$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: RaiaUD0vlMSW8QmRlbDoYdDJsVXmAKaLvJ+U8B1GnA0= Subject key identifier: 2C:63:72:16:42:EC:B3:88:CF:8F:39:EF:CE:1C:DC:38:DD:29:55:60 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: FF Signing time: Mon 02 Mar 2026 03:05:59 +0000 Manifest this update: Mon 02 Mar 2026 03:05:57 +0000 Manifest next update: Mon 09 Mar 2026 03:05:57 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: ktT09vWTchxrjsZzMC7nPwGMVNwFyvj7D4KwHH3Agc8=) 2: 3BC1B1C2FF2E11F088116B6D89EE528E.roa (hash: KHWI7lVjUVcxQwA/GQr69DR7zxd1Vz+nYIgppYx+odQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Mar 2 03:05:57 2026 GMT Not After : Mar 9 03:05:57 2026 GMT Subject: CN=69a4fe96-a950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:da:58:d3:2f:c0:94:08:50:80:fe:e7:f0: 81:fc:be:45:30:c1:79:36:4f:b8:b5:52:79:53:4e: 90:50:cc:da:6d:a9:3a:09:a9:8a:58:1e:6d:a7:1d: 6f:cf:59:e3:45:77:9a:cc:00:e9:20:e9:48:f1:9e: 37:a0:2c:d4:b0:ed:c3:27:ee:35:ff:be:b4:88:25: 92:42:7f:fa:d9:0f:38:14:f8:dd:10:7a:db:86:b6: 0b:71:b6:b6:03:8e:be:cb:f9:35:58:c8:1e:b1:79: e8:67:3d:ef:85:12:48:11:09:a5:2f:2e:80:45:df: b5:f4:bd:c6:a2:5b:e7:4b:ea:f5:a9:fe:89:5c:2c: ea:e6:57:69:c6:e5:90:03:b7:9c:28:06:3c:0d:6a: 80:68:90:54:5a:ed:35:3f:7f:52:03:65:e1:bf:e9: 16:4d:01:67:23:15:48:31:11:7b:80:60:92:a9:51: 11:c0:b8:56:c9:31:2a:43:dc:33:96:61:03:20:31: 86:a0:15:4e:07:35:89:7e:16:50:18:2b:bf:24:fb: 4e:04:96:50:b3:70:ed:05:0e:b0:88:b6:38:eb:8a: 5e:57:90:c6:ab:0f:4d:49:80:bb:07:ed:38:9d:11: ad:7b:2a:70:a5:61:27:8d:03:77:67:d3:14:03:fb: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:63:72:16:42:EC:B3:88:CF:8F:39:EF:CE:1C:DC:38:DD:29:55:60 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:50:0d:b3:22:c5:9f:96:34:06:e1:d8:fa:08:1c:13:78:69: b9:21:c6:15:73:c8:0b:6f:7f:cc:90:03:04:43:57:01:71:74: 34:a4:4b:08:9d:0d:4d:77:c3:b2:1e:4d:97:43:8b:bd:33:b5: e4:6b:0a:7e:9b:7f:d3:09:38:8e:55:84:cc:7c:c9:d7:32:bd: df:d7:28:e7:31:c5:86:b0:c7:db:80:b9:a9:4c:0e:ff:a1:1d: d6:70:37:8c:b2:ad:94:aa:08:be:6a:16:99:75:59:40:2c:8d: 90:4f:46:94:45:cb:8a:8a:86:74:2b:d5:9c:6f:62:8f:52:4e: 03:79:8b:9c:4e:40:c3:79:d7:e7:ce:f0:9b:12:ea:fc:ed:8b: be:f0:1d:3d:92:c2:d3:5b:a7:f8:73:23:50:e8:87:e3:a8:fe: 6a:d2:64:8c:4b:f3:40:8f:d3:c2:ad:49:da:bd:3b:99:e7:fe: d4:22:2d:5c:20:4b:03:e6:54:67:fe:51:2f:d8:34:6f:e2:bf: 5e:df:3f:5f:a1:62:3e:3a:41:72:bd:6d:84:46:8f:e8:e1:c6: 58:84:eb:8f:d7:f7:1d:35:a7:b8:ef:32:50:1f:33:60:44:07: c7:ef:01:ba:da:98:22:c6:18:9e:b0:e4:79:87:a6:e0:b8:78: 41:a3:3d:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QkMxMTAvBgNVBAUTKEYxNUQxMTc5MEIwRTc1MzU3NDA2NjExREM1NzA1OEY2 OURDNTc4QTAwHhcNMjYwMzAyMDMwNTU3WhcNMjYwMzA5MDMwNTU3WjAYMRYwFAYD VQQDEw02OWE0ZmU5Ni1hOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVLaWNMvwJQIUID+5/CB/L5FMMF5Nk+4tVJ5U06QUMzabak6CamKWB5tpx1v z1njRXeazADpIOlI8Z43oCzUsO3DJ+41/760iCWSQn/62Q84FPjdEHrbhrYLcba2 A46+y/k1WMgesXnoZz3vhRJIEQmlLy6ARd+19L3GolvnS+r1qf6JXCzq5ldpxuWQ A7ecKAY8DWqAaJBUWu01P39SA2Xhv+kWTQFnIxVIMRF7gGCSqVERwLhWyTEqQ9wz lmEDIDGGoBVOBzWJfhZQGCu/JPtOBJZQs3DtBQ6wiLY464peV5DGqw9NSYC7B+04 nRGteypwpWEnjQN3Z9MUA/uH/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxjchZC 7LOIz485784c3DjdKVVgMB8GA1UdIwQYMBaAFPFdEXkLDnU1dAZhHcVwWPadxXig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9DQjg4MkU3RUE3 MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RUVjBCbUVkeFhCWTlwM0Zl S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RU VjBCbUVkeFhCWTlwM0ZlS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVFANsyLFn5Y0BuHY+ggcE3hpuSHGFXPIC29/zJADBENXAXF0NKRLCJ0NTXfD sh5Nl0OLvTO15GsKfpt/0wk4jlWEzHzJ1zK939co5zHFhrDH24C5qUwO/6Ed1nA3 jLKtlKoIvmoWmXVZQCyNkE9GlEXLioqGdCvVnG9ij1JOA3mLnE5Aw3nX587wmxLq /O2LvvAdPZLC01un+HMjUOiH46j+atJkjEvzQI/Twq1J2r07mef+1CItXCBLA+ZU Z/5RL9g0b+K/Xt8/X6FiPjpBcr1thEaP6OHGWITrj9f3HTWnuO8yUB8zYEQHx+8B utqYIsYYnrDkeYem4Lh4QaM99w== -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:46 2026 by rpki-client