$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: i+hrC/vKvG4zQMZNqJTOU053sWbRrd3cYTEMhj/db9M= Subject key identifier: EB:E3:4D:15:24:52:D8:19:AD:72:56:04:EE:B5:10:15:65:25:F8:EF Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: F8 Signing time: Sun 01 Mar 2026 07:20:04 +0000 Manifest this update: Sun 01 Mar 2026 07:20:03 +0000 Manifest next update: Sun 08 Mar 2026 07:20:03 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: 4Cd1YEV9tzCmBUReLo2PtMFlTIlVyZfN1FKtm9XDDH4=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: pFRSFI6h6cepGXA89QRHkbEToNAY1QtSMdW9gUz8rz8=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: Zk4O88j1RIZ+Ku3IeZORoghBRdg89wRXcbXPFK1V55c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Mar 1 07:20:03 2026 GMT Not After : Mar 8 07:20:03 2026 GMT Subject: CN=69a3e8a3-aaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:b1:ae:04:f0:f5:06:90:f8:96:f9:14:08: eb:83:2a:34:d5:ab:b4:75:41:cf:aa:24:81:26:0a: bc:14:b4:bb:1a:ea:53:66:30:74:be:0f:c4:56:3f: 5b:bc:f7:e7:62:52:26:08:82:ce:06:5f:73:52:bf: 00:44:4a:f6:e1:d4:d8:2d:1a:6a:79:b5:0d:4f:88: 17:05:62:f2:3c:21:31:48:dd:44:6b:1b:50:1b:5f: 26:56:51:eb:76:bf:5b:5f:0b:fa:0c:37:83:c7:d8: a7:a3:c4:f3:39:6b:c3:2b:52:1f:68:a7:6e:da:af: cc:77:0e:9d:cb:dd:9f:e7:96:d4:fd:05:3e:e9:e6: c2:82:5d:b5:e1:80:8d:70:52:4f:cc:d3:17:eb:60: 58:16:fb:5d:07:85:77:de:b5:c9:55:84:87:90:12: d7:89:ab:4f:97:ad:e0:23:c6:f4:de:5f:2a:cd:72: d1:a4:18:e9:10:51:32:ee:ff:49:dd:75:16:2b:3c: 6a:4b:0f:c7:79:f6:0e:df:c8:ed:bc:1b:bb:a4:22: 93:78:69:8e:26:c1:67:da:45:36:c2:06:c5:b9:af: 12:00:c0:1d:8f:dd:30:9b:2f:95:89:01:04:88:04: 37:71:12:c5:a3:36:64:cd:85:f2:55:3b:47:65:dc: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E3:4D:15:24:52:D8:19:AD:72:56:04:EE:B5:10:15:65:25:F8:EF X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c7:d4:44:67:78:1a:35:e3:44:62:a8:79:50:a5:8a:b2:3e: d2:f8:d6:6c:52:7b:c2:cf:95:b6:36:3b:5c:3c:b1:da:19:d3: 3c:ce:7f:b5:4b:b1:04:a4:88:19:36:08:08:df:52:3d:aa:85: ae:85:6b:f4:d9:ff:ac:4c:cf:ef:21:ea:30:fe:3d:e0:0d:5b: a7:5d:88:22:6c:18:6f:c9:b9:3a:66:6c:52:56:0b:85:7b:37: a0:3e:e5:a5:00:0a:27:6d:0a:50:4e:52:50:c2:ec:1a:25:ab: 38:33:b6:8c:44:0c:19:30:00:2b:b9:4d:87:5d:2d:0f:ae:a0: 1b:d7:23:4a:6b:dd:8c:41:f9:aa:62:1e:a1:1c:15:00:5c:38: ec:8c:4d:4e:38:3c:f7:b4:d4:54:92:f1:70:4f:ee:ce:b2:1d: 0c:44:e8:14:6f:be:69:70:09:0c:8b:71:4b:92:f1:97:20:d4: 91:80:b9:f2:cf:f6:45:93:aa:47:79:0e:25:7f:52:b2:34:94: 89:8c:10:22:f4:94:08:05:b7:21:8e:b6:db:85:6f:78:8b:26: 21:cf:34:07:14:1b:3a:6f:14:84:7d:6f:c1:f8:9c:95:cb:08: 28:0b:a6:36:40:47:c8:c9:13:9d:d0:68:ba:83:a3:75:60:03: 77:0d:e0:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjYwMzAxMDcyMDAzWhcNMjYwMzA4MDcyMDAzWjAYMRYwFAYD VQQDEw02OWEzZThhMy1hYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH2xrgTw9QaQ+Jb5FAjrgyo01au0dUHPqiSBJgq8FLS7GupTZjB0vg/EVj9b vPfnYlImCILOBl9zUr8AREr24dTYLRpqebUNT4gXBWLyPCExSN1EaxtQG18mVlHr dr9bXwv6DDeDx9ino8TzOWvDK1IfaKdu2q/Mdw6dy92f55bU/QU+6ebCgl214YCN cFJPzNMX62BYFvtdB4V33rXJVYSHkBLXiatPl63gI8b03l8qzXLRpBjpEFEy7v9J 3XUWKzxqSw/HefYO38jtvBu7pCKTeGmOJsFn2kU2wgbFua8SAMAdj90wmy+ViQEE iAQ3cRLFozZkzYXyVTtHZdx92wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvjTRUk UtgZrXJWBO61EBVlJfjvMB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjdCRS8wOUNFMzI2NDlDRkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hl NkdXaDQ5MHFJMFRpRXdyeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATsfURGd4GjXjRGKoeVClirI+0vjWbFJ7ws+VtjY7XDyx2hnTPM5/tUuxBKSI GTYICN9SPaqFroVr9Nn/rEzP7yHqMP494A1bp12IImwYb8m5OmZsUlYLhXs3oD7l pQAKJ20KUE5SUMLsGiWrODO2jEQMGTAAK7lNh10tD66gG9cjSmvdjEH5qmIeoRwV AFw47IxNTjg897TUVJLxcE/uzrIdDEToFG++aXAJDItxS5LxlyDUkYC58s/2RZOq R3kOJX9SsjSUiYwQIvSUCAW3IY6224VveIsmIc80BxQbOm8UhH1vwficlcsIKAum NkBHyMkTndBouoOjdWADdw3g0Q== -----END CERTIFICATE-----Generated at Mon Mar 2 10:13:43 2026 by rpki-client