$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json) Hash identifier: 8WJCfnwxP3lnQlkDu5NbosVoPnqrh1EUFmk6z7LYhEo= Subject key identifier: 73:53:A1:C9:19:D1:80:6E:CC:B6:02:57:16:37:02:FA:8A:C5:E9:B1 Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Certificate serial: 109A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft Manifest number: 107D Signing time: Sun 01 Mar 2026 23:52:00 +0000 Manifest this update: Sun 01 Mar 2026 23:51:58 +0000 Manifest next update: Sun 08 Mar 2026 23:51:58 +0000 Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: HLOuSvmuOs74A6EDJ6rWJHbTaIfQJaHKqrM840YAf0o=) 2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: 38iP1UDZ5HIVswjKfNaAplI7jivkq9C797QFF0+FNg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4250 (0x109a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Validity Not Before: Mar 1 23:51:58 2026 GMT Not After : Mar 8 23:51:58 2026 GMT Subject: CN=69a4d120-77cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:7f:59:ec:40:f5:a1:b1:48:b1:fb:4c:6f: 73:4c:4b:14:9b:46:3c:e2:8e:65:4b:23:f6:f5:c5: 53:2b:29:17:3e:fd:6a:27:6c:c4:1e:4f:37:0f:13: c2:f6:20:89:ad:97:d9:f5:57:6b:96:b1:3d:c1:53: f5:bd:11:1e:b6:b9:b2:5b:ac:c9:5c:82:75:38:42: 01:73:e4:bb:f4:43:38:d4:b6:fe:b3:da:8f:e1:5f: 1b:9c:c3:7e:2b:2e:a6:e2:38:e6:b9:5a:54:11:9b: 2f:2e:ee:07:d2:5d:cd:9b:b7:53:ea:d1:fb:de:76: 24:a1:17:32:bb:b2:97:48:c0:91:5b:20:99:f8:15: 98:01:62:48:5b:98:c0:6c:f1:d6:03:24:50:19:f1: b5:c0:0d:41:0f:d2:41:4e:1e:1e:6a:9d:4c:e6:d3: cf:ea:25:b2:ee:00:97:44:2e:42:37:c2:30:a8:3b: 72:29:49:d5:5b:1c:01:5d:d5:dd:e5:aa:aa:34:0e: 84:8e:5f:89:07:b3:27:4b:d0:c2:11:84:01:69:a6: 4d:2c:54:58:75:e4:9f:aa:bb:ec:0b:f5:65:3e:b1: 8c:79:d0:33:5d:2a:ec:e7:4e:9a:8f:a6:de:12:b1: 1a:c0:d0:9d:78:4e:c8:2e:6d:48:5e:4d:8e:49:66: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:53:A1:C9:19:D1:80:6E:CC:B6:02:57:16:37:02:FA:8A:C5:E9:B1 X509v3 Authority Key Identifier: keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f1:2d:9d:57:67:17:3b:1f:9f:ac:86:47:61:37:22:f1:fb: 32:9d:6d:bb:23:23:b3:f5:47:af:16:ed:c6:84:6d:3f:ee:dc: eb:7d:dc:78:97:bb:a1:5d:d8:8d:e6:b8:22:55:dd:35:9d:74: 79:81:8f:6a:2a:79:61:6f:eb:19:b6:e5:05:64:99:ef:b1:e3: f9:3d:71:b7:ef:51:17:71:07:5f:c3:bb:ae:f0:70:69:61:b1: 43:72:8a:0f:09:cc:95:e5:a5:bc:2f:ca:1b:e3:7b:59:7a:62: bb:66:53:30:af:53:9d:83:f2:0f:3b:70:c0:78:82:6c:d3:21: 20:7a:db:5c:ab:cc:5e:d2:2a:67:26:c0:47:66:e4:36:f3:51: dc:c0:55:bf:35:44:bf:17:5d:28:bc:cc:2a:94:8e:e1:b1:72: 7f:29:13:85:9a:c0:97:29:37:0b:c5:84:43:74:eb:f6:6d:3f: 0f:76:0e:e9:c9:af:0b:aa:2a:b8:52:77:ae:74:06:4a:3a:2d: 25:96:d8:d7:86:99:ff:b4:73:95:3f:56:c3:da:8b:aa:fc:1e: 08:ba:98:fa:aa:6f:68:88:b0:8b:fb:f8:fc:f0:b3:0c:d2:92: 24:38:17:ba:aa:b6:b5:98:ca:61:cf:59:da:42:7b:f4:ed:8a: 20:fa:0b:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4 MjM2OEM1MjEwHhcNMjYwMzAxMjM1MTU4WhcNMjYwMzA4MjM1MTU4WjAYMRYwFAYD VQQDEw02OWE0ZDEyMC03N2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1s9/WexA9aGxSLH7TG9zTEsUm0Y84o5lSyP29cVTKykXPv1qJ2zEHk83DxPC 9iCJrZfZ9VdrlrE9wVP1vREetrmyW6zJXIJ1OEIBc+S79EM41Lb+s9qP4V8bnMN+ Ky6m4jjmuVpUEZsvLu4H0l3Nm7dT6tH73nYkoRcyu7KXSMCRWyCZ+BWYAWJIW5jA bPHWAyRQGfG1wA1BD9JBTh4eap1M5tPP6iWy7gCXRC5CN8IwqDtyKUnVWxwBXdXd 5aqqNA6Ejl+JB7MnS9DCEYQBaaZNLFRYdeSfqrvsC/VlPrGMedAzXSrs506aj6be ErEawNCdeE7ILm1IXk2OSWYRLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHNTockZ 0YBuzLYCVxY3AvqKxemxMB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl Zi1HQTR6bmtzY0tDTm94U0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcPEtnVdnFzsfn6yGR2E3IvH7Mp1tuyMjs/VHrxbtxoRtP+7c633ceJe7oV3Y jea4IlXdNZ10eYGPaip5YW/rGbblBWSZ77Hj+T1xt+9RF3EHX8O7rvBwaWGxQ3KK DwnMleWlvC/KG+N7WXpiu2ZTMK9TnYPyDztwwHiCbNMhIHrbXKvMXtIqZybAR2bk NvNR3MBVvzVEvxddKLzMKpSO4bFyfykThZrAlyk3C8WEQ3Tr9m0/D3YO6cmvC6oq uFJ3rnQGSjotJZbY14aZ/7RzlT9Ww9qLqvweCLqY+qpvaIiwi/v4/PCzDNKSJDgX uqq2tZjKYc9Z2kJ79O2KIPoLmw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:51:58 2026 by rpki-client