$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: 3GFIRjqtfT3M+Qif0H+22n/Drl3JzvnxudNqi/u1pZE= Subject key identifier: C9:B0:F5:78:4B:E6:5E:C2:79:E7:F7:72:CF:7E:2E:EA:BF:70:97:C3 Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 140F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 136B Signing time: Tue 24 Mar 2026 16:55:10 +0000 Manifest this update: Tue 24 Mar 2026 16:55:09 +0000 Manifest next update: Tue 31 Mar 2026 16:55:09 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: nldRzWCX6qo3vAHYIvnv5EHLKeW1CLiYI8J+XhQ5trI=) 2: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: 6SdEYqt35GAORPTUCY0ttBX2ur7jio+kU7tW6jFSa6o=) 3: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: F0cc31VKiHf4FHRnIogdqDRTUiKEa4Y47dIXKp1tdro=) 4: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: qTkmhI+Qyyl/OS0YSMe4PFP0Uo0ZgDYk7swVKX4DMFE=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: iNdf+focvFS30DDvcGSc17gI971FlnrqjqDKYgP/10w=) 6: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: +cRXbprZ4LZVVW+/qYF3DGNgfX7szW34Uy7ON79Y0sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5135 (0x140f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Mar 24 16:55:09 2026 GMT Not After : Mar 31 16:55:09 2026 GMT Subject: CN=69c2c1ee-6dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:19:1b:3d:d1:34:92:b2:ed:5f:2c:88:0a: d5:e2:7c:4a:df:ca:e2:91:fe:9b:d0:84:f5:9d:bc: ec:7c:aa:bd:65:d7:ba:3c:4a:8b:e8:39:88:33:a4: b5:a5:c7:3e:b8:3e:93:67:a0:ba:af:d2:fa:33:28: 3e:41:db:7c:33:4f:0e:e5:6c:f5:63:e8:3b:61:e2: a7:d2:48:2c:6b:d7:2e:b4:20:0b:83:22:1b:2d:60: 87:3d:2e:aa:72:5f:a3:f2:a6:27:eb:52:08:28:3e: 7a:92:6d:43:f5:ec:2d:58:33:4c:af:78:35:fc:15: b9:19:54:27:0f:75:8e:7d:8c:2f:75:ae:f5:c2:6d: 1b:c3:da:c4:8a:7b:74:18:76:1b:c0:d0:6c:67:02: 83:43:aa:84:4a:59:d7:8b:6b:db:97:99:c7:95:9c: e4:51:65:61:76:84:85:b2:f9:c7:39:82:66:5f:68: ae:81:0b:cc:9a:1a:02:c7:48:65:83:f9:6b:9a:a0: e5:9c:33:94:64:7c:6a:ce:f4:87:42:82:d8:6c:08: 51:0c:c2:9f:ec:77:42:b7:1f:3b:2e:e7:1c:b7:ef: 61:94:e5:92:fb:f8:47:33:c2:91:d7:33:1b:1b:1c: e4:b8:11:ad:9f:97:f9:30:4e:0c:79:67:69:67:ed: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B0:F5:78:4B:E6:5E:C2:79:E7:F7:72:CF:7E:2E:EA:BF:70:97:C3 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0e:b7:20:5c:24:b7:be:b5:2c:d5:bf:7f:63:db:45:dc:c5: 0e:53:82:7c:e9:cb:d6:e3:53:5c:36:9f:91:80:eb:b8:b9:e5: 00:ec:4b:78:ef:98:14:1f:c7:9b:c4:62:d0:7d:7c:ba:05:8f: 43:e6:8d:c6:db:b4:23:04:e6:e7:33:12:ac:87:af:84:bf:73: 66:83:e4:ff:55:ea:56:9c:35:33:69:b1:96:39:15:71:e4:f1: fe:aa:dc:86:d5:89:19:1e:7e:85:69:0d:e7:23:ec:dd:f4:3c: 77:08:9a:0c:98:3a:80:1d:fe:ed:ca:60:89:4e:de:6f:ee:ee: e4:be:79:db:cc:ad:69:9e:fc:a9:59:04:db:24:3b:be:fb:65: 06:c7:f2:3c:62:51:7c:b9:8c:4f:ff:2e:bd:64:ee:ad:86:e1: 50:72:dc:f7:20:b9:30:56:7c:0f:76:d2:45:eb:af:ff:1b:72: 8e:aa:4d:ef:85:cc:19:e6:e4:fa:b8:70:e5:6e:48:d8:2e:77: a4:e9:25:9a:45:c5:cd:2a:a2:7f:c1:df:74:8a:51:e8:05:42: 28:82:6f:63:08:4c:26:8e:2c:93:c7:25:bb:90:b7:ea:cd:f5: dc:aa:fb:92:60:f3:ee:ca:2f:74:cc:81:a8:04:c3:9b:00:62: fc:b6:6f:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjYwMzI0MTY1NTA5WhcNMjYwMzMxMTY1NTA5WjAYMRYwFAYD VQQDEw02OWMyYzFlZS02ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+cZGz3RNJKy7V8siArV4nxK38rikf6b0IT1nbzsfKq9Zde6PEqL6DmIM6S1 pcc+uD6TZ6C6r9L6Myg+Qdt8M08O5Wz1Y+g7YeKn0kgsa9cutCALgyIbLWCHPS6q cl+j8qYn61IIKD56km1D9ewtWDNMr3g1/BW5GVQnD3WOfYwvda71wm0bw9rEint0 GHYbwNBsZwKDQ6qESlnXi2vbl5nHlZzkUWVhdoSFsvnHOYJmX2iugQvMmhoCx0hl g/lrmqDlnDOUZHxqzvSHQoLYbAhRDMKf7HdCtx87Lucct+9hlOWS+/hHM8KR1zMb GxzkuBGtn5f5ME4MeWdpZ+10LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMmw9XhL 5l7Ceef3cs9+Luq/cJfDMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPQ63IFwkt761LNW/f2PbRdzFDlOCfOnL1uNTXDafkYDruLnlAOxLeO+YFB/H m8Ri0H18ugWPQ+aNxtu0IwTm5zMSrIevhL9zZoPk/1XqVpw1M2mxljkVceTx/qrc htWJGR5+hWkN5yPs3fQ8dwiaDJg6gB3+7cpgiU7eb+7u5L5528ytaZ78qVkE2yQ7 vvtlBsfyPGJRfLmMT/8uvWTurYbhUHLc9yC5MFZ8D3bSReuv/xtyjqpN74XMGebk +rhw5W5I2C53pOklmkXFzSqif8HfdIpR6AVCKIJvYwhMJo4sk8clu5C36s313Kr7 kmDz7sovdMyBqATDmwBi/LZv9w== -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:49 2026 by rpki-client