$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft File: IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json) Hash identifier: eJPvR8DPYFUozjy6io/QMwkO46KsQoNjpQQzV2XoYFE= Subject key identifier: 4C:07:14:FC:D9:A5:60:8C:7D:09:27:61:08:BC:55:B3:29:72:06:A7 Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78 Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft Manifest number: 35 Signing time: Sun 01 Mar 2026 10:01:26 +0000 Manifest this update: Sun 01 Mar 2026 10:01:25 +0000 Manifest next update: Sun 08 Mar 2026 10:01:25 +0000 Files and hashes: 1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: eH2Lc3xBr4lbLLFZf+x/jF1Z5e4SSosbHV7gxvTiFy0=) 2: 1CED22CCEEC611F0B6553517716F56BC.roa (hash: 25gq5/S5E1fNMSp9IlKYv9C2whb0+QVibr14Yr9qjOk=) 3: 1D6F4D7EEEC611F0B6553517716F56BC.roa (hash: 08vgGtDTbYmAz2QmhUSw6bN7JErPbWL2/nO9MWIluic=) 4: 1DF3803AEEC611F0B6553517716F56BC.roa (hash: 3w7j7SPBNuYGbUKcI3vyZONgHMBi2xhfwsRI7in3gbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078 Validity Not Before: Mar 1 10:01:25 2026 GMT Not After : Mar 8 10:01:25 2026 GMT Subject: CN=69a40e76-a6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:02:a1:78:f7:8d:19:30:54:eb:ce:2e:30: 32:f4:fe:55:be:a1:9c:7d:8d:b4:73:88:da:81:85: 4b:46:57:04:40:12:09:61:5e:a9:15:ff:83:8b:ca: 93:cb:66:1e:6a:5d:fe:93:ad:8f:90:ad:0d:45:cf: ae:21:c5:25:f6:9b:12:09:70:2b:4a:3e:0d:d2:06: c2:be:67:a3:d2:41:1f:e5:56:3f:d8:5c:4e:ee:e3: 0e:b1:6c:5d:0c:01:fb:08:12:a1:e1:8c:99:2b:99: ff:5c:33:1c:42:a2:f0:4b:02:16:90:2f:73:02:0d: 89:a1:ff:f0:80:90:e1:95:d2:10:b4:45:6f:d7:f1: 02:e3:84:40:b7:98:4e:0d:ff:3e:eb:2f:69:29:5e: bf:90:8f:92:24:28:25:bc:21:40:c3:c0:27:ad:00: a4:38:c0:eb:e7:d6:e2:98:14:dd:fa:59:ec:c4:ea: fc:fa:46:db:4e:a2:99:90:bc:a5:61:a9:e9:2a:5d: 8d:ad:82:f2:74:29:51:07:e4:1e:1b:b5:d9:04:7b: 21:1c:be:2e:64:d0:0e:c2:02:3a:8a:92:6d:b5:ae: 2f:74:fa:40:5f:56:d7:26:6d:93:4c:52:6d:11:01: 4f:4d:46:5a:96:82:20:32:1e:e4:ba:b7:b2:4f:b0: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:07:14:FC:D9:A5:60:8C:7D:09:27:61:08:BC:55:B3:29:72:06:A7 X509v3 Authority Key Identifier: keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:52:2a:7e:27:07:ab:c8:d6:a0:ab:f9:92:14:f3:8c:31:da: a6:fe:eb:52:e2:05:05:7f:6b:2c:d8:cd:ec:06:20:b7:80:67: d4:a4:ec:d5:ad:49:0e:43:95:c3:87:41:f6:60:10:b3:30:14: b9:e7:98:fa:af:65:b4:a2:49:94:ae:c1:96:1a:1c:d8:4e:74: 37:84:8e:83:a7:72:ac:14:8f:5e:1b:f6:49:e5:58:5f:9a:cc: 46:83:2c:f3:08:94:42:5c:47:0c:1a:1b:95:bf:23:44:53:4a: b2:c2:52:1e:b3:85:72:a6:44:48:17:a9:37:20:14:c9:5b:20: d4:4c:81:b7:d5:35:c5:28:95:7a:2c:30:4a:68:1e:cb:77:36: 53:b4:50:72:01:97:c0:1f:9b:6d:17:93:a3:11:24:5e:27:e3: 3c:10:dc:a0:1e:ef:d6:c7:bf:e4:9c:b5:99:71:21:84:9a:a2: fb:eb:1b:32:23:a7:84:68:35:e4:78:e3:4f:df:38:72:27:c8: 38:c1:6a:6a:86:f4:cc:44:bf:75:7f:f4:e0:53:12:c9:59:1e: 65:1c:23:fb:8b:a2:01:6f:3b:1d:9c:b1:3d:dd:57:03:0a:3a: 6f:df:73:8d:b9:c5:22:db:eb:55:b6:9d:62:f8:47:04:b9:ec: cd:ed:70:f6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Njk1QTExMC8GA1UEBRMoMjIyNjYyN0I3M0U1MTU0NkIzQkQ1MTBFMEUyQTBERUFB ODI1MjA3ODAeFw0yNjAzMDExMDAxMjVaFw0yNjAzMDgxMDAxMjVaMBgxFjAUBgNV BAMTDTY5YTQwZTc2LWE2ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUbgKhePeNGTBU684uMDL0/lW+oZx9jbRziNqBhUtGVwRAEglhXqkV/4OLypPL Zh5qXf6TrY+QrQ1Fz64hxSX2mxIJcCtKPg3SBsK+Z6PSQR/lVj/YXE7u4w6xbF0M AfsIEqHhjJkrmf9cMxxCovBLAhaQL3MCDYmh//CAkOGV0hC0RW/X8QLjhEC3mE4N /z7rL2kpXr+Qj5IkKCW8IUDDwCetAKQ4wOvn1uKYFN36WezE6vz6RttOopmQvKVh qekqXY2tgvJ0KVEH5B4btdkEeyEcvi5k0A7CAjqKkm21ri90+kBfVtcmbZNMUm0R AU9NRlqWgiAyHuS6t7JPsGzdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTAcU/Nml YIx9CSdhCLxVsylyBqcwHwYDVR0jBBgwFoAUIiZie3PlFUazvVEODioN6qglIHgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzVBNzk3MTQwQzhG MTExRjA4MEVFMzc3NkM0RjlBRTAyL0lpWmllM1BsRlVhenZWRU9EaW9ONnFnbElI Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWlaaWUzUGxGVWF6dlZFT0Rpb042cWdsSUhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 OTVBLzVBNzk3MTQwQzhGMTExRjA4MEVFMzc3NkM0RjlBRTAyL0lpWmllM1BsRlVh enZWRU9EaW9ONnFnbElIZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwUip+JweryNagq/mSFPOMMdqm/utS4gUFf2ss2M3sBiC3gGfUpOzVrUkOQ5XD h0H2YBCzMBS555j6r2W0okmUrsGWGhzYTnQ3hI6Dp3KsFI9eG/ZJ5VhfmsxGgyzz CJRCXEcMGhuVvyNEU0qywlIes4VypkRIF6k3IBTJWyDUTIG31TXFKJV6LDBKaB7L dzZTtFByAZfAH5ttF5OjESReJ+M8ENygHu/Wx7/knLWZcSGEmqL76xsyI6eEaDXk eONP3zhyJ8g4wWpqhvTMRL91f/TgUxLJWR5lHCP7i6IBbzsdnLE93VcDCjpv33ON ucUi2+tVtp1i+EcEuezN7XD2 -----END CERTIFICATE-----Generated at Sun Mar 1 23:00:38 2026 by rpki-client