL6K53mkM3huFa7jDKje6R+Ijmbh5x5d9iGTWHxUxD6Wj64 fVH3u4l90KycElcXq2nE6IziHCE2cqw9aDJ7gMPrCuHMFGF++3KMFjmpXfCNwFmJ TRqbfjb+/JT/NL21A14obtkiig== -----END CERTIFICATE-----Generated at Thu Mar 26 20:38:07 2026 by rpki-client