$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: 0xHdElUAzNJKBOF+licZJCAjEzZ4cWXm4ZqT2EGvtN8= Subject key identifier: 7D:41:25:82:19:3A:60:EF:34:29:94:F7:BE:51:20:2D:57:45:AD:9D Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 0824 Signing time: Mon 02 Mar 2026 02:07:42 +0000 Manifest this update: Mon 02 Mar 2026 02:07:40 +0000 Manifest next update: Mon 09 Mar 2026 02:07:40 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: v6zYMX9ezKCEgfztrHFFDScVF6vUOeWS0TfI+RLxE4Y=) 2: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: Q6lv4o/3Jij+rHVdIBqh1xWcK9rJcZVqL65gj1LOUUI=) 3: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: rlg+gGkjSIov6YUxyCKFbKYRg4bl/u2eQA54uzAkE6Q=) 4: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: +acs6cDfXRcUtwRZJW2mfAQSN9xt4ZIb9KF9+TPjR6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Mar 2 02:07:40 2026 GMT Not After : Mar 9 02:07:40 2026 GMT Subject: CN=69a4f0ee-9167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:8f:6f:ff:1e:21:cc:10:e3:13:9d:4b:1c: 12:df:6a:83:a8:14:85:7c:10:31:f5:35:39:b8:f4: 97:74:dd:0f:0d:67:fe:5a:f5:15:41:65:e9:eb:f2: 00:3a:93:3d:12:78:8a:12:94:a3:13:f9:8f:76:07: 7e:ad:ed:f0:65:70:8f:1e:03:2e:c9:26:91:7c:76: a5:e5:10:1b:54:99:77:87:90:99:3d:da:f1:5f:81: 6a:b0:39:56:10:1b:96:7c:48:77:bd:e2:22:f6:05: db:0a:b0:d8:40:81:e0:63:b6:47:f1:16:d4:b1:fc: 44:e5:de:4a:d0:6f:fc:73:c4:e5:df:fe:4f:02:0a: 97:8f:bd:73:86:f4:ac:49:17:73:15:72:e8:1e:b8: 98:f0:f3:85:4f:2b:69:ab:49:f1:31:28:f8:55:34: 7a:69:1a:41:80:dc:9c:8c:f4:54:aa:b3:aa:2e:ec: 66:c4:b1:8a:a0:d4:f3:59:74:dd:0d:8e:df:fa:47: f9:1a:2d:41:a8:d0:e6:bb:68:a2:18:3a:66:12:46: ae:76:25:5b:c2:50:95:2a:c7:05:9e:da:7b:1a:0c: 16:88:eb:78:81:7d:14:6b:68:de:b7:d9:d6:1e:53: 6f:0b:33:fd:13:f4:58:22:5a:94:d7:53:0e:66:32: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:41:25:82:19:3A:60:EF:34:29:94:F7:BE:51:20:2D:57:45:AD:9D X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5b:90:c6:78:25:62:d3:26:32:f7:86:2d:02:10:63:32:23: 1d:26:0a:1d:f4:4d:5f:ad:2b:e4:8c:ca:a3:a4:34:c8:0a:cf: 0d:a2:3c:27:e7:3b:1d:9e:ba:3f:0e:79:c1:2a:a1:31:a9:0e: be:40:a5:cc:34:19:e1:91:a5:cf:50:bd:d1:ef:e5:94:60:73: 67:2f:54:bf:bb:04:a8:68:ff:65:59:84:48:2e:29:de:3d:2b: 71:53:9f:be:cc:4a:f7:73:a5:f8:2c:66:4b:e2:ee:e7:c1:7b: 11:a4:d4:18:0f:33:4d:06:70:19:75:0d:06:78:37:ba:71:c3: 37:81:d1:33:9e:95:b7:31:83:5d:3e:43:37:7c:68:a8:e0:8f: ff:8a:cb:80:43:fc:91:da:1f:8d:d6:08:1e:fb:c2:72:d3:8f: 0f:ef:c2:f4:73:3e:ac:f2:d6:af:00:93:2e:91:c4:66:2a:f5: 58:98:da:dc:19:e3:0b:40:1a:57:ef:9b:14:6d:ae:3c:ae:50: 6f:9b:ed:33:89:a4:fe:d5:a8:74:25:00:6d:be:04:86:44:8d: 51:b8:c8:37:f7:d3:ce:2f:c4:5d:9a:ee:ab:95:3b:45:89:30: 04:c7:0d:38:88:0a:70:13:dd:44:ee:7f:af:40:f3:ea:17:ba: ae:ec:08:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjYwMzAyMDIwNzQwWhcNMjYwMzA5MDIwNzQwWjAYMRYwFAYD VQQDEw02OWE0ZjBlZS05MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNOPb/8eIcwQ4xOdSxwS32qDqBSFfBAx9TU5uPSXdN0PDWf+WvUVQWXp6/IA OpM9EniKEpSjE/mPdgd+re3wZXCPHgMuySaRfHal5RAbVJl3h5CZPdrxX4FqsDlW EBuWfEh3veIi9gXbCrDYQIHgY7ZH8RbUsfxE5d5K0G/8c8Tl3/5PAgqXj71zhvSs SRdzFXLoHriY8POFTytpq0nxMSj4VTR6aRpBgNycjPRUqrOqLuxmxLGKoNTzWXTd DY7f+kf5Gi1BqNDmu2iiGDpmEkaudiVbwlCVKscFntp7GgwWiOt4gX0Ua2jet9nW HlNvCzP9E/RYIlqU11MOZjKWQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1BJYIZ OmDvNCmU975RIC1XRa2dMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK1uQxnglYtMmMveGLQIQYzIjHSYKHfRNX60r5IzKo6Q0yArPDaI8J+c7HZ66 Pw55wSqhMakOvkClzDQZ4ZGlz1C90e/llGBzZy9Uv7sEqGj/ZVmESC4p3j0rcVOf vsxK93Ol+CxmS+Lu58F7EaTUGA8zTQZwGXUNBng3unHDN4HRM56VtzGDXT5DN3xo qOCP/4rLgEP8kdofjdYIHvvCctOPD+/C9HM+rPLWrwCTLpHEZir1WJja3BnjC0Aa V++bFG2uPK5Qb5vtM4mk/tWodCUAbb4EhkSNUbjIN/fTzi/EXZruq5U7RYkwBMcN OIgKcBPdRO5/r0Dz6he6ruwIqA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:13 2026 by rpki-client