$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: r2SIsm/b9iuWjcGSJOnjwe3ACnb1WLbDGnDHyinpnf4= Subject key identifier: 9F:6B:C9:AA:F2:82:C3:05:E1:4F:E2:DF:A7:7F:32:33:93:40:6E:69 Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 3527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 3522 Signing time: Thu 26 Mar 2026 15:17:36 +0000 Manifest this update: Thu 26 Mar 2026 15:17:35 +0000 Manifest next update: Thu 02 Apr 2026 15:17:35 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: g9nsak1XUTNzyOgFLWMZC8ibV22CF+xh/gtX8WC+lf8=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: QlL4aNp/wbKMeB52DudZPqTsA1njqKMHmVEPCti0l3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13607 (0x3527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: Mar 26 15:17:35 2026 GMT Not After : Apr 2 15:17:35 2026 GMT Subject: CN=69c54e10-b0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:ea:a3:ce:8f:c1:cd:33:95:bc:67:a2:fc: c3:a6:7a:4c:7f:e1:66:1d:47:22:1a:74:45:ae:70: 0e:76:0a:cc:2e:d8:33:58:57:d9:0c:e8:8e:a5:9c: a0:61:d5:6e:47:22:0f:ef:5a:cf:7c:22:ec:fe:12: ae:37:7c:f1:ba:be:75:5f:25:f6:4d:c9:b9:8a:e9: 69:68:d7:a9:10:ab:df:59:8d:e6:b5:a6:72:d0:bd: 59:e4:c6:4c:01:8a:b1:5a:35:d6:53:e7:dc:15:74: a1:0d:17:11:97:6c:d3:55:b2:01:83:a2:6d:59:bf: 98:75:5f:1d:85:0a:b2:a2:2f:1d:df:58:b0:66:f0: 0e:1b:aa:c7:c2:61:ed:38:0b:da:c9:f4:dd:8b:e0: 97:f7:10:7f:38:92:aa:2c:27:e5:36:35:d7:ec:bf: 38:7a:bf:a9:0f:46:04:f8:59:06:e3:0a:66:dd:23: d4:cd:07:0c:14:f3:c7:6d:db:99:a7:51:ee:ce:e9: d2:de:db:9f:c6:ac:8e:8a:6e:a4:dd:61:fb:89:ed: c2:da:fe:c4:02:90:9f:83:2f:83:ec:fa:6e:01:ab: 28:ca:38:22:74:f5:7e:da:58:82:12:b8:0c:bd:24: dd:d6:7e:4e:d5:55:8f:df:f4:1c:1a:dd:48:8f:c7: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6B:C9:AA:F2:82:C3:05:E1:4F:E2:DF:A7:7F:32:33:93:40:6E:69 X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:22:69:a0:13:34:3a:7b:2d:18:00:ab:71:ad:40:81:2e:72: 33:e8:7b:84:eb:81:f7:a6:22:27:80:24:ef:f2:89:7a:8f:f6: e0:4e:ef:b4:0c:d7:4c:43:d1:b4:34:1d:47:96:cd:75:68:12: b5:a0:57:7c:d5:6c:4e:32:24:8a:80:c2:ad:3a:8f:7a:61:bd: 44:5f:fa:3d:d7:ec:33:8f:f9:36:f5:83:01:60:dc:99:a7:00: cd:87:8c:85:09:fc:4c:37:69:d5:28:2d:58:41:85:67:f5:3c: 34:b2:69:c3:eb:ec:0b:79:58:63:ab:b7:41:ed:b7:2a:8c:79: b7:d9:42:fc:ea:90:b1:2b:29:7a:9c:78:ec:e5:74:9b:f5:4e: 4d:94:1c:68:98:b8:6c:e1:2f:1e:14:5c:36:05:92:35:8b:2b: 03:49:9d:d2:38:64:80:73:e1:eb:e6:b0:ff:11:50:6c:71:6e: 7b:a2:4b:fb:9f:86:a2:9e:c4:24:42:3c:f5:52:f6:77:36:d3: 80:8e:37:f2:05:87:67:ed:87:cd:5a:cd:fe:78:63:91:ef:23: 9e:32:91:00:2b:fd:b9:7c:33:a8:a2:e2:cd:9f:2b:85:84:a6: cf:b3:0e:ef:af:36:45:05:00:6f:85:97:ab:22:a2:c3:8d:81: a6:17:af:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjYwMzI2MTUxNzM1WhcNMjYwNDAyMTUxNzM1WjAYMRYwFAYD VQQDEw02OWM1NGUxMC1iMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocnqo86Pwc0zlbxnovzDpnpMf+FmHUciGnRFrnAOdgrMLtgzWFfZDOiOpZyg YdVuRyIP71rPfCLs/hKuN3zxur51XyX2Tcm5iulpaNepEKvfWY3mtaZy0L1Z5MZM AYqxWjXWU+fcFXShDRcRl2zTVbIBg6JtWb+YdV8dhQqyoi8d31iwZvAOG6rHwmHt OAvayfTdi+CX9xB/OJKqLCflNjXX7L84er+pD0YE+FkG4wpm3SPUzQcMFPPHbduZ p1HuzunS3tufxqyOim6k3WH7ie3C2v7EApCfgy+D7PpuAasoyjgidPV+2liCErgM vSTd1n5O1VWP3/QcGt1Ij8fGVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9ryary gsMF4U/i36d/MjOTQG5pMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATiJpoBM0OnstGACrca1AgS5yM+h7hOuB96YiJ4Ak7/KJeo/24E7vtAzXTEPR tDQdR5bNdWgStaBXfNVsTjIkioDCrTqPemG9RF/6PdfsM4/5NvWDAWDcmacAzYeM hQn8TDdp1SgtWEGFZ/U8NLJpw+vsC3lYY6u3Qe23Kox5t9lC/OqQsSspepx47OV0 m/VOTZQcaJi4bOEvHhRcNgWSNYsrA0md0jhkgHPh6+aw/xFQbHFue6JL+5+Gop7E JEI89VL2dzbTgI438gWHZ+2HzVrN/nhjke8jnjKRACv9uXwzqKLizZ8rhYSmz7MO 7682RQUAb4WXqyKiw42BphevRw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:34 2026 by rpki-client