$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: 85PI3kJpuAS3TCABoVmodfoT4Xlcxj0uPlk1s3ZzL0I= Subject key identifier: CD:B5:A1:D8:71:42:B3:72:69:81:8B:F4:CD:45:6E:B2:D4:DE:91:3C Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 0668 Signing time: Mon 02 Mar 2026 01:31:25 +0000 Manifest this update: Mon 02 Mar 2026 01:31:22 +0000 Manifest next update: Mon 09 Mar 2026 01:31:22 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: Y+8ubMN5C5sPsUug4iYskRWWaG4peQ2adgPjrbp8GlI=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: AhupnDtMSD4TtHr+//XndsYvjztQztws6hAAHBlZ7Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: Mar 2 01:31:22 2026 GMT Not After : Mar 9 01:31:22 2026 GMT Subject: CN=69a4e86c-0be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:2d:11:29:e4:01:6d:61:20:54:b8:b8:30: cb:6e:ef:9e:c8:9d:31:f9:d5:c7:29:f1:41:a1:69: 80:ea:63:d4:80:06:9a:19:6c:1a:13:44:a5:ad:93: 7c:eb:04:52:7c:4c:cd:7e:c2:04:f3:94:9d:26:f8: 3a:1e:03:18:f5:66:b3:3e:2c:90:ac:92:61:42:61: 11:69:cb:cc:a5:f8:8a:a0:80:17:30:6c:7b:f3:66: 58:c5:58:a3:d2:01:f2:f9:66:d6:c3:f7:2c:cb:68: 3c:c3:d2:6b:b5:de:ce:d2:04:b9:0c:6d:ba:ef:6a: 82:6c:ad:84:75:98:39:7f:ce:a4:26:32:48:bc:ea: 70:3c:2c:0b:da:42:9f:f8:6a:cc:ef:04:3e:53:49: f4:9c:ac:24:10:a3:86:0e:92:7e:13:fa:08:a2:8e: 7d:d1:9b:eb:a7:b3:b4:72:22:45:59:f9:e8:04:a4: 6e:c1:74:75:5d:90:4b:a7:df:37:5a:ce:36:03:12: 42:f7:bd:32:9c:ac:90:9b:68:7b:ed:57:b3:e9:8d: 35:6e:41:87:ab:60:78:b1:62:a8:66:82:3f:b9:d1: 2f:2a:96:1e:b8:56:8a:6a:d1:23:6a:af:32:d9:2f: 3c:2b:d0:9d:5b:db:f9:7c:d8:27:9a:3c:30:21:e3: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B5:A1:D8:71:42:B3:72:69:81:8B:F4:CD:45:6E:B2:D4:DE:91:3C X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c1:1c:8f:cf:48:c4:ba:7c:d4:ee:65:12:d2:42:10:e8:84: 76:91:0a:5b:b4:e9:51:bf:e4:25:27:44:f8:7f:e5:ac:04:74: fa:d6:6b:eb:a4:ae:24:14:7b:bd:27:89:2f:2d:d5:22:47:79: db:78:fc:b1:1f:0e:43:b2:d2:65:ac:ea:ec:3a:bd:55:2b:0f: b9:63:82:c0:71:dd:dc:70:10:dc:a6:c7:b7:4d:b4:2a:82:97: 35:e8:20:c0:37:bd:da:16:68:af:9a:a7:e9:14:48:d0:c1:01: fa:07:59:18:22:80:8b:13:6a:82:e3:1f:bd:7e:a9:7e:27:28: 58:97:bc:b3:ee:ac:18:c9:c9:b3:2d:24:cf:e2:41:d1:3d:55: c6:ee:2f:d1:9d:d7:d6:3e:8f:58:00:15:54:88:1e:d5:c9:bb: f5:93:64:10:c5:01:2f:d8:31:3c:70:22:fa:64:86:83:fe:ff: b5:01:29:70:b1:c1:f7:83:2c:1a:d3:de:a7:a1:f5:54:e6:fa: b9:3b:cb:39:de:f7:d4:02:e8:6a:5d:be:5a:13:68:95:14:6c: 1c:7c:f0:fc:e9:fc:f6:09:ed:7b:af:d8:30:7d:21:9e:77:7b: 1b:93:97:d0:a3:47:43:2f:e9:59:12:1d:d0:54:fb:87:ed:f7: 43:9e:cf:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjYwMzAyMDEzMTIyWhcNMjYwMzA5MDEzMTIyWjAYMRYwFAYD VQQDEw02OWE0ZTg2Yy0wYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiItESnkAW1hIFS4uDDLbu+eyJ0x+dXHKfFBoWmA6mPUgAaaGWwaE0SlrZN8 6wRSfEzNfsIE85SdJvg6HgMY9WazPiyQrJJhQmERacvMpfiKoIAXMGx782ZYxVij 0gHy+WbWw/csy2g8w9Jrtd7O0gS5DG2672qCbK2EdZg5f86kJjJIvOpwPCwL2kKf +GrM7wQ+U0n0nKwkEKOGDpJ+E/oIoo590Zvrp7O0ciJFWfnoBKRuwXR1XZBLp983 Ws42AxJC970ynKyQm2h77Vez6Y01bkGHq2B4sWKoZoI/udEvKpYeuFaKatEjaq8y 2S88K9CdW9v5fNgnmjwwIeO67QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM21odhx QrNyaYGL9M1FbrLU3pE8MB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo8Ecj89IxLp81O5lEtJCEOiEdpEKW7TpUb/kJSdE+H/lrAR0+tZr66SuJBR7 vSeJLy3VIkd523j8sR8OQ7LSZazq7Dq9VSsPuWOCwHHd3HAQ3KbHt020KoKXNegg wDe92hZor5qn6RRI0MEB+gdZGCKAixNqguMfvX6pficoWJe8s+6sGMnJsy0kz+JB 0T1Vxu4v0Z3X1j6PWAAVVIge1cm79ZNkEMUBL9gxPHAi+mSGg/7/tQEpcLHB94Ms GtPep6H1VOb6uTvLOd731ALoal2+WhNolRRsHHzw/On89gnte6/YMH0hnnd7G5OX 0KNHQy/pWRId0FT7h+33Q57PFQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:59:49 2026 by rpki-client