$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: UH96om/d/EmnweYezb0kQ+oRSdPmCEWWFMaId5k66aI= Subject key identifier: A1:87:25:D1:00:95:A8:8B:61:D9:D9:24:E3:18:1D:39:96:06:EE:8D Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 2698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 2609 Signing time: Sat 28 Feb 2026 15:44:54 +0000 Manifest this update: Sat 28 Feb 2026 15:44:54 +0000 Manifest next update: Sat 07 Mar 2026 15:44:54 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: 5t56jnCyqZJwPHZsGwSN52CvEsJJcSEfJMjoeqfMBF8=) 2: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: wmE3dy22cCh7DDeNE31Jx/DmkbwsEQ9KR2+uUk3Z/H8=) 3: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: /CgW1RCBBKg0G9J60cVrkPNi3RQ9sxBskKzs6426hF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9880 (0x2698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Feb 28 15:44:54 2026 GMT Not After : Mar 7 15:44:54 2026 GMT Subject: CN=69a30d76-aafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:0e:a5:6f:8f:83:ce:9b:44:10:18:af:f1: 34:1e:de:1d:e1:b7:10:3a:b0:67:95:c3:9f:90:ed: 2b:41:a1:cc:2b:e7:a4:20:04:d4:21:b8:fe:aa:d6: 32:94:7f:c8:06:ee:60:b2:8a:9e:90:c6:97:71:80: 1c:6b:90:ed:fa:dd:c8:c9:75:3a:b7:16:10:4d:3c: 74:be:3f:93:e5:11:56:cd:b4:d3:10:f8:6a:8f:b5: 82:ed:59:dd:0f:fb:57:9f:b7:bd:19:85:06:46:7c: 46:e0:a7:79:56:82:09:5f:fa:d6:f6:4d:89:df:c5: 00:ce:74:bf:06:6b:02:26:be:f5:12:9a:78:1c:0b: f7:57:52:50:78:df:d5:52:ce:5a:00:37:61:02:2b: 99:14:d6:cb:8b:c2:df:c1:76:af:3d:26:5a:f8:3c: 63:63:38:22:e4:bc:c6:80:61:7a:d5:d3:6c:8d:b5: 6e:10:48:0b:b2:ec:e8:4e:c5:40:a1:78:9e:08:bc: ae:d0:c8:f4:93:32:cf:8d:40:9c:c7:aa:07:2c:0c: ff:8b:23:f6:8d:d5:8a:42:53:80:07:63:36:31:f9: 9e:0e:ac:cb:c5:78:55:7b:19:02:eb:de:97:63:70: 92:69:b7:76:b1:a7:52:6b:e6:f8:db:4e:23:d9:8d: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:87:25:D1:00:95:A8:8B:61:D9:D9:24:E3:18:1D:39:96:06:EE:8D X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:04:08:78:46:f8:a8:07:38:d1:40:34:83:2d:be:86:88:d1: ef:42:e9:65:ad:67:fc:22:9d:1c:dd:16:d8:f3:d1:ec:dd:90: ab:92:77:2e:fe:8e:a8:fe:9e:6a:21:5d:a4:e1:9b:0c:bc:72: fe:43:90:f3:53:bb:f6:e1:49:00:4e:a8:c6:df:64:d4:8b:60: ba:10:89:61:7b:97:38:2e:86:d3:58:a6:de:44:35:1e:a7:d7: e0:4d:30:42:47:a1:c8:0c:35:02:57:59:2e:b8:26:14:65:2c: 24:24:0e:7d:60:b2:57:c8:92:cf:75:99:9c:a4:0f:ca:0f:9f: 11:12:9e:43:8b:73:de:22:bb:28:61:c7:40:4e:21:e4:b3:73: 2e:bd:82:a4:ed:f1:69:94:d7:d6:3e:fd:1c:e1:d1:74:92:a1: 57:30:e1:a4:5e:5f:8a:05:0c:ba:af:e7:2c:bd:64:1c:f7:20: 6c:05:c5:9d:44:16:57:37:c7:5b:57:f7:ab:1c:a4:c9:d3:cf: d4:57:bd:5e:a0:f7:33:9d:c7:d6:dc:fc:89:7d:ae:30:df:ab: 55:b1:c6:12:be:8e:8e:9d:66:9c:79:3a:ea:48:20:b4:d2:74: 31:24:a7:14:2d:ce:ea:35:2b:7e:95:2a:f5:2e:d8:92:85:9f: f8:17:4b:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjYwMjI4MTU0NDU0WhcNMjYwMzA3MTU0NDU0WjAYMRYwFAYD VQQDDA02OWEzMGQ3Ni1hYWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjoOpW+Pg86bRBAYr/E0Ht4d4bcQOrBnlcOfkO0rQaHMK+ekIATUIbj+qtYy lH/IBu5gsoqekMaXcYAca5Dt+t3IyXU6txYQTTx0vj+T5RFWzbTTEPhqj7WC7Vnd D/tXn7e9GYUGRnxG4Kd5VoIJX/rW9k2J38UAznS/BmsCJr71Epp4HAv3V1JQeN/V Us5aADdhAiuZFNbLi8LfwXavPSZa+DxjYzgi5LzGgGF61dNsjbVuEEgLsuzoTsVA oXieCLyu0Mj0kzLPjUCcx6oHLAz/iyP2jdWKQlOAB2M2MfmeDqzLxXhVexkC696X Y3CSabd2sadSa+b4204j2Y0ooQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGHJdEA laiLYdnZJOMYHTmWBu6NMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcQQIeEb4qAc40UA0gy2+hojR70LpZa1n/CKdHN0W2PPR7N2Qq5J3Lv6OqP6e aiFdpOGbDLxy/kOQ81O79uFJAE6oxt9k1ItguhCJYXuXOC6G01im3kQ1HqfX4E0w QkehyAw1AldZLrgmFGUsJCQOfWCyV8iSz3WZnKQPyg+fERKeQ4tz3iK7KGHHQE4h 5LNzLr2CpO3xaZTX1j79HOHRdJKhVzDhpF5figUMuq/nLL1kHPcgbAXFnUQWVzfH W1f3qxykydPP1Fe9XqD3M53H1tz8iX2uMN+rVbHGEr6Ojp1mnHk66kggtNJ0MSSn FC3O6jUrfpUq9S7YkoWf+BdLCg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:07:48 2026 by rpki-client