$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: OlK+HlG0LRxvS8YHJYED8AVCBIlFDOhBT6bU6nrrZVQ= Subject key identifier: 71:26:E5:C5:43:D8:84:A9:E7:22:C5:2D:09:48:D9:11:10:38:C4:F2 Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: 3B Signing time: Sun 01 Mar 2026 09:57:22 +0000 Manifest this update: Sun 01 Mar 2026 09:57:21 +0000 Manifest next update: Sun 08 Mar 2026 09:57:21 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: zui2mb5SUsOSqZXu/vGKGxGWFc23y2pDTHdi1qZ9Y/Y=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Mar 1 09:57:21 2026 GMT Not After : Mar 8 09:57:21 2026 GMT Subject: CN=69a40d81-c086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:fa:d6:a2:0a:6d:8c:df:8a:7d:65:27:7f: d6:10:28:19:7a:56:bb:32:50:ae:bb:4e:24:4c:73: 97:b7:98:73:e4:5f:a0:ce:5c:bb:53:c5:2b:d5:2c: cc:54:6d:93:df:9c:c6:5b:58:2e:f7:f8:81:21:d8: 12:4f:22:84:3d:d0:9e:74:ef:8e:cc:e3:02:a5:41: 50:58:42:58:95:13:de:3a:ff:04:50:ef:1e:55:00: 15:57:33:76:92:13:da:34:f0:19:0a:6e:13:b7:ac: 75:72:61:74:93:47:e0:69:4f:ff:aa:dc:64:0d:1b: f3:af:e8:86:a2:77:eb:19:20:c1:1e:20:d0:04:ec: 72:fb:44:92:5b:a7:8b:01:64:06:e2:f4:f8:73:8e: 40:83:55:bc:3c:e2:89:26:09:27:dc:60:26:bd:37: 38:6d:d1:b7:14:4c:f2:4d:3c:1c:76:fb:17:17:38: 43:d4:15:59:7e:86:96:df:67:7d:16:54:9f:36:bb: d5:36:fb:1c:15:7f:02:e3:93:ce:f6:c2:cc:f6:21: 7f:74:b9:dd:12:be:53:20:eb:c2:d0:a3:72:e4:7f: 28:b0:c6:c1:e0:99:40:98:6b:1e:6b:f9:91:75:72: 1f:fc:5d:75:63:ac:8b:cd:e4:d5:d7:32:12:06:16: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:26:E5:C5:43:D8:84:A9:E7:22:C5:2D:09:48:D9:11:10:38:C4:F2 X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:58:c0:24:3e:a4:68:d1:5d:a6:6a:8b:fb:10:5f:3d:f4:a4: 65:09:20:6e:18:33:9e:3f:89:e6:8d:7a:7a:7c:2f:01:95:5a: ae:39:e9:43:9b:c6:e5:fa:ed:8c:03:4b:39:9f:72:ad:aa:ea: c7:2b:96:a9:c6:70:e8:89:d9:29:ce:97:78:8b:00:48:c9:3f: e1:31:7f:19:8a:8b:19:fd:fb:d6:85:ab:a9:4f:b9:96:cc:61: 5b:01:e3:08:08:0f:c2:5d:f3:da:1f:8d:b5:d1:a7:d3:e8:81: 75:60:e3:d3:9e:d5:fb:09:bb:b0:14:a8:c2:dd:71:fe:ce:38: 9e:e7:ee:b1:60:00:ce:cd:55:30:12:a2:68:5e:d4:72:79:20: 03:19:ae:df:f2:46:bc:c2:b5:34:e1:23:c4:bf:04:06:fb:35: 8a:51:5e:59:1e:2e:d6:7c:e3:47:04:8e:67:ad:a9:47:fe:18: 86:7e:8f:64:a8:80:c8:18:50:70:0c:94:e9:07:13:9b:41:2c: 82:d1:24:26:12:9a:e6:4e:fd:89:13:47:9c:d3:12:c5:f5:45: dd:d5:42:d9:d9:6e:85:ec:4c:f9:6f:55:2f:e9:3e:ca:f4:a4: 0c:46:fa:63:31:4c:32:54:67:ae:3a:86:d9:97:a4:28:50:48: a7:66:f1:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG REQ3NDA1RjAeFw0yNjAzMDEwOTU3MjFaFw0yNjAzMDgwOTU3MjFaMBgxFjAUBgNV BAMTDTY5YTQwZDgxLWMwODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3IfrWogptjN+KfWUnf9YQKBl6VrsyUK67TiRMc5e3mHPkX6DOXLtTxSvVLMxU bZPfnMZbWC73+IEh2BJPIoQ90J50747M4wKlQVBYQliVE946/wRQ7x5VABVXM3aS E9o08BkKbhO3rHVyYXSTR+BpT/+q3GQNG/Ov6Iaid+sZIMEeINAE7HL7RJJbp4sB ZAbi9PhzjkCDVbw84okmCSfcYCa9Nzht0bcUTPJNPBx2+xcXOEPUFVl+hpbfZ30W VJ82u9U2+xwVfwLjk872wsz2IX90ud0SvlMg68LQo3LkfyiwxsHgmUCYax5r+ZF1 ch/8XXVjrIvN5NXXMhIGFuIJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcSblxUPY hKnnIsUtCUjZERA4xPIwHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0RGQjQ5QzQ4QzUxMDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpx STRCRV9KUFZocHYzWFFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmWMAkPqRo0V2maov7EF899KRlCSBuGDOeP4nmjXp6fC8BlVquOelDm8bl+u2M A0s5n3KtqurHK5apxnDoidkpzpd4iwBIyT/hMX8ZiosZ/fvWhaupT7mWzGFbAeMI CA/CXfPaH4210afT6IF1YOPTntX7CbuwFKjC3XH+zjie5+6xYADOzVUwEqJoXtRy eSADGa7f8ka8wrU04SPEvwQG+zWKUV5ZHi7WfONHBI5nralH/hiGfo9kqIDIGFBw DJTpBxObQSyC0SQmEprmTv2JE0ec0xLF9UXd1ULZ2W6F7Ez5b1Uv6T7K9KQMRvpj MUwyVGeuOobZl6QoUEinZvFc -----END CERTIFICATE-----Generated at Mon Mar 2 10:36:12 2026 by rpki-client