$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: kqv9eBrFYFLYrRy/EB5jyXzdxUll/UlAElWnMIXqk8E= Subject key identifier: 84:43:08:B3:EA:D4:39:FB:2A:3F:0A:3B:AA:C7:D8:7C:2B:D0:5F:E0 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0AFE Signing time: Sat 28 Feb 2026 19:36:16 +0000 Manifest this update: Sat 28 Feb 2026 19:36:16 +0000 Manifest next update: Sat 07 Mar 2026 19:36:16 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: Du13mM40k/0/++z5ViRFE03J212YGfpHmNrsA6+Iumc=) 2: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: +qdSnSMI4Cq6GPacx1y6troGvfBHeu8mDwsrgTG91us=) 3: 676A2DE2564911F08353B443C4F9AE02.roa (hash: YM/jqlM3yjwQowPEPNTW8kWHF+17BJwpa8g+tmnEC0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 19:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Feb 28 19:36:16 2026 GMT Not After : Mar 7 19:36:16 2026 GMT Subject: CN=69a343b0-c8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:06:21:4c:e3:3d:3f:37:9b:61:04:9c:96: 1c:17:86:ec:28:03:ab:c4:ff:9e:fd:05:6d:b1:88: 2d:e6:62:8d:80:7a:8b:b9:fe:28:4c:3e:cc:4d:69: ad:71:4d:ef:a0:51:07:c6:50:35:81:34:e6:3f:d0: ce:4c:53:79:99:01:02:78:44:ae:29:a5:fa:b5:0b: aa:45:9f:de:24:27:5e:f2:cb:72:3a:c6:56:12:49: ab:8d:34:02:05:c7:7c:5a:44:99:1a:7e:aa:fc:dc: ee:74:a8:5e:1b:28:a6:7e:3f:ef:53:12:5f:af:a3: 39:d8:55:dc:71:e6:0f:69:1d:f4:9e:00:78:35:f9: 86:20:8b:dc:e4:a6:30:c7:90:c4:4c:09:cd:28:d5: 62:d5:fa:61:6f:b1:6e:47:f6:20:1d:9f:a6:35:43: eb:ee:f7:77:60:1f:39:d6:68:68:6e:ca:d1:63:0e: 12:eb:cf:f7:a0:84:eb:b4:76:27:24:0c:83:a9:3e: 89:d2:a0:e1:25:1b:54:54:57:2b:ff:8f:07:8f:2a: 97:ec:62:34:80:89:5d:03:8a:92:b0:32:ba:1b:54: e8:8a:7f:d4:8f:5f:3b:74:9f:a5:7f:a3:1e:5f:1e: 29:17:db:8c:57:e5:9b:56:c5:5f:36:99:63:04:7d: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:43:08:B3:EA:D4:39:FB:2A:3F:0A:3B:AA:C7:D8:7C:2B:D0:5F:E0 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f9:8b:84:8e:97:60:9e:95:f2:88:1b:41:f6:06:55:59:f2: 1d:00:d5:ef:ef:30:51:f8:29:63:bb:4f:b3:9c:98:6a:12:05: 0d:11:8d:c7:52:71:f8:6e:d4:f1:f5:4b:86:b4:dc:34:ae:cd: b6:32:53:5a:64:b5:13:43:7d:78:8d:88:c8:0f:01:63:cb:6f: 8a:70:7f:a8:b8:9a:96:ce:49:c7:13:74:80:7f:04:00:d3:bc: 58:6b:bf:84:e1:3b:83:66:82:58:3e:e9:8a:e8:ad:cd:7e:75: 51:ce:f7:a1:6c:16:15:cb:4f:3f:3d:cb:b7:73:2a:df:a5:51: 8f:19:24:b2:17:26:f1:3e:85:be:3c:b7:08:d1:d0:a2:ef:b6: 21:29:5b:6c:10:38:89:6c:93:a4:36:19:1c:66:0a:ad:cb:30: 31:40:4b:01:55:eb:14:f2:da:1c:94:5a:f6:d9:a9:e5:a3:30: fb:da:74:45:0c:64:50:13:6e:81:b2:dd:7e:5d:56:d3:4e:df: b6:39:f4:b6:a2:ec:78:f0:78:89:c3:11:93:42:ce:f7:22:60: 08:91:ff:ad:7a:12:8e:7e:e8:f1:5a:ca:42:f6:6e:2f:07:74: 89:80:3c:e7:f5:2a:c2:22:0d:b6:c5:53:e7:1b:ed:d2:50:ce: 3d:cf:a3:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjYwMjI4MTkzNjE2WhcNMjYwMzA3MTkzNjE2WjAYMRYwFAYD VQQDDA02OWEzNDNiMC1jOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywEGIUzjPT83m2EEnJYcF4bsKAOrxP+e/QVtsYgt5mKNgHqLuf4oTD7MTWmt cU3voFEHxlA1gTTmP9DOTFN5mQECeESuKaX6tQuqRZ/eJCde8styOsZWEkmrjTQC Bcd8WkSZGn6q/NzudKheGyimfj/vUxJfr6M52FXcceYPaR30ngB4NfmGIIvc5KYw x5DETAnNKNVi1fphb7FuR/YgHZ+mNUPr7vd3YB851mhobsrRYw4S68/3oITrtHYn JAyDqT6J0qDhJRtUVFcr/48HjyqX7GI0gIldA4qSsDK6G1Toin/Uj187dJ+lf6Me Xx4pF9uMV+WbVsVfNpljBH1WgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRDCLPq 1Dn7Kj8KO6rH2Hwr0F/gMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAffmLhI6XYJ6V8ogbQfYGVVnyHQDV7+8wUfgpY7tPs5yYahIFDRGNx1Jx+G7U 8fVLhrTcNK7NtjJTWmS1E0N9eI2IyA8BY8tvinB/qLials5JxxN0gH8EANO8WGu/ hOE7g2aCWD7piuitzX51Uc73oWwWFctPPz3Lt3Mq36VRjxkkshcm8T6Fvjy3CNHQ ou+2ISlbbBA4iWyTpDYZHGYKrcswMUBLAVXrFPLaHJRa9tmp5aMw+9p0RQxkUBNu gbLdfl1W007ftjn0tqLsePB4icMRk0LO9yJgCJH/rXoSjn7o8VrKQvZuLwd0iYA8 5/UqwiINtsVT5xvt0lDOPc+jTg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:36:13 2026 by rpki-client