$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: q0D11tseZ9AMGN1DqXNme5xrhFkS17jRMZ4DwIoPUbM= Subject key identifier: 98:70:CC:5D:BA:66:9C:DA:F2:17:CA:23:4F:09:F0:C2:DE:E7:DE:D7 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0E38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0E1D Signing time: Mon 02 Mar 2026 01:34:36 +0000 Manifest this update: Mon 02 Mar 2026 01:34:34 +0000 Manifest next update: Mon 09 Mar 2026 01:34:34 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: 4G4aT/Qr8Za8x/q2vqN9WtOVP9FPejs9eb8bzCvr0+c=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3640 (0xe38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Mar 2 01:34:34 2026 GMT Not After : Mar 9 01:34:34 2026 GMT Subject: CN=69a4e92c-cead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fd:fc:c7:75:25:27:a3:46:46:ed:6e:56:5b: 69:f3:75:92:fc:6f:2a:09:98:38:da:49:6c:db:c9: af:64:75:b2:ba:3d:ac:95:a5:05:42:0d:31:23:9b: 05:76:08:20:8d:b6:ae:58:c6:ec:81:ca:59:3a:0b: 20:0c:4f:46:37:e1:ed:5f:a5:a0:24:0c:05:80:78: 0f:5c:36:d7:85:2d:1d:ec:6f:cf:30:d2:48:c8:d7: 72:a4:6e:cd:fe:66:90:3e:4c:6c:6e:5c:66:86:95: ba:fe:fd:2c:e0:cc:88:17:3e:82:15:40:ff:a1:c9: fa:49:ea:bd:fa:58:4c:4d:03:e9:fc:ee:59:33:3b: e4:54:46:10:9f:1f:b5:fe:0a:68:22:49:7f:1c:24: 58:3d:a8:cb:2b:13:97:af:90:9b:ec:e9:6d:99:44: b1:63:86:b2:80:b1:4d:18:83:17:39:62:da:77:71: dc:90:de:75:fa:c3:7e:3b:b0:c0:45:61:71:6d:e8: 52:ef:ed:67:a9:bf:4f:f9:58:c8:db:fc:7d:e9:d3: 5a:e5:49:fb:cb:63:9f:c5:13:b8:29:bd:b0:e8:e4: b2:d0:95:21:9c:37:0f:ff:85:8d:cd:ed:4f:c5:23: 1c:6c:17:11:74:8a:d2:38:81:7d:b9:39:12:f7:fa: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:70:CC:5D:BA:66:9C:DA:F2:17:CA:23:4F:09:F0:C2:DE:E7:DE:D7 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e8:b9:95:9c:bb:7d:4f:01:50:81:14:7b:af:c7:f6:98:22: 6c:7e:74:9e:d6:8f:e4:ea:c8:70:3a:1a:3a:b5:55:41:ca:f4: 9b:d6:ac:21:2e:77:60:d6:8c:8f:f5:4c:cb:ca:33:1d:21:2f: 3e:54:f3:3e:e8:d3:63:13:a0:98:ca:d2:ba:a9:f5:dc:af:aa: 00:3e:20:15:f6:e7:06:9a:aa:d3:9a:5b:69:ba:e5:77:b0:47: 59:5c:12:f0:b8:05:75:8d:ee:4f:7a:f4:8c:d3:44:05:a2:b7: d0:9b:fc:7c:50:a4:86:96:fa:87:2d:23:30:5a:29:f6:e0:7f: ec:85:6f:c9:87:b0:d4:72:45:f8:b2:bb:dd:d4:66:5c:e1:e9: 10:39:4c:b5:74:fa:49:15:92:83:de:43:9e:a9:3d:a9:2c:33: 1a:68:4c:e1:c2:1c:79:91:6d:0c:ac:b6:2d:ab:14:0e:b7:67: 8a:b1:ea:25:17:58:c8:98:b2:3d:68:fe:7c:ad:46:a1:f8:58: f7:c1:c0:df:4b:b1:97:f4:c5:cf:ed:3d:db:e4:56:85:d2:e8: f2:21:9e:91:12:36:a1:93:b2:e7:09:9b:14:0f:14:de:70:4f: 1a:79:94:bc:ec:c3:bb:83:3e:69:c8:5f:41:82:4f:93:dc:eb: d2:0a:80:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjYwMzAyMDEzNDM0WhcNMjYwMzA5MDEzNDM0WjAYMRYwFAYD VQQDEw02OWE0ZTkyYy1jZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8v38x3UlJ6NGRu1uVltp83WS/G8qCZg42kls28mvZHWyuj2slaUFQg0xI5sF dgggjbauWMbsgcpZOgsgDE9GN+HtX6WgJAwFgHgPXDbXhS0d7G/PMNJIyNdypG7N /maQPkxsblxmhpW6/v0s4MyIFz6CFUD/ocn6Seq9+lhMTQPp/O5ZMzvkVEYQnx+1 /gpoIkl/HCRYPajLKxOXr5Cb7OltmUSxY4aygLFNGIMXOWLad3HckN51+sN+O7DA RWFxbehS7+1nqb9P+VjI2/x96dNa5Un7y2OfxRO4Kb2w6OSy0JUhnDcP/4WNze1P xSMcbBcRdIrSOIF9uTkS9/p/8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhwzF26 Zpza8hfKI08J8MLe597XMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbui5lZy7fU8BUIEUe6/H9pgibH50ntaP5OrIcDoaOrVVQcr0m9asIS53YNaM j/VMy8ozHSEvPlTzPujTYxOgmMrSuqn13K+qAD4gFfbnBpqq05pbabrld7BHWVwS 8LgFdY3uT3r0jNNEBaK30Jv8fFCkhpb6hy0jMFop9uB/7IVvyYew1HJF+LK73dRm XOHpEDlMtXT6SRWSg95Dnqk9qSwzGmhM4cIceZFtDKy2LasUDrdnirHqJRdYyJiy PWj+fK1GofhY98HA30uxl/TFz+092+RWhdLo8iGekRI2oZOy5wmbFA8U3nBPGnmU vOzDu4M+achfQYJPk9zr0gqAfw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:28 2026 by rpki-client