$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: PfLkBIQvkR1fLVOmaoEizptmLCwdFXSviOjpzSMZcaI= Subject key identifier: 12:A9:FF:DA:06:CF:D4:48:03:F2:D3:A3:D6:2E:76:D2:01:1C:43:C8 Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0CDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0CD5 Signing time: Sun 01 Mar 2026 23:58:00 +0000 Manifest this update: Sun 01 Mar 2026 23:57:59 +0000 Manifest next update: Sun 08 Mar 2026 23:57:59 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: 8Y5+92hy9U2CMhRrYafdzqxZTy3VCUa1lmuTxpjH5ss=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: UfHKPMUY6EmaHpXY4OrXsN6dBJ4bjLIXmajgIcZM4a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: Mar 1 23:57:59 2026 GMT Not After : Mar 8 23:57:59 2026 GMT Subject: CN=69a4d288-fc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:96:25:62:33:a3:d7:11:76:ed:45:47:f0: 1a:85:94:92:98:01:2c:da:67:e6:0d:c0:6e:96:98: 02:05:a6:fb:64:45:d4:18:f1:25:e9:fc:01:f9:52: 7a:60:b2:77:86:83:2f:be:8d:e4:09:e4:87:76:70: fd:b4:e4:e4:04:1b:cd:ee:e1:15:ee:30:6f:91:2c: 36:24:08:2c:3e:fe:f0:29:bf:a7:17:e4:58:d3:8e: ce:f0:39:9a:2f:e7:4c:89:bb:2d:2d:8a:e8:f9:e0: e5:3d:2f:17:9f:1c:55:64:9d:a8:8f:3d:46:cf:a1: f8:4e:ff:cd:e0:77:7a:29:4a:02:61:bf:81:0d:2d: b9:71:1b:c3:ee:f2:dd:69:3e:77:65:73:97:fa:59: fc:48:8f:0c:4a:40:39:f4:4d:2a:72:7d:b6:1c:8d: 9a:15:c3:c6:d0:92:f7:a2:d2:ee:f0:6e:56:9a:d9: a4:2b:4c:7f:cf:13:d6:68:fc:33:8b:09:fb:82:0f: 1c:41:0c:7f:6b:24:bc:c3:51:f1:64:c0:7f:ae:4a: d1:e5:f0:6b:7d:9f:ad:5e:7b:8c:42:2b:01:58:55: f1:90:30:bb:d5:7f:7d:46:ec:91:ba:39:9f:a2:41: 98:78:34:42:88:06:38:4c:34:c8:cc:83:fb:73:9e: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A9:FF:DA:06:CF:D4:48:03:F2:D3:A3:D6:2E:76:D2:01:1C:43:C8 X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3a:cf:8f:68:f7:fa:89:c8:35:81:20:48:e2:ab:2f:fb:0a: e2:e2:f8:95:04:39:cf:36:1c:e7:36:78:38:de:53:96:25:83: 5b:c8:99:bf:d3:2c:a7:46:68:d0:bb:a7:80:a3:3b:3f:9b:42: 4d:7c:53:ca:92:ff:bf:06:e2:2a:90:89:9e:64:5a:d7:5b:ae: d7:3c:cf:38:6e:b2:6a:b5:6d:f6:2c:03:7d:ac:ec:c0:6c:b6: da:56:b2:5f:b7:b6:61:41:c6:b9:11:00:2b:36:59:76:bf:fc: 19:36:e1:c1:31:32:60:2e:02:20:ea:f6:90:99:eb:2a:95:38: 4f:72:b7:33:b8:17:5c:17:4b:4d:c5:a5:77:e0:9e:d2:14:bb: 0a:e5:7e:2e:09:2f:be:4c:c4:70:48:73:ef:04:55:de:e4:22: c3:c0:e4:9f:a3:cb:55:d8:f4:1b:bb:70:34:63:3d:b1:94:33: 58:c3:7c:90:f2:b7:6d:14:4a:22:e5:a8:8c:34:83:59:6c:e2: a9:48:25:41:dd:ba:89:71:75:e2:9e:7c:1a:e2:4c:61:0e:68: 53:37:bd:53:88:ee:72:cb:d3:18:84:b5:c7:5b:4e:9e:8f:f1: 59:84:60:69:df:dc:b6:d9:00:a9:a0:5c:57:81:d2:35:0f:1b: b0:bf:ee:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjYwMzAxMjM1NzU5WhcNMjYwMzA4MjM1NzU5WjAYMRYwFAYD VQQDEw02OWE0ZDI4OC1mYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJmWJWIzo9cRdu1FR/AahZSSmAEs2mfmDcBulpgCBab7ZEXUGPEl6fwB+VJ6 YLJ3hoMvvo3kCeSHdnD9tOTkBBvN7uEV7jBvkSw2JAgsPv7wKb+nF+RY047O8Dma L+dMibstLYro+eDlPS8XnxxVZJ2ojz1Gz6H4Tv/N4Hd6KUoCYb+BDS25cRvD7vLd aT53ZXOX+ln8SI8MSkA59E0qcn22HI2aFcPG0JL3otLu8G5WmtmkK0x/zxPWaPwz iwn7gg8cQQx/ayS8w1HxZMB/rkrR5fBrfZ+tXnuMQisBWFXxkDC71X99RuyRujmf okGYeDRCiAY4TDTIzIP7c55yiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKp/9oG z9RIA/LTo9YudtIBHEPIMB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZDrPj2j3+onINYEgSOKrL/sK4uL4lQQ5zzYc5zZ4ON5TliWDW8iZv9Msp0Zo 0LungKM7P5tCTXxTypL/vwbiKpCJnmRa11uu1zzPOG6yarVt9iwDfazswGy22lay X7e2YUHGuREAKzZZdr/8GTbhwTEyYC4CIOr2kJnrKpU4T3K3M7gXXBdLTcWld+Ce 0hS7CuV+LgkvvkzEcEhz7wRV3uQiw8Dkn6PLVdj0G7twNGM9sZQzWMN8kPK3bRRK IuWojDSDWWziqUglQd26iXF14p58GuJMYQ5oUze9U4jucsvTGIS1x1tOno/xWYRg ad/cttkAqaBcV4HSNQ8bsL/uzw== -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:30 2026 by rpki-client