$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: gcsJzGYyDs1qp8OEfAQZqkYt9Y7IIh0Q7ioMunZsq3g= Subject key identifier: BA:7B:5B:39:66:B3:B2:A6:BC:51:D3:A4:F4:C5:CB:36:24:C0:E6:BE Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 09D3 Signing time: Mon 02 Mar 2026 00:04:30 +0000 Manifest this update: Mon 02 Mar 2026 00:04:29 +0000 Manifest next update: Mon 09 Mar 2026 00:04:29 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: XnY8EEnFzFESQD/89E8N4IukfXk/pVaI1sKCG1HL7DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: Mar 2 00:04:29 2026 GMT Not After : Mar 9 00:04:29 2026 GMT Subject: CN=69a4d40e-9867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:96:bc:70:33:f1:47:66:8d:f9:8d:79:77: a1:7a:01:a1:0b:1c:93:a1:6f:1a:52:d0:54:bf:05: 28:9d:db:37:69:a4:84:08:96:df:ad:f5:ca:0d:7d: 1c:f1:9f:4e:dc:eb:07:af:8e:53:4c:ad:cb:20:e5: 67:af:1b:cb:14:37:04:4e:e4:e5:a9:5e:92:b3:cc: 87:3e:60:1e:bd:ef:92:26:b3:08:dc:01:10:0c:b7: ec:0c:9f:c6:21:4e:a9:b0:8c:70:7b:16:a8:e3:af: 42:9a:da:60:3c:69:d7:5f:cd:61:ee:33:8d:d7:86: 91:5c:a1:78:7d:86:86:09:be:70:30:be:c7:97:7f: 9f:e8:6c:46:a1:ce:4d:a7:a9:b5:45:68:74:30:de: 5a:00:fd:1b:88:41:35:70:02:2e:72:08:37:4a:ed: be:9f:cf:95:d1:1e:25:95:45:c9:97:05:9a:63:16: 74:71:35:11:aa:b2:ea:ae:eb:a3:eb:74:d9:4d:5c: 2a:85:75:2f:fe:a0:0d:ff:52:82:fe:81:e5:e3:3b: db:e9:d1:e9:6a:1f:dd:22:1b:c1:67:94:70:77:5d: 5c:e5:45:97:78:1f:16:34:ec:b5:a1:1f:a6:9a:9d: d5:86:8e:be:e0:d2:ac:c2:f3:65:77:09:e4:87:48: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7B:5B:39:66:B3:B2:A6:BC:51:D3:A4:F4:C5:CB:36:24:C0:E6:BE X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2b:92:d5:a0:e0:65:41:df:40:41:5c:2c:ba:16:d4:bb:cc: 79:89:f5:52:4d:ca:c3:36:f1:a1:69:01:aa:ea:78:5c:de:1d: 8a:22:bf:50:dc:83:b0:19:9f:cd:fe:41:04:ff:fb:e8:c3:8e: 17:e3:26:36:8f:c3:df:d6:94:fb:91:f8:dc:33:cb:64:01:67: f1:5e:b1:10:d1:cf:4e:a4:b5:ee:9f:46:e2:e5:6a:58:4a:93: 22:f6:4a:cf:60:0e:4a:6b:24:52:66:09:79:1c:8a:61:5f:e5: 02:65:8b:b2:91:5e:e6:ba:a6:db:be:0f:13:11:b3:b7:e8:2a: 97:b4:ab:57:1e:da:0b:c1:91:db:aa:b9:a8:e1:64:ce:c8:76: 2e:b6:f6:02:e8:4c:c8:05:23:53:87:8b:f5:3a:b3:24:0b:cd: 60:21:5f:97:2c:08:56:c5:b6:7c:5d:16:01:a6:09:1f:d6:95: cd:fb:52:c6:b4:9a:01:88:c7:ed:66:8a:a5:ee:5c:f7:ae:07: 1d:ac:36:b0:2b:79:68:62:af:d4:72:62:5a:25:b0:b0:1c:70: d7:ca:ab:ed:53:38:36:f0:82:f8:d7:f0:d4:e5:6c:17:64:18: 39:cb:4a:1d:5a:4f:cb:6d:30:81:2d:af:3b:5d:5f:95:c0:9f: 0e:3b:8d:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjYwMzAyMDAwNDI5WhcNMjYwMzA5MDAwNDI5WjAYMRYwFAYD VQQDEw02OWE0ZDQwZS05ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdmWvHAz8UdmjfmNeXehegGhCxyToW8aUtBUvwUonds3aaSECJbfrfXKDX0c 8Z9O3OsHr45TTK3LIOVnrxvLFDcETuTlqV6Ss8yHPmAeve+SJrMI3AEQDLfsDJ/G IU6psIxwexao469CmtpgPGnXX81h7jON14aRXKF4fYaGCb5wML7Hl3+f6GxGoc5N p6m1RWh0MN5aAP0biEE1cAIucgg3Su2+n8+V0R4llUXJlwWaYxZ0cTURqrLqruuj 63TZTVwqhXUv/qAN/1KC/oHl4zvb6dHpah/dIhvBZ5Rwd11c5UWXeB8WNOy1oR+m mp3Vho6+4NKswvNldwnkh0hQRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLp7Wzlm s7KmvFHTpPTFyzYkwOa+MB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFyuS1aDgZUHfQEFcLLoW1LvMeYn1Uk3KwzbxoWkBqup4XN4diiK/UNyDsBmf zf5BBP/76MOOF+MmNo/D39aU+5H43DPLZAFn8V6xENHPTqS17p9G4uVqWEqTIvZK z2AOSmskUmYJeRyKYV/lAmWLspFe5rqm274PExGzt+gql7SrVx7aC8GR26q5qOFk zsh2Lrb2AuhMyAUjU4eL9TqzJAvNYCFflywIVsW2fF0WAaYJH9aVzftSxrSaAYjH 7WaKpe5c964HHaw2sCt5aGKv1HJiWiWwsBxw18qr7VM4NvCC+Nfw1OVsF2QYOctK HVpPy20wgS2vO11flcCfDjuNYg== -----END CERTIFICATE-----Generated at Mon Mar 2 20:17:40 2026 by rpki-client