$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft File: I2o4zV7FL3Doi4BtcV63sELNfr8.mft (raw, json) Hash identifier: qzbfMaLLHkvj/5j+Znyx5uedRoOj2ps8V2vCNlOdeIM= Subject key identifier: 2F:40:23:F2:9A:7F:20:46:43:A8:F0:8F:E3:89:EA:C6:FC:2A:99:B7 Authority key identifier: 23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF Certificate issuer: /CN=A918120B/serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft Manifest number: 39 Signing time: Wed 25 Mar 2026 07:49:52 +0000 Manifest this update: Wed 25 Mar 2026 07:49:51 +0000 Manifest next update: Wed 01 Apr 2026 07:49:51 +0000 Files and hashes: 1: I2o4zV7FL3Doi4BtcV63sELNfr8.crl (hash: zzBkt4wikeqKhBOFiXWDvzf09qKOOKKrnTr8WnvoPf4=) 2: 4C5380C8E0B211F084C35B824B6F56BC.roa (hash: ReH7NwBS0TVPrmwTTmCzxQPZCsV/M0H3BbFbbRjxNaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF Validity Not Before: Mar 25 07:49:51 2026 GMT Not After : Apr 1 07:49:51 2026 GMT Subject: CN=69c3939f-8678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:e3:dc:f4:7b:44:6a:1e:ac:41:e0:9f:72: 79:8e:9a:55:81:56:46:15:b2:38:88:c8:cf:bd:90: 9c:44:85:61:30:2f:b0:57:5e:40:ef:32:92:f3:ca: e4:ce:f0:72:73:7a:8c:0c:4d:b8:60:ac:28:ce:61: 9f:0f:bc:ce:cf:85:c3:89:79:17:b7:d0:5e:a8:cc: 1a:17:14:c8:e5:20:32:c0:49:4d:2c:31:8d:92:08: 32:c8:c6:dd:7b:27:5e:81:0e:11:13:32:c2:19:cb: fb:8e:04:9f:b9:04:b6:75:77:8a:35:76:1c:2a:fc: e0:0a:ce:71:5c:d5:61:a3:25:9b:8d:6c:39:31:db: 76:f2:7d:65:e2:d9:cb:ee:17:f1:8b:a0:85:c0:8a: 99:57:d4:28:f8:ee:9d:31:5d:87:e9:e5:22:16:65: 0e:b5:1c:d6:cd:8e:36:b7:95:cb:e3:ad:80:99:e7: 8e:e1:57:73:35:93:37:ac:36:f3:a2:94:29:62:07: 6f:3d:08:27:90:31:9b:cf:b1:bf:ce:ff:d4:1a:16: 16:38:7c:e3:00:a6:08:b9:14:f8:9f:45:9b:fd:c5: 21:2f:22:23:eb:84:a1:69:88:c1:c7:d2:0e:b9:bb: 1f:6b:77:46:80:51:39:3a:c2:50:d9:8a:54:5b:0c: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:40:23:F2:9A:7F:20:46:43:A8:F0:8F:E3:89:EA:C6:FC:2A:99:B7 X509v3 Authority Key Identifier: keyid:23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cc:1d:c8:8a:28:a0:5a:c4:a5:20:99:a4:82:34:13:2b:33: fc:78:cb:a4:fb:59:35:1a:cb:e9:af:56:ba:f2:9c:25:13:a9: 2b:aa:87:9a:e5:3e:85:f2:73:7b:7a:87:c4:23:d7:37:69:c6: 81:99:a8:87:c5:d4:85:7b:9c:c7:31:96:79:97:97:11:24:73: 5d:07:a1:bd:e1:db:c6:59:71:91:72:24:71:c5:65:e3:4e:58: 0a:6d:6d:03:36:a9:5a:65:08:7d:95:55:09:8f:f5:ae:07:ed: 7e:4e:50:f3:a2:2c:b6:93:5a:19:c7:ce:53:bf:63:2f:3f:7e: 81:57:a8:a5:15:5b:f0:93:be:8f:e7:8b:d8:e3:36:ce:fd:de: 5e:c4:29:7c:4f:ff:b5:01:02:9a:f5:de:2c:b2:25:03:c7:4f: 76:67:3f:fa:b2:15:9d:b8:a6:0a:71:73:9f:e8:db:c2:5c:9d: 57:5e:ea:05:34:05:d9:0a:15:9c:00:da:92:2d:08:83:dd:33: 20:ab:3e:9e:29:f1:27:12:87:52:0e:a2:0a:b6:71:51:cc:6d: ee:3e:96:a2:77:53:e1:5b:83:dd:69:86:ef:64:55:a3:59:f4: f7:b7:4d:94:31:27:40:e8:84:52:70:da:2b:71:bc:f0:11:47: e1:bb:53:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTIwQjExMC8GA1UEBRMoMjM2QTM4Q0Q1RUM1MkY3MEU4OEI4MDZENzE1RUI3QjA0 MkNEN0VCRjAeFw0yNjAzMjUwNzQ5NTFaFw0yNjA0MDEwNzQ5NTFaMBgxFjAUBgNV BAMTDTY5YzM5MzlmLTg2NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFAOPc9HtEah6sQeCfcnmOmlWBVkYVsjiIyM+9kJxEhWEwL7BXXkDvMpLzyuTO 8HJzeowMTbhgrCjOYZ8PvM7PhcOJeRe30F6ozBoXFMjlIDLASU0sMY2SCDLIxt17 J16BDhETMsIZy/uOBJ+5BLZ1d4o1dhwq/OAKznFc1WGjJZuNbDkx23byfWXi2cvu F/GLoIXAiplX1Cj47p0xXYfp5SIWZQ61HNbNjja3lcvjrYCZ547hV3M1kzesNvOi lCliB289CCeQMZvPsb/O/9QaFhY4fOMApgi5FPifRZv9xSEvIiPrhKFpiMHH0g65 ux9rd0aAUTk6wlDZilRbDMctAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL0Aj8pp/ IEZDqPCP44nqxvwqmbcwHwYDVR0jBBgwFoAUI2o4zV7FL3Doi4BtcV63sELNfr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjBCL0M0MkUzNDNFRTBB RTExRjA5NkQ3RTI4ODQ5NkY1NkJDL0kybzR6VjdGTDNEb2k0QnRjVjYzc0VMTmZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSTJvNHpWN0ZMM0RvaTRCdGNWNjNzRUxOZnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MjBCL0M0MkUzNDNFRTBBRTExRjA5NkQ3RTI4ODQ5NkY1NkJDL0kybzR6VjdGTDNE b2k0QnRjVjYzc0VMTmZyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALzB3IiiigWsSlIJmkgjQTKzP8eMuk+1k1Gsvpr1a68pwlE6krqoea5T6F8nN7 eofEI9c3acaBmaiHxdSFe5zHMZZ5l5cRJHNdB6G94dvGWXGRciRxxWXjTlgKbW0D NqlaZQh9lVUJj/WuB+1+TlDzoiy2k1oZx85Tv2MvP36BV6ilFVvwk76P54vY4zbO /d5exCl8T/+1AQKa9d4ssiUDx092Zz/6shWduKYKcXOf6NvCXJ1XXuoFNAXZChWc ANqSLQiD3TMgqz6eKfEnEodSDqIKtnFRzG3uPpaid1PhW4PdaYbvZFWjWfT3t02U MSdA6IRScNorcbzwEUfhu1Pi -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:57 2026 by rpki-client