$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json) Hash identifier: 9s8e1RenyYBzSCOWx4CCTgHf6Ia8SKG3OKM4sy51GPY= Subject key identifier: 7C:05:0E:73:EF:E5:0C:E8:80:8A:8F:27:15:5F:93:84:ED:D2:34:80 Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft Manifest number: 0136 Signing time: Mon 02 Mar 2026 13:41:33 +0000 Manifest this update: Mon 02 Mar 2026 13:41:33 +0000 Manifest next update: Mon 09 Mar 2026 13:41:33 +0000 Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: JeskQnxO1yQXWb1yXIzsWUZ30siLWvpt1I7XtpZCcY8=) 2: A8051CC4508011EF81053074C4F9AE02.roa (hash: gEOQ4Shko9Ffhb3sUw/V54wk1wOVzUKZiGrhJDBT6Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Validity Not Before: Mar 2 13:41:33 2026 GMT Not After : Mar 9 13:41:33 2026 GMT Subject: CN=69a5938d-0407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:3a:af:78:a4:8c:8f:0a:3b:63:96:9e:4d: bc:b5:f4:28:d4:16:44:e0:f4:63:bf:8b:ad:3f:d1: 5c:c8:a4:a1:2a:bb:88:fd:9b:aa:2a:1d:34:35:da: ae:18:eb:49:5f:c9:70:3e:71:b4:f7:aa:c1:9d:ca: 2d:5f:70:d3:99:e9:b9:5b:a5:42:2f:c5:b7:75:b4: e2:ba:4a:87:fe:5b:3a:1b:05:30:5c:aa:23:a0:52: d3:3a:e5:a0:a9:d1:c4:86:d1:af:10:fc:fb:65:ac: a5:a3:8f:e0:ff:67:40:5d:f1:58:5b:fe:6e:61:8c: e1:10:60:31:11:a6:13:7c:e5:b4:6b:3d:78:17:f4: 21:f1:e3:07:b2:b9:d3:e7:5f:a1:fd:90:0e:03:bf: 74:be:5d:10:29:89:8b:a9:e0:a6:71:d8:9c:e3:fc: 49:6c:59:03:62:f6:59:bb:7c:a7:21:b8:bd:fe:6d: b0:f3:7a:25:62:f1:b4:73:fb:e6:ad:d5:d6:8c:4e: b7:04:27:fd:d3:e1:3c:ae:0c:0a:87:0e:4b:f5:21: 1f:88:9e:8d:8e:20:ce:4f:87:8b:35:1b:88:ff:79: 8b:d4:7b:77:ff:68:51:e7:fd:36:3a:c2:dc:b5:b7: 8e:d4:70:58:58:a0:88:1f:41:55:16:50:70:91:a8: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:05:0E:73:EF:E5:0C:E8:80:8A:8F:27:15:5F:93:84:ED:D2:34:80 X509v3 Authority Key Identifier: keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:46:be:2e:32:d0:bb:c5:b3:a2:87:8c:74:d5:5c:fe:1e:7f: 96:57:d9:7e:5d:b4:76:ef:56:ed:2b:48:66:b0:ee:da:68:40: 6a:dd:f0:c3:cb:87:6b:0c:ee:cc:c4:4e:90:87:5d:ff:7e:b0: 6c:d9:ab:d1:24:68:46:54:18:64:45:7b:f9:ee:41:e6:fa:35: 54:66:1b:0b:8f:69:aa:ad:56:36:61:1c:7a:96:4e:2f:eb:a1: a9:26:33:b4:f5:6c:bc:b4:0f:8c:81:ba:f0:69:40:c6:bc:30: 6a:23:2c:ae:3f:1d:6a:f4:5e:8a:d0:82:1b:61:7f:27:74:1f: d0:09:1f:f3:42:dd:ce:ed:a8:65:55:db:d2:bd:eb:9d:02:c5: a5:0a:35:5b:95:94:15:40:97:fb:db:ba:6f:92:fe:96:c5:a4: b6:c6:27:f1:65:ed:49:33:88:03:39:bb:c7:84:09:02:ac:dd: 14:35:00:3c:aa:78:69:39:a3:eb:ed:f3:ea:52:42:97:d8:d8: 65:b4:ee:a7:b9:d4:35:09:1e:55:c9:c3:14:02:fe:23:15:66: 49:42:c1:f0:26:b4:c9:62:02:b5:6f:e0:76:80:17:a6:f3:9a: e4:dc:19:19:5c:07:e2:a7:e7:41:8e:2b:4b:25:98:70:f3:c2: 07:59:02:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz MjMwMzJGMTgwHhcNMjYwMzAyMTM0MTMzWhcNMjYwMzA5MTM0MTMzWjAYMRYwFAYD VQQDEw02OWE1OTM4ZC0wNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvls6r3ikjI8KO2OWnk28tfQo1BZE4PRjv4utP9FcyKShKruI/ZuqKh00Ndqu GOtJX8lwPnG096rBncotX3DTmem5W6VCL8W3dbTiukqH/ls6GwUwXKojoFLTOuWg qdHEhtGvEPz7Zaylo4/g/2dAXfFYW/5uYYzhEGAxEaYTfOW0az14F/Qh8eMHsrnT 51+h/ZAOA790vl0QKYmLqeCmcdic4/xJbFkDYvZZu3ynIbi9/m2w83olYvG0c/vm rdXWjE63BCf90+E8rgwKhw5L9SEfiJ6NjiDOT4eLNRuI/3mL1Ht3/2hR5/02OsLc tbeO1HBYWKCIH0FVFlBwkahguwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHwFDnPv 5QzogIqPJxVfk4Tt0jSAMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0 MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4 T3pHRUc1Yi1QN1l5TURMeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdEa+LjLQu8WzooeMdNVc/h5/llfZfl20du9W7StIZrDu2mhAat3ww8uHawzu zMROkIdd/36wbNmr0SRoRlQYZEV7+e5B5vo1VGYbC49pqq1WNmEcepZOL+uhqSYz tPVsvLQPjIG68GlAxrwwaiMsrj8davReitCCG2F/J3Qf0Akf80Ldzu2oZVXb0r3r nQLFpQo1W5WUFUCX+9u6b5L+lsWktsYn8WXtSTOIAzm7x4QJAqzdFDUAPKp4aTmj 6+3z6lJCl9jYZbTup7nUNQkeVcnDFAL+IxVmSULB8Ca0yWICtW/gdoAXpvOa5NwZ GVwH4qfnQY4rSyWYcPPCB1kCRA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:49:12 2026 by rpki-client