$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft File: IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json) Hash identifier: LQI/bmQEhxl3ebklR42ZwbSXkEOoE0033YZkP3ozwVI= Subject key identifier: 76:41:15:E5:60:E4:54:DC:AE:46:D1:7F:75:CD:56:60:BF:BA:2D:DE Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63 Certificate issuer: /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft Manifest number: 0A Signing time: Sun 01 Mar 2026 10:40:30 +0000 Manifest this update: Sun 01 Mar 2026 10:40:30 +0000 Manifest next update: Sun 08 Mar 2026 10:40:30 +0000 Files and hashes: 1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: dYGT5zWs0f6xmuCcJUG9xSq/rrLGuqlL6aTdv2maw88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263 Validity Not Before: Mar 1 10:40:30 2026 GMT Not After : Mar 8 10:40:30 2026 GMT Subject: CN=69a4179e-a9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:94:ab:c9:25:86:6d:a4:5a:24:aa:e1:c7: 44:61:03:90:79:c6:d3:df:1a:0b:10:7f:79:b9:55: bd:25:6c:bf:e4:58:d3:db:7c:07:68:79:54:cd:b9: 04:c2:01:80:bb:18:fd:3b:7d:ed:10:7e:8c:cd:58: 40:2d:e5:10:af:2b:fd:aa:ed:84:a1:7d:2e:b8:e1: 4a:bf:89:89:f6:e8:5f:a6:cf:3c:1d:cf:2d:ad:1b: cc:7e:21:e0:97:13:f8:c2:24:07:1d:c2:28:39:68: f3:43:8c:09:80:15:78:af:23:af:d7:aa:8b:25:f3: 8d:0b:99:2b:36:83:2a:43:b1:e4:95:0e:c7:a9:ff: 16:78:88:71:27:c2:9a:40:5f:bd:bd:b4:ab:89:44: 11:29:0f:69:f2:d9:17:c6:bc:ba:d5:df:e6:b1:86: ff:b6:65:6b:63:31:1f:1c:8c:ab:1f:14:56:90:61: 3b:97:c5:ae:a4:bf:a1:c8:32:34:6b:ef:2a:03:47: 27:17:dd:8b:d6:ef:ad:5f:98:c4:46:a7:37:9a:03: aa:b5:f5:d5:0d:a4:d3:4e:37:a8:a8:c2:fa:00:8a: d7:7f:33:a4:a7:0a:a6:8e:e5:73:18:88:6a:04:c8: f5:04:5c:d6:cf:39:42:12:be:55:d5:28:fe:1e:2d: ef:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:41:15:E5:60:E4:54:DC:AE:46:D1:7F:75:CD:56:60:BF:BA:2D:DE X509v3 Authority Key Identifier: keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:94:19:60:99:81:27:61:79:9e:27:30:47:33:75:1a:11:9d: d6:e4:1e:40:e4:64:8d:e5:4c:ce:50:1a:51:4d:d6:34:1c:ce: b8:01:16:fa:08:5b:07:44:82:23:5d:5c:aa:bd:35:27:bb:70: d0:48:f7:61:e0:92:60:0f:fa:b7:e5:48:c0:8d:7a:87:5b:3b: d8:ba:55:67:49:21:89:0b:15:d0:c2:84:64:b2:b4:ed:c8:0b: 86:36:f0:07:7e:f1:88:2c:03:43:7c:2a:50:f5:1c:24:33:aa: 98:1c:dd:c2:dd:e2:ab:9b:b2:64:81:e5:07:6d:66:51:ba:21: 16:00:69:16:9b:50:22:85:55:36:98:f1:6a:18:e4:78:b4:0a: 04:fd:90:f4:3f:92:ce:a9:af:b9:a9:cd:79:85:a4:df:df:bb: 26:b8:ba:90:f4:cf:7a:47:90:7d:1f:b6:a9:65:bc:f3:1d:5d: a8:08:96:53:01:47:0d:2e:f3:8f:d3:59:eb:4c:f4:a2:ee:c4: 1d:e2:f3:fe:70:2b:01:8f:35:f2:77:3d:e8:5c:74:c6:67:91: 8b:b0:17:c2:f2:c4:df:d5:7c:48:dc:d8:d0:63:bf:e3:60:82: 28:9e:ab:67:2a:ab:e6:83:c0:fb:b6:66:44:0e:39:a0:6a:8b: 36:b0:e0:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkJCQTExMC8GA1UEBRMoMjIzQkU0MkNFM0E5RDhBNjU2MjA3OUU1MTA3NDdDMEZG QzQ1MjI2MzAeFw0yNjAzMDExMDQwMzBaFw0yNjAzMDgxMDQwMzBaMBgxFjAUBgNV BAMTDTY5YTQxNzllLWE5ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdhZSrySWGbaRaJKrhx0RhA5B5xtPfGgsQf3m5Vb0lbL/kWNPbfAdoeVTNuQTC AYC7GP07fe0QfozNWEAt5RCvK/2q7YShfS644Uq/iYn26F+mzzwdzy2tG8x+IeCX E/jCJAcdwig5aPNDjAmAFXivI6/Xqosl840LmSs2gypDseSVDsep/xZ4iHEnwppA X729tKuJRBEpD2ny2RfGvLrV3+axhv+2ZWtjMR8cjKsfFFaQYTuXxa6kv6HIMjRr 7yoDRycX3YvW761fmMRGpzeaA6q19dUNpNNON6iowvoAitd/M6SnCqaO5XMYiGoE yPUEXNbPOUISvlXVKP4eLe/5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdkEV5WDk VNyuRtF/dc1WYL+6Ld4wHwYDVR0jBBgwFoAUIjvkLOOp2KZWIHnlEHR8D/xFImMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0EyQ0E0M0RDMEQy MjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMktaV0lIbmxFSFI4RF94Rklt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWp2a0xPT3AyS1pXSUhubEVIUjhEX3hGSW1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QkJBL0EyQ0E0M0RDMEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMkta V0lIbmxFSFI4RF94RkltTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0lBlgmYEnYXmeJzBHM3UaEZ3W5B5A5GSN5UzOUBpRTdY0HM64ARb6CFsHRIIj XVyqvTUnu3DQSPdh4JJgD/q35UjAjXqHWzvYulVnSSGJCxXQwoRksrTtyAuGNvAH fvGILANDfCpQ9RwkM6qYHN3C3eKrm7JkgeUHbWZRuiEWAGkWm1AihVU2mPFqGOR4 tAoE/ZD0P5LOqa+5qc15haTf37smuLqQ9M96R5B9H7apZbzzHV2oCJZTAUcNLvOP 01nrTPSi7sQd4vP+cCsBjzXydz3oXHTGZ5GLsBfC8sTf1XxI3NjQY7/jYIIonqtn Kqvmg8D7tmZEDjmgaos2sOB9 -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:23 2026 by rpki-client