$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: /z1eU8f0/6jfD8GPNu64RwPxUIhO7rDJ2efKxS9oQi8= Subject key identifier: 26:01:5F:32:2E:09:43:D9:CF:DF:45:D6:13:27:90:48:8C:30:A0:E9 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 0700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 06F5 Signing time: Sun 01 Mar 2026 23:05:37 +0000 Manifest this update: Sun 01 Mar 2026 23:05:37 +0000 Manifest next update: Sun 08 Mar 2026 23:05:37 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: dZ+AvUBuSks3b+J+12DzELtG1hmFVGSvBw81ku/kgSQ=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: RhHnpoBAHsdKIJ0M8kxk3PIhGUfwFhDTVBTEMhuHU5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Mar 1 23:05:37 2026 GMT Not After : Mar 8 23:05:37 2026 GMT Subject: CN=69a4c641-74e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:e9:36:9f:9c:0b:ac:dc:79:bb:9c:77:53: 76:b0:a7:02:ab:c1:55:41:5a:b0:5d:75:4f:5f:c9: 00:e4:4f:b8:66:56:90:96:5c:f3:aa:97:da:46:c1: 13:18:9e:02:53:fa:90:b4:d9:ba:47:b6:44:c0:13: 1c:99:50:2e:85:5d:b3:c3:6e:fd:21:7c:05:9d:1a: 1b:56:85:a3:89:26:d8:c1:52:9b:f8:a8:bc:6f:89: 34:0e:53:7c:ad:3f:0a:61:29:a6:e3:37:19:9f:7e: 72:3c:0c:4f:aa:76:b5:a3:57:37:88:26:3d:db:83: f3:a5:7e:a1:51:3c:94:e2:c2:af:83:17:0c:6f:9d: e4:8f:f7:d8:67:ce:fa:7a:74:37:46:ba:97:3b:2c: 1b:e3:be:fe:39:b2:d5:76:02:80:19:94:4a:bd:cb: d8:da:c1:6f:de:22:4e:d6:f6:73:8e:7a:af:9c:be: f5:df:9f:46:e9:51:5b:35:0a:f8:0e:94:e0:89:aa: c9:b3:cd:82:f1:62:cf:d3:a1:1c:27:60:d2:d9:56: c4:d5:04:26:82:d7:76:f6:90:bc:95:5c:e6:e9:e0: 74:22:b8:c8:a3:5b:a8:c3:3b:66:80:9d:13:dc:74: 7f:17:c6:a9:55:f2:e1:b7:cb:82:94:43:4b:12:52: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:01:5F:32:2E:09:43:D9:CF:DF:45:D6:13:27:90:48:8C:30:A0:E9 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:49:4c:10:89:06:ab:b4:c5:a5:8b:6c:82:ff:bb:18:4d:cc: ee:2a:85:29:01:d7:0f:45:4f:a4:5d:58:f7:8b:50:c0:1a:0b: 77:df:0b:ce:d6:22:bd:b0:6a:2d:34:7c:d6:b7:58:f3:af:dd: 93:ef:3f:c8:c0:19:d6:f2:82:c0:c2:ae:87:78:b1:98:8d:a2: 37:ee:04:e4:eb:30:4a:e7:38:51:3e:00:59:c4:f7:12:dc:09: c5:2e:d5:cb:fa:04:9a:dc:b5:1e:60:4f:e8:78:94:9e:13:27: dd:d4:c1:08:d3:61:ee:ba:c4:fb:e4:3c:e2:b6:2b:fb:a1:0a: b1:d9:5d:13:a7:b2:94:09:e8:d1:28:f5:f0:ab:fc:37:b7:43: 01:a9:cb:c1:97:ac:b7:b1:fb:3e:7c:33:92:ca:39:b1:f2:96: ce:59:ee:d1:6d:df:b7:10:5b:6d:9b:e8:68:79:81:c1:f0:ec: 09:28:3d:45:98:1f:5a:69:cb:db:be:1c:37:35:b0:56:58:bb: ed:b6:ba:70:7a:84:24:5e:1a:56:4a:f4:2a:3a:f9:13:cc:6e: cb:96:a2:ce:43:96:1e:13:13:43:44:92:e8:63:21:3d:79:61: f1:df:31:0e:57:cc:7f:ec:7c:fa:c1:e3:0e:d9:83:fd:6e:bb: f4:5e:16:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjYwMzAxMjMwNTM3WhcNMjYwMzA4MjMwNTM3WjAYMRYwFAYD VQQDEw02OWE0YzY0MS03NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+bpNp+cC6zcebucd1N2sKcCq8FVQVqwXXVPX8kA5E+4ZlaQllzzqpfaRsET GJ4CU/qQtNm6R7ZEwBMcmVAuhV2zw279IXwFnRobVoWjiSbYwVKb+Ki8b4k0DlN8 rT8KYSmm4zcZn35yPAxPqna1o1c3iCY924PzpX6hUTyU4sKvgxcMb53kj/fYZ876 enQ3RrqXOywb477+ObLVdgKAGZRKvcvY2sFv3iJO1vZzjnqvnL71359G6VFbNQr4 DpTgiarJs82C8WLP06EcJ2DS2VbE1QQmgtd29pC8lVzm6eB0IrjIo1uowztmgJ0T 3HR/F8apVfLht8uClENLElLv2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYBXzIu CUPZz99F1hMnkEiMMKDpMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKUlMEIkGq7TFpYtsgv+7GE3M7iqFKQHXD0VPpF1Y94tQwBoLd98LztYivbBq LTR81rdY86/dk+8/yMAZ1vKCwMKuh3ixmI2iN+4E5OswSuc4UT4AWcT3EtwJxS7V y/oEmty1HmBP6HiUnhMn3dTBCNNh7rrE++Q84rYr+6EKsdldE6eylAno0Sj18Kv8 N7dDAanLwZest7H7Pnwzkso5sfKWzlnu0W3ftxBbbZvoaHmBwfDsCSg9RZgfWmnL 274cNzWwVli77ba6cHqEJF4aVkr0Kjr5E8xuy5aizkOWHhMTQ0SS6GMhPXlh8d8x DlfMf+x8+sHjDtmD/W679F4WvQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:25:04 2026 by rpki-client