$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: m1kXIkKjhLLlE6pdeT6clh6Gz42kR+FfmFHcOlJqZ+A= Subject key identifier: CC:83:3F:22:9E:1D:28:29:F4:CC:7C:F5:63:B2:E1:F0:AA:09:17:93 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 0282 Signing time: Sun 01 Mar 2026 02:30:19 +0000 Manifest this update: Sun 01 Mar 2026 02:30:19 +0000 Manifest next update: Sun 08 Mar 2026 02:30:19 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: DuoTCteN079WXJ2FdkPE/b2J6hNV/nhmfqOJ3F9x8qQ=) 2: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 1uyPmOr/eQOh4UTqlVB7yYLSOK5/gKpoGojSsMkgGQk=) 3: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: F6J0bt8uAa0oxWiVJbAXSFZZKwEQUSnzC9etelTnDPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Mar 1 02:30:19 2026 GMT Not After : Mar 8 02:30:19 2026 GMT Subject: CN=69a3a4bb-0b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:a4:a9:d1:6b:e3:e7:90:f9:59:f6:44:2b: fc:42:65:19:c1:f2:1e:36:8c:d8:34:f3:c8:eb:78: d1:86:81:ec:cd:a3:a5:38:31:27:60:09:dc:31:88: 6f:ca:87:de:78:4a:4e:6d:4c:da:c5:1c:b8:8d:dd: 83:dc:f1:a2:31:37:5f:11:44:03:8d:8f:b3:39:0f: c4:9b:f3:e8:5a:a2:59:ad:b4:af:87:48:8c:98:08: 8b:10:7f:34:ff:8a:b3:b7:04:7a:bc:30:e0:0a:b6: d0:06:2b:0b:49:bc:9d:97:b2:4e:14:54:82:17:e6: 02:2c:50:b3:b9:47:34:c7:62:36:66:38:4a:9b:dd: dc:93:3b:20:c6:ed:13:d4:ab:f4:43:04:3e:cd:a3: 43:20:24:f0:dc:92:1b:35:42:ea:35:9d:70:3c:26: 65:af:12:cc:4a:6c:2b:a3:bc:1a:46:84:0b:2c:94: bc:ac:33:29:3f:d8:31:7d:68:25:d1:45:51:48:bd: 53:cb:0f:96:f3:3f:83:5f:e4:d1:bf:c3:c1:19:c3: 2d:f4:de:85:80:07:aa:1c:1d:23:18:4b:f3:07:91: 4a:1f:0a:7a:61:4e:2e:32:86:30:02:1d:8b:13:ef: 31:8b:fa:1d:31:33:75:f1:af:ff:0b:11:50:c6:11: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:83:3F:22:9E:1D:28:29:F4:CC:7C:F5:63:B2:E1:F0:AA:09:17:93 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9d:45:1d:e3:17:3c:4a:8d:85:07:fc:58:9b:00:01:50:ba: 16:e6:77:82:35:aa:06:13:37:da:1d:35:8a:cb:11:57:ce:3f: 4e:b3:af:a3:c7:ac:6c:ce:30:df:69:f2:f4:8c:01:eb:81:f5: d2:c2:4d:2f:f2:ac:40:27:d0:70:78:08:6f:07:20:7c:a8:5c: dd:9a:8f:b2:33:4c:ad:f3:e8:d7:15:e6:d2:d6:e8:a6:ab:2e: 82:79:a2:30:4d:01:f9:5d:af:09:41:f3:5f:e9:b8:8a:9a:c9: d8:c1:6b:16:41:61:bb:31:3d:7c:f8:02:22:b9:f1:31:1b:7e: a4:d1:dc:07:cc:df:35:05:2e:79:a8:aa:ce:46:1f:42:a8:be: 36:b2:37:32:c4:c8:c4:78:d3:c7:01:f0:9e:71:53:23:48:49: 08:87:3b:4d:82:6a:c3:b5:50:18:f3:de:d7:7b:c9:07:69:32: e3:9f:96:bb:d2:79:64:ef:2f:5a:6e:6d:c5:79:eb:72:d3:39: 35:de:8e:a2:bb:23:42:75:44:aa:4f:3d:ba:e7:64:97:10:4d: ec:60:ae:64:fa:26:c1:c1:51:37:9a:33:72:fa:d4:e2:a4:c6: 68:5d:66:bf:4b:d2:04:1e:f9:aa:77:9f:53:da:e2:43:85:07: 59:1b:f4:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjYwMzAxMDIzMDE5WhcNMjYwMzA4MDIzMDE5WjAYMRYwFAYD VQQDDA02OWEzYTRiYi0wYjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOakqdFr4+eQ+Vn2RCv8QmUZwfIeNozYNPPI63jRhoHszaOlODEnYAncMYhv yofeeEpObUzaxRy4jd2D3PGiMTdfEUQDjY+zOQ/Em/PoWqJZrbSvh0iMmAiLEH80 /4qztwR6vDDgCrbQBisLSbydl7JOFFSCF+YCLFCzuUc0x2I2ZjhKm93ckzsgxu0T 1Kv0QwQ+zaNDICTw3JIbNULqNZ1wPCZlrxLMSmwro7waRoQLLJS8rDMpP9gxfWgl 0UVRSL1Tyw+W8z+DX+TRv8PBGcMt9N6FgAeqHB0jGEvzB5FKHwp6YU4uMoYwAh2L E+8xi/odMTN18a//CxFQxhFZWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMyDPyKe HSgp9Mx89WOy4fCqCReTMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaJ1FHeMXPEqNhQf8WJsAAVC6FuZ3gjWqBhM32h01issRV84/TrOvo8esbM4w 32ny9IwB64H10sJNL/KsQCfQcHgIbwcgfKhc3ZqPsjNMrfPo1xXm0tbopqsugnmi ME0B+V2vCUHzX+m4iprJ2MFrFkFhuzE9fPgCIrnxMRt+pNHcB8zfNQUueaiqzkYf Qqi+NrI3MsTIxHjTxwHwnnFTI0hJCIc7TYJqw7VQGPPe13vJB2ky45+Wu9J5ZO8v Wm5txXnrctM5Nd6OorsjQnVEqk89uudklxBN7GCuZPomwcFRN5ozcvrU4qTGaF1m v0vSBB75qnefU9riQ4UHWRv0zA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:36:18 2026 by rpki-client