$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: Cd10sjxEh56nhGbc4o5VJV6qS/YxU/B3MFT+tWcMaUo= Subject key identifier: DB:AD:CC:2E:55:F0:66:C6:05:B0:D6:F9:BB:A3:F4:97:C6:18:42:DF Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 01D3 Signing time: Sun 01 Mar 2026 04:24:26 +0000 Manifest this update: Sun 01 Mar 2026 04:24:25 +0000 Manifest next update: Sun 08 Mar 2026 04:24:25 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: x+fV77aSzyF7Uc7hSGDgjXx5mQldGkOPTJbngzApHmE=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: HRtaeBIfXS4j0TAnrmFrjM5dZZkH7hynrpn4rWDNaLw=) 3: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: k/lLY0AMn3sVt+u3zakrgiqTYvFE4y1vIBdfhQf434s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Mar 1 04:24:25 2026 GMT Not After : Mar 8 04:24:25 2026 GMT Subject: CN=69a3bf7a-b60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:21:5c:e0:95:20:1d:86:5d:62:93:62:1e:54: 39:29:16:e3:2e:0e:6c:83:83:f3:27:7e:c1:2e:81: e4:95:8c:00:43:9a:a7:02:a0:93:15:48:87:bd:a0: 57:37:da:aa:28:aa:13:27:88:7d:93:8c:a8:5f:3b: 41:11:e2:c8:09:50:04:98:84:5c:1e:f9:73:29:d3: 6b:0a:3b:e4:24:9a:5d:b9:47:3e:fd:67:19:57:29: 85:19:31:6b:e8:9b:c6:66:a7:59:70:58:c0:d0:c6: aa:e0:df:be:d8:7d:fb:19:a6:32:f3:a8:9c:92:a8: 89:ba:f5:db:bc:16:36:82:df:28:d0:3b:a3:2f:de: 89:75:e1:14:0a:f8:3a:3e:5a:c9:a4:bf:be:a1:1e: e8:b2:0b:25:5e:78:09:d8:df:c9:d7:9a:90:bd:b5: 57:ff:cc:97:c4:47:7b:70:9c:06:b5:76:6f:76:4b: 7a:30:47:e2:32:4b:5f:58:df:68:c9:9f:14:d5:bd: 2d:e7:de:33:66:65:2a:36:5b:b8:f5:7a:63:14:ff: 0e:78:cf:e3:ea:31:a5:d5:77:08:1e:ee:50:69:fd: 86:74:7b:7e:d7:d2:16:cc:1d:c5:07:f9:75:16:28: 53:7a:fc:d4:79:3f:2d:f9:9e:e3:4e:c6:22:1c:d8: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AD:CC:2E:55:F0:66:C6:05:B0:D6:F9:BB:A3:F4:97:C6:18:42:DF X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:72:5d:df:73:4f:42:e2:00:18:17:84:45:33:ba:00:58:b4: 8a:0c:6a:f5:c2:70:5f:b5:38:85:03:e2:82:ca:31:eb:06:b6: c0:93:07:f4:83:7a:a3:10:16:84:c8:e5:f3:2c:1f:a3:fc:83: f7:a9:c3:61:b9:77:13:21:16:7c:dd:40:43:ca:f7:f5:9f:c8: 39:47:47:8e:6f:8c:8f:0f:43:ae:80:f1:b5:d4:92:75:98:bc: 04:0f:08:e8:d9:a1:35:e1:8a:80:7f:1f:55:13:a0:b3:ec:1f: ae:cb:02:40:bb:9a:b4:9a:45:4f:79:d8:71:ac:0c:2a:4c:0a: 9e:b8:9b:c7:6a:8b:32:67:3f:7b:71:d7:c1:a9:56:10:1a:54: 5f:a8:8d:bf:34:39:d0:ee:ef:ed:b4:e6:96:1f:ce:db:96:3f: 10:2f:46:8d:f5:bc:6d:7a:64:40:ff:aa:72:48:d6:77:1e:76: e7:6a:4c:7f:c5:b9:dc:66:a1:9a:07:38:0e:2a:37:d7:82:3d: 36:1d:fe:81:d2:61:51:1c:af:0b:20:52:97:ff:70:0a:c2:69: b7:39:b6:eb:ad:ec:34:36:09:aa:93:1b:0a:11:99:1f:53:57: fe:b9:cf:7f:03:15:9f:8f:8d:82:ca:97:c0:22:d1:a7:7c:70: 4c:9d:94:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjYwMzAxMDQyNDI1WhcNMjYwMzA4MDQyNDI1WjAYMRYwFAYD VQQDDA02OWEzYmY3YS1iNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+yFc4JUgHYZdYpNiHlQ5KRbjLg5sg4PzJ37BLoHklYwAQ5qnAqCTFUiHvaBX N9qqKKoTJ4h9k4yoXztBEeLICVAEmIRcHvlzKdNrCjvkJJpduUc+/WcZVymFGTFr 6JvGZqdZcFjA0Maq4N++2H37GaYy86ickqiJuvXbvBY2gt8o0DujL96JdeEUCvg6 PlrJpL++oR7osgslXngJ2N/J15qQvbVX/8yXxEd7cJwGtXZvdkt6MEfiMktfWN9o yZ8U1b0t594zZmUqNlu49XpjFP8OeM/j6jGl1XcIHu5Qaf2GdHt+19IWzB3FB/l1 FihTevzUeT8t+Z7jTsYiHNgUlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNutzC5V 8GbGBbDW+buj9JfGGELfMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASHJd33NPQuIAGBeERTO6AFi0igxq9cJwX7U4hQPigsox6wa2wJMH9IN6oxAW hMjl8ywfo/yD96nDYbl3EyEWfN1AQ8r39Z/IOUdHjm+Mjw9DroDxtdSSdZi8BA8I 6NmhNeGKgH8fVROgs+wfrssCQLuatJpFT3nYcawMKkwKnribx2qLMmc/e3HXwalW EBpUX6iNvzQ50O7v7bTmlh/O25Y/EC9GjfW8bXpkQP+qckjWdx5252pMf8W53Gah mgc4Dio314I9Nh3+gdJhURyvCyBSl/9wCsJptzm2663sNDYJqpMbChGZH1NX/rnP fwMVn4+NgsqXwCLRp3xwTJ2UZA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:29:37 2026 by rpki-client