$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: a+czBN/4KSDirUT0Ap588Tvs3P94c3hoKx9EiFJpD00= Subject key identifier: 4B:14:07:65:E4:AD:AE:42:08:30:FE:94:6B:81:E0:4D:00:78:38:2B Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2E00 Signing time: Mon 02 Mar 2026 01:09:00 +0000 Manifest this update: Mon 02 Mar 2026 01:08:59 +0000 Manifest next update: Mon 09 Mar 2026 01:08:59 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: LxjKm6Sz12Qhl56bfz1gqXbdEm9oh3fF69Vp2mCIcGc=) 2: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (hash: N17i/Vo6qq4GynkhbHnkWbsIC9qgwD2VSBbjxJt5D3I=) 3: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: VFEJ2pC2bmVwEIh9Ul33fbeRMTH5fCAYFl8iU/+lajY=) 4: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: W6HZokYILsn0Q7OE9k2g328OYk158ub+rCVxAjeaUak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11812 (0x2e24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Mar 2 01:08:59 2026 GMT Not After : Mar 9 01:08:59 2026 GMT Subject: CN=69a4e32c-5566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:aa:6c:3d:ee:6a:39:0e:4c:17:51:95:2f:30: 17:df:03:10:42:d4:ee:88:bb:d7:19:93:60:c5:c1: 00:c5:ef:ee:c5:b7:ce:ee:85:55:27:e5:e2:84:e1: 9e:e9:68:9d:e5:49:ff:b4:0a:25:ea:5b:f3:77:15: b4:38:ad:86:8e:c3:b5:f5:a6:ef:98:51:b7:af:77: 48:df:eb:08:b4:cc:9c:89:87:f8:71:13:eb:6a:fc: a8:54:a9:7e:48:cf:a8:ed:8b:da:0c:82:40:5a:38: e8:49:5a:f6:cd:f0:8b:f9:ba:00:9f:d7:b0:e9:b5: 27:c8:b5:77:11:91:86:e5:45:58:22:a5:40:c5:44: d6:2e:c2:2b:26:31:a2:a3:5b:ae:16:55:4f:5a:ea: 45:57:e1:3f:90:bc:78:dc:2b:9a:7e:93:ce:74:84: 5e:87:76:9b:70:84:bb:1a:be:52:00:82:33:42:ee: 56:de:d2:db:61:aa:1b:d6:5d:d9:04:78:39:e3:90: 34:80:20:23:12:b3:f1:ae:28:55:13:34:ee:40:33: 25:c5:a4:15:d1:86:2d:22:b2:a3:03:3e:c8:7f:a4: bc:ec:3d:29:54:7e:e8:87:c8:63:b8:b7:5e:84:c9: 18:7d:a7:86:04:87:1f:a4:62:aa:54:99:bf:21:b5: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:07:65:E4:AD:AE:42:08:30:FE:94:6B:81:E0:4D:00:78:38:2B X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:84:97:5c:cf:e3:de:98:36:1d:9c:a9:5e:f8:8d:ab:1e:cf: ca:9c:f9:65:0c:61:48:49:ff:e2:8e:fa:da:a7:1d:1f:92:9a: 19:af:7f:e1:4f:2e:cf:93:b7:3e:35:f4:9a:ca:79:2d:82:12: 93:f8:d3:24:2a:37:77:93:38:d9:5b:fd:86:a1:f2:f6:17:13: 88:96:0d:5f:92:a5:1e:f6:e0:b6:14:9d:0f:3c:3a:47:7f:4f: ed:14:08:10:9e:8b:a1:29:1b:91:a2:b7:10:d6:25:56:8e:4f: 5b:06:79:c5:7b:3d:ef:60:33:64:aa:ea:5c:f6:8b:eb:f2:94: c9:20:51:70:14:75:77:a5:b1:e5:85:20:f8:c1:b6:df:c0:89: 0d:99:20:96:4f:9c:d0:e8:ac:88:8d:1a:f8:41:0e:9f:6e:df: 25:26:68:b9:86:5f:1f:08:3a:74:61:51:f3:b9:b9:02:ab:e7: fb:63:75:3a:44:ed:0d:6b:94:a3:d6:16:df:af:8f:e0:d6:60: ad:44:d8:0c:68:1c:dc:c3:7c:1f:e2:15:49:45:e7:e0:d2:78: 02:ef:21:6b:28:44:b6:39:f7:ad:ba:c0:9e:0e:e7:35:72:fd: 3b:b4:33:2f:87:4f:23:43:00:f3:32:83:30:45:0d:f1:74:01: c9:24:90:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjYwMzAyMDEwODU5WhcNMjYwMzA5MDEwODU5WjAYMRYwFAYD VQQDEw02OWE0ZTMyYy01NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KpsPe5qOQ5MF1GVLzAX3wMQQtTuiLvXGZNgxcEAxe/uxbfO7oVVJ+XihOGe 6Wid5Un/tAol6lvzdxW0OK2GjsO19abvmFG3r3dI3+sItMyciYf4cRPravyoVKl+ SM+o7YvaDIJAWjjoSVr2zfCL+boAn9ew6bUnyLV3EZGG5UVYIqVAxUTWLsIrJjGi o1uuFlVPWupFV+E/kLx43CuafpPOdIReh3abcIS7Gr5SAIIzQu5W3tLbYaob1l3Z BHg545A0gCAjErPxrihVEzTuQDMlxaQV0YYtIrKjAz7If6S87D0pVH7oh8hjuLde hMkYfaeGBIcfpGKqVJm/IbW22wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsUB2Xk ra5CCDD+lGuB4E0AeDgrMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf4SXXM/j3pg2HZypXviNqx7Pypz5ZQxhSEn/4o762qcdH5KaGa9/4U8uz5O3 PjX0msp5LYISk/jTJCo3d5M42Vv9hqHy9hcTiJYNX5KlHvbgthSdDzw6R39P7RQI EJ6LoSkbkaK3ENYlVo5PWwZ5xXs972AzZKrqXPaL6/KUySBRcBR1d6Wx5YUg+MG2 38CJDZkglk+c0OisiI0a+EEOn27fJSZouYZfHwg6dGFR87m5Aqvn+2N1OkTtDWuU o9YW36+P4NZgrUTYDGgc3MN8H+IVSUXn4NJ4Au8hayhEtjn3rbrAng7nNXL9O7Qz L4dPI0MA8zKDMEUN8XQBySSQ+A== -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:52 2026 by rpki-client