$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: Sk0kC5cd703JQS3feZH2/Vxn17/TNNze4AHAjDaWwD0= Subject key identifier: 54:5F:C9:8F:EF:B5:4E:0F:01:BE:02:C9:19:51:1C:0F:13:69:A4:C6 Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: CA Signing time: Sun 01 Mar 2026 07:59:04 +0000 Manifest this update: Sun 01 Mar 2026 07:59:04 +0000 Manifest next update: Sun 08 Mar 2026 07:59:04 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: 9T+PUbjvJow+tTy9AP8mi+lHEAcCzhGInuI0gOzpVPc=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: K2TvGLjfCFrt3Go6555wRjXixN52lQy9jV9yBNlUFTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Mar 1 07:59:04 2026 GMT Not After : Mar 8 07:59:04 2026 GMT Subject: CN=69a3f1c8-030c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:2f:58:55:e4:96:31:90:71:b1:02:f1:e5: d4:4f:7a:4d:0e:5f:e2:ac:10:d2:28:04:b0:40:d1: 3d:dc:64:87:aa:08:3e:e1:a9:6e:12:94:b5:f7:9a: ac:8f:e8:e6:2b:20:32:ee:77:22:b9:b1:05:c9:cc: 0b:87:34:ed:63:58:58:55:f7:d5:99:a8:e8:02:2b: 78:72:37:d7:50:d3:da:fe:f7:7b:54:11:60:7b:1c: ec:83:67:59:1f:4f:c1:91:81:bd:e0:9b:7b:58:06: 42:15:67:66:d4:9e:0a:a1:8f:98:8a:39:c5:3d:4f: 09:6b:21:33:46:94:e0:2a:94:c2:14:7b:ac:e8:32: ce:8c:25:b5:90:fb:91:d9:7d:af:9d:15:19:1d:6a: eb:5f:08:50:ea:3b:0a:c6:ea:7a:da:a0:49:c7:69: e3:05:5d:cb:eb:ed:54:57:09:2d:ea:bf:cd:00:92: 27:9c:ee:d2:f1:46:d3:95:63:db:6c:5a:15:b7:9e: 4c:7d:f1:d8:f8:bd:db:a8:39:32:16:99:fa:c9:7a: 04:7c:e1:2e:20:03:36:a4:f8:18:b9:5e:e4:8e:f6: 45:f0:c1:a9:5b:a6:79:42:18:c6:c0:50:45:01:99: af:3b:81:c4:4e:52:96:4c:66:98:ee:77:57:a2:7c: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5F:C9:8F:EF:B5:4E:0F:01:BE:02:C9:19:51:1C:0F:13:69:A4:C6 X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:9d:e5:b0:5c:be:d8:1a:55:a3:78:04:52:0d:5f:e6:4c:43: 8b:79:ae:84:86:e6:fa:d8:7b:cb:86:d2:77:eb:40:b4:b0:c0: 57:17:09:bd:d9:69:03:93:a8:ba:45:81:70:4e:24:d0:9e:07: 87:15:55:b6:0f:db:b2:c1:b8:09:a7:48:c5:71:71:3b:d5:d7: c3:a3:01:69:89:47:22:7d:55:d5:3d:13:18:bf:99:0d:56:2f: b9:f0:ab:7e:36:65:e6:51:ce:ef:86:47:b5:f1:82:61:08:36: 2c:fc:ae:3f:8c:97:b9:fe:4c:8d:15:7a:6a:ec:4d:72:79:fb: 8e:7b:02:75:99:1a:f7:fd:9c:c3:3c:e8:de:f0:da:d1:e3:64: 78:8b:50:e9:c9:d3:06:59:bb:de:8f:5a:e7:30:60:28:b5:54: 13:51:88:9b:28:81:64:ee:33:8c:36:fa:16:02:73:77:b5:5d: 9a:f6:93:07:1d:dd:7c:5e:42:65:86:5f:f6:7e:de:09:c8:77: db:18:75:2a:e1:9f:e5:a0:e1:c1:bb:c0:b0:84:94:f6:46:53: 97:15:25:ef:84:72:ef:7e:53:70:f9:2b:16:3b:a0:e5:48:e3: df:49:f9:97:ce:fb:ba:97:2a:81:1a:a8:f9:11:9e:07:e6:2f: c1:51:ad:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjYwMzAxMDc1OTA0WhcNMjYwMzA4MDc1OTA0WjAYMRYwFAYD VQQDEw02OWEzZjFjOC0wMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBgvWFXkljGQcbEC8eXUT3pNDl/irBDSKASwQNE93GSHqgg+4aluEpS195qs j+jmKyAy7nciubEFycwLhzTtY1hYVffVmajoAit4cjfXUNPa/vd7VBFgexzsg2dZ H0/BkYG94Jt7WAZCFWdm1J4KoY+YijnFPU8JayEzRpTgKpTCFHus6DLOjCW1kPuR 2X2vnRUZHWrrXwhQ6jsKxup62qBJx2njBV3L6+1UVwkt6r/NAJInnO7S8UbTlWPb bFoVt55MffHY+L3bqDkyFpn6yXoEfOEuIAM2pPgYuV7kjvZF8MGpW6Z5QhjGwFBF AZmvO4HETlKWTGaY7ndXonzSJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRfyY/v tU4PAb4CyRlRHA8TaaTGMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcZ3lsFy+2BpVo3gEUg1f5kxDi3muhIbm+th7y4bSd+tAtLDAVxcJvdlpA5Oo ukWBcE4k0J4HhxVVtg/bssG4CadIxXFxO9XXw6MBaYlHIn1V1T0TGL+ZDVYvufCr fjZl5lHO74ZHtfGCYQg2LPyuP4yXuf5MjRV6auxNcnn7jnsCdZka9/2cwzzo3vDa 0eNkeItQ6cnTBlm73o9a5zBgKLVUE1GImyiBZO4zjDb6FgJzd7VdmvaTBx3dfF5C ZYZf9n7eCch32xh1KuGf5aDhwbvAsISU9kZTlxUl74Ry735TcPkrFjug5Ujj30n5 l877upcqgRqo+RGeB+YvwVGt/A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:36:54 2026 by rpki-client