$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft File: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json) Hash identifier: TWx6s4aGoBiV69eEkWL8knKdOM7KRfr0bN2XFYHs8FY= Subject key identifier: 6B:7C:CA:DE:DA:FF:32:7A:2C:0E:21:27:31:B2:C6:D0:88:73:A9:FB Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95 Certificate issuer: /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft Manifest number: 41 Signing time: Sun 01 Mar 2026 09:50:11 +0000 Manifest this update: Sun 01 Mar 2026 09:50:11 +0000 Manifest next update: Sun 08 Mar 2026 09:50:11 +0000 Files and hashes: 1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: fHoQohDCWOj7tzCY4jJCjheuPglljNo5YE5o/gG3ro4=) 2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: 4gEMioogyqtQCIBsWxjQrNaqNtpOHByAYfSBJ8goR+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195 Validity Not Before: Mar 1 09:50:11 2026 GMT Not After : Mar 8 09:50:11 2026 GMT Subject: CN=69a40bd3-028c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:c6:2d:27:f5:6e:06:3c:87:40:b7:b7:12:cd: 3b:c0:14:4a:35:6a:8f:39:26:b7:53:c7:d8:d3:09: 6f:63:f0:c8:b0:ef:48:7f:cf:80:2a:79:69:aa:47: a0:ed:0a:9a:a2:d7:33:a5:4f:44:f8:93:9e:a1:95: ff:83:bc:5a:9e:0e:fc:37:b2:eb:01:2c:ab:9f:4d: d2:f8:86:00:b5:07:88:23:d8:a3:65:eb:3a:76:f5: 74:04:63:47:28:22:08:c5:27:d5:53:a3:db:77:32: 42:bb:a2:fe:a3:b9:9b:00:e6:32:40:36:d8:27:1d: 1c:f2:05:90:10:f3:11:0b:f2:72:8f:8f:21:cc:70: af:d1:70:4e:0b:4b:c2:31:fc:34:3c:e1:01:5c:be: 3e:05:99:fe:9f:08:32:20:aa:5d:97:52:b1:c1:37: 73:7d:7d:46:3b:c2:2d:10:57:1f:76:c4:19:93:2c: 7a:01:a0:3d:af:7b:dd:5e:62:90:ce:fd:66:17:f2: 3b:89:dc:20:4a:b3:19:6e:87:11:a9:a7:06:eb:69: e6:f9:60:d5:d6:c1:cb:61:a4:5a:84:c5:7a:99:03: 58:64:12:8c:09:8b:78:52:a2:04:bf:be:9e:a7:d1: bb:c3:86:0a:41:45:3f:75:6d:c2:20:47:12:32:f5: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:CA:DE:DA:FF:32:7A:2C:0E:21:27:31:B2:C6:D0:88:73:A9:FB X509v3 Authority Key Identifier: keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f3:0e:7e:51:dd:0e:14:62:cf:87:c8:d7:8e:5b:67:d1:62: cb:dc:92:d3:9a:41:72:1a:2a:71:6b:0e:9b:c5:a4:b6:bb:c0: 25:54:53:58:0e:b4:ba:ba:da:ae:ce:d5:d4:30:21:ba:2b:e3: 8d:12:2f:37:92:ad:00:d1:d2:48:2b:9d:ce:3f:c8:11:83:66: 20:1a:82:1a:79:47:97:13:f9:34:c2:36:47:04:1c:0a:23:e6: 94:2e:f7:a6:25:7f:a4:34:1c:17:d5:bb:0e:fe:4b:d4:43:79: 3c:ee:7b:6b:35:06:22:51:c8:f7:d0:c0:88:f6:79:c7:1b:3d: 40:8f:e9:55:da:e3:a3:fa:71:d0:e5:61:0b:82:2d:70:af:da: 95:11:ec:31:c4:a4:a8:04:e3:c8:7c:5a:ba:e4:a9:e8:67:e2: 1f:7f:31:fd:e2:56:a5:e5:8d:af:dc:b2:f1:c1:39:d5:c9:4d: bc:8e:2a:16:70:52:cb:9d:bf:01:48:66:58:73:08:28:80:6f: 26:23:79:ae:bf:12:d6:a2:57:3d:d8:3d:de:a0:c2:94:ff:9b: 88:e3:d0:43:d5:4d:ba:fe:1c:81:da:6e:fd:19:9b:19:8b:c7: c2:2f:06:f1:12:4e:ed:a1:cb:bf:71:4d:3a:74:22:54:9f:df: fe:4d:f8:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjQzRjExMC8GA1UEBRMoNkUxRjEyNDA5Q0YzOUJGOTEzQzQzMkI1ODc2RkZBRkQ5 RkQwNjE5NTAeFw0yNjAzMDEwOTUwMTFaFw0yNjAzMDgwOTUwMTFaMBgxFjAUBgNV BAMTDTY5YTQwYmQzLTAyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD+xi0n9W4GPIdAt7cSzTvAFEo1ao85JrdTx9jTCW9j8Miw70h/z4AqeWmqR6Dt Cpqi1zOlT0T4k56hlf+DvFqeDvw3susBLKufTdL4hgC1B4gj2KNl6zp29XQEY0co IgjFJ9VTo9t3MkK7ov6juZsA5jJANtgnHRzyBZAQ8xEL8nKPjyHMcK/RcE4LS8Ix /DQ84QFcvj4Fmf6fCDIgql2XUrHBN3N9fUY7wi0QVx92xBmTLHoBoD2ve91eYpDO /WYX8juJ3CBKsxluhxGppwbraeb5YNXWwcthpFqExXqZA1hkEowJi3hSogS/vp6n 0bvDhgpBRT91bcIgRxIy9Vp7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUa3zK3tr/ MnosDiEnMbLG0IhzqfswHwYDVR0jBBgwFoAUbh8SQJzzm/kTxDK1h2/6/Z/QYZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNDNGL0U4RENBNjMyQjY1 NDExRjA5RUNGNEI3RkM0RjlBRTAyL2JoOFNRSnp6bV9rVHhESzFoMl82X1pfUVla VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmg4U1FKenptX2tUeERLMWgyXzZfWl9RWVpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky NDNGL0U4RENBNjMyQjY1NDExRjA5RUNGNEI3RkM0RjlBRTAyL2JoOFNRSnp6bV9r VHhESzFoMl82X1pfUVlaVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBV8w5+Ud0OFGLPh8jXjltn0WLL3JLTmkFyGipxaw6bxaS2u8AlVFNYDrS6utqu ztXUMCG6K+ONEi83kq0A0dJIK53OP8gRg2YgGoIaeUeXE/k0wjZHBBwKI+aULvem JX+kNBwX1bsO/kvUQ3k87ntrNQYiUcj30MCI9nnHGz1Aj+lV2uOj+nHQ5WELgi1w r9qVEewxxKSoBOPIfFq65KnoZ+IffzH94lal5Y2v3LLxwTnVyU28jioWcFLLnb8B SGZYcwgogG8mI3muvxLWolc92D3eoMKU/5uI49BD1U26/hyB2m79GZsZi8fCLwbx Ek7tocu/cU06dCJUn9/+TfhU -----END CERTIFICATE-----Generated at Mon Mar 2 05:49:52 2026 by rpki-client