$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: 2GDSRGGxlOIxrbrMV8lLqdDElFcE7sWlSRH5OPmszBw= Subject key identifier: 1A:99:E5:0A:83:E5:9A:2B:B7:D6:20:D9:8C:8B:45:F4:EB:87:CD:0A Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 019B Signing time: Mon 02 Mar 2026 01:01:42 +0000 Manifest this update: Mon 02 Mar 2026 01:01:41 +0000 Manifest next update: Mon 09 Mar 2026 01:01:41 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: 27R0XxeS8isAlDubs/0H6BgkyLsSjviEQ0m1rC03xOc=) 2: D7FEF354562111EFA7B3F00AC4F9AE02.roa (hash: zRLwbdLjJcZ9xIvEJX9pjeEu223B0K+u9rS591OrK1I=) 3: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=) 4: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Mar 2 01:01:41 2026 GMT Not After : Mar 9 01:01:41 2026 GMT Subject: CN=69a4e176-25d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:ba:fe:22:38:c4:75:63:3f:4c:ff:7a:4b: 8f:13:31:c0:cc:93:4d:eb:f9:6d:02:42:e4:fc:4b: b9:36:f7:2b:57:c2:41:5a:12:73:91:33:ce:7d:68: 55:e2:4e:95:b8:81:96:a0:7b:85:c9:6b:0b:da:c4: 4e:42:f7:4d:dd:fd:49:a8:5b:df:cd:b8:08:9f:49: 11:fa:55:2e:2d:73:3a:4e:07:1c:b8:b8:bd:3f:9f: 5b:82:5c:ae:0f:6f:e7:50:df:33:58:e9:04:d8:7d: 21:b7:a1:eb:43:6d:15:c0:2d:f2:01:e8:bc:87:19: 38:b4:1b:2a:75:55:2e:87:22:cd:46:0d:b4:55:a6: e5:ed:4a:da:10:41:72:f2:29:b7:c1:d6:3b:2e:7c: a2:f9:d6:84:52:60:de:23:43:22:ae:96:e2:68:b7: 6c:76:6a:f6:73:1d:88:cd:64:0b:ce:6a:7b:42:65: 03:bb:a8:68:47:69:3b:9f:92:97:e1:de:c7:19:9a: 69:e9:da:be:15:a8:40:c1:09:df:40:8d:e1:d6:0a: d9:b0:82:e8:9d:46:ea:2f:0d:25:64:b1:7e:d3:09: 01:a6:91:af:76:8a:7d:27:3d:e9:05:7f:23:d9:4e: 97:aa:8b:e6:11:7e:8e:e5:b4:2a:bc:d7:f9:9a:2e: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:99:E5:0A:83:E5:9A:2B:B7:D6:20:D9:8C:8B:45:F4:EB:87:CD:0A X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:44:45:22:33:74:54:f9:e9:c3:98:18:9d:ed:f7:71:1b:82: 74:f6:1d:ef:14:92:33:99:27:74:42:bf:06:7d:66:4a:83:fb: 85:d1:56:b3:62:3d:1b:9f:37:c5:de:50:22:69:e1:4e:15:29: e3:75:b6:3b:e2:c2:1f:7e:96:53:3a:98:b4:e9:89:85:bf:05: 5d:52:f9:50:4e:0f:75:70:18:34:68:44:41:6e:ec:89:5e:45: 30:ae:e6:82:10:ba:61:0a:bb:84:4b:4d:91:18:f2:87:0e:34: d8:e0:c6:fa:ac:8a:64:4b:99:da:63:98:a3:3c:db:ac:d8:bb: 39:3d:39:51:67:96:85:25:5b:49:c5:f2:2b:d0:d2:90:27:96: 16:c6:c8:1d:c5:db:64:fa:07:16:6e:a6:c0:a7:a2:d2:1d:1a: d4:16:76:52:6d:23:e7:e8:83:58:13:b0:57:3b:9f:67:2e:a3: 64:9f:15:3d:f2:6c:cd:61:76:b6:73:59:96:61:e3:80:7c:fe: 58:44:71:a6:87:16:2b:d6:84:67:41:45:63:3e:42:85:56:13: cf:c6:30:80:0f:a1:a6:e9:e9:1b:9c:37:4d:e0:96:83:55:7f: 5f:71:de:b3:90:39:88:9e:84:bd:b3:44:1d:4f:ad:ed:e5:6a: 56:8d:73:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYwMzAyMDEwMTQxWhcNMjYwMzA5MDEwMTQxWjAYMRYwFAYD VQQDEw02OWE0ZTE3Ni0yNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NW6/iI4xHVjP0z/ekuPEzHAzJNN6/ltAkLk/Eu5NvcrV8JBWhJzkTPOfWhV 4k6VuIGWoHuFyWsL2sROQvdN3f1JqFvfzbgIn0kR+lUuLXM6TgccuLi9P59bglyu D2/nUN8zWOkE2H0ht6HrQ20VwC3yAei8hxk4tBsqdVUuhyLNRg20Vabl7UraEEFy 8im3wdY7Lnyi+daEUmDeI0MirpbiaLdsdmr2cx2IzWQLzmp7QmUDu6hoR2k7n5KX 4d7HGZpp6dq+FahAwQnfQI3h1grZsILonUbqLw0lZLF+0wkBppGvdop9Jz3pBX8j 2U6XqovmEX6O5bQqvNf5mi51HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqZ5QqD 5Zort9Yg2YyLRfTrh80KMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh0RFIjN0VPnpw5gYne33cRuCdPYd7xSSM5kndEK/Bn1mSoP7hdFWs2I9G583 xd5QImnhThUp43W2O+LCH36WUzqYtOmJhb8FXVL5UE4PdXAYNGhEQW7siV5FMK7m ghC6YQq7hEtNkRjyhw402ODG+qyKZEuZ2mOYozzbrNi7OT05UWeWhSVbScXyK9DS kCeWFsbIHcXbZPoHFm6mwKei0h0a1BZ2Um0j5+iDWBOwVzufZy6jZJ8VPfJszWF2 tnNZlmHjgHz+WERxpocWK9aEZ0FFYz5ChVYTz8YwgA+hpunpG5w3TeCWg1V/X3He s5A5iJ6EvbNEHU+t7eVqVo1zhg== -----END CERTIFICATE-----Generated at Mon Mar 2 20:18:12 2026 by rpki-client