$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft File: 8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json) Hash identifier: guNB728J+6ScOaMGFKGsFEo6Xt2fx3p424svngNQm4o= Subject key identifier: A1:F8:25:48:8A:7C:D3:F2:60:E7:B9:E3:D8:9B:F2:6E:FA:F5:1A:55 Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB Certificate issuer: /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft Manifest number: 09 Signing time: Sun 01 Mar 2026 10:42:59 +0000 Manifest this update: Sun 01 Mar 2026 10:42:59 +0000 Manifest next update: Sun 08 Mar 2026 10:42:59 +0000 Files and hashes: 1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: u+K/Oa9gg9XP3z/1QYCu9MPD0qmSFDFzy+YAgKhXyBQ=) 2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB Validity Not Before: Mar 1 10:42:59 2026 GMT Not After : Mar 8 10:42:59 2026 GMT Subject: CN=69a41833-9c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:01:1b:40:5b:16:19:8d:a1:fb:74:99:73:e3: 9a:e5:36:c0:8f:d2:16:f9:6a:b8:33:63:41:9f:da: c4:ca:5c:66:0d:5c:48:34:3e:ac:8e:4c:b5:5e:97: 3b:e4:3d:df:51:9c:a7:ba:1c:f6:0e:a7:2d:7c:09: 03:5d:85:7f:c4:11:3d:ff:48:43:f2:6a:14:26:ed: 97:83:fb:c0:03:4c:cc:65:71:dc:b4:03:a3:e2:68: 47:9a:84:4c:49:0f:2b:df:9d:b3:ae:fb:00:21:b3: ba:de:d6:59:09:0f:4d:59:8f:6e:55:23:41:61:24: 1b:d1:97:4b:fc:dc:ff:84:47:b6:61:cb:08:5c:81: 3b:e2:a7:8d:06:a7:a5:f6:7f:2c:e1:65:cb:70:38: c2:84:a6:11:b5:1b:2f:2b:b0:09:2f:14:b0:04:b3: 88:8a:37:5c:0a:28:9d:55:4e:25:0e:21:98:68:26: 38:f3:4a:61:a5:c9:c7:34:67:1d:5f:c4:6b:e1:4f: 4b:9f:0c:59:bf:68:30:c4:82:da:45:a9:5e:96:c1: 2f:ad:44:75:a5:de:e9:d0:9a:3c:ac:3c:7c:a8:e7: 7f:3e:0c:75:8f:02:03:86:6e:00:3b:43:d4:5a:df: f8:39:53:63:1c:ec:86:2d:6f:e4:69:6b:77:3b:20: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F8:25:48:8A:7C:D3:F2:60:E7:B9:E3:D8:9B:F2:6E:FA:F5:1A:55 X509v3 Authority Key Identifier: keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0c:4d:e2:a0:cd:b3:e5:71:4d:26:f2:e6:2e:4e:f3:a4:8a: f0:30:6c:fb:15:3b:c4:f0:4f:8f:55:e0:87:2f:26:3a:30:87: c3:77:71:a4:43:2a:16:90:97:c7:24:1b:e8:14:b8:2b:2a:d1: a2:02:fa:64:a1:0b:94:ce:60:e8:02:7b:c9:2d:e1:2f:57:b7: 72:53:b3:4d:4d:30:9a:e3:50:61:58:09:08:56:ad:bc:a6:da: 21:b0:e5:be:da:0f:43:5b:19:70:88:c6:f6:83:8e:54:4e:6e: eb:c2:68:c8:b3:c4:32:ab:14:6b:80:c9:fe:32:a0:03:79:82: fa:4b:3a:a8:1d:65:63:90:9f:96:4f:e7:a7:34:c5:cb:01:53: 5a:d3:09:d9:eb:d4:0e:86:9e:bd:ff:c6:97:5f:07:7a:e7:36: 50:f3:4d:31:14:03:f3:14:22:0c:a8:15:05:a3:b1:aa:e6:0b: 1c:58:9e:34:ae:fb:27:ab:92:b5:ec:e1:dc:fb:b9:f7:05:2b: 36:19:d5:17:c1:cf:9f:5d:4d:c8:43:fb:aa:15:40:a6:3f:d4: d6:26:a9:9a:44:08:40:84:e5:69:04:96:d8:3b:0a:11:76:7e: fd:ac:f8:b9:47:da:cf:7e:ec:0e:04:77:37:89:98:71:b7:75: ab:50:c6:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTcwNjExMC8GA1UEBRMoRjFFMEZEN0JEQUYxNzE5ODkwRjZCMjQ5QjNCQzQxODIx NEJBOEFDQjAeFw0yNjAzMDExMDQyNTlaFw0yNjAzMDgxMDQyNTlaMBgxFjAUBgNV BAMTDTY5YTQxODMzLTljNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsARtAWxYZjaH7dJlz45rlNsCP0hb5argzY0Gf2sTKXGYNXEg0PqyOTLVelzvk Pd9RnKe6HPYOpy18CQNdhX/EET3/SEPyahQm7ZeD+8ADTMxlcdy0A6PiaEeahExJ DyvfnbOu+wAhs7re1lkJD01Zj25VI0FhJBvRl0v83P+ER7ZhywhcgTvip40Gp6X2 fyzhZctwOMKEphG1Gy8rsAkvFLAEs4iKN1wKKJ1VTiUOIZhoJjjzSmGlycc0Zx1f xGvhT0ufDFm/aDDEgtpFqV6WwS+tRHWl3unQmjysPHyo538+DHWPAgOGbgA7Q9Ra 3/g5U2Mc7IYtb+Rpa3c7IDmvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUofglSIp8 0/Jg57nj2Jvybvr1GlUwHwYDVR0jBBgwFoAU8eD9e9rxcZiQ9rJJs7xBghS6issw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0Y4ODg0NDNBMTE0 NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1ppUTlySkpzN3hCZ2hTNmlz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOGVEOWU5cnhjWmlROXJKSnM3eEJnaFM2aXNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 NzA2L0Y4ODg0NDNBMTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1pp UTlySkpzN3hCZ2hTNmlzcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsDE3ioM2z5XFNJvLmLk7zpIrwMGz7FTvE8E+PVeCHLyY6MIfDd3GkQyoWkJfH JBvoFLgrKtGiAvpkoQuUzmDoAnvJLeEvV7dyU7NNTTCa41BhWAkIVq28ptohsOW+ 2g9DWxlwiMb2g45UTm7rwmjIs8QyqxRrgMn+MqADeYL6SzqoHWVjkJ+WT+enNMXL AVNa0wnZ69QOhp69/8aXXwd65zZQ800xFAPzFCIMqBUFo7Gq5gscWJ40rvsnq5K1 7OHc+7n3BSs2GdUXwc+fXU3IQ/uqFUCmP9TWJqmaRAhAhOVpBJbYOwoRdn79rPi5 R9rPfuwOBHc3iZhxt3WrUMZ0 -----END CERTIFICATE-----Generated at Sun Mar 1 20:52:26 2026 by rpki-client