$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: s9OHMwrlYKCvodFA4jzWt83re6PhL3UGI9qn2czktjw= Subject key identifier: C2:2B:B6:EB:5B:3A:B7:8D:68:A5:73:84:F9:97:1D:CE:F6:EF:0B:CA Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 01BB Signing time: Sun 01 Mar 2026 04:52:58 +0000 Manifest this update: Sun 01 Mar 2026 04:52:58 +0000 Manifest next update: Sun 08 Mar 2026 04:52:58 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: 8TiN3YKxeBB8UzFM7GgYkE4grojNGMTqFmfOp0Sfe2I=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: hRALKKZYrXjRAZFH/kodixrgghdkVI/t4Zis6l2iMMA=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: kvbyJ+mw1VFyycQGI4PvuQ7WEDW+ZObcmk/xeH55Jik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Mar 1 04:52:58 2026 GMT Not After : Mar 8 04:52:58 2026 GMT Subject: CN=69a3c62a-3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:33:06:26:3a:82:ff:c6:62:b2:c6:76:ab: 92:f1:16:74:11:da:e8:43:47:e1:96:08:6c:d8:e9: 66:86:f7:4a:de:ea:31:0d:79:70:84:00:bc:c1:f3: b2:6d:cf:05:30:8e:d6:8f:08:9c:76:80:86:7c:c0: b1:98:d7:05:bd:7a:f0:d8:c2:73:39:56:13:f6:3a: 3f:0f:cc:dc:43:f7:47:43:94:d9:9c:e6:8d:d3:06: c5:01:e1:2c:6e:16:45:40:7e:63:10:46:e9:34:b0: 44:b3:f0:92:dc:66:78:9c:ee:21:64:cc:4c:84:e6: 79:9c:fa:9b:58:43:63:fc:5c:5a:9f:4c:4e:70:fe: db:54:30:f8:7f:30:5f:11:2c:2a:c0:e8:e8:75:e9: 2f:95:67:76:6e:0f:bf:e1:ab:4e:70:1e:02:65:1e: bc:80:47:e6:a7:97:e6:cf:36:ad:74:ed:f6:9d:39: 9a:99:db:1d:9d:2d:53:6a:78:3b:88:cd:4f:0f:24: fa:8f:39:9f:f0:e6:17:50:59:a4:e9:15:df:ef:c6: 9a:c8:f7:8f:af:45:73:cb:64:71:9d:be:0c:ba:6d: 9f:9b:88:b9:f3:cf:9f:e8:e2:38:23:d1:42:22:3d: 11:70:c6:26:f5:3a:21:28:fb:e5:58:e1:1b:27:ee: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2B:B6:EB:5B:3A:B7:8D:68:A5:73:84:F9:97:1D:CE:F6:EF:0B:CA X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e2:bc:8f:93:09:c4:a6:4c:8d:3d:25:c0:71:14:5d:01:ec: 6b:1e:6e:bf:82:e3:02:b1:40:a4:c9:6b:63:30:3d:ea:85:a5: 39:25:96:2e:69:3d:61:3b:ac:52:5e:b7:e0:b9:1e:fb:ac:94: 84:73:ab:53:b1:19:41:0f:58:5f:2d:f6:d6:ad:97:bf:36:bd: 66:87:6a:50:4b:c6:da:4f:5e:99:ba:7e:74:f9:de:5e:38:c8: 79:bd:2c:94:6e:c7:0a:10:67:a2:30:ad:47:3f:fb:d7:49:4e: ae:81:1c:53:77:46:ee:39:99:d2:18:19:35:be:d3:75:af:74: d9:b2:bc:5c:d8:91:98:5a:fe:3b:0e:fd:fd:fc:05:90:04:fb: 45:51:4e:52:72:de:59:32:4a:c4:b3:be:fd:bd:50:98:bf:72: 4a:98:a9:a2:56:74:72:89:65:4b:4a:00:74:01:e8:67:fc:87: e7:6b:2c:c5:18:98:08:05:56:a0:0a:bb:4f:6e:1b:9c:53:d8: 2e:1a:6d:6c:a7:02:28:29:2e:c5:8b:82:1e:c4:31:cb:54:d4: b1:f3:1a:ab:fe:72:80:b6:c0:77:65:13:82:ac:53:6b:75:8b: 65:20:3a:7b:7f:3b:4e:32:0c:c2:e6:e4:bc:2b:4f:7e:f6:f8: 29:8f:89:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjYwMzAxMDQ1MjU4WhcNMjYwMzA4MDQ1MjU4WjAYMRYwFAYD VQQDDA02OWEzYzYyYS0zYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4MzBiY6gv/GYrLGdquS8RZ0EdroQ0fhlghs2OlmhvdK3uoxDXlwhAC8wfOy bc8FMI7WjwicdoCGfMCxmNcFvXrw2MJzOVYT9jo/D8zcQ/dHQ5TZnOaN0wbFAeEs bhZFQH5jEEbpNLBEs/CS3GZ4nO4hZMxMhOZ5nPqbWENj/Fxan0xOcP7bVDD4fzBf ESwqwOjodekvlWd2bg+/4atOcB4CZR68gEfmp5fmzzatdO32nTmamdsdnS1Tang7 iM1PDyT6jzmf8OYXUFmk6RXf78aayPePr0Vzy2Rxnb4Mum2fm4i588+f6OI4I9FC Ij0RcMYm9TohKPvlWOEbJ+4lfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIrtutb OreNaKVzhPmXHc727wvKMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWOK8j5MJxKZMjT0lwHEUXQHsax5uv4LjArFApMlrYzA96oWlOSWWLmk9YTus Ul634Lke+6yUhHOrU7EZQQ9YXy321q2Xvza9ZodqUEvG2k9embp+dPneXjjIeb0s lG7HChBnojCtRz/710lOroEcU3dG7jmZ0hgZNb7Tda902bK8XNiRmFr+Ow79/fwF kAT7RVFOUnLeWTJKxLO+/b1QmL9ySpipolZ0collS0oAdAHoZ/yH52ssxRiYCAVW oAq7T24bnFPYLhptbKcCKCkuxYuCHsQxy1TUsfMaq/5ygLbAd2UTgqxTa3WLZSA6 e387TjIMwubkvCtPfvb4KY+Jsg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:54 2026 by rpki-client