$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft File: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json) Hash identifier: nAmUgZ9HFWzkJAVINJH2anz3mlI+fGD2XzP/rVje46c= Subject key identifier: 5E:54:57:30:7D:67:48:32:48:9E:71:4F:36:16:AE:8C:BE:F5:DE:9B Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 Certificate issuer: /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft Manifest number: 15 Signing time: Sun 01 Mar 2026 10:29:57 +0000 Manifest this update: Sun 01 Mar 2026 10:29:57 +0000 Manifest next update: Sun 08 Mar 2026 10:29:57 +0000 Files and hashes: 1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: RCcR7VSZz4iTYuWUoRU9DhuQK9lhUCB9VisgeGvJBH4=) 2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Validity Not Before: Mar 1 10:29:57 2026 GMT Not After : Mar 8 10:29:57 2026 GMT Subject: CN=69a41525-f374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:b2:e3:99:25:90:c4:2e:f3:87:92:0e:03: cb:46:3c:09:bd:f2:e7:14:4e:8f:49:22:93:76:dd: 56:8f:c6:e5:20:15:c2:af:04:24:b7:41:55:5f:8d: 85:e3:02:1a:2d:e9:39:2a:f1:e6:8b:a5:10:27:3d: ad:25:02:29:a7:c9:90:53:88:00:01:60:97:2f:8d: 21:4f:ab:72:47:c0:67:1d:a6:b9:94:76:06:3b:31: ec:1a:ef:87:68:a6:d7:e7:db:d3:47:32:6a:04:36: 44:7d:48:c4:f2:78:67:4f:e4:ea:8c:aa:4f:74:99: 37:13:58:b6:f9:e8:e1:8c:ca:a0:0a:55:a1:9f:a6: 8e:57:05:c9:5a:b2:ab:9f:e1:62:82:e3:68:e1:88: 37:6d:93:40:c1:17:de:63:63:78:c0:67:07:1a:63: 55:aa:b4:d2:70:fb:51:24:7e:6b:a9:c9:67:73:cd: 9c:4c:c7:99:d7:6b:09:49:42:8d:a2:cc:00:c8:13: 7e:28:8c:52:73:44:4a:8e:c8:1f:34:4a:b0:7a:ad: db:15:df:07:a8:c9:dd:8a:58:ac:75:74:6a:e3:43: 33:09:50:53:2f:27:29:6a:d9:ff:33:18:44:0b:21: 28:c2:79:11:1c:ee:83:7c:9b:e5:49:6a:8f:0c:38: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:54:57:30:7D:67:48:32:48:9E:71:4F:36:16:AE:8C:BE:F5:DE:9B X509v3 Authority Key Identifier: keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:40:94:53:a6:bf:d5:46:3c:dd:53:9a:ad:5c:93:39:57:07: fc:0c:2d:30:d0:61:28:c1:ae:04:eb:7d:fd:ce:8d:cb:92:d2: 69:49:d5:da:7c:fb:90:6e:2e:81:bc:70:b9:e2:ad:b8:7b:98: 2a:6f:b8:8d:78:04:39:e9:b5:ca:8b:27:5f:8d:f6:e6:c1:66: 2e:96:5e:0b:b9:46:c4:49:1f:82:83:44:dd:ad:c3:7d:07:50: a5:5a:1a:c8:0a:b2:43:fb:2e:f1:2c:f3:b0:63:7e:77:ba:9d: 85:c4:11:84:a3:5a:58:d7:e3:37:c5:28:bd:f7:51:6a:05:1f: fb:ef:b1:3e:1a:ce:b5:de:1a:90:2e:a6:e7:1c:01:06:c9:3c: 82:57:dc:a8:7f:19:f5:bd:a3:09:13:05:09:6d:6c:11:e0:ee: 7f:4f:40:99:3b:f4:df:f1:0f:7e:b3:8b:e3:1f:39:3f:59:94: 11:b6:ca:7f:c2:cd:8e:7c:07:bd:41:e4:02:54:df:f7:3a:4f: 0a:03:c9:22:9e:88:1f:e6:d3:ff:b8:76:cd:f7:60:b4:99:0d: e2:78:65:7c:9d:69:2e:85:a1:16:c2:aa:87:ee:64:de:8c:9e: bc:67:e2:39:c6:55:92:ba:12:6a:84:a7:8a:4c:bf:0f:c9:30: 2a:84:c9:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0I3QjExMC8GA1UEBRMoMjI1NkI4MkIwQTZFREM2MjY4QTNDQzkwQUNDMDVDNzRG MTE0Q0UzOTAeFw0yNjAzMDExMDI5NTdaFw0yNjAzMDgxMDI5NTdaMBgxFjAUBgNV BAMTDTY5YTQxNTI1LWYzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaGbLjmSWQxC7zh5IOA8tGPAm98ucUTo9JIpN23VaPxuUgFcKvBCS3QVVfjYXj Ahot6Tkq8eaLpRAnPa0lAimnyZBTiAABYJcvjSFPq3JHwGcdprmUdgY7Mewa74do ptfn29NHMmoENkR9SMTyeGdP5OqMqk90mTcTWLb56OGMyqAKVaGfpo5XBclasquf 4WKC42jhiDdtk0DBF95jY3jAZwcaY1WqtNJw+1EkfmupyWdzzZxMx5nXawlJQo2i zADIE34ojFJzREqOyB80SrB6rdsV3weoyd2KWKx1dGrjQzMJUFMvJylq2f8zGEQL ISjCeREc7oN8m+VJao8MOPMRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXlRXMH1n SDJInnFPNhaujL713pswHwYDVR0jBBgwFoAUIla4Kwpu3GJoo8yQrMBcdPEUzjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QjdCLzRDQjNBMzg0RkJF OTExRjA5MTJGRTYxQzZENkY1NkJDL0lsYTRLd3B1M0dKb284eVFyTUJjZFBFVXpq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSWxhNEt3cHUzR0pvbzh5UXJNQmNkUEVVemprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QjdCLzRDQjNBMzg0RkJFOTExRjA5MTJGRTYxQzZENkY1NkJDL0lsYTRLd3B1M0dK b284eVFyTUJjZFBFVXpqay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBJQJRTpr/VRjzdU5qtXJM5Vwf8DC0w0GEowa4E6339zo3LktJpSdXafPuQbi6B vHC54q24e5gqb7iNeAQ56bXKiydfjfbmwWYull4LuUbESR+Cg0TdrcN9B1ClWhrI CrJD+y7xLPOwY353up2FxBGEo1pY1+M3xSi991FqBR/777E+Gs613hqQLqbnHAEG yTyCV9yofxn1vaMJEwUJbWwR4O5/T0CZO/Tf8Q9+s4vjHzk/WZQRtsp/ws2OfAe9 QeQCVN/3Ok8KA8kinogf5tP/uHbN92C0mQ3ieGV8nWkuhaEWwqqH7mTejJ68Z+I5 xlWSuhJqhKeKTL8PyTAqhMmw -----END CERTIFICATE-----Generated at Mon Mar 2 12:55:20 2026 by rpki-client