$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: JNFVwVl1yjj0GQi7J1fIJbr1c2aQEvi4AwBbNXW2dX4= Subject key identifier: 88:DC:49:0F:07:26:CC:CD:2E:1F:EF:41:58:3A:99:15:5D:D7:77:DD Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0AD2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 0A76 Signing time: Mon 02 Mar 2026 00:35:42 +0000 Manifest this update: Mon 02 Mar 2026 00:35:40 +0000 Manifest next update: Mon 09 Mar 2026 00:35:40 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: 50kEO4+G+KqmQTTItOMME6Gc9m0ZE4zfHmx4ckgBWAg=) 2: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: OsgY/uwTYM6NeEyONnxq3HN9YIKdpTvZdliw/rwuT+4=) 3: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: W4HKH5UqI+VVI51zb7ltvtuOeFbUQvkwGVAq0zW7JgE=) 4: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: BbXQvxTlfHdgvbDIHREA9MrezDGy2u1sVN3VMyfnT0A=) 5: 794C43721A5F11F080409056C4F9AE02.roa (hash: JEX9HiFKj1Gpxv9fRbvkSFLhbWXwWYo4/4O6MDucr+A=) 6: B11136C4BA5411F0A7CF623BC4F9AE02.roa (hash: 4m56v9WrLnVPmGdujR4qOaBQSAGX0P92yEZf7PwBOyo=) 7: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: D2Pz6MdJy5D25SqXQeyDzcUr+PAYz/53GJhpSfF/pT4=) 8: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: CY0a3MF9Wjgtmqg8UPruXQ0gE6mWPrkTmn5P+V+20+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2770 (0xad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Mar 2 00:35:40 2026 GMT Not After : Mar 9 00:35:40 2026 GMT Subject: CN=69a4db5e-f49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:93:c1:a7:9f:b4:69:47:fe:95:87:ed:04: ca:0f:92:c5:cc:59:ee:a6:5a:2f:86:99:28:23:ef: c0:5e:14:13:0d:b4:d8:ba:5f:01:24:a3:49:11:65: 5b:a2:f1:7a:76:70:d5:ee:63:13:cb:f1:9f:97:c0: c6:c6:ac:4b:d9:97:e7:6d:76:89:cf:73:cf:28:61: a7:ae:60:01:ab:ac:b5:a4:8d:0e:4d:0f:b2:69:11: 0e:81:80:f8:70:01:a2:12:f6:5e:68:25:e0:7f:fd: 39:f7:cc:e2:c5:65:20:60:6a:73:73:ac:f9:48:11: c3:40:a0:55:4e:24:38:d4:17:9a:80:1e:c2:aa:e8: 82:84:de:70:81:5b:dc:ed:e2:5c:1d:9f:e5:9c:b4: 9f:83:8d:af:53:83:ee:a6:cf:3b:db:8e:83:4f:22: b5:56:34:8f:fe:4d:f2:cc:aa:25:e1:da:b8:10:69: f8:f9:62:bc:6c:95:5a:a9:a6:68:86:69:3c:c9:ac: b5:70:61:84:02:3d:19:4c:c8:3f:cf:3c:57:0e:07: fd:e0:38:a0:0a:d9:c3:0e:86:47:76:6a:b5:3e:94: 22:c7:46:93:14:5c:88:63:a7:3a:b5:26:9f:f7:9b: f8:71:4f:cf:dc:3b:90:62:10:b7:87:c6:db:d9:3b: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DC:49:0F:07:26:CC:CD:2E:1F:EF:41:58:3A:99:15:5D:D7:77:DD X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c3:e3:14:47:27:1b:5b:8e:de:82:f0:32:f0:0e:e4:31:16: 3d:d3:f1:9c:06:f8:27:d7:3b:21:81:d7:71:94:ee:a3:8d:c3: f9:19:52:ca:be:84:6a:b1:f9:a7:12:76:60:bb:94:e1:ed:ff: 8d:0a:89:f0:28:06:3d:86:db:56:90:6b:56:5b:32:d7:a5:ec: dc:47:63:6b:86:2d:3e:b9:44:4d:03:ab:a8:ce:29:85:27:5b: 42:b7:17:b8:8f:f3:51:43:09:2e:14:6b:19:f5:0c:fe:30:e3: af:71:26:af:14:db:1f:3a:a2:7a:08:3c:47:7d:b5:7b:99:e3: b5:41:65:55:ff:06:e6:3c:a1:18:af:cb:39:77:99:a2:4e:10: c2:d7:7b:f0:8d:cd:9b:2f:ac:ae:9e:12:b9:3e:08:98:17:44: 05:a6:a7:58:af:4d:45:be:1f:65:40:d7:93:9c:a0:68:41:cb: 01:49:b1:b5:fa:43:23:0f:f0:85:b7:a9:23:d4:6e:e7:6d:53: 2f:69:ac:98:9f:ca:13:18:00:67:83:8a:d7:d6:ca:74:49:da: 05:c5:32:0c:f1:d7:4f:d9:f9:5d:87:b0:dd:11:4d:01:26:3d: dd:61:8d:95:49:b4:50:19:f4:95:4a:64:f1:33:bb:c1:35:d3: 22:32:0d:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjYwMzAyMDAzNTQwWhcNMjYwMzA5MDAzNTQwWjAYMRYwFAYD VQQDEw02OWE0ZGI1ZS1mNDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvWTwaeftGlH/pWH7QTKD5LFzFnuplovhpkoI+/AXhQTDbTYul8BJKNJEWVb ovF6dnDV7mMTy/Gfl8DGxqxL2ZfnbXaJz3PPKGGnrmABq6y1pI0OTQ+yaREOgYD4 cAGiEvZeaCXgf/0598zixWUgYGpzc6z5SBHDQKBVTiQ41BeagB7CquiChN5wgVvc 7eJcHZ/lnLSfg42vU4Pups87246DTyK1VjSP/k3yzKol4dq4EGn4+WK8bJVaqaZo hmk8yay1cGGEAj0ZTMg/zzxXDgf94DigCtnDDoZHdmq1PpQix0aTFFyIY6c6tSaf 95v4cU/P3DuQYhC3h8bb2TvhGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjcSQ8H JszNLh/vQVg6mRVd13fdMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh8PjFEcnG1uO3oLwMvAO5DEWPdPxnAb4J9c7IYHXcZTuo43D+RlSyr6EarH5 pxJ2YLuU4e3/jQqJ8CgGPYbbVpBrVlsy16Xs3Edja4YtPrlETQOrqM4phSdbQrcX uI/zUUMJLhRrGfUM/jDjr3EmrxTbHzqiegg8R321e5njtUFlVf8G5jyhGK/LOXeZ ok4Qwtd78I3Nmy+srp4SuT4ImBdEBaanWK9NRb4fZUDXk5ygaEHLAUmxtfpDIw/w hbepI9Ru521TL2msmJ/KExgAZ4OK19bKdEnaBcUyDPHXT9n5XYew3RFNASY93WGN lUm0UBn0lUpk8TO7wTXTIjIN6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:54 2026 by rpki-client