$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json) Hash identifier: mJryQv7Wv4NApIEjFIn+pPwQ/MkvLUoS0UqmXVIq+OA= Subject key identifier: C6:B8:92:99:F1:F9:30:E3:7E:82:38:7C:6E:CE:4A:F5:FB:32:6B:33 Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft Manifest number: 33 Signing time: Wed 25 Mar 2026 07:51:59 +0000 Manifest this update: Wed 25 Mar 2026 07:51:59 +0000 Manifest next update: Wed 01 Apr 2026 07:51:59 +0000 Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: HewsZZzunqsOwhvgIrWXVN8ezYpV3MAG5hYPyAxyzgE=) 2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Validity Not Before: Mar 25 07:51:59 2026 GMT Not After : Apr 1 07:51:59 2026 GMT Subject: CN=69c3941f-98e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:95:75:29:99:f3:94:32:2c:34:51:2d:f3: 21:f2:de:c8:78:35:92:a9:d8:b3:18:fb:30:35:95: a2:88:89:c9:bf:8c:1e:99:53:5f:85:e0:bb:3b:e2: e7:db:83:ad:dc:4c:68:c3:2b:ed:9a:e3:fc:b1:0b: 29:7d:ca:e6:cb:7c:ed:d3:54:5d:ef:ef:03:03:42: e1:36:59:2e:85:dd:b1:e6:cd:32:6e:09:83:a5:05: 14:6c:14:f0:c4:c0:b6:92:08:35:92:f2:c2:98:ed: 63:1a:db:1d:6c:70:8e:ed:6d:c9:34:3d:3b:d2:59: d5:3e:d5:b0:34:9a:71:d7:88:77:2b:7f:5c:76:a7: 72:db:d1:c9:86:de:f6:52:1f:6d:46:75:07:98:3d: 73:eb:bb:4d:85:3d:29:11:90:10:06:76:58:1a:bb: 71:10:8a:15:ee:3e:9e:f0:f8:5c:35:09:67:77:9d: 76:2c:f9:e0:8d:d0:6f:27:37:73:7d:a3:5c:2f:6a: 1c:84:ed:b7:97:c8:b0:4b:98:68:c6:02:76:8f:89: 2a:43:9e:0f:f5:29:90:52:27:9a:70:34:c0:0a:00: 92:b8:dd:8c:23:7a:e6:39:e0:8f:4c:e4:65:49:a5: 9f:a1:c2:c7:c3:13:8c:d3:74:fb:cd:4b:3e:ab:d3: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B8:92:99:F1:F9:30:E3:7E:82:38:7C:6E:CE:4A:F5:FB:32:6B:33 X509v3 Authority Key Identifier: keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:e0:57:5d:1e:33:3e:cc:4e:52:42:ed:34:e4:a9:e3:ba:68: d1:14:06:be:57:64:bf:71:8a:06:06:cc:f1:e1:87:82:8f:a9: 78:66:f9:86:6b:3b:ec:7f:0b:a9:3e:1b:2e:c1:0f:98:16:b6: 98:9b:ba:a5:64:27:71:40:f6:ac:d5:8d:70:25:76:20:06:b1: 99:32:4c:51:7b:5e:f1:28:d0:37:a4:31:ca:2b:d1:86:8e:a8: 66:02:e9:6d:b4:0e:0f:3b:3e:cc:3b:d6:a8:3b:3f:95:84:a9: b1:de:23:15:a0:ef:22:12:3c:19:f0:36:17:4f:1e:9f:93:2e: a7:cd:05:68:2a:09:58:aa:fc:a3:30:90:4a:66:25:70:fc:ce: c5:7f:c0:7f:31:43:9e:20:17:1a:40:63:1a:c2:4a:9d:72:be: d6:b8:80:40:e1:3d:ae:36:23:db:c1:3d:cd:16:a9:1a:8f:28: 13:4a:22:41:c0:46:cd:e8:c0:4f:a8:cf:f3:8b:b2:70:49:c4: 8f:c1:9b:63:86:42:97:ea:ef:8e:0d:3b:5b:ea:20:5a:0b:03: 78:01:f4:d6:55:29:65:47:4e:c3:d3:9e:ba:d6:c4:83:98:3e: d7:13:df:c3:5a:ba:86:26:aa:61:8b:f2:18:e1:01:32:93:4b: cb:85:4a:eb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzJFQjExMC8GA1UEBRMoMjAwM0VFNDA1MjI5RDg4Qzk0OEI3NkRDMTk1RDQzMEJD MDIwQUYxRTAeFw0yNjAzMjUwNzUxNTlaFw0yNjA0MDEwNzUxNTlaMBgxFjAUBgNV BAMTDTY5YzM5NDFmLTk4ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6A5V1KZnzlDIsNFEt8yHy3sh4NZKp2LMY+zA1laKIicm/jB6ZU1+F4Ls74ufb g63cTGjDK+2a4/yxCyl9yubLfO3TVF3v7wMDQuE2WS6F3bHmzTJuCYOlBRRsFPDE wLaSCDWS8sKY7WMa2x1scI7tbck0PTvSWdU+1bA0mnHXiHcrf1x2p3Lb0cmG3vZS H21GdQeYPXPru02FPSkRkBAGdlgau3EQihXuPp7w+Fw1CWd3nXYs+eCN0G8nN3N9 o1wvahyE7beXyLBLmGjGAnaPiSpDng/1KZBSJ5pwNMAKAJK43YwjeuY54I9M5GVJ pZ+hwsfDE4zTdPvNSz6r0wyVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxriSmfH5 MON+gjh8bs5K9fsyazMwHwYDVR0jBBgwFoAUIAPuQFIp2IyUi3bcGV1DC8Agrx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMkVCLzg5OTcyNTEyRTUz NDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5VWkzYmNHVjFEQzhBZ3J4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSUFQdVFGSXAySXlVaTNiY0dWMURDOEFncng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MkVCLzg5OTcyNTEyRTUzNDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5 VWkzYmNHVjFEQzhBZ3J4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB44FddHjM+zE5SQu005KnjumjRFAa+V2S/cYoGBszx4YeCj6l4ZvmGazvsfwup PhsuwQ+YFraYm7qlZCdxQPas1Y1wJXYgBrGZMkxRe17xKNA3pDHKK9GGjqhmAult tA4POz7MO9aoOz+VhKmx3iMVoO8iEjwZ8DYXTx6fky6nzQVoKglYqvyjMJBKZiVw /M7Ff8B/MUOeIBcaQGMawkqdcr7WuIBA4T2uNiPbwT3NFqkajygTSiJBwEbN6MBP qM/zi7JwScSPwZtjhkKX6u+ODTtb6iBaCwN4AfTWVSllR07D05661sSDmD7XE9/D WrqGJqphi/IY4QEyk0vLhUrr -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:49 2026 by rpki-client