$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: 9T3TTBVS5OstSEMzzHF6b1NEW5lba6CR3pNZ5tOaz94= Subject key identifier: B4:F6:BB:03:57:D1:E0:D6:94:AA:65:9D:55:DB:70:FD:BA:5E:21:97 Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 04AF Signing time: Sun 01 Mar 2026 00:52:35 +0000 Manifest this update: Sun 01 Mar 2026 00:52:35 +0000 Manifest next update: Sun 08 Mar 2026 00:52:35 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: wflGmSRFguQzkB3hWfIKa0mzTULhTK5TtDAI9mtEZdc=) 2: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: l8HZr/1K5iTql38w4D2ptDQ0JXfBGGoepbsVMHkB3ic=) 3: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: 7dMYBh5Kias3dynE3RyF2gF6pXmk7AknkGd9fyD3NyM=) 4: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: KZUF8BssowgeDDElrmfBd3Wi1MTanQLIgwgvTwUCAKk=) 5: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: PwsN+OtoJ2xD4W5SdF43eSaZOXEvkQgDLHoaqk8vsk0=) 6: 4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (hash: cHNPFQG217kzFuD60MbkfNI5wD6VwoYic83hYvH8J1E=) 7: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: s4fCKmAzfLfiyPtpMm1I7YInFjR2uqzY8ys3Fd5Sz5o=) 8: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: EY9KwkGQCsbs1MqQbJgggG8QXozMeXajqta7rUD1mjY=) 9: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: jyQmQuKWMrWFivOkwu2cRS9J3e3CFqHg+uuwbKI9XeE=) 10: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: Fh2Am2j7U9RrgdFXomlyNwcsWnidXxkcXn7XnXDFM7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Mar 1 00:52:35 2026 GMT Not After : Mar 8 00:52:35 2026 GMT Subject: CN=69a38dd3-3012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:8b:78:f8:2b:c9:21:bc:40:e8:04:b2:30: e0:1d:2d:6f:f6:4b:70:38:9c:d1:c3:42:32:b8:06: c7:5c:94:a8:1b:0d:35:04:bf:5f:1a:54:52:1c:5e: 55:7c:9a:fa:4d:eb:5e:49:25:0d:99:fe:68:b8:44: 37:c1:1c:f8:2c:ed:a2:07:35:5a:36:2a:7c:12:17: d0:18:37:6a:5d:2b:02:f6:8b:d0:f7:e6:98:cf:55: 84:2b:47:e5:0c:c1:68:a3:e1:2d:50:33:0a:6a:15: 2a:86:c0:e5:05:cd:08:a5:7b:36:8d:77:81:20:dc: 4d:33:9d:1b:fc:03:46:13:97:51:bf:29:95:14:0d: 87:05:cc:f8:b0:3d:fa:dc:01:ef:aa:2f:1f:59:e5: ed:c2:99:94:1e:5e:c5:95:99:9b:b1:99:99:52:36: 52:67:e6:7c:94:5a:63:a6:dc:ed:c2:fa:ae:18:b2: 57:8f:f3:d4:b8:96:2e:61:70:e7:7b:12:ea:2f:54: ce:70:c3:8b:5b:1b:d3:4c:bd:63:7f:2d:a5:1b:94: 46:28:33:95:f1:29:19:e5:05:1e:70:23:b7:e1:27: 7a:dc:bb:af:4c:bb:90:05:01:2f:84:42:53:c9:8f: e0:15:4f:e7:b5:52:db:9e:d5:7f:38:78:2b:f0:34: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F6:BB:03:57:D1:E0:D6:94:AA:65:9D:55:DB:70:FD:BA:5E:21:97 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:84:27:92:09:5d:64:bb:43:7d:95:da:e4:ab:3e:60:d7:7e: 63:56:0d:56:0b:32:b0:b6:ba:43:14:4f:d2:a4:b1:5c:58:3f: fc:fd:cc:41:7c:a6:7b:53:c8:2c:03:be:bd:b8:18:ee:34:8f: 5f:c4:3c:73:a6:dc:e5:90:db:17:21:2e:8b:b5:87:08:2d:a3: 42:1a:2e:fe:90:a4:5d:8c:47:a4:95:4b:91:e9:a5:22:c1:f1: d8:f3:57:e7:33:dc:28:4d:bc:71:ce:f7:92:a2:40:fc:b3:12: 61:46:b3:bc:02:35:25:3d:f2:b9:8c:68:6d:3c:96:2e:eb:88: b6:4e:4d:46:71:8c:2a:a6:8e:e0:75:0a:e5:50:63:51:e5:61: ff:68:92:f3:d6:ac:74:28:00:c4:c8:9f:74:7c:19:14:6f:fb: c8:0f:4c:44:84:e6:d1:30:9d:0b:a7:00:95:61:d6:b9:b1:b9: 98:54:86:52:be:22:23:aa:e3:54:cb:24:0d:0e:30:2d:15:31: a5:2e:73:cc:86:ed:17:a4:8f:0e:ed:e5:c1:9b:31:3c:e8:ba: 76:73:39:ca:69:0b:44:15:5f:e8:23:bf:cd:ba:b4:19:af:99: 42:65:a4:26:21:ab:c0:4a:82:c1:cc:fb:bc:0c:4a:83:ea:03: e0:63:79:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjYwMzAxMDA1MjM1WhcNMjYwMzA4MDA1MjM1WjAYMRYwFAYD VQQDDA02OWEzOGRkMy0zMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vKLePgrySG8QOgEsjDgHS1v9ktwOJzRw0IyuAbHXJSoGw01BL9fGlRSHF5V fJr6TeteSSUNmf5ouEQ3wRz4LO2iBzVaNip8EhfQGDdqXSsC9ovQ9+aYz1WEK0fl DMFoo+EtUDMKahUqhsDlBc0IpXs2jXeBINxNM50b/ANGE5dRvymVFA2HBcz4sD36 3AHvqi8fWeXtwpmUHl7FlZmbsZmZUjZSZ+Z8lFpjptztwvquGLJXj/PUuJYuYXDn exLqL1TOcMOLWxvTTL1jfy2lG5RGKDOV8SkZ5QUecCO34Sd63LuvTLuQBQEvhEJT yY/gFU/ntVLbntV/OHgr8DQ4AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLT2uwNX 0eDWlKplnVXbcP26XiGXMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT4QnkgldZLtDfZXa5Ks+YNd+Y1YNVgsysLa6QxRP0qSxXFg//P3MQXyme1PI LAO+vbgY7jSPX8Q8c6bc5ZDbFyEui7WHCC2jQhou/pCkXYxHpJVLkemlIsHx2PNX 5zPcKE28cc73kqJA/LMSYUazvAI1JT3yuYxobTyWLuuItk5NRnGMKqaO4HUK5VBj UeVh/2iS89asdCgAxMifdHwZFG/7yA9MRITm0TCdC6cAlWHWubG5mFSGUr4iI6rj VMskDQ4wLRUxpS5zzIbtF6SPDu3lwZsxPOi6dnM5ymkLRBVf6CO/zbq0Ga+ZQmWk JiGrwEqCwcz7vAxKg+oD4GN5/A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:00 2026 by rpki-client