$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: TI90kqHVaYtcwPvSwXhCpNEMTxyVL9nC7Un5Y/Ja128= Subject key identifier: B9:7F:20:0E:83:B3:36:79:8B:92:C6:A5:7C:FD:EA:FF:30:FE:87:6F Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0CCE Signing time: Mon 02 Mar 2026 01:16:25 +0000 Manifest this update: Mon 02 Mar 2026 01:16:23 +0000 Manifest next update: Mon 09 Mar 2026 01:16:23 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: 9xsKTIOPDO6zgP+KZaM3uqF0dmJKURRCXnEMxScy3Is=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: qCXrbVluyBFy25SlHXgoGyu92x6+L5sqPF4dkoufguU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Mar 2 01:16:23 2026 GMT Not After : Mar 9 01:16:23 2026 GMT Subject: CN=69a4e4e8-5506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:6b:dd:ff:f5:5b:b3:12:94:37:93:83:e0: 13:25:fe:a3:75:c1:48:f1:16:cf:1e:5f:0d:25:e0: d1:fb:51:25:dd:e2:17:25:73:13:6d:0e:62:ee:7c: cd:5c:3b:b8:94:5a:09:5e:81:0f:d7:8f:14:03:6a: 39:ab:0d:cf:22:f7:32:0e:6a:d3:0c:12:29:0f:da: c8:e4:b4:42:7b:d2:3c:c0:17:c2:f2:2d:c1:03:76: 68:b9:04:54:f3:d6:e7:a6:30:a8:a0:48:1b:bf:03: 47:b8:88:26:9f:4a:f3:27:e5:e9:d3:6d:bc:06:a0: 96:73:e2:28:39:7d:fe:b5:27:0e:b6:44:86:0f:30: c9:48:8a:b4:ab:e6:e0:47:48:7e:ae:e7:b0:b5:43: ad:03:40:1c:f0:c9:d4:62:1b:58:b0:94:64:c2:65: d9:b4:33:4f:2a:9b:6d:ae:25:01:b0:00:d0:22:ad: 6d:52:f0:97:05:50:11:32:0f:a9:d5:6e:c1:05:df: df:e3:78:bc:46:f8:32:e2:05:19:6c:4f:14:33:68: b2:71:94:71:93:b3:f2:9d:f6:81:bd:62:e9:fb:57: 1e:7e:34:38:00:58:82:31:4c:3e:c7:ea:2f:4f:6d: 46:ac:50:eb:b9:77:b7:ee:d0:93:56:44:cc:6c:ed: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7F:20:0E:83:B3:36:79:8B:92:C6:A5:7C:FD:EA:FF:30:FE:87:6F X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1a:a5:9a:48:35:4e:75:61:19:ae:ec:91:e9:21:17:0a:71: 0b:ab:24:95:fd:97:7d:e1:da:d4:46:11:4e:f8:84:e7:c9:13: d9:66:8b:dd:cb:7b:ad:47:6e:33:fe:ed:9d:3c:7a:ae:27:bb: 73:66:85:6a:bf:7d:42:fc:58:33:44:91:f3:57:a3:fd:02:0d: f6:c6:99:72:ff:c2:d5:79:10:63:50:13:85:27:09:91:8e:04: 9c:38:85:c6:0a:c0:be:c9:92:1e:94:39:4e:d0:41:f3:0d:36: 17:5c:96:55:0e:34:6c:6c:d0:fe:69:e1:10:b7:99:13:95:f6: ce:09:cd:a1:f0:26:0d:79:cb:96:c7:59:fc:c6:60:ef:ba:a2: 7a:46:5d:28:ea:29:71:a1:9d:a2:e2:48:f1:34:71:37:67:f4: 4c:07:fc:d4:ea:a4:e5:d9:ac:6c:56:c6:9f:4f:72:e3:d9:71: 1c:05:b4:25:9c:fb:5a:98:0d:d9:c5:7b:87:33:f6:92:0c:11: 85:97:e2:54:3b:a3:97:69:de:69:22:1a:e7:b2:8e:12:50:38: 5a:66:0f:09:c9:48:2a:af:2d:e6:30:15:55:d9:87:fe:29:e2: 63:d0:39:89:88:85:cc:cf:10:ed:01:9b:05:2d:d0:d8:be:39: 2c:5f:a9:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjYwMzAyMDExNjIzWhcNMjYwMzA5MDExNjIzWjAYMRYwFAYD VQQDEw02OWE0ZTRlOC01NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGZr3f/1W7MSlDeTg+ATJf6jdcFI8RbPHl8NJeDR+1El3eIXJXMTbQ5i7nzN XDu4lFoJXoEP148UA2o5qw3PIvcyDmrTDBIpD9rI5LRCe9I8wBfC8i3BA3ZouQRU 89bnpjCooEgbvwNHuIgmn0rzJ+Xp0228BqCWc+IoOX3+tScOtkSGDzDJSIq0q+bg R0h+ruewtUOtA0Ac8MnUYhtYsJRkwmXZtDNPKpttriUBsADQIq1tUvCXBVARMg+p 1W7BBd/f43i8Rvgy4gUZbE8UM2iycZRxk7PynfaBvWLp+1cefjQ4AFiCMUw+x+ov T21GrFDruXe37tCTVkTMbO3pnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLl/IA6D szZ5i5LGpXz96v8w/odvMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVBqlmkg1TnVhGa7skekhFwpxC6sklf2XfeHa1EYRTviE58kT2WaL3ct7rUdu M/7tnTx6rie7c2aFar99QvxYM0SR81ej/QIN9saZcv/C1XkQY1AThScJkY4EnDiF xgrAvsmSHpQ5TtBB8w02F1yWVQ40bGzQ/mnhELeZE5X2zgnNofAmDXnLlsdZ/MZg 77qiekZdKOopcaGdouJI8TRxN2f0TAf81Oqk5dmsbFbGn09y49lxHAW0JZz7WpgN 2cV7hzP2kgwRhZfiVDujl2neaSIa57KOElA4WmYPCclIKq8t5jAVVdmH/iniY9A5 iYiFzM8Q7QGbBS3Q2L45LF+pGA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:24 2026 by rpki-client