$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: L+Q+1Ax1KwJ5CLeobnoCwFaRoxO7Xy0vOl2NIjJ+hO0= Subject key identifier: D8:B4:A5:A9:6E:AA:BD:A7:6C:2F:9F:8F:80:DC:4C:02:8F:16:2A:09 Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 0227 Signing time: Tue 24 Mar 2026 22:33:56 +0000 Manifest this update: Tue 24 Mar 2026 22:33:56 +0000 Manifest next update: Tue 31 Mar 2026 22:33:56 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: 1QdVVPfmmtJ1M5vBmRnQAdls9MagHA9WgKUqYBotvk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Mar 24 22:33:56 2026 GMT Not After : Mar 31 22:33:56 2026 GMT Subject: CN=69c31154-095b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:52:93:42:f2:7d:f8:b1:b0:3b:8d:7f:86: 01:7c:eb:4c:e4:9d:55:99:7a:2e:47:6b:b1:5c:7e: 00:fe:2f:34:54:cd:e9:95:2b:db:61:79:96:f3:b0: 56:24:a3:a9:79:33:1a:c5:f1:5f:69:1c:7f:15:c3: 9f:4c:f5:56:2f:58:67:7f:03:5a:4d:ad:e4:3d:c3: 03:21:b3:d2:06:9e:0c:77:fb:53:24:ac:20:e0:33: 9e:e8:95:e8:ce:6e:b9:26:ca:80:25:e6:4f:cb:08: fc:43:34:84:d6:e1:bf:03:bf:17:41:a6:cd:07:a5: 59:20:ca:ba:a2:52:0e:e8:29:21:c7:ca:8b:18:7e: 74:4b:ec:fc:c0:4a:c2:da:52:68:22:69:22:30:31: 17:b6:a4:0c:00:1f:09:d7:82:bc:02:a4:92:9b:12: 76:0d:9b:ff:f8:34:4d:70:90:03:28:f2:4d:31:fc: b3:77:17:74:e7:75:d3:e0:c0:3a:61:c0:67:b5:8e: 3b:98:aa:97:62:75:27:dd:59:92:ed:6b:6e:00:2c: fa:6e:c9:c9:1a:e3:5b:59:a2:17:d6:98:7c:37:d8: 7d:3c:33:69:c1:d7:f2:9c:1d:93:00:bb:86:18:05: 58:47:b4:f8:b4:5d:5d:76:88:ac:32:c5:36:9a:db: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B4:A5:A9:6E:AA:BD:A7:6C:2F:9F:8F:80:DC:4C:02:8F:16:2A:09 X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9e:12:97:5e:f3:51:38:fd:c5:71:93:98:72:ce:00:1d:53: bc:ca:52:31:8f:ac:1d:f6:61:9c:42:8d:b5:57:44:fd:8c:ce: 29:e9:be:79:4d:c6:dc:49:e1:d1:a8:75:88:12:d3:e9:0b:4e: 73:8b:16:0c:c6:18:c4:c3:67:09:37:36:3f:22:b6:f9:db:35: 69:8c:1e:15:01:3c:9b:3b:6d:e4:f1:73:9c:a2:58:b2:ff:94: 3e:31:4d:d8:d0:bd:5d:f5:83:4d:54:a5:68:38:c6:16:aa:53: 55:c1:48:20:8a:57:79:fa:87:ef:5c:1d:d2:ac:3e:e4:5b:c0: af:46:e6:14:84:ec:2c:89:a8:d9:63:85:19:4c:8b:9b:c5:54: 81:c9:33:cb:f5:54:3e:25:91:c8:15:b6:be:6d:6f:72:09:5b: 6e:1d:9f:0b:fe:6c:d8:84:d3:6d:f9:48:1b:bb:c8:1f:16:64: ab:03:07:23:29:d0:a3:51:ac:6a:bd:93:c5:5f:a6:a6:17:59: 63:58:bb:f3:9b:68:93:4c:f7:10:92:99:bc:56:e5:25:88:05: c2:db:2d:62:1d:39:50:78:e1:14:7c:79:78:2e:f8:bd:35:cf: 38:60:f0:eb:01:f3:7c:02:d3:ff:97:f3:ff:f2:f5:9d:f6:ba: 90:ed:33:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjYwMzI0MjIzMzU2WhcNMjYwMzMxMjIzMzU2WjAYMRYwFAYD VQQDEw02OWMzMTE1NC0wOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V1Sk0LyffixsDuNf4YBfOtM5J1VmXouR2uxXH4A/i80VM3plSvbYXmW87BW JKOpeTMaxfFfaRx/FcOfTPVWL1hnfwNaTa3kPcMDIbPSBp4Md/tTJKwg4DOe6JXo zm65JsqAJeZPywj8QzSE1uG/A78XQabNB6VZIMq6olIO6Ckhx8qLGH50S+z8wErC 2lJoImkiMDEXtqQMAB8J14K8AqSSmxJ2DZv/+DRNcJADKPJNMfyzdxd053XT4MA6 YcBntY47mKqXYnUn3VmS7WtuACz6bsnJGuNbWaIX1ph8N9h9PDNpwdfynB2TALuG GAVYR7T4tF1ddoisMsU2mts71QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNi0palu qr2nbC+fj4DcTAKPFioJMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmZ4Sl17zUTj9xXGTmHLOAB1TvMpSMY+sHfZhnEKNtVdE/YzOKem+eU3G3Enh 0ah1iBLT6QtOc4sWDMYYxMNnCTc2PyK2+ds1aYweFQE8mztt5PFznKJYsv+UPjFN 2NC9XfWDTVSlaDjGFqpTVcFIIIpXefqH71wd0qw+5FvAr0bmFITsLImo2WOFGUyL m8VUgckzy/VUPiWRyBW2vm1vcglbbh2fC/5s2ITTbflIG7vIHxZkqwMHIynQo1Gs ar2TxV+mphdZY1i785tok0z3EJKZvFblJYgFwtstYh05UHjhFHx5eC74vTXPOGDw 6wHzfALT/5fz//L1nfa6kO0zpA== -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:10 2026 by rpki-client