$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: CVhxHHxRUnFae44Bpg4eHX0GpKuGiqopX8b92riWTlU= Subject key identifier: E9:FC:49:1B:F7:A2:46:40:7B:09:CB:20:63:07:B7:AC:26:DB:AB:C1 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A3E Signing time: Sat 28 Feb 2026 20:01:38 +0000 Manifest this update: Sat 28 Feb 2026 20:01:38 +0000 Manifest next update: Sat 07 Mar 2026 20:01:38 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: RY9DLsv19ItS97Hb0uELNprBAghAtY6uDb6ZORQ85Ec=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 0JDfCgaj0qi5DfzCSt+R5bW4oauazIr/umzt83Q1Gmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Feb 28 20:01:38 2026 GMT Not After : Mar 7 20:01:38 2026 GMT Subject: CN=69a349a2-6b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:84:3a:c8:50:f1:f4:1c:b5:de:99:6f:bd: b2:f4:3e:e6:34:e4:e3:73:3b:3e:31:78:63:48:54: d7:3f:bb:f7:14:1c:2e:cc:e2:9e:c6:1a:dd:6b:84: b8:b4:fa:7f:c8:92:e7:69:c0:42:a6:50:e0:4f:13: 84:8e:6d:e3:cd:c6:43:4e:59:61:c5:aa:ea:db:41: 43:44:64:73:dd:82:84:95:8e:7a:22:48:11:3a:7f: 76:f8:e0:4e:20:de:c2:19:a1:24:aa:6b:4a:80:41: ff:af:df:9a:34:3c:53:d8:ed:6c:3c:1d:f7:00:84: d5:be:cb:95:25:54:3f:31:b1:01:d5:3d:4c:aa:04: 05:e7:b8:60:f4:8b:f7:82:8a:b9:e5:d6:87:c9:41: 61:67:9a:f0:87:6e:3b:06:ff:be:84:23:2d:3c:8c: 9c:ae:55:1d:c1:22:0e:c9:fa:27:c5:bc:86:21:66: 9f:0d:f4:c5:25:7b:11:ab:02:92:45:d2:ba:31:af: 4e:c2:d9:a0:55:aa:5d:05:1f:af:95:f9:5b:67:81: 35:46:09:a9:5a:2a:39:88:b2:fc:cf:bd:16:be:ea: 06:71:b8:04:c9:ad:ff:1d:24:9b:77:d4:68:e3:ee: 33:4c:33:48:1a:78:99:5e:a9:ee:63:11:1a:9f:97: a6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FC:49:1B:F7:A2:46:40:7B:09:CB:20:63:07:B7:AC:26:DB:AB:C1 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:de:8d:b8:40:06:45:8f:13:6b:2e:6b:2a:f8:96:7b:e6:a6: 44:f9:1f:1f:f6:a4:32:cb:9c:42:9f:03:b5:71:67:19:c6:97: 12:18:5c:33:be:8d:e2:b8:68:e4:fc:21:6d:b1:79:cc:df:5b: e2:c2:54:0f:4b:a2:11:a5:b4:ff:9e:f8:bf:e7:5f:36:af:c7: da:2a:82:82:1e:78:3e:8e:e2:df:8f:62:cd:74:61:83:42:11: 2b:91:70:19:24:ce:05:51:0f:b0:bc:bc:65:6e:37:aa:6d:09: 31:ff:fe:cd:58:b9:1a:78:f8:ed:f0:d9:1e:6b:61:ba:03:cb: 48:fa:5b:9f:07:2e:bb:c0:ee:97:0e:94:69:f1:75:0d:f3:b3: 10:bb:80:4f:fc:8a:d4:86:fc:98:9d:46:2a:9a:d0:9d:4f:dd: cf:2e:6c:e0:79:8e:8a:64:e7:f5:24:4e:99:40:c0:6e:f0:3a: ae:60:3b:62:c3:15:04:ed:2d:3d:38:cb:4c:85:bf:57:24:6f: 84:ff:b7:bd:93:ea:a2:e7:99:fb:d8:69:39:20:70:32:2b:26: 38:f9:66:56:20:05:61:d8:1e:1a:b0:96:98:39:8b:34:31:fd: 70:26:da:ad:34:59:e5:ef:ea:38:65:14:74:54:e0:9e:f2:ed: f8:33:9d:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwMjI4MjAwMTM4WhcNMjYwMzA3MjAwMTM4WjAYMRYwFAYD VQQDDA02OWEzNDlhMi02YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOmEOshQ8fQctd6Zb72y9D7mNOTjczs+MXhjSFTXP7v3FBwuzOKexhrda4S4 tPp/yJLnacBCplDgTxOEjm3jzcZDTllhxarq20FDRGRz3YKElY56IkgROn92+OBO IN7CGaEkqmtKgEH/r9+aNDxT2O1sPB33AITVvsuVJVQ/MbEB1T1MqgQF57hg9Iv3 goq55daHyUFhZ5rwh247Bv++hCMtPIycrlUdwSIOyfonxbyGIWafDfTFJXsRqwKS RdK6Ma9OwtmgVapdBR+vlflbZ4E1RgmpWio5iLL8z70WvuoGcbgEya3/HSSbd9Ro 4+4zTDNIGniZXqnuYxEan5em8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOn8SRv3 okZAewnLIGMHt6wm26vBMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvN6NuEAGRY8Tay5rKviWe+amRPkfH/akMsucQp8DtXFnGcaXEhhcM76N4rho 5PwhbbF5zN9b4sJUD0uiEaW0/574v+dfNq/H2iqCgh54Po7i349izXRhg0IRK5Fw GSTOBVEPsLy8ZW43qm0JMf/+zVi5Gnj47fDZHmthugPLSPpbnwcuu8Dulw6UafF1 DfOzELuAT/yK1Ib8mJ1GKprQnU/dzy5s4HmOimTn9SROmUDAbvA6rmA7YsMVBO0t PTjLTIW/VyRvhP+3vZPqoueZ+9hpOSBwMismOPlmViAFYdgeGrCWmDmLNDH9cCba rTRZ5e/qOGUUdFTgnvLt+DOdMg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:34:15 2026 by rpki-client