$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: WreXtCZ7L5HWobLZk8uoC6ITFgZIFTvAjOtME/zbayY= Subject key identifier: 73:C3:C0:35:6B:59:FF:D3:BE:0C:9F:3A:84:D9:58:2E:71:42:79:A3 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 09EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 09C9 Signing time: Mon 02 Mar 2026 00:29:42 +0000 Manifest this update: Mon 02 Mar 2026 00:29:40 +0000 Manifest next update: Mon 09 Mar 2026 00:29:40 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: QgjiFDJ0Rg83NzM/an5f8edscTItRUWeoP5sqyIt74E=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: 0FWKl6V2UsAeRLSYgRMr9fF+nuXljQkdSIOnzl7uC2U=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: jPruOReU41tiy9WKYUDnZKPfOqm/FjV3E9pMcApFq0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2539 (0x9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Mar 2 00:29:40 2026 GMT Not After : Mar 9 00:29:40 2026 GMT Subject: CN=69a4d9f6-cc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:89:27:62:ae:65:d7:f5:8d:8e:75:0e:86: e9:94:c1:67:1e:0f:39:ba:b1:a4:0b:d6:52:ab:20: e6:12:11:94:6f:d0:fe:db:eb:02:8a:29:fc:b0:78: b3:83:2b:0d:ca:50:f7:58:ce:fe:b3:d0:b1:de:42: 3d:2f:54:30:65:b7:6b:36:d0:c9:49:34:19:38:70: 4f:32:3f:41:80:38:4e:4e:5d:a5:48:ae:76:90:3c: 35:01:c5:92:14:94:3a:a3:d9:4b:d9:d5:a3:29:1f: 34:c7:b9:e4:f6:34:26:22:01:60:f4:07:cd:65:80: 83:f0:77:90:22:f7:1a:a9:91:b4:66:4c:22:4c:dc: 81:67:cb:7a:5b:ca:32:08:22:ac:dd:ed:f2:ef:7e: 9e:77:9c:ae:0c:d5:52:ff:af:3f:71:54:eb:10:cd: d0:a1:30:dc:39:86:5a:57:36:a2:f5:37:00:a6:f1: 0c:e7:64:38:a2:af:d3:12:cc:59:2d:9b:9a:3b:d3: 3a:03:04:8b:b0:a2:f9:8d:58:83:77:3a:f2:69:60: dd:4f:c8:35:e0:3e:f1:74:52:35:d4:83:6a:0d:dc: 7f:2a:d9:42:ab:0d:35:bd:be:85:fe:e1:e8:d6:75: 6d:fb:46:61:80:b3:6b:5e:37:9f:5c:25:8a:02:51: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C3:C0:35:6B:59:FF:D3:BE:0C:9F:3A:84:D9:58:2E:71:42:79:A3 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e2:2f:b7:ba:54:b5:c5:f0:3c:47:8b:1c:b6:3d:c5:d3:77: e4:ff:12:76:07:a2:18:f6:9d:48:46:2d:c7:09:81:1c:cd:4f: f2:95:b1:c6:ba:21:b9:9b:6b:d0:56:7c:41:77:35:ef:a8:5e: 3e:75:8b:28:44:23:38:56:57:39:3a:92:eb:17:fa:33:80:68: d9:5a:b3:3a:54:f6:05:08:20:39:d6:e7:ba:5f:93:c0:e3:a7: 04:54:33:36:a6:b6:f3:b9:82:81:43:31:8e:f6:54:f6:17:5d: 3e:70:1a:03:9d:01:91:8e:1a:01:6e:67:34:a7:96:a9:e8:ea: f5:62:b7:51:65:2e:c9:53:64:d7:4d:2f:a4:a5:73:1f:ea:d9: e2:d7:5c:7c:bd:5a:fa:62:65:48:e9:ff:fd:8e:04:8a:cc:08: b6:79:0d:46:4e:9f:5f:97:b1:f5:bf:02:dc:8f:51:20:87:7d: b4:36:21:d0:4e:85:ca:62:ba:79:95:52:88:79:b8:b0:d1:39: 61:56:99:b7:86:bb:0c:16:09:ae:ac:d3:26:0d:48:66:b8:8d: 88:5d:1f:01:86:12:9f:9f:33:50:1d:5a:8d:84:8f:b8:f6:2a: cc:b8:56:0d:7b:72:5f:8e:39:ae:8e:55:fb:9a:0f:53:5e:c5: d8:4c:0c:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjYwMzAyMDAyOTQwWhcNMjYwMzA5MDAyOTQwWjAYMRYwFAYD VQQDEw02OWE0ZDlmNi1jYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnOJJ2KuZdf1jY51DobplMFnHg85urGkC9ZSqyDmEhGUb9D+2+sCiin8sHiz gysNylD3WM7+s9Cx3kI9L1QwZbdrNtDJSTQZOHBPMj9BgDhOTl2lSK52kDw1AcWS FJQ6o9lL2dWjKR80x7nk9jQmIgFg9AfNZYCD8HeQIvcaqZG0ZkwiTNyBZ8t6W8oy CCKs3e3y736ed5yuDNVS/68/cVTrEM3QoTDcOYZaVzai9TcApvEM52Q4oq/TEsxZ LZuaO9M6AwSLsKL5jViDdzryaWDdT8g14D7xdFI11INqDdx/KtlCqw01vb6F/uHo 1nVt+0ZhgLNrXjefXCWKAlH6zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPDwDVr Wf/TvgyfOoTZWC5xQnmjMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACuIvt7pUtcXwPEeLHLY9xdN35P8SdgeiGPadSEYtxwmBHM1P8pWxxrohuZtr 0FZ8QXc176hePnWLKEQjOFZXOTqS6xf6M4Bo2VqzOlT2BQggOdbnul+TwOOnBFQz Nqa287mCgUMxjvZU9hddPnAaA50BkY4aAW5nNKeWqejq9WK3UWUuyVNk100vpKVz H+rZ4tdcfL1a+mJlSOn//Y4EiswItnkNRk6fX5ex9b8C3I9RIId9tDYh0E6FymK6 eZVSiHm4sNE5YVaZt4a7DBYJrqzTJg1IZriNiF0fAYYSn58zUB1ajYSPuPYqzLhW DXtyX445ro5V+5oPU17F2EwMrg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:28:40 2026 by rpki-client