$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: faCQHF1sqIC+6+61R6yTIbazuBDR+Lkfu6UwVUgaWrA= Subject key identifier: 23:A8:48:89:70:AD:7C:06:A0:BF:FD:A9:D7:1A:2A:21:A3:E4:73:32 Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 0135 Signing time: Sun 01 Mar 2026 06:28:44 +0000 Manifest this update: Sun 01 Mar 2026 06:28:44 +0000 Manifest next update: Sun 08 Mar 2026 06:28:44 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: 4Gb6VqgKy1ONvF8adQ4HRTvNhVf3o9XeQRu1IICPduM=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: rNoN9qQu8LQ3m6mpRD2sIdAYAMWn+KDz+Z0MyLwHYpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Mar 1 06:28:44 2026 GMT Not After : Mar 8 06:28:44 2026 GMT Subject: CN=69a3dc9c-4f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:09:52:c3:b5:c2:03:f2:85:95:23:4d:e3: 5b:2e:2e:95:15:b5:b0:cc:9c:f4:77:97:60:13:70: f1:70:31:b3:83:a2:6e:6e:7c:ab:29:2f:16:cd:11: 05:f1:21:eb:57:ca:de:df:de:cd:d5:42:98:b6:4c: 0b:1f:bf:d2:62:d2:ef:9d:07:6f:68:14:bb:2c:76: 8a:1f:27:62:de:c9:af:97:25:7c:93:14:ed:aa:20: 10:39:46:b4:4c:8a:a9:7e:b0:fe:1a:99:5c:41:f5: ee:4c:3f:2c:00:19:17:06:5c:17:5f:ab:ff:a9:a7: ae:c7:36:55:df:ba:7c:e8:d8:2f:71:1a:12:4e:da: c1:20:40:e7:8a:b4:1a:2a:75:13:a9:65:f1:d5:7b: c3:26:1e:ea:40:a5:1e:e5:b0:20:38:48:8d:b0:48: db:ae:0d:40:14:7a:d3:8c:04:4e:6f:4f:cf:fe:4a: 26:aa:74:83:de:f2:85:8f:26:43:4b:e7:0b:78:65: 23:71:cd:dd:47:e4:f6:4d:56:49:83:14:0c:e9:3e: 5d:c0:37:90:6b:18:c5:27:4c:08:0c:ba:97:bd:dc: 8c:7c:5e:7c:9f:86:e3:d3:b9:f0:ce:7e:4a:2e:69: 52:aa:74:35:a7:f3:4d:b1:35:a8:de:48:f4:84:0f: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A8:48:89:70:AD:7C:06:A0:BF:FD:A9:D7:1A:2A:21:A3:E4:73:32 X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:8e:0f:67:6e:bd:54:0a:ad:bd:df:3a:cc:ac:83:1f:a3:71: 67:f8:76:2f:aa:d2:22:4d:4a:72:6a:8c:3b:3a:51:c5:4f:97: b3:bc:6e:a8:6d:24:70:09:be:13:da:0b:08:fe:0d:dc:3a:2a: 66:48:c7:61:4d:eb:c3:51:cc:ce:d6:6a:b8:e1:61:d6:47:e8: d8:9d:c9:54:82:06:c9:3d:09:05:d3:fa:df:42:23:da:6b:f4: d9:cb:cf:99:5c:bd:f3:48:59:56:cb:78:d5:53:fa:8d:38:ef: d3:f6:58:fa:52:05:54:e4:fc:c4:00:b0:73:e3:da:c0:b0:93: 00:ae:f1:d4:d1:fa:77:0a:69:31:e2:53:bb:cd:78:91:70:3c: c5:bc:52:d1:66:e3:25:ef:66:03:3b:df:af:c6:4c:73:f4:7c: 5e:a7:3a:17:1c:4c:e9:e3:f0:59:2c:82:ee:c2:90:20:52:05: 09:09:d1:4f:02:04:4d:25:c6:6d:01:75:25:b5:90:ef:67:b6: 47:14:34:a0:9b:67:00:95:8b:40:5a:c3:c4:d1:5c:c7:fa:57: 60:39:9d:d1:61:e2:ca:8d:85:3c:74:12:6d:d1:57:85:20:67: a0:77:77:77:e0:f5:38:51:ef:fa:de:28:2c:a8:a7:02:c8:40: 3f:13:8a:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjYwMzAxMDYyODQ0WhcNMjYwMzA4MDYyODQ0WjAYMRYwFAYD VQQDEw02OWEzZGM5Yy00ZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv8JUsO1wgPyhZUjTeNbLi6VFbWwzJz0d5dgE3DxcDGzg6JubnyrKS8WzREF 8SHrV8re397N1UKYtkwLH7/SYtLvnQdvaBS7LHaKHydi3smvlyV8kxTtqiAQOUa0 TIqpfrD+GplcQfXuTD8sABkXBlwXX6v/qaeuxzZV37p86NgvcRoSTtrBIEDnirQa KnUTqWXx1XvDJh7qQKUe5bAgOEiNsEjbrg1AFHrTjAROb0/P/komqnSD3vKFjyZD S+cLeGUjcc3dR+T2TVZJgxQM6T5dwDeQaxjFJ0wIDLqXvdyMfF58n4bj07nwzn5K LmlSqnQ1p/NNsTWo3kj0hA+YIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOoSIlw rXwGoL/9qdcaKiGj5HMyMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiI4PZ269VAqtvd86zKyDH6NxZ/h2L6rSIk1KcmqMOzpRxU+Xs7xuqG0kcAm+ E9oLCP4N3DoqZkjHYU3rw1HMztZquOFh1kfo2J3JVIIGyT0JBdP630Ij2mv02cvP mVy980hZVst41VP6jTjv0/ZY+lIFVOT8xACwc+PawLCTAK7x1NH6dwppMeJTu814 kXA8xbxS0WbjJe9mAzvfr8ZMc/R8Xqc6FxxM6ePwWSyC7sKQIFIFCQnRTwIETSXG bQF1JbWQ72e2RxQ0oJtnAJWLQFrDxNFcx/pXYDmd0WHiyo2FPHQSbdFXhSBnoHd3 d+D1OFHv+t4oLKinAshAPxOKCA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:16 2026 by rpki-client