$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: 9WPu8rA7oOXIK9XMUqzzJwqeKoj/SaQCyDNd9b8lQtk= Subject key identifier: 1B:33:2E:99:0E:32:E5:3E:22:4E:68:6D:AE:24:F1:FE:58:D0:F1:BD Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0B65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0B4F Signing time: Tue 24 Mar 2026 19:02:10 +0000 Manifest this update: Tue 24 Mar 2026 19:02:10 +0000 Manifest next update: Tue 31 Mar 2026 19:02:10 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: l/iHHf6vaCPx8K/zhAs0zJAyEaCVxAfMErJUjv25KQY=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: JuE06CSNAAV8+NliC0AVlzjHWrODAM4vJnnB5WZLKk8=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: hK13KfCAsMi+xHUuka2Pkznncer1XgUOHCwFnVLDtqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Mar 24 19:02:10 2026 GMT Not After : Mar 31 19:02:10 2026 GMT Subject: CN=69c2dfb2-04df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:52:f7:58:89:b9:65:b6:4f:a0:d9:9a:34: 46:ae:79:7c:59:c3:44:43:eb:d5:0e:9c:38:c8:dd: 3e:54:2e:9b:d4:47:b8:4d:be:28:16:52:45:ec:c8: 5e:29:d6:87:0f:76:9e:60:7b:3e:db:52:6a:93:af: 57:62:fb:2f:f4:cb:c7:c2:ce:87:43:2e:fd:83:65: 01:34:5c:82:0e:0f:12:a4:cd:7c:b7:b4:60:41:4a: 37:07:ae:73:73:6b:f1:d1:be:64:96:49:2a:85:38: 1b:0e:ee:a8:87:4f:b9:ea:4a:dd:b7:65:2f:89:50: 9c:9f:8e:fc:1e:b8:d2:9a:8c:1e:03:d8:c2:62:3f: 32:d8:c2:d3:04:29:d5:c1:4c:df:e6:04:e2:a4:51: 1f:6f:ad:0e:4e:dc:88:3f:68:09:fa:e7:03:47:1e: 9d:cb:24:14:78:ce:41:40:1f:6f:5b:4a:aa:0d:b0: 4c:bb:3a:df:d9:1a:c6:6f:c5:e4:60:39:78:56:f9: 59:da:92:68:d2:31:ae:15:54:60:b3:82:2d:39:5f: 91:c0:ac:88:b3:5f:82:2b:c3:a6:8b:95:80:dc:e1: 05:85:d6:63:bb:a0:fb:53:ce:a6:dc:e8:b2:bb:7a: f7:1a:80:3a:5e:e7:f7:d5:2a:f1:a4:de:49:c5:1a: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:33:2E:99:0E:32:E5:3E:22:4E:68:6D:AE:24:F1:FE:58:D0:F1:BD X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cc:10:b8:39:b9:b6:f5:76:9c:74:61:91:39:ca:9c:32:bf: 0a:74:8c:c0:ec:5e:55:51:60:a5:7c:73:11:b1:68:02:8f:5a: be:bb:e9:3d:dc:78:cd:16:d2:1d:dc:69:86:ce:b1:21:d6:bd: 83:b6:67:04:87:e5:aa:78:1e:9d:3c:55:f1:a4:ac:b5:0e:5f: 05:b8:f3:12:26:d7:0c:47:79:e1:c2:31:87:71:fc:fe:7d:ee: 49:6f:65:3f:58:37:5a:47:7e:ee:76:43:a3:b3:36:de:f5:27: b1:c4:16:77:70:fd:a1:b5:1b:dc:3a:7b:4e:bf:a2:6e:27:75: ac:df:73:4d:44:d2:41:2e:10:f1:02:95:fe:6c:17:45:67:42: 23:e9:d5:20:44:cf:ff:15:44:da:42:f6:a0:b9:0a:5f:61:b9: d1:c9:6a:2b:e5:f2:de:61:5c:58:42:d0:7a:38:98:1b:55:3f: 52:6b:16:a6:35:d8:67:63:dd:a5:8b:90:67:f3:c9:04:a2:94: 84:2f:1d:4f:99:19:1a:9b:85:21:11:46:69:67:34:6c:d1:70: 11:51:37:84:98:da:79:a3:a7:99:6a:2a:78:1a:8e:57:6d:04: 3b:bd:90:33:86:1c:38:dd:9d:b7:35:f1:5f:1c:dc:78:c1:94: fa:56:bd:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjYwMzI0MTkwMjEwWhcNMjYwMzMxMTkwMjEwWjAYMRYwFAYD VQQDEw02OWMyZGZiMi0wNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8RS91iJuWW2T6DZmjRGrnl8WcNEQ+vVDpw4yN0+VC6b1Ee4Tb4oFlJF7Mhe KdaHD3aeYHs+21Jqk69XYvsv9MvHws6HQy79g2UBNFyCDg8SpM18t7RgQUo3B65z c2vx0b5klkkqhTgbDu6oh0+56krdt2UviVCcn478HrjSmoweA9jCYj8y2MLTBCnV wUzf5gTipFEfb60OTtyIP2gJ+ucDRx6dyyQUeM5BQB9vW0qqDbBMuzrf2RrGb8Xk YDl4VvlZ2pJo0jGuFVRgs4ItOV+RwKyIs1+CK8Omi5WA3OEFhdZju6D7U86m3Oiy u3r3GoA6Xuf31SrxpN5JxRr7DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBszLpkO MuU+Ik5oba4k8f5Y0PG9MB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgcwQuDm5tvV2nHRhkTnKnDK/CnSMwOxeVVFgpXxzEbFoAo9avrvpPdx4zRbS Hdxphs6xIda9g7ZnBIflqngenTxV8aSstQ5fBbjzEibXDEd54cIxh3H8/n3uSW9l P1g3Wkd+7nZDo7M23vUnscQWd3D9obUb3Dp7Tr+ibid1rN9zTUTSQS4Q8QKV/mwX RWdCI+nVIETP/xVE2kL2oLkKX2G50clqK+Xy3mFcWELQejiYG1U/UmsWpjXYZ2Pd pYuQZ/PJBKKUhC8dT5kZGpuFIRFGaWc0bNFwEVE3hJjaeaOnmWoqeBqOV20EO72Q M4YcON2dtzXxXxzceMGU+la9ug== -----END CERTIFICATE-----Generated at Thu Mar 26 04:56:07 2026 by rpki-client