$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: nuXLSyQXpDyyOQHlZPNuwp3ktYHw28BVBjH6S2M2nvc= Subject key identifier: F8:F6:E6:99:8E:5F:37:0E:EF:BB:10:0B:3A:BF:C1:8B:F1:00:A8:93 Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 09EB Signing time: Tue 24 Mar 2026 20:28:48 +0000 Manifest this update: Tue 24 Mar 2026 20:28:47 +0000 Manifest next update: Tue 31 Mar 2026 20:28:47 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: UK3eXo7125TsQrrVJgf+LjXIPT0KrGGyCwK7B6TI4pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: Mar 24 20:28:47 2026 GMT Not After : Mar 31 20:28:47 2026 GMT Subject: CN=69c2f3ff-588c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:c1:84:3d:eb:57:c3:33:28:ba:65:ef:7b: 04:c8:da:5c:b4:6c:c1:fc:31:dc:7a:81:da:46:74: 83:41:ee:84:00:d5:87:48:ed:8d:5c:46:40:a5:79: 76:0f:93:5c:58:30:20:11:96:fc:ab:05:3a:5c:21: 47:a5:ce:4b:1c:05:30:e6:78:9b:d0:98:d1:67:78: ea:e9:75:e4:92:3a:91:b3:59:bd:d0:e9:6c:31:95: 79:82:5a:a7:ec:7f:32:b7:76:68:09:b0:d0:ae:dd: ca:b5:8f:48:ed:99:04:96:06:58:6c:87:29:ab:b3: 57:f7:ea:1b:c9:cb:d4:38:b5:85:f8:05:32:c0:8d: ec:2a:ca:c5:f2:39:64:38:59:1a:bf:17:d0:00:66: de:33:bc:ff:ba:4c:a5:2a:7c:b7:3f:34:a3:8a:05: 49:71:0a:07:e3:a0:8c:af:dc:56:26:10:d1:d3:75: 86:17:0b:fe:b0:55:6f:f4:d7:fc:ce:c5:98:60:20: 2e:74:c3:1b:1a:c3:a0:0f:76:22:8b:1a:71:ac:29: 65:07:92:c3:39:a5:64:de:7e:75:5e:73:59:ee:1f: b2:ca:1e:f7:ee:23:67:80:68:ab:6a:ac:22:5e:d0: 04:b8:83:f6:aa:ca:cd:c0:e9:1f:69:26:00:6b:35: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F6:E6:99:8E:5F:37:0E:EF:BB:10:0B:3A:BF:C1:8B:F1:00:A8:93 X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:51:c9:0c:4f:4e:27:ff:d5:b8:b7:65:5f:94:52:d9:51:3a: 9b:24:8b:f5:71:05:c1:5a:82:b3:f9:ff:7d:b4:48:8a:8c:44: 9f:80:30:dc:70:72:d1:dc:0d:a3:42:d2:f0:4e:91:d0:74:2e: d5:08:05:ae:ca:cc:0c:ce:17:67:25:4a:12:e7:17:58:f4:d5: 8f:35:22:4c:af:90:61:f2:12:71:07:5f:e5:cc:ce:4d:bf:51: 57:53:98:1f:56:a5:1a:0e:58:d3:e6:5e:c2:b0:cb:1b:fe:e6: 32:2b:e0:00:ff:be:c3:fb:bb:99:91:75:d0:ee:81:48:bd:b2: 52:31:1d:94:b9:c0:ae:d0:92:e5:0e:20:35:26:30:c3:ea:06: 40:75:8b:e6:7b:f5:12:56:3a:b0:58:aa:d6:8f:64:62:2c:69: 7d:43:49:f8:24:2c:fb:18:23:84:62:de:9e:f1:51:61:64:ed: 5b:7c:03:5f:fb:87:00:fe:94:dd:a3:76:5a:66:7b:de:5f:be: b9:6b:54:7c:f8:56:3d:85:21:f7:5c:4c:b8:4b:e8:61:16:a5: 1c:b1:10:33:4f:21:fc:57:98:b0:f3:04:04:3b:7b:b8:c7:9d: e0:c1:08:1a:59:a8:80:1d:8e:50:a7:0c:17:7d:26:01:9b:53: 14:9c:52:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjYwMzI0MjAyODQ3WhcNMjYwMzMxMjAyODQ3WjAYMRYwFAYD VQQDEw02OWMyZjNmZi01ODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NfBhD3rV8MzKLpl73sEyNpctGzB/DHceoHaRnSDQe6EANWHSO2NXEZApXl2 D5NcWDAgEZb8qwU6XCFHpc5LHAUw5nib0JjRZ3jq6XXkkjqRs1m90OlsMZV5glqn 7H8yt3ZoCbDQrt3KtY9I7ZkElgZYbIcpq7NX9+obycvUOLWF+AUywI3sKsrF8jlk OFkavxfQAGbeM7z/ukylKny3PzSjigVJcQoH46CMr9xWJhDR03WGFwv+sFVv9Nf8 zsWYYCAudMMbGsOgD3YiixpxrCllB5LDOaVk3n51XnNZ7h+yyh737iNngGiraqwi XtAEuIP2qsrNwOkfaSYAazXW3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPj25pmO XzcO77sQCzq/wYvxAKiTMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOlHJDE9OJ//VuLdlX5RS2VE6mySL9XEFwVqCs/n/fbRIioxEn4Aw3HBy0dwN o0LS8E6R0HQu1QgFrsrMDM4XZyVKEucXWPTVjzUiTK+QYfIScQdf5czOTb9RV1OY H1alGg5Y0+ZewrDLG/7mMivgAP++w/u7mZF10O6BSL2yUjEdlLnArtCS5Q4gNSYw w+oGQHWL5nv1ElY6sFiq1o9kYixpfUNJ+CQs+xgjhGLenvFRYWTtW3wDX/uHAP6U 3aN2WmZ73l++uWtUfPhWPYUh91xMuEvoYRalHLEQM08h/FeYsPMEBDt7uMed4MEI GlmogB2OUKcMF30mAZtTFJxS/g== -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:10 2026 by rpki-client