$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft File: I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft (raw, json) Hash identifier: w9Et+L9tybxENE6NSEdJ5KrGoJobB81Kp3uLCmtJU0s= Subject key identifier: E0:DF:BD:76:EB:93:F8:8F:0D:F9:42:A2:EE:64:CD:C2:ED:17:46:28 Authority key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28 Certificate issuer: /CN=A919DB08/serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft Manifest number: 1A Signing time: Wed 25 Mar 2026 08:10:40 +0000 Manifest this update: Wed 25 Mar 2026 08:10:40 +0000 Manifest next update: Wed 01 Apr 2026 08:10:40 +0000 Files and hashes: 1: I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl (hash: BX3bQbSn1jxh8j15p6AmX9pZyo3csDD6VKTtBSl166U=) 2: 3F7E724808FA11F1B69E3FD3313D8C67.roa (hash: 4VW6RAno3y0GfbXAVymMa7lwcHpijLHhwRaIDmRY9yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828 Validity Not Before: Mar 25 08:10:40 2026 GMT Not After : Apr 1 08:10:40 2026 GMT Subject: CN=69c39880-a659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:c3:6e:8a:e2:3b:2c:ae:3b:66:e4:2a:31: d3:3e:31:aa:6c:47:ea:20:64:7e:aa:92:72:0a:90: b4:5e:96:1f:dd:fd:e4:21:50:d7:53:f9:74:49:77: d5:49:c5:29:b0:d1:9e:54:c1:bc:50:38:f2:b5:52: 2d:76:eb:ed:bf:dd:04:ce:94:f7:e1:ef:6f:ea:81: 6a:43:ae:46:c5:6f:4f:eb:cb:77:80:d3:bd:cc:a9: 5b:0c:5e:38:5e:1d:8c:d2:33:8a:29:71:e8:4c:2f: a9:4e:58:27:59:ec:9b:15:42:8b:43:54:6f:9f:41: 8f:d7:1c:e6:2b:21:10:57:3c:35:2d:42:11:46:47: 33:d9:91:6c:17:0e:31:6a:5e:25:07:cb:e6:23:e2: d1:1d:bf:a2:c5:8a:c4:0e:cc:25:5d:bd:4b:47:94: 50:bd:e4:0a:89:58:c1:23:c5:0d:25:69:93:01:dc: a4:02:c0:34:d0:00:b1:17:af:d0:66:64:5c:df:1a: 0e:c4:5a:78:d8:5e:f7:b0:73:d7:d0:59:89:00:dd: 62:d0:07:89:53:79:05:fb:93:a5:6f:06:51:55:f8: 46:14:57:b2:a4:ca:e9:ed:e9:7c:df:1a:87:68:97: 60:85:33:e9:71:02:05:da:6f:cc:27:db:20:39:56: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:BD:76:EB:93:F8:8F:0D:F9:42:A2:EE:64:CD:C2:ED:17:46:28 X509v3 Authority Key Identifier: keyid:23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a1:68:3b:a3:c5:e6:ec:f1:66:9b:64:e7:0c:37:44:b7:80: 84:29:a4:d5:2e:19:08:38:0a:83:c9:2a:0f:0d:43:7a:98:25: 3f:d7:0a:a6:e0:02:29:86:1c:45:9c:1a:87:f4:8b:2f:4c:55: 72:81:5e:23:31:9d:cf:c9:b2:d9:90:65:a6:b3:b8:a1:51:44: a4:56:68:1c:48:78:56:1e:c6:d8:27:ed:c1:ff:1c:9b:e2:42: ed:be:e3:fa:94:38:57:c4:af:a1:70:aa:60:ee:b4:c0:fc:65: 77:d4:93:8d:0f:35:09:64:4a:dc:89:08:cb:ff:07:b8:42:e5: 72:fa:05:d6:23:05:1d:39:6d:ee:e5:de:e5:80:52:97:19:ef: 2b:b9:3c:9e:bb:34:78:8e:f6:20:ff:88:46:5b:ec:46:b8:23: b8:01:d2:22:b4:14:2e:8b:77:ea:15:7a:19:0b:33:88:0c:43: 86:f9:92:e7:6d:08:db:2a:a4:6b:15:a6:8a:83:39:ce:33:d3: 19:e4:bd:ea:63:9a:be:28:6f:ad:65:4c:3e:21:9a:09:9a:e7: 29:cf:82:84:17:d4:11:51:14:c2:10:68:e1:90:f5:f6:cd:2f: 2b:7a:db:b2:48:f8:44:cd:af:f4:9a:2e:40:aa:3e:15:74:67: 1c:29:f5:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 REIwODExMC8GA1UEBRMoMjM5MUZCNEQ5QUVENDRBQjgwRTZBRkQ4RDgyMEExQzA2 NDQzOTgyODAeFw0yNjAzMjUwODEwNDBaFw0yNjA0MDEwODEwNDBaMBgxFjAUBgNV BAMTDTY5YzM5ODgwLWE2NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgNMNuiuI7LK47ZuQqMdM+MapsR+ogZH6qknIKkLRelh/d/eQhUNdT+XRJd9VJ xSmw0Z5UwbxQOPK1Ui126+2/3QTOlPfh72/qgWpDrkbFb0/ry3eA073MqVsMXjhe HYzSM4opcehML6lOWCdZ7JsVQotDVG+fQY/XHOYrIRBXPDUtQhFGRzPZkWwXDjFq XiUHy+Yj4tEdv6LFisQOzCVdvUtHlFC95AqJWMEjxQ0laZMB3KQCwDTQALEXr9Bm ZFzfGg7EWnjYXvewc9fQWYkA3WLQB4lTeQX7k6VvBlFV+EYUV7Kkyunt6XzfGodo l2CFM+lxAgXab8wn2yA5VuERAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4N+9duuT +I8N+UKi7mTNwu0XRigwHwYDVR0jBBgwFoAUI5H7TZrtRKuA5q/Y2CChwGRDmCgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEQjA4LzM4ODZFOEI4MDhG OTExRjE4MDg0RDA4NjMxM0Q4QzY3L0k1SDdUWnJ0Ukt1QTVxX1kyQ0Nod0dSRG1D Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSTVIN1RacnRSS3VBNXFfWTJDQ2h3R1JEbUNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE QjA4LzM4ODZFOEI4MDhGOTExRjE4MDg0RDA4NjMxM0Q4QzY3L0k1SDdUWnJ0Ukt1 QTVxX1kyQ0Nod0dSRG1DZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDCoWg7o8Xm7PFmm2TnDDdEt4CEKaTVLhkIOAqDySoPDUN6mCU/1wqm4AIphhxF nBqH9IsvTFVygV4jMZ3PybLZkGWms7ihUUSkVmgcSHhWHsbYJ+3B/xyb4kLtvuP6 lDhXxK+hcKpg7rTA/GV31JONDzUJZErciQjL/we4QuVy+gXWIwUdOW3u5d7lgFKX Ge8ruTyeuzR4jvYg/4hGW+xGuCO4AdIitBQui3fqFXoZCzOIDEOG+ZLnbQjbKqRr FaaKgznOM9MZ5L3qY5q+KG+tZUw+IZoJmucpz4KEF9QRURTCEGjhkPX2zS8retuy SPhEza/0mi5Aqj4VdGccKfVw -----END CERTIFICATE-----Generated at Thu Mar 26 08:18:30 2026 by rpki-client