$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: wvpZuMA7+aOf7hYOAipRDgo9F0h8bBG0VQWaaIVjPIk= Subject key identifier: 7C:D0:D6:31:CD:DD:89:30:A0:66:9D:C4:8E:D5:92:8F:85:C7:9F:ED Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0CCB Signing time: Tue 24 Mar 2026 18:12:09 +0000 Manifest this update: Tue 24 Mar 2026 18:12:08 +0000 Manifest next update: Tue 31 Mar 2026 18:12:08 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: WIrYYShsTBx1WyD5B0ctSeGaSSTg5AJugW4yida1RGI=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: zDxsuRndlq0lJuspimIYJwOxaHSsP7u9+ZEkGQ4K8fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Mar 24 18:12:08 2026 GMT Not After : Mar 31 18:12:08 2026 GMT Subject: CN=69c2d3f9-9636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:7d:a1:0a:23:5c:0e:ec:97:d2:67:01:69: 32:9d:25:9a:5e:59:d5:66:ec:40:39:b2:47:06:c2: e1:85:1b:72:e7:be:14:a3:85:3f:a4:01:0d:f7:12: 64:c7:f1:44:97:56:f4:4f:88:c2:80:48:8a:e9:83: b7:3a:ef:10:f1:d3:b1:8d:d8:38:ce:aa:24:a3:69: 86:57:56:0c:4f:2f:69:55:51:bf:75:b8:a7:9c:72: a8:a9:ff:8b:c9:87:73:68:6a:43:6f:78:9c:4a:5d: e5:ed:84:9e:bc:11:ca:94:3f:7b:7a:8f:fd:9e:88: 92:e0:3d:70:37:7f:9f:28:90:3f:6f:20:e7:a1:0f: e8:39:f0:8c:b4:f9:76:87:9f:93:79:e6:45:d0:ef: 61:4d:11:b6:69:9f:1d:b3:db:9b:5c:c1:6e:45:e2: 64:d5:58:73:9f:e9:5f:6e:d3:ce:21:a6:0d:a1:0b: 2b:f5:14:3b:7a:77:85:91:f2:74:2e:87:d1:59:04: 3f:ea:6c:5d:21:ea:f7:30:80:fc:59:8f:39:99:57: 65:0a:8d:b6:9a:bf:de:7e:6d:e4:74:da:92:d4:a8: 4e:9f:47:d6:87:57:a8:9c:27:c6:6f:5e:d4:9b:c2: 23:e8:93:00:e9:74:c5:ad:c0:bf:53:9a:ff:8b:f2: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D0:D6:31:CD:DD:89:30:A0:66:9D:C4:8E:D5:92:8F:85:C7:9F:ED X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:70:78:a0:48:de:43:a4:ae:62:06:a9:77:ef:73:3d:3a:88: ed:a2:23:95:48:1c:9a:b3:da:88:fc:0d:35:5c:0b:ce:71:9e: 0f:20:9a:dc:bc:09:3d:72:3c:6c:f3:a1:ad:f9:d6:5f:99:12: 10:99:15:a0:6a:ba:40:6d:c6:2a:b2:5f:d8:3a:7d:72:0e:5e: 0d:83:2f:00:3b:d8:f5:92:28:99:91:d9:91:3a:3f:e3:06:b3: dd:22:db:4a:32:72:b6:64:ae:87:51:0a:2f:86:2d:f4:2c:65: c1:ff:0d:5e:69:97:e6:5c:bd:64:ec:52:c2:86:c0:6a:f9:6d: 90:ad:e0:6f:ad:6a:67:91:1f:44:67:34:13:5f:8d:82:96:d5: 58:0b:00:9e:83:38:f7:91:a6:11:a4:90:bf:2e:4e:70:a8:fb: c2:48:d2:8a:47:a6:2c:3d:bc:3b:1f:c8:5d:82:cf:31:a6:e3: ef:92:d8:95:af:e0:61:ba:02:ef:9d:7c:cf:9f:12:d4:d6:52: bd:e8:06:c3:b5:ce:a2:c5:a8:c2:66:98:56:bc:d7:ea:c8:03: 01:23:57:13:0e:b7:8b:e8:7a:0b:a7:7e:9d:ec:0a:0d:06:ba: e0:36:57:43:41:c4:36:16:76:a6:55:53:31:7e:5e:3e:57:48: fa:a4:7a:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYwMzI0MTgxMjA4WhcNMjYwMzMxMTgxMjA4WjAYMRYwFAYD VQQDEw02OWMyZDNmOS05NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19J9oQojXA7sl9JnAWkynSWaXlnVZuxAObJHBsLhhRty574Uo4U/pAEN9xJk x/FEl1b0T4jCgEiK6YO3Ou8Q8dOxjdg4zqoko2mGV1YMTy9pVVG/dbinnHKoqf+L yYdzaGpDb3icSl3l7YSevBHKlD97eo/9noiS4D1wN3+fKJA/byDnoQ/oOfCMtPl2 h5+TeeZF0O9hTRG2aZ8ds9ubXMFuReJk1Vhzn+lfbtPOIaYNoQsr9RQ7eneFkfJ0 LofRWQQ/6mxdIer3MID8WY85mVdlCo22mr/efm3kdNqS1KhOn0fWh1eonCfGb17U m8Ij6JMA6XTFrcC/U5r/i/ItxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzQ1jHN 3YkwoGadxI7Vko+Fx5/tMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjnB4oEjeQ6SuYgapd+9zPTqI7aIjlUgcmrPaiPwNNVwLznGeDyCa3LwJPXI8 bPOhrfnWX5kSEJkVoGq6QG3GKrJf2Dp9cg5eDYMvADvY9ZIomZHZkTo/4waz3SLb SjJytmSuh1EKL4Yt9Cxlwf8NXmmX5ly9ZOxSwobAavltkK3gb61qZ5EfRGc0E1+N gpbVWAsAnoM495GmEaSQvy5OcKj7wkjSikemLD28Ox/IXYLPMabj75LYla/gYboC 7518z58S1NZSvegGw7XOosWowmaYVrzX6sgDASNXEw63i+h6C6d+newKDQa64DZX Q0HENhZ2plVTMX5ePldI+qR6uA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:07:08 2026 by rpki-client