$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: 3l5yvTGyJhCabOYoKvNxIVlUfc7LYG55/cpnT8qjiSA= Subject key identifier: 4A:E8:94:7E:E0:81:98:1E:E1:AA:4A:80:82:8C:04:18:9B:D1:6E:D5 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 01EE Signing time: Sun 01 Mar 2026 04:16:20 +0000 Manifest this update: Sun 01 Mar 2026 04:16:19 +0000 Manifest next update: Sun 08 Mar 2026 04:16:19 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: rM4SlNXTk5jsPzeekneRTdSm+LqZlghTw2F6D0xFq3g=) 2: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: oQkH3u9NTYvKUYQPQlkbYyuLgyzF8QlzdxljTJ0MaOk=) 3: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: 2gtTc6ZU74S7+Yus2EBYeK424P/75ngpI7OxmlHbzq4=) 4: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: 0lzHMRu/BEbN9XyM7Nn7lU0Tdf9VP7CQevvwrhAJ9I4=) 5: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: ySS8x+DTKoqsAepHwvR2qHqY0ZCmV9P1QKOa76HzTlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Mar 1 04:16:19 2026 GMT Not After : Mar 8 04:16:19 2026 GMT Subject: CN=69a3bd94-c74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:40:e4:69:c9:69:04:54:39:61:9a:75:9f: 15:68:9c:e1:9e:4b:92:32:5e:da:a2:e0:c9:d3:59: ac:12:49:27:42:d2:9b:25:c4:d1:cf:bb:e9:06:b9: 1c:46:72:df:bd:64:d5:e9:6a:5d:13:22:32:0c:34: 6b:69:dd:8d:97:f1:41:65:f2:ea:de:10:76:e6:34: ab:12:c5:2e:3c:96:50:b4:8e:4f:1c:b2:81:4a:77: 84:16:b9:fc:16:c6:d0:19:6b:ba:2a:86:86:b2:fc: 67:47:f4:a0:e5:32:f1:60:77:9d:f7:cf:b6:8c:14: 37:c1:64:c1:cd:e8:6c:d8:02:1c:81:12:10:d9:57: 12:aa:52:68:d9:12:87:79:ec:1b:2f:5a:a3:d5:00: 35:45:1b:1f:77:9a:66:3f:88:79:5c:96:8d:83:9f: 3f:de:4c:ea:26:72:13:d1:69:b3:8c:54:b5:eb:7a: 32:03:ff:04:39:fc:95:ee:41:81:fb:7f:80:45:e9: 58:4d:65:ff:7a:8f:bb:f3:00:e8:4b:61:94:3f:9f: a3:b8:f1:ba:4c:de:f1:7d:23:fc:81:ba:6e:20:d2: f7:45:b8:22:aa:80:97:80:b1:1f:72:dd:bb:40:d9: 4c:92:af:d3:84:00:06:f7:00:7d:c3:2e:5d:5b:4f: ae:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E8:94:7E:E0:81:98:1E:E1:AA:4A:80:82:8C:04:18:9B:D1:6E:D5 X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:05:09:e2:59:4f:09:49:ed:f1:74:44:b0:49:70:6c:22:41: 91:c6:39:fb:18:6a:9d:ad:64:b2:1e:ec:2c:92:3c:36:f5:b9: 7f:ef:16:d6:76:b5:a8:21:b8:98:8c:28:6e:4f:fa:8f:ac:69: 5c:ce:d7:fc:50:de:95:f6:a3:25:c2:30:3f:fe:b7:6b:80:3f: 28:70:04:dd:79:f2:e9:22:d2:38:e8:7e:a5:fa:e6:3d:22:bd: 09:4a:38:5e:da:fe:11:c9:f9:9d:2a:24:f5:b8:51:12:9e:96: 3d:d1:89:8b:a0:4c:09:ab:a4:d7:9c:84:7a:ba:f3:f8:5b:e8: 71:dd:2b:3a:71:ee:8a:43:c8:bb:e4:a3:b6:dd:b0:60:14:9f: b2:2e:1b:a6:6f:4e:fd:17:53:14:d4:7b:ce:db:6a:ae:8a:a1: 78:ed:13:0a:ed:bd:5f:db:72:af:71:67:3d:52:2a:69:de:75: 18:79:92:8d:6d:7f:05:99:ce:63:41:a7:64:55:01:b5:ea:c6: 3c:01:b8:ab:d2:fb:1b:a2:37:87:23:ea:59:3f:f1:70:04:10: 3e:23:08:c2:e2:06:11:91:6f:0d:d4:95:be:80:ac:2f:9b:95: fe:56:23:f0:94:c8:60:6e:88:b0:8d:ef:6a:21:b9:b5:bd:67: 08:95:7d:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjYwMzAxMDQxNjE5WhcNMjYwMzA4MDQxNjE5WjAYMRYwFAYD VQQDDA02OWEzYmQ5NC1jNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvZA5GnJaQRUOWGadZ8VaJzhnkuSMl7aouDJ01msEkknQtKbJcTRz7vpBrkc RnLfvWTV6WpdEyIyDDRrad2Nl/FBZfLq3hB25jSrEsUuPJZQtI5PHLKBSneEFrn8 FsbQGWu6KoaGsvxnR/Sg5TLxYHed98+2jBQ3wWTBzehs2AIcgRIQ2VcSqlJo2RKH eewbL1qj1QA1RRsfd5pmP4h5XJaNg58/3kzqJnIT0WmzjFS163oyA/8EOfyV7kGB +3+ARelYTWX/eo+78wDoS2GUP5+juPG6TN7xfSP8gbpuINL3RbgiqoCXgLEfct27 QNlMkq/ThAAG9wB9wy5dW0+u2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErolH7g gZge4apKgIKMBBib0W7VMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwAUJ4llPCUnt8XREsElwbCJBkcY5+xhqna1ksh7sLJI8NvW5f+8W1na1qCG4 mIwobk/6j6xpXM7X/FDelfajJcIwP/63a4A/KHAE3Xny6SLSOOh+pfrmPSK9CUo4 Xtr+Ecn5nSok9bhREp6WPdGJi6BMCauk15yEerrz+Fvocd0rOnHuikPIu+Sjtt2w YBSfsi4bpm9O/RdTFNR7zttqroqheO0TCu29X9tyr3FnPVIqad51GHmSjW1/BZnO Y0GnZFUBterGPAG4q9L7G6I3hyPqWT/xcAQQPiMIwuIGEZFvDdSVvoCsL5uV/lYj 8JTIYG6IsI3vaiG5tb1nCJV9tg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:01:36 2026 by rpki-client