$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json) Hash identifier: mBZtp4HwGuAUpvaMHdRJk3jTO9lBlfNPQnpeNSWS8aw= Subject key identifier: 21:82:26:39:79:66:99:E9:3B:E1:D6:63:00:8C:F1:C3:1E:22:A6:93 Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft Manifest number: 5B Signing time: Sun 01 Mar 2026 09:33:28 +0000 Manifest this update: Sun 01 Mar 2026 09:33:28 +0000 Manifest next update: Sun 08 Mar 2026 09:33:28 +0000 Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: EwOpHvd8l6bufPGksijr3tlWWIPWfvpUtwE9ACrTkIg=) 2: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: MYr0RnnESBBRDJ22pf9EsF5pYGHY7f5iA1+28nEzneQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Mar 1 09:33:28 2026 GMT Not After : Mar 8 09:33:28 2026 GMT Subject: CN=69a407e8-5e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:cd:99:ee:ac:12:18:b4:d7:b8:e2:0d:7e: eb:97:73:cc:7b:dc:01:67:db:80:1a:77:9c:c3:11: 51:4a:2c:70:aa:11:9a:7d:be:47:1a:e9:df:ba:43: c1:01:be:54:34:75:be:e5:f1:30:f4:42:a6:14:d5: 66:a2:99:80:bd:8e:54:b6:68:e1:41:6b:6b:19:07: 2e:79:d0:c3:c8:92:fa:0c:40:da:ee:89:bf:bb:23: 3e:61:8f:05:14:8b:dc:96:78:c6:cc:78:47:12:09: 5c:01:d8:30:c0:9b:36:35:ff:12:75:a3:19:95:72: e9:0a:a2:d3:e4:48:b1:4b:18:22:74:2f:11:33:fa: c0:13:6c:2f:47:e7:1e:84:bb:d3:e8:d9:b9:3b:ed: 77:73:af:f5:a2:55:77:dd:01:1d:98:28:93:78:63: 77:2d:7a:fe:1a:0f:06:6d:f0:a0:a5:f7:6a:f2:4d: 42:ff:bc:d4:8b:6c:e0:3e:a1:bc:02:c4:af:04:23: f2:26:66:cd:e9:84:6d:42:52:d5:ec:37:1f:f1:1f: b0:9d:9e:4f:b0:a5:c5:a7:ab:cc:1f:55:d7:82:47: ed:16:98:cd:65:78:22:72:3d:de:de:85:31:ac:04: b8:b2:e0:95:41:fd:48:29:4a:cd:79:ed:71:bd:9c: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:82:26:39:79:66:99:E9:3B:E1:D6:63:00:8C:F1:C3:1E:22:A6:93 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e0:30:dc:aa:63:c3:43:ea:49:2b:cf:2e:14:d1:64:ca:93: 1a:5e:ae:39:f2:53:28:4c:32:ea:72:e7:68:9e:1e:64:64:89: 57:72:12:24:dc:9c:08:4f:5f:e4:a1:b5:9d:f0:ca:0f:4b:b9: 0d:72:67:cf:5c:d1:e5:67:81:22:e9:52:02:f0:e2:6d:f2:8c: fb:3d:49:5e:52:43:b6:2d:9f:6a:07:a0:36:76:c3:d9:0e:04: c7:6a:52:aa:c3:cf:f1:de:58:33:78:2e:67:d2:dc:8e:24:f1: e5:9e:59:dc:4b:4a:2b:5d:27:b1:77:5c:99:cf:ae:a3:79:7b: cd:bc:5a:95:b5:20:c5:27:c2:00:0f:b9:c1:05:58:5b:17:b2: 7e:78:1c:17:58:8d:d7:c3:d4:ef:79:ea:5a:c1:02:5d:4b:e3: 52:66:f0:b2:75:bd:a1:52:1c:60:1d:c8:9a:71:9a:de:fe:01: c7:4f:27:18:47:ac:15:c8:f2:03:13:f3:88:d9:fd:6f:34:81: ed:fb:dd:d8:81:d0:3d:02:bb:c5:b5:e2:22:1b:fc:a6:fc:90: 6b:3b:d2:48:0f:12:0d:02:5c:bc:b3:d0:0e:27:7e:f9:51:a8: 5f:ca:ed:83:36:ad:f7:60:ee:0e:80:33:96:8b:28:7c:f9:67: 37:7e:83:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzYxNTExMC8GA1UEBRMoMjM3NDc4NkU4N0M0QTBFQzNENkZBNEMwQjc4NEU0MkZF RTAwM0E2RDAeFw0yNjAzMDEwOTMzMjhaFw0yNjAzMDgwOTMzMjhaMBgxFjAUBgNV BAMTDTY5YTQwN2U4LTVlMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs8s2Z7qwSGLTXuOINfuuXc8x73AFn24Aad5zDEVFKLHCqEZp9vkca6d+6Q8EB vlQ0db7l8TD0QqYU1WaimYC9jlS2aOFBa2sZBy550MPIkvoMQNruib+7Iz5hjwUU i9yWeMbMeEcSCVwB2DDAmzY1/xJ1oxmVcukKotPkSLFLGCJ0LxEz+sATbC9H5x6E u9Po2bk77Xdzr/WiVXfdAR2YKJN4Y3ctev4aDwZt8KCl92ryTUL/vNSLbOA+obwC xK8EI/ImZs3phG1CUtXsNx/xH7Cdnk+wpcWnq8wfVdeCR+0WmM1leCJyPd7ehTGs BLiy4JVB/UgpSs157XG9nDa1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIYImOXlm mek74dZjAIzxwx4ippMwHwYDVR0jBBgwFoAUI3R4bofEoOw9b6TAt4TkL+4AOm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NjE1L0JBRjM4RThBOTFG NTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9t MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNSNGJvZkVvT3c5YjZUQXQ0VGtMLTRBT20wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 NjE1L0JBRjM4RThBOTFGNTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093 OWI2VEF0NFRrTC00QU9tMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBs4DDcqmPDQ+pJK88uFNFkypMaXq458lMoTDLqcudonh5kZIlXchIk3JwIT1/k obWd8MoPS7kNcmfPXNHlZ4Ei6VIC8OJt8oz7PUleUkO2LZ9qB6A2dsPZDgTHalKq w8/x3lgzeC5n0tyOJPHlnlncS0orXSexd1yZz66jeXvNvFqVtSDFJ8IAD7nBBVhb F7J+eBwXWI3Xw9TveepawQJdS+NSZvCydb2hUhxgHciacZre/gHHTycYR6wVyPID E/OI2f1vNIHt+93YgdA9ArvFteIiG/ym/JBrO9JIDxINAly8s9AOJ375Uahfyu2D Nq33YO4OgDOWiyh8+Wc3foOT -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:19 2026 by rpki-client