$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: dBBPW69SAebvgS5VnG1r42f/lxAySTmYTRoeon56Vrc= Subject key identifier: A3:3B:E7:12:4B:69:FF:02:6C:01:68:03:97:D2:FB:C0:94:02:96:AA Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0E97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E87 Signing time: Mon 02 Mar 2026 01:03:07 +0000 Manifest this update: Mon 02 Mar 2026 01:03:05 +0000 Manifest next update: Mon 09 Mar 2026 01:03:05 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: ydmtMmyAUSozLGk7PkUEtS7TjoQuKCio4HPOlu8Hpek=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: 6kYz/jIqF4bH5D+CFSov74IZW+HxnNg38aTmon4kT+g=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: 0i79WpYlAZ9LIzXBaRHXpaEMFnxhq4fNWyYI1M5ojU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3735 (0xe97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Mar 2 01:03:05 2026 GMT Not After : Mar 9 01:03:05 2026 GMT Subject: CN=69a4e1ca-39c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:2a:15:57:fa:10:d3:3a:21:76:1e:7d:9a: dc:9a:89:76:ef:f7:43:de:46:1d:51:fe:f7:51:12: 05:03:58:e7:20:be:b0:8d:8a:a6:e4:fb:74:48:2b: 13:b1:ac:92:73:7d:21:ad:c1:3b:b4:9f:98:bb:37: 88:90:8f:fa:d4:b6:49:f6:67:24:70:ca:63:2b:54: b1:d9:40:b9:93:29:f8:79:79:78:66:50:d3:06:68: 30:68:2c:12:cd:14:b2:6b:1c:f9:ec:24:f0:4f:df: 8f:52:ad:8f:6e:f3:1d:7f:c4:90:24:9e:30:de:31: cb:c7:6b:f3:1f:de:e0:d9:e6:0a:c3:39:6d:e5:03: cc:7a:48:5b:85:fa:7c:d1:ba:54:1b:5d:8d:f0:70: a9:90:e1:da:c9:07:03:f4:cd:d2:36:77:38:7c:0f: 2a:8e:9a:c3:9e:66:e9:fd:f0:45:8d:39:8d:e0:d5: 39:0b:5c:c2:ed:87:1f:f2:6f:90:1f:cd:91:88:89: 1e:05:3f:78:26:2a:2c:d0:ed:4a:3b:49:26:af:35: da:df:1c:9f:18:46:c6:4c:39:5c:80:ea:df:8c:64: e5:59:73:55:05:1e:db:51:8d:88:b3:ab:68:2e:08: 7c:37:e0:2e:05:ec:ce:da:ae:15:53:94:f8:f5:a4: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3B:E7:12:4B:69:FF:02:6C:01:68:03:97:D2:FB:C0:94:02:96:AA X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:06:4e:a2:1b:30:7a:e7:0a:76:86:e9:11:df:54:da:95:d8: 76:17:5c:ac:d5:a8:5f:df:b9:2b:0c:86:17:0f:db:fa:96:66: d1:32:aa:55:4f:bc:61:94:f5:4e:d7:f7:47:3b:02:31:2d:fd: 96:97:4c:95:f2:67:81:ce:8c:09:9e:cd:45:a1:af:4f:f3:82: fe:46:68:9e:de:9a:f4:ef:31:11:b2:19:02:f9:08:d0:74:57: fd:88:10:67:52:7b:57:20:21:47:94:39:c0:37:78:cf:d5:71: 6c:21:95:f4:b3:4b:7b:cf:e2:bc:1d:dc:77:e7:ae:04:ff:f4: a3:c8:b6:31:bd:8a:9a:f8:7c:65:ca:be:3e:5f:42:cb:ea:c9: d5:a3:a4:33:36:c4:4f:48:06:52:f1:e3:97:2a:39:9a:ac:b5: fd:9d:da:4b:eb:52:01:2b:c0:bc:53:45:7c:19:f4:35:72:85: 58:a3:5e:3e:de:9b:1d:b7:a8:d6:82:b0:03:0b:d0:d3:d0:0d: 31:39:7c:5f:b4:55:04:ba:f0:c3:51:64:f8:98:b6:3a:9f:29: 01:85:32:16:12:f6:9d:b8:5c:4d:7e:50:be:65:fd:39:11:fc: 2f:6c:02:db:be:3f:a9:b5:76:46:71:98:c5:b5:87:4a:21:97: b7:65:af:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjYwMzAyMDEwMzA1WhcNMjYwMzA5MDEwMzA1WjAYMRYwFAYD VQQDEw02OWE0ZTFjYS0zOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5EqFVf6ENM6IXYefZrcmol27/dD3kYdUf73URIFA1jnIL6wjYqm5Pt0SCsT saySc30hrcE7tJ+YuzeIkI/61LZJ9mckcMpjK1Sx2UC5kyn4eXl4ZlDTBmgwaCwS zRSyaxz57CTwT9+PUq2PbvMdf8SQJJ4w3jHLx2vzH97g2eYKwzlt5QPMekhbhfp8 0bpUG12N8HCpkOHayQcD9M3SNnc4fA8qjprDnmbp/fBFjTmN4NU5C1zC7Ycf8m+Q H82RiIkeBT94Jios0O1KO0kmrzXa3xyfGEbGTDlcgOrfjGTlWXNVBR7bUY2Is6to Lgh8N+AuBezO2q4VU5T49aRGowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKM75xJL af8CbAFoA5fS+8CUApaqMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABwZOohsweucKdobpEd9U2pXYdhdcrNWoX9+5KwyGFw/b+pZm0TKqVU+8YZT1 Ttf3RzsCMS39lpdMlfJngc6MCZ7NRaGvT/OC/kZont6a9O8xEbIZAvkI0HRX/YgQ Z1J7VyAhR5Q5wDd4z9VxbCGV9LNLe8/ivB3cd+euBP/0o8i2Mb2Kmvh8Zcq+Pl9C y+rJ1aOkMzbET0gGUvHjlyo5mqy1/Z3aS+tSASvAvFNFfBn0NXKFWKNePt6bHbeo 1oKwAwvQ09ANMTl8X7RVBLrww1Fk+Ji2Op8pAYUyFhL2nbhcTX5QvmX9ORH8L2wC 274/qbV2RnGYxbWHSiGXt2WvPw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:10 2026 by rpki-client