$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: SFdvGkjtRRE/sXlAzC334+KYS/VsvGxUFiARN8MNerA= Subject key identifier: F4:84:C4:F0:C1:46:1D:F9:D1:F6:62:0B:E6:03:4B:BB:64:AD:5D:3B Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 021B Signing time: Mon 02 Mar 2026 02:24:19 +0000 Manifest this update: Mon 02 Mar 2026 02:24:18 +0000 Manifest next update: Mon 09 Mar 2026 02:24:18 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: QLrBoL11COUQ0zHpnlSEuWFLDqUVQK+8iZZmJdwtkOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Mar 2 02:24:18 2026 GMT Not After : Mar 9 02:24:18 2026 GMT Subject: CN=69a4f4d3-a52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:4a:c9:64:cb:7b:ee:98:53:1e:78:82:92: 1a:21:38:49:07:54:b0:39:39:cf:90:3c:78:1b:dc: 23:7f:1e:b9:4c:99:ed:46:2e:ae:e5:a4:1a:54:08: 62:2f:71:3d:4a:5f:c9:f4:75:e1:ee:e0:72:69:78: 39:4a:7d:f6:c7:76:71:35:9a:ce:49:70:ab:6d:2e: 04:70:53:49:2e:e1:76:00:70:ef:73:39:c7:2d:65: 50:1e:81:39:b4:4e:4c:29:11:68:17:28:72:8f:bf: 25:9d:43:c0:6c:ad:9e:b7:f3:45:31:40:8d:47:b9: 28:99:e6:72:5c:a4:ce:0c:80:61:7e:16:ab:0c:a2: b1:3f:22:5c:e3:62:04:b0:43:0f:6e:e1:a8:14:92: 38:d2:4a:a8:0a:ae:d4:22:b2:17:f5:ba:48:41:e3: bb:fe:6f:a8:77:4b:38:f7:79:8e:ba:bc:47:02:ef: 76:4b:e3:2d:85:3b:b2:c1:b4:98:1f:36:0f:a2:ee: 8f:dc:7a:f0:37:fb:ba:bd:32:1a:02:0c:0e:21:fb: f4:b7:e1:99:f1:37:02:6f:a9:08:a3:8e:46:d3:d0: 99:ab:22:87:c5:f8:35:46:a7:00:fa:fe:0b:72:a1: c3:1c:d8:3a:0b:6a:99:8d:62:df:08:8c:d5:f8:b3: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:84:C4:F0:C1:46:1D:F9:D1:F6:62:0B:E6:03:4B:BB:64:AD:5D:3B X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:80:88:5a:de:be:7b:56:e3:3d:5b:f0:a5:5d:3e:44:24:2a: c5:50:2c:0c:fc:d0:8d:f8:48:de:c4:7e:f7:d8:36:77:07:58: a8:f5:20:b4:48:1e:af:34:f5:5b:4f:1a:96:3f:2a:11:96:1a: 1d:47:42:2f:f1:9a:41:0f:53:5c:23:6d:3e:82:98:55:9b:02: 41:e6:fe:9a:bc:06:13:ff:66:9d:00:c5:76:6f:eb:82:f7:db: 5d:b8:fe:f1:33:d1:51:e1:ba:ca:60:c2:fe:c1:36:3c:6c:81: 47:29:7b:8f:d1:a8:94:e6:3b:c1:ea:18:62:21:5a:46:d9:32: b3:98:51:08:75:db:75:49:1a:1e:f5:7b:37:d4:d3:75:eb:ab: 8d:a4:0d:71:c1:7b:8f:cd:24:4e:de:94:e6:7f:e9:80:2b:33: ee:cd:e1:22:be:02:d7:42:9a:81:56:87:95:4f:ef:8c:05:1b: c4:2c:53:84:50:61:07:ae:80:7f:5b:8b:13:51:3b:5c:27:dd: 02:a0:98:80:c4:8b:f2:e9:06:7c:7a:30:4e:76:01:70:f4:f5: 42:2c:28:02:01:55:95:10:00:de:e5:c8:1d:c5:ab:bc:3b:23: ba:b6:82:65:dc:49:ba:08:59:9e:47:88:49:a2:ec:33:07:62: c0:86:77:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjYwMzAyMDIyNDE4WhcNMjYwMzA5MDIyNDE4WjAYMRYwFAYD VQQDEw02OWE0ZjRkMy1hNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxudKyWTLe+6YUx54gpIaIThJB1SwOTnPkDx4G9wjfx65TJntRi6u5aQaVAhi L3E9Sl/J9HXh7uByaXg5Sn32x3ZxNZrOSXCrbS4EcFNJLuF2AHDvcznHLWVQHoE5 tE5MKRFoFyhyj78lnUPAbK2et/NFMUCNR7komeZyXKTODIBhfharDKKxPyJc42IE sEMPbuGoFJI40kqoCq7UIrIX9bpIQeO7/m+od0s493mOurxHAu92S+MthTuywbSY HzYPou6P3HrwN/u6vTIaAgwOIfv0t+GZ8TcCb6kIo45G09CZqyKHxfg1RqcA+v4L cqHDHNg6C2qZjWLfCIzV+LNSIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSExPDB Rh350fZiC+YDS7tkrV07MB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGICIWt6+e1bjPVvwpV0+RCQqxVAsDPzQjfhI3sR+99g2dwdYqPUgtEgerzT1 W08alj8qEZYaHUdCL/GaQQ9TXCNtPoKYVZsCQeb+mrwGE/9mnQDFdm/rgvfbXbj+ 8TPRUeG6ymDC/sE2PGyBRyl7j9GolOY7weoYYiFaRtkys5hRCHXbdUkaHvV7N9TT deurjaQNccF7j80kTt6U5n/pgCsz7s3hIr4C10KagVaHlU/vjAUbxCxThFBhB66A f1uLE1E7XCfdAqCYgMSL8ukGfHowTnYBcPT1QiwoAgFVlRAA3uXIHcWrvDsjuraC ZdxJughZnkeISaLsMwdiwIZ3kw== -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:03 2026 by rpki-client