$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: dPcfsyI1cOfIiVxN/j2P9N6Rf4GH3tqjj26wINrFJEs= Subject key identifier: 73:D6:3B:A4:48:29:21:08:75:B5:1B:2B:81:A7:78:D9:F8:DC:6C:1F Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0BBD Signing time: Sun 01 Mar 2026 23:42:32 +0000 Manifest this update: Sun 01 Mar 2026 23:42:29 +0000 Manifest next update: Sun 08 Mar 2026 23:42:29 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: T28ROkp2KF+3JWeqDJ7F3QtPOHBLTQtdWF460vKUy/Y=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: 44ZNomVUKhNrCvYmD9LvtSWCJcYF4pVIBILUsyf7SwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Mar 1 23:42:29 2026 GMT Not After : Mar 8 23:42:29 2026 GMT Subject: CN=69a4cee8-3220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:ed:94:1c:de:ac:f7:46:ae:12:6d:4b:50: aa:35:62:1b:b6:3b:90:37:8c:e6:5f:98:97:5d:9a: 52:b3:b0:39:7a:72:13:8a:48:76:8e:dc:79:10:0a: cb:40:4b:aa:e8:e5:9b:7b:24:bf:6a:af:ff:aa:01: 3a:0d:cb:cd:33:3c:ba:69:2c:d0:c9:b5:9d:db:4c: 50:69:38:6f:22:ea:c2:76:b9:9d:db:7e:bf:0c:0b: 1d:c8:41:b7:22:5a:16:b8:58:25:bd:10:45:c4:94: 72:d7:78:a4:a0:88:b7:0f:88:d4:5b:2c:cf:37:f0: 50:09:6b:9d:36:1f:90:e4:e1:ed:a1:cb:89:25:70: da:ed:ea:1c:c6:f9:85:55:f2:02:e1:a6:27:50:0f: 2a:32:0c:91:ba:9d:b4:a5:85:ca:c3:38:23:e7:27: 39:70:e7:f5:8f:fe:c5:03:8b:ae:d0:90:cb:1b:39: 7d:11:8d:1f:2d:96:a2:35:3a:af:44:0a:6b:b6:77: 1e:97:ec:ab:a2:6d:86:65:af:b3:e9:50:02:a5:5e: 38:2e:6e:e4:ca:de:e9:cb:a6:0a:24:76:f6:4e:c8: ae:9b:af:9d:62:a9:e2:a9:15:a0:32:e5:67:83:43: 95:3f:b1:2c:23:06:cb:9d:96:1e:8a:17:81:63:9e: 22:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D6:3B:A4:48:29:21:08:75:B5:1B:2B:81:A7:78:D9:F8:DC:6C:1F X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:fd:86:26:18:f7:df:c3:c1:3e:1c:4f:4a:b2:65:59:f3:3a: 64:2d:19:e7:33:ac:5e:9e:b5:a8:ff:9a:fa:e6:ad:bb:9f:53: 8e:4f:70:81:1f:d1:d6:5d:b0:82:b7:3c:9b:59:97:a2:81:35: 94:a9:f7:c2:e2:21:77:0d:50:b6:4c:e5:25:ff:56:35:36:d1: ec:1a:53:94:76:fa:02:17:8f:8c:f3:13:e5:63:e0:89:8c:ab: d9:e7:67:2a:dd:95:72:01:9c:02:3c:38:c0:c3:6b:c7:63:06: 8c:b9:a7:a7:7c:c6:9a:16:44:71:56:13:90:a2:bf:83:2f:ef: 26:74:51:0f:58:fe:98:82:80:3d:62:eb:27:45:ea:54:9c:9b: fa:2a:32:3f:16:ac:67:20:88:da:b7:f2:4d:b4:f7:3d:e8:e0: 7e:53:d3:75:49:91:5a:29:18:e8:42:c9:fc:01:e9:d7:42:93: bb:56:1e:48:57:d2:0b:b2:65:43:70:55:c1:fe:1e:02:7e:c2: b2:49:73:67:c3:2b:db:3d:8a:ce:82:6c:53:22:ee:70:8f:a5: 51:d6:57:81:f3:ff:e8:52:28:af:b5:af:5d:b3:25:f0:5d:e0: cd:40:20:6f:8e:17:f1:9d:74:7e:6b:31:fa:3a:64:22:60:80: 0d:5e:49:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjYwMzAxMjM0MjI5WhcNMjYwMzA4MjM0MjI5WjAYMRYwFAYD VQQDEw02OWE0Y2VlOC0zMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPjtlBzerPdGrhJtS1CqNWIbtjuQN4zmX5iXXZpSs7A5enITikh2jtx5EArL QEuq6OWbeyS/aq//qgE6DcvNMzy6aSzQybWd20xQaThvIurCdrmd236/DAsdyEG3 IloWuFglvRBFxJRy13ikoIi3D4jUWyzPN/BQCWudNh+Q5OHtocuJJXDa7eocxvmF VfIC4aYnUA8qMgyRup20pYXKwzgj5yc5cOf1j/7FA4uu0JDLGzl9EY0fLZaiNTqv RAprtncel+yrom2GZa+z6VACpV44Lm7kyt7py6YKJHb2Tsium6+dYqniqRWgMuVn g0OVP7EsIwbLnZYeiheBY54idQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPWO6RI KSEIdbUbK4GneNn43GwfMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApP2GJhj338PBPhxPSrJlWfM6ZC0Z5zOsXp61qP+a+uatu59Tjk9wgR/R1l2w grc8m1mXooE1lKn3wuIhdw1QtkzlJf9WNTbR7BpTlHb6AhePjPMT5WPgiYyr2edn Kt2VcgGcAjw4wMNrx2MGjLmnp3zGmhZEcVYTkKK/gy/vJnRRD1j+mIKAPWLrJ0Xq VJyb+ioyPxasZyCI2rfyTbT3PejgflPTdUmRWikY6ELJ/AHp10KTu1YeSFfSC7Jl Q3BVwf4eAn7CsklzZ8Mr2z2KzoJsUyLucI+lUdZXgfP/6FIor7WvXbMl8F3gzUAg b44X8Z10fmsx+jpkImCADV5J/Q== -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:31 2026 by rpki-client