$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft File: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json) Hash identifier: 4tzDNZgBv20goK9fwe0XogJyA4nRlFv3wqm/rcQm1tg= Subject key identifier: 77:89:61:28:07:4C:3A:1A:E4:A3:0E:D8:0C:C0:93:A5:B4:52:80:95 Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 Certificate issuer: /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft Manifest number: 21 Signing time: Wed 25 Mar 2026 08:02:34 +0000 Manifest this update: Wed 25 Mar 2026 08:02:33 +0000 Manifest next update: Wed 01 Apr 2026 08:02:33 +0000 Files and hashes: 1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: 2904JpE3vZgmxC8CY1q65pPiS7d3z1hMxjCgtPuW2eM=) 2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Validity Not Before: Mar 25 08:02:33 2026 GMT Not After : Apr 1 08:02:33 2026 GMT Subject: CN=69c3969a-71b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:37:c7:26:80:45:1b:26:f7:b4:73:5c:c5: b4:ef:8e:77:ef:e7:27:f0:2b:bf:e7:c7:15:66:a3: ab:b3:b8:64:80:24:3c:d5:46:ed:27:28:ba:81:a7: 6f:98:20:b5:f5:be:91:37:f9:15:73:ad:27:28:5b: 4e:0d:77:26:31:4a:bc:ab:17:d7:90:a3:9e:3f:f2: e6:6e:f2:98:86:37:29:c3:c3:b0:99:bb:fb:37:ef: b5:95:a8:08:02:ec:a7:02:b8:81:f7:91:b7:58:23: df:c6:28:a7:63:14:4a:32:4e:80:f5:91:a6:3e:87: 71:75:61:4f:49:6f:5d:21:11:43:d2:6b:fd:53:12: af:ff:67:22:a6:31:3a:9f:ed:08:b4:6c:21:df:b4: 79:bf:c3:82:be:1a:8f:94:dc:d8:6c:03:9f:c3:84: 5d:79:46:15:45:c6:5a:62:fa:91:e7:0b:bc:86:ac: 79:30:31:39:f0:29:8d:df:9b:ba:e3:81:7d:f2:4b: 38:84:7b:55:b3:13:c4:3c:09:03:d6:eb:90:73:fa: 6f:bd:77:3f:83:73:07:9f:9a:26:59:27:dd:17:dc: 7e:e0:52:29:fe:5f:25:9b:e6:1f:80:ce:ad:d0:13: ae:4a:72:c2:28:91:62:77:3f:64:5c:bc:1d:44:25: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:89:61:28:07:4C:3A:1A:E4:A3:0E:D8:0C:C0:93:A5:B4:52:80:95 X509v3 Authority Key Identifier: keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0a:f2:fe:48:61:12:86:a4:b4:ac:e1:32:df:7b:22:09:ca: 1a:87:af:c5:e2:db:de:8a:3e:ca:cf:ed:23:7c:e3:0b:0a:99: 38:dc:9b:79:a1:ec:19:33:58:9b:ee:87:5e:45:05:68:6c:3d: 34:f8:4e:d9:4c:6e:aa:f6:8d:20:1a:c1:f9:4d:cd:cd:29:fa: bc:1e:5b:78:7c:0a:24:00:f2:a5:71:88:2a:8d:1e:6c:ba:ad: a7:be:34:4d:86:2a:fc:b2:86:95:57:94:bc:59:60:cc:d7:08: 72:47:23:aa:93:5e:17:93:44:f0:96:19:ca:6d:16:7d:e9:9b: d5:d2:e4:5b:a5:58:d5:4a:68:38:78:c8:d1:a5:d9:57:8c:0c: 4d:dc:85:35:20:4c:96:33:aa:40:35:3d:cf:cd:70:33:45:17: f3:2f:8c:c1:8a:46:f8:3c:4f:8f:e8:74:a9:1b:f4:68:40:0c: 37:08:57:52:a2:b9:92:d0:27:a3:63:aa:0d:f5:2d:5f:75:a0: c5:d3:84:63:45:06:44:94:bf:f2:28:79:58:bc:ef:89:99:1e: c9:2c:b5:6b:68:a1:c7:b5:5a:6a:5a:e9:c2:81:a7:ef:ad:b6: f8:e3:01:88:f1:67:a5:8d:26:6d:15:cf:83:8a:2b:12:e9:bd: 4e:69:9e:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0I3QjExMC8GA1UEBRMoMjI1NkI4MkIwQTZFREM2MjY4QTNDQzkwQUNDMDVDNzRG MTE0Q0UzOTAeFw0yNjAzMjUwODAyMzNaFw0yNjA0MDEwODAyMzNaMBgxFjAUBgNV BAMTDTY5YzM5NjlhLTcxYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcmjfHJoBFGyb3tHNcxbTvjnfv5yfwK7/nxxVmo6uzuGSAJDzVRu0nKLqBp2+Y ILX1vpE3+RVzrScoW04NdyYxSryrF9eQo54/8uZu8piGNynDw7CZu/s377WVqAgC 7KcCuIH3kbdYI9/GKKdjFEoyToD1kaY+h3F1YU9Jb10hEUPSa/1TEq//ZyKmMTqf 7Qi0bCHftHm/w4K+Go+U3NhsA5/DhF15RhVFxlpi+pHnC7yGrHkwMTnwKY3fm7rj gX3ySziEe1WzE8Q8CQPW65Bz+m+9dz+DcwefmiZZJ90X3H7gUin+XyWb5h+Azq3Q E65KcsIokWJ3P2RcvB1EJS33AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUd4lhKAdM Ohrkow7YDMCTpbRSgJUwHwYDVR0jBBgwFoAUIla4Kwpu3GJoo8yQrMBcdPEUzjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QjdCLzRDQjNBMzg0RkJF OTExRjA5MTJGRTYxQzZENkY1NkJDL0lsYTRLd3B1M0dKb284eVFyTUJjZFBFVXpq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSWxhNEt3cHUzR0pvbzh5UXJNQmNkUEVVemprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QjdCLzRDQjNBMzg0RkJFOTExRjA5MTJGRTYxQzZENkY1NkJDL0lsYTRLd3B1M0dK b284eVFyTUJjZFBFVXpqay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBYCvL+SGEShqS0rOEy33siCcoah6/F4tveij7Kz+0jfOMLCpk43Jt5oewZM1ib 7odeRQVobD00+E7ZTG6q9o0gGsH5Tc3NKfq8Hlt4fAokAPKlcYgqjR5suq2nvjRN hir8soaVV5S8WWDM1whyRyOqk14Xk0TwlhnKbRZ96ZvV0uRbpVjVSmg4eMjRpdlX jAxN3IU1IEyWM6pANT3PzXAzRRfzL4zBikb4PE+P6HSpG/RoQAw3CFdSormS0Cej Y6oN9S1fdaDF04RjRQZElL/yKHlYvO+JmR7JLLVraKHHtVpqWunCgafvrbb44wGI 8WeljSZtFc+DiisS6b1OaZ6V -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:30 2026 by rpki-client