$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: cakXBMguTUlSEOfHhoX2aQKCcuf6ecD5Ro/0431dJyY= Subject key identifier: 64:EA:A4:36:D9:95:90:BB:1E:8D:69:7B:CA:14:66:71:E2:F8:4B:92 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 16EC Signing time: Sat 28 Feb 2026 16:43:07 +0000 Manifest this update: Sat 28 Feb 2026 16:43:07 +0000 Manifest next update: Sat 07 Mar 2026 16:43:07 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: T/PPri9lfSBsGhvxss2d5lARc6FDWM9S7OnPYOR9bhc=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: gYVrbtrIqWm9akFMSRfLyBApZQdsKZ/TGrfXdq2YQZg=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: Oe0ZhNHc+oTi0v0pEyomCNHZHmLGtOgid/cHD2LWfB4=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: iK4wxE4X5dwuMQMPvFE//EwoDLAL1trl9tc0x5zzbqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5891 (0x1703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Feb 28 16:43:07 2026 GMT Not After : Mar 7 16:43:07 2026 GMT Subject: CN=69a31b1b-0b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:39:80:90:46:bf:af:e4:9a:9c:e4:74:85: ac:a4:dd:c4:d7:45:d9:e2:93:2f:f1:53:5b:a3:99: 07:f3:65:c3:ef:0f:51:8c:b9:6a:81:24:fb:6d:9e: 93:57:21:04:5d:3f:ac:cd:42:54:05:4a:16:a5:49: cc:da:b7:95:fd:8a:00:c1:11:6c:08:2e:c4:9c:17: da:0b:f1:19:41:4e:02:30:92:53:1c:8d:da:a7:a5: 51:ae:1d:0b:41:8f:92:29:2e:fb:0d:07:5c:4a:89: c8:72:61:3a:fa:a1:c5:40:d1:e9:98:8b:96:18:7e: 1a:e0:97:52:4e:b9:d3:20:98:6b:42:0d:e7:53:6a: a8:4f:1c:ab:31:c4:57:f6:dd:b4:c4:3d:37:5a:1d: 65:78:db:01:7b:5c:3e:e5:b6:e7:79:59:bc:6f:db: 77:b2:74:f2:24:86:f4:26:76:7f:6e:06:86:8a:6c: 11:a3:be:32:a5:05:79:65:d3:6c:ee:f1:10:22:dd: f2:f4:7e:e2:a0:e1:cf:54:a2:a1:f6:49:a5:47:60: b6:dc:ea:b6:ad:23:3c:c0:ee:2e:f0:0d:28:58:48: 1a:56:d9:2d:49:74:af:1f:f6:26:c5:c4:d5:17:d9: ef:a9:c3:f6:2f:ad:02:24:fb:79:43:f8:b0:1a:a4: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:A4:36:D9:95:90:BB:1E:8D:69:7B:CA:14:66:71:E2:F8:4B:92 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8b:f9:28:78:a0:5d:bc:bf:f7:4f:b6:cb:5b:c9:86:25:d8: 20:ad:51:d1:46:c1:35:88:db:97:71:7f:66:67:98:d8:49:2f: 10:db:7c:f1:95:18:c4:2a:89:89:28:dd:e0:2b:c7:03:68:37: e7:ff:77:5c:97:dc:05:84:ab:e6:f7:d3:24:4c:17:f8:64:88: 23:b7:79:8c:a3:7e:45:4c:45:48:83:c0:a4:89:c6:22:ae:48: 5d:40:45:bd:0a:90:15:b0:a5:46:09:6a:ee:24:cd:ee:5d:79: d4:47:5c:f3:23:36:02:63:b8:14:24:68:db:bb:b4:37:d2:58: 5f:a0:7b:68:a5:5e:c5:70:49:e0:ea:b7:df:0f:28:48:c4:7f: d8:da:e7:64:4b:5c:59:55:13:a5:35:37:ab:2b:10:81:95:72: e9:30:97:78:b2:f0:42:03:02:ea:cb:ac:d0:e5:79:23:02:46: bb:e8:62:ba:87:c4:c5:60:9a:2b:4e:15:bd:4b:56:21:90:4d: 2f:c9:5c:fa:2d:d1:a1:33:9e:16:74:3f:24:e4:e2:ae:9f:8f: 21:70:8a:64:ac:c9:6f:c0:5a:1d:ec:6c:ff:4d:2f:1f:bf:00: 24:2f:9a:ef:8f:79:79:c1:01:6f:50:15:ce:18:f2:66:63:5d: 28:b7:a1:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYwMjI4MTY0MzA3WhcNMjYwMzA3MTY0MzA3WjAYMRYwFAYD VQQDDA02OWEzMWIxYi0wYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GU5gJBGv6/kmpzkdIWspN3E10XZ4pMv8VNbo5kH82XD7w9RjLlqgST7bZ6T VyEEXT+szUJUBUoWpUnM2reV/YoAwRFsCC7EnBfaC/EZQU4CMJJTHI3ap6VRrh0L QY+SKS77DQdcSonIcmE6+qHFQNHpmIuWGH4a4JdSTrnTIJhrQg3nU2qoTxyrMcRX 9t20xD03Wh1leNsBe1w+5bbneVm8b9t3snTyJIb0JnZ/bgaGimwRo74ypQV5ZdNs 7vEQIt3y9H7ioOHPVKKh9kmlR2C23Oq2rSM8wO4u8A0oWEgaVtktSXSvH/YmxcTV F9nvqcP2L60CJPt5Q/iwGqTegQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTqpDbZ lZC7Ho1pe8oUZnHi+EuSMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhIv5KHigXby/90+2y1vJhiXYIK1R0UbBNYjbl3F/ZmeY2EkvENt88ZUYxCqJ iSjd4CvHA2g35/93XJfcBYSr5vfTJEwX+GSII7d5jKN+RUxFSIPApInGIq5IXUBF vQqQFbClRglq7iTN7l151Edc8yM2AmO4FCRo27u0N9JYX6B7aKVexXBJ4Oq33w8o SMR/2NrnZEtcWVUTpTU3qysQgZVy6TCXeLLwQgMC6sus0OV5IwJGu+hiuofExWCa K04VvUtWIZBNL8lc+i3RoTOeFnQ/JOTirp+PIXCKZKzJb8BaHexs/00vH78AJC+a 7495ecEBb1AVzhjyZmNdKLehzQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:31 2026 by rpki-client