$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: +PGQqacXCbBTxvOHTzeggdsC0Q6nY0wmOHwlfNPtlTk= Subject key identifier: 8C:23:77:AA:92:CB:10:78:B9:40:4F:7D:97:B1:B8:8D:E2:E5:5F:D5 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0EA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E85 Signing time: Mon 02 Mar 2026 00:34:18 +0000 Manifest this update: Mon 02 Mar 2026 00:34:16 +0000 Manifest next update: Mon 09 Mar 2026 00:34:16 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: ckz9xpPwTH6UqIDPBjounRNOkICbP4KjaO8dBHOPUp4=) 2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: dWYmbgaVBCtICno2DXbASgGqvt29K/L5vXNYpaWvnIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3744 (0xea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Mar 2 00:34:16 2026 GMT Not After : Mar 9 00:34:16 2026 GMT Subject: CN=69a4db0a-6f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:18:1f:b3:63:d2:74:22:b4:b8:24:96:b0: 77:ae:fc:f1:1d:93:dc:82:7a:71:ac:0f:4e:e8:bc: f0:19:c1:d6:e1:5e:19:8a:d5:e0:dd:19:0e:f6:5f: 3e:54:ae:b0:47:3f:a8:27:9d:f4:40:3a:a2:3d:b9: ba:21:8d:a2:c3:63:3f:90:91:c2:f6:2f:30:47:5f: 35:0c:53:3c:aa:31:33:cf:65:c1:3b:95:87:44:70: f5:c9:e7:cd:9b:db:b9:f4:bd:d2:d7:7b:3e:bf:63: 07:4e:f3:bf:c5:72:b8:64:31:c6:11:76:10:f2:ab: df:5a:86:56:09:41:5b:a0:05:99:ca:05:2d:da:29: 17:73:28:07:c9:46:a1:2e:bf:06:53:84:99:2e:87: 64:af:53:a7:f4:39:ab:36:ee:82:2f:53:09:86:98: 87:39:88:a8:29:7b:19:1f:aa:1e:dd:9e:38:53:5d: af:60:eb:45:b8:05:e1:c3:56:0e:5e:1c:06:81:6d: 35:02:3c:c9:bc:4a:0d:37:7b:28:65:74:19:7b:12: 31:b3:9f:e4:e4:d2:c4:c5:b4:70:16:1f:60:e5:00: 87:cd:7b:c1:1b:1b:3e:72:69:f1:cd:fe:42:3a:2a: 2b:df:11:c0:77:e3:8e:6c:11:44:5e:f9:07:f5:ff: 1a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:23:77:AA:92:CB:10:78:B9:40:4F:7D:97:B1:B8:8D:E2:E5:5F:D5 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:16:cf:fa:1a:24:d1:02:ba:f4:96:4a:ff:08:49:57:99:a1: 30:d3:07:6f:a9:95:39:48:27:13:ef:ec:e5:3d:02:30:95:93: 76:32:ed:4b:87:04:7c:19:f3:81:87:bd:ac:4a:b9:3a:84:8c: 08:e7:ac:b4:c1:2e:5f:d3:4d:92:d5:51:92:34:94:ed:bc:f3: ec:d5:e6:a8:9d:69:6b:55:8f:5c:9e:2a:b7:6c:06:2b:15:6e: 26:d2:dc:fd:db:9b:ed:82:43:89:c3:ec:f4:8e:fd:4c:2f:a2: 45:4e:9e:c5:bd:c5:ae:e1:79:c7:b9:e7:d9:6a:6a:5b:d9:b4: 37:f4:52:4d:c3:82:7f:b7:d8:ca:6b:19:af:c1:9a:fe:a8:ef: f6:74:32:24:96:fb:36:86:a6:21:aa:f7:e3:e2:f4:20:81:4e: 0f:9b:76:ce:5e:e8:eb:30:76:78:42:38:d9:5e:0e:19:9e:0c: 4e:0f:6d:29:9b:57:99:d2:bb:1c:e0:2f:e6:86:1c:13:dd:fb: f3:ca:63:3b:60:19:16:ca:75:46:40:74:c9:c7:14:fc:2e:66: 24:33:a9:33:fb:e2:03:19:bd:db:5a:19:ce:87:bf:c5:a0:c5: 86:36:ab:7c:00:a8:cc:6d:03:63:7b:ba:01:94:d2:f1:7e:0c: a8:aa:e1:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjYwMzAyMDAzNDE2WhcNMjYwMzA5MDAzNDE2WjAYMRYwFAYD VQQDEw02OWE0ZGIwYS02ZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8EYH7Nj0nQitLgklrB3rvzxHZPcgnpxrA9O6LzwGcHW4V4ZitXg3RkO9l8+ VK6wRz+oJ530QDqiPbm6IY2iw2M/kJHC9i8wR181DFM8qjEzz2XBO5WHRHD1yefN m9u59L3S13s+v2MHTvO/xXK4ZDHGEXYQ8qvfWoZWCUFboAWZygUt2ikXcygHyUah Lr8GU4SZLodkr1On9DmrNu6CL1MJhpiHOYioKXsZH6oe3Z44U12vYOtFuAXhw1YO XhwGgW01AjzJvEoNN3soZXQZexIxs5/k5NLExbRwFh9g5QCHzXvBGxs+cmnxzf5C Oior3xHAd+OObBFEXvkH9f8aZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwjd6qS yxB4uUBPfZexuI3i5V/VMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkRbP+hok0QK69JZK/whJV5mhMNMHb6mVOUgnE+/s5T0CMJWTdjLtS4cEfBnz gYe9rEq5OoSMCOestMEuX9NNktVRkjSU7bzz7NXmqJ1pa1WPXJ4qt2wGKxVuJtLc /dub7YJDicPs9I79TC+iRU6exb3FruF5x7nn2WpqW9m0N/RSTcOCf7fYymsZr8Ga /qjv9nQyJJb7NoamIar34+L0IIFOD5t2zl7o6zB2eEI42V4OGZ4MTg9tKZtXmdK7 HOAv5oYcE93788pjO2AZFsp1RkB0yccU/C5mJDOpM/viAxm921oZzoe/xaDFhjar fACozG0DY3u6AZTS8X4MqKrhvg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:46 2026 by rpki-client