$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: 2g149Xec7r2KCD7Zv4GPgu9ZoQ8PLutzPR6LZLzeu9I= Subject key identifier: 13:7F:DF:7B:4D:CC:84:63:C1:9A:0C:2D:A7:2E:E1:23:AD:CD:12:72 Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 0A11 Signing time: Mon 02 Mar 2026 02:50:59 +0000 Manifest this update: Mon 02 Mar 2026 02:50:56 +0000 Manifest next update: Mon 09 Mar 2026 02:50:56 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: Xioo9npDuWH38jfmYKP60UHyCwrMPY4M+oBNYvpuU/A=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Mar 2 02:50:56 2026 GMT Not After : Mar 9 02:50:56 2026 GMT Subject: CN=69a4fb13-581e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:50:58:d0:a9:bd:12:fb:12:a8:a9:ed:30: bf:c3:29:13:fe:61:4e:6f:f5:93:c5:e2:3e:a4:8d: 89:7f:05:23:ce:1a:f7:3e:7c:5e:2d:a4:88:ad:e0: 48:31:e4:19:9c:df:be:60:31:0a:20:46:f0:1e:14: 78:9f:f5:de:0a:c0:43:6c:7c:47:20:c7:85:a0:98: 90:88:f8:3a:ea:ac:f5:c3:13:29:56:a8:a0:4b:30: 75:ac:f4:28:01:88:c8:28:6a:f0:36:fa:7d:e6:b1: 7c:11:53:45:b9:95:b0:7c:d1:b4:3b:23:b5:1e:3c: a0:d6:fb:07:41:17:98:39:b7:4b:3c:97:02:4d:41: 51:c3:3f:da:59:d0:0f:15:df:06:54:08:eb:a1:2b: 40:56:11:e0:3d:f7:e4:fa:2e:c5:c1:c6:65:ed:53: 94:1b:28:74:c3:ca:d7:e2:bc:1f:66:d8:fd:a0:9d: 9c:12:b2:9e:43:fd:a8:6a:48:06:66:d0:c1:97:b4: 18:98:92:d9:e0:f0:1a:e4:e2:47:a2:16:0c:3d:94: 7f:70:f6:33:1d:46:5b:ba:75:fb:d1:de:c6:4e:c6: 4e:4d:77:28:a4:82:03:a5:8c:a7:a1:a5:4b:e7:25: b0:7d:41:59:10:9f:30:6a:9d:fd:6f:fd:bf:4d:52: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7F:DF:7B:4D:CC:84:63:C1:9A:0C:2D:A7:2E:E1:23:AD:CD:12:72 X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e9:ba:d8:4f:77:15:68:81:5b:75:a7:e2:6e:11:8c:23:aa: 26:88:d7:f3:41:16:8f:07:7f:0a:91:23:15:52:c3:86:15:20: f7:0d:84:1e:64:cf:55:8f:67:dd:4c:5c:32:17:0f:46:2b:45: 0d:12:03:cc:89:23:94:45:7d:af:e2:bc:fc:f2:81:d8:9a:32: f4:c8:a2:03:0d:db:a8:9d:64:f6:9e:b9:72:f8:0d:a4:12:19: da:e1:5e:f1:d3:b6:0e:a3:1e:14:16:2d:c6:09:fa:55:be:bf: 30:53:f5:e3:76:c8:ed:6c:49:8a:51:2c:d8:ed:03:39:b7:43: 6a:1d:c4:bf:f4:7b:46:25:d7:4b:f3:89:dd:fd:0e:73:55:ca: ae:c6:29:ee:2d:93:b4:2e:e9:94:1f:07:d2:ac:ab:21:b6:90: cb:c5:6a:65:1e:c4:f6:ea:f3:2f:50:3c:66:3a:01:e2:96:4a: c0:14:6a:04:b6:0c:e4:db:96:62:6a:0a:4f:04:40:70:fa:94: c7:6c:5f:aa:30:5c:22:32:1d:86:d5:c4:48:24:63:f0:a7:a8: 8a:7d:59:21:2e:88:25:dc:cf:47:4e:e8:81:24:98:89:c1:e8: 3d:ba:65:b0:5b:4b:63:aa:16:cf:e7:2e:f3:d0:9a:38:50:cc: 48:c9:f2:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjYwMzAyMDI1MDU2WhcNMjYwMzA5MDI1MDU2WjAYMRYwFAYD VQQDEw02OWE0ZmIxMy01ODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/lQWNCpvRL7Eqip7TC/wykT/mFOb/WTxeI+pI2JfwUjzhr3PnxeLaSIreBI MeQZnN++YDEKIEbwHhR4n/XeCsBDbHxHIMeFoJiQiPg66qz1wxMpVqigSzB1rPQo AYjIKGrwNvp95rF8EVNFuZWwfNG0OyO1Hjyg1vsHQReYObdLPJcCTUFRwz/aWdAP Fd8GVAjroStAVhHgPffk+i7FwcZl7VOUGyh0w8rX4rwfZtj9oJ2cErKeQ/2oakgG ZtDBl7QYmJLZ4PAa5OJHohYMPZR/cPYzHUZbunX70d7GTsZOTXcopIIDpYynoaVL 5yWwfUFZEJ8wap39b/2/TVKxlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBN/33tN zIRjwZoMLacu4SOtzRJyMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG+m62E93FWiBW3Wn4m4RjCOqJojX80EWjwd/CpEjFVLDhhUg9w2EHmTPVY9n 3UxcMhcPRitFDRIDzIkjlEV9r+K8/PKB2Joy9MiiAw3bqJ1k9p65cvgNpBIZ2uFe 8dO2DqMeFBYtxgn6Vb6/MFP143bI7WxJilEs2O0DObdDah3Ev/R7RiXXS/OJ3f0O c1XKrsYp7i2TtC7plB8H0qyrIbaQy8VqZR7E9urzL1A8ZjoB4pZKwBRqBLYM5NuW YmoKTwRAcPqUx2xfqjBcIjIdhtXESCRj8Keoin1ZIS6IJdzPR07ogSSYicHoPbpl sFtLY6oWz+cu89CaOFDMSMnyQA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:30:35 2026 by rpki-client