$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: H2QXM7Oh/0inK3nlItdyF4oCxi+qczqFTXeAaC04DQU= Subject key identifier: 01:19:14:D9:6D:5B:4A:D7:CD:05:E3:47:61:02:70:39:2C:2A:9F:4E Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: 0123 Signing time: Sun 01 Mar 2026 06:44:08 +0000 Manifest this update: Sun 01 Mar 2026 06:44:07 +0000 Manifest next update: Sun 08 Mar 2026 06:44:07 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: VO3sm9GJMbue6PQ3EOxAU93f9r4y97fFhCDuZ1LrCHs=) 2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: jHfK6IyCLOgzWRIKFIJt7aRe94FDSOoHp8+mPczDRNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Mar 1 06:44:07 2026 GMT Not After : Mar 8 06:44:07 2026 GMT Subject: CN=69a3e037-56e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:c5:d6:73:af:18:e3:62:9c:c4:1f:87:f9: 0b:69:ff:55:24:33:a5:87:f4:76:e0:2f:14:91:f3: f7:cf:cf:4f:c0:e2:3c:e1:9c:30:ea:d7:cb:c4:9c: 9b:78:5a:f1:0e:32:09:b3:94:e7:d4:a4:fd:87:30: 77:d7:e4:db:92:45:f1:10:11:99:8f:5a:d7:9e:71: 14:35:ad:e7:1d:45:b1:87:3c:8c:a4:f3:2b:9f:92: a2:d3:53:7e:9a:09:e4:74:d1:1a:b4:c0:43:ca:1b: 97:61:f7:1a:9e:65:44:93:46:e3:5d:ca:aa:a9:ee: ae:5f:2f:3f:7f:31:86:03:a9:3d:0e:f7:f9:a0:9e: ad:93:e5:b5:30:76:c6:6c:32:94:70:42:de:bb:98: 26:83:bb:8e:22:9d:41:77:13:d4:ac:b2:96:85:ad: 24:ab:00:5b:31:67:54:b8:91:e8:e1:8a:04:70:5e: 41:08:f3:26:11:f5:27:63:63:6e:fa:2e:d9:09:e4: 64:1d:a1:65:9e:b8:08:94:df:4e:4b:11:15:4d:bc: 48:f5:f2:a2:67:2c:fc:cc:3b:fa:06:3c:07:c1:c1: c7:f6:94:cd:0b:2b:bc:37:81:41:7f:3e:31:d4:28: 5c:0d:5b:57:cb:f4:81:e7:60:9a:20:c0:41:5e:d8: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:19:14:D9:6D:5B:4A:D7:CD:05:E3:47:61:02:70:39:2C:2A:9F:4E X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:75:9e:1f:2b:d9:8f:42:93:30:ec:0f:9f:88:45:88:52:83: 2e:72:12:42:71:77:ab:fc:f8:a1:d4:b9:be:0c:77:e6:35:aa: 97:8a:4a:b1:7f:bf:d2:26:26:c2:5d:df:6f:92:71:10:0e:66: 51:25:1d:50:b4:65:d4:7c:da:f1:72:46:64:8f:56:93:4e:ce: f7:0c:34:5d:d2:7f:ca:3c:b9:c4:5b:fc:c9:51:b9:d7:15:d9: 38:bd:8a:09:f0:63:b6:f3:99:d3:16:8b:f6:af:f3:78:8e:61: 3d:e3:43:9f:7a:c1:53:67:f9:8b:db:b8:2a:fa:f0:f1:ad:31: 76:42:ce:6f:86:98:d6:27:63:78:6e:2e:85:97:f5:2d:2e:23: 10:d5:5d:6a:63:ca:bd:84:43:d4:27:57:08:7d:0b:ff:80:cb: 3a:77:58:ab:37:00:6d:c4:bb:1a:68:8a:77:cd:9f:78:d6:92: 30:ac:bf:63:f0:c6:ac:43:92:44:20:a1:42:f4:9a:f0:34:e5: 59:b5:6c:9d:4a:50:8a:1d:90:eb:17:a4:a7:ac:7c:91:cc:e4: 16:72:a0:3c:e8:b4:65:60:34:ee:63:ce:6c:f6:07:14:46:1a: 05:c4:6f:51:ce:4a:98:02:69:9d:d0:71:dc:7a:bd:24:c2:1d: ea:bb:c6:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjYwMzAxMDY0NDA3WhcNMjYwMzA4MDY0NDA3WjAYMRYwFAYD VQQDEw02OWEzZTAzNy01NmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20zF1nOvGONinMQfh/kLaf9VJDOlh/R24C8UkfP3z89PwOI84Zww6tfLxJyb eFrxDjIJs5Tn1KT9hzB31+TbkkXxEBGZj1rXnnEUNa3nHUWxhzyMpPMrn5Ki01N+ mgnkdNEatMBDyhuXYfcanmVEk0bjXcqqqe6uXy8/fzGGA6k9Dvf5oJ6tk+W1MHbG bDKUcELeu5gmg7uOIp1BdxPUrLKWha0kqwBbMWdUuJHo4YoEcF5BCPMmEfUnY2Nu +i7ZCeRkHaFlnrgIlN9OSxEVTbxI9fKiZyz8zDv6BjwHwcHH9pTNCyu8N4FBfz4x 1ChcDVtXy/SB52CaIMBBXti8JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEZFNlt W0rXzQXjR2ECcDksKp9OMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALXWeHyvZj0KTMOwPn4hFiFKDLnISQnF3q/z4odS5vgx35jWql4pKsX+/0iYm wl3fb5JxEA5mUSUdULRl1Hza8XJGZI9Wk07O9ww0XdJ/yjy5xFv8yVG51xXZOL2K CfBjtvOZ0xaL9q/zeI5hPeNDn3rBU2f5i9u4Kvrw8a0xdkLOb4aY1idjeG4uhZf1 LS4jENVdamPKvYRD1CdXCH0L/4DLOndYqzcAbcS7GmiKd82feNaSMKy/Y/DGrEOS RCChQvSa8DTlWbVsnUpQih2Q6xekp6x8kczkFnKgPOi0ZWA07mPObPYHFEYaBcRv Uc5KmAJpndBx3Hq9JMId6rvG3Q== -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:11 2026 by rpki-client