$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: j5C0FzY9GcWEQoGYIqxmTExK/opW5N413+gieiMdGC8= Subject key identifier: E7:B7:83:FF:19:56:F9:C6:E1:AA:70:52:A2:99:F9:57:7F:A9:1A:98 Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: 8F Signing time: Sun 01 Mar 2026 08:58:21 +0000 Manifest this update: Sun 01 Mar 2026 08:58:21 +0000 Manifest next update: Sun 08 Mar 2026 08:58:21 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: dkyeKsojZuKM53xEbdwPZKkrvfl81bs3QWNep7wIcKw=) 2: E641780E535211F0A795A950C4F9AE02.roa (hash: ed5G9bTTE4ta+9ZR/j/PVZoByMJafJHwh2lR+lbY92s=) 3: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: uMO+2JAcztORNSv06a9gx7VlI/CanLXKpbYCi8Zh4kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: Mar 1 08:58:21 2026 GMT Not After : Mar 8 08:58:21 2026 GMT Subject: CN=69a3ffad-5a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:0f:fb:81:79:ba:cf:9a:32:91:e3:4b:9a: 0f:fc:9c:12:06:61:91:76:67:c1:66:30:20:8d:d2: 66:d3:86:f0:c5:90:bb:26:2e:a1:be:45:53:f8:c0: 77:fb:16:05:11:ff:c1:8b:84:9b:09:a3:0f:04:df: 84:46:97:f4:31:6e:0d:c8:44:37:7e:aa:d7:ff:7f: 7f:ee:3a:ea:25:ad:69:43:3a:26:0f:60:28:3b:60: 31:ef:34:de:b3:59:53:c7:54:5a:8c:89:2f:2b:42: f8:11:2f:e0:96:67:5c:ca:89:0e:b5:c3:2f:50:39: 22:18:01:ee:31:54:91:6b:d4:4f:b4:9b:28:58:ec: da:03:33:fd:24:2e:40:a8:49:8d:c4:bd:11:fc:49: 36:7b:75:b0:2b:24:8b:f2:04:26:78:1e:c5:9d:74: 0d:41:c6:e5:85:d8:17:36:62:e1:fe:a9:53:7e:1a: 2f:e9:7a:55:0a:a3:bb:55:cd:a7:97:21:82:9e:da: 09:8e:04:a9:36:96:26:a2:a9:c9:15:6c:3f:47:a6: 47:07:7b:9f:6d:47:5d:af:ac:17:aa:7b:2e:e2:4d: 61:53:14:c8:3d:28:df:3d:b2:29:94:ad:27:84:73: 88:d9:01:b8:3a:4b:e8:dc:26:20:0b:30:d4:3e:c0: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B7:83:FF:19:56:F9:C6:E1:AA:70:52:A2:99:F9:57:7F:A9:1A:98 X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:99:9b:49:c6:7e:65:ec:cb:6b:69:b7:7b:0b:07:8d:cd:5b: 5a:b3:3a:8d:a1:14:25:13:0d:a0:62:3b:c4:b8:1e:3b:5d:c1: 58:3c:6c:cb:64:79:15:2b:a4:3e:2f:13:be:24:54:98:1f:ce: a0:cc:c7:8f:36:0e:0a:14:cd:26:e3:9a:c1:51:57:26:73:2f: ca:f0:c9:b7:51:5c:1d:90:00:b1:d1:76:91:c9:95:0d:2a:41: 0e:94:29:07:8e:6f:dd:a4:1a:b3:cd:70:0b:87:15:6e:38:14: e9:cd:cc:a5:e4:00:60:4e:27:8f:43:7d:98:49:8d:2c:7f:4d: 8e:20:47:c8:61:f6:e9:f9:75:ef:31:97:c5:e1:4e:3a:c7:d7: 4c:b4:1a:6c:2b:5c:2a:a6:6e:5a:ae:77:34:63:da:a1:91:2a: 51:75:05:61:c4:a1:62:ab:52:7f:5f:40:c5:f9:88:f8:28:cd: 20:d5:3f:3f:ff:a0:75:d0:f8:75:b9:26:45:90:86:e0:bf:ce: f5:70:33:7b:e1:47:85:3a:38:aa:40:57:62:68:f5:b5:ef:f4: 29:a0:de:c0:a0:e2:49:70:b0:38:36:a2:95:45:10:aa:ac:11: bd:81:fb:ff:14:45:ba:11:4f:df:9e:d8:34:b4:55:b0:80:f6: 9e:0c:4f:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFCQUMxMTAvBgNVBAUTKEI0MDM4QUI2NDAzOUYzMTQ1NjIyQTIwRkY3MEVEN0JF MUQ0RTdGOTEwHhcNMjYwMzAxMDg1ODIxWhcNMjYwMzA4MDg1ODIxWjAYMRYwFAYD VQQDEw02OWEzZmZhZC01YTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3t0P+4F5us+aMpHjS5oP/JwSBmGRdmfBZjAgjdJm04bwxZC7Ji6hvkVT+MB3 +xYFEf/Bi4SbCaMPBN+ERpf0MW4NyEQ3fqrX/39/7jrqJa1pQzomD2AoO2Ax7zTe s1lTx1RajIkvK0L4ES/glmdcyokOtcMvUDkiGAHuMVSRa9RPtJsoWOzaAzP9JC5A qEmNxL0R/Ek2e3WwKySL8gQmeB7FnXQNQcblhdgXNmLh/qlTfhov6XpVCqO7Vc2n lyGCntoJjgSpNpYmoqnJFWw/R6ZHB3ufbUddr6wXqnsu4k1hUxTIPSjfPbIplK0n hHOI2QG4Okvo3CYgCzDUPsDSzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOe3g/8Z VvnG4apwUqKZ+Vd/qRqYMB8GA1UdIwQYMBaAFLQDirZAOfMUViKiD/cO174dTn+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUJBQy82NDlCQzNCMjUw QzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi90QU9LdGtBNTh4UldJcUlQOXc3WHZoMU9m NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUJBQy82NDlCQzNCMjUwQzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi90QU9LdGtBNTh4 UldJcUlQOXc3WHZoMU9mNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY5mbScZ+ZezLa2m3ewsHjc1bWrM6jaEUJRMNoGI7xLgeO13BWDxsy2R5FSuk Pi8TviRUmB/OoMzHjzYOChTNJuOawVFXJnMvyvDJt1FcHZAAsdF2kcmVDSpBDpQp B45v3aQas81wC4cVbjgU6c3MpeQAYE4nj0N9mEmNLH9NjiBHyGH26fl17zGXxeFO OsfXTLQabCtcKqZuWq53NGPaoZEqUXUFYcShYqtSf19AxfmI+CjNINU/P/+gddD4 dbkmRZCG4L/O9XAze+FHhTo4qkBXYmj1te/0KaDewKDiSXCwODailUUQqqwRvYH7 /xRFuhFP357YNLRVsID2ngxPTA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:18 2026 by rpki-client