$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: SeT+TtVRETk6sSWdT/yf6sSWkjRDcXaBN7KLe44RkkY= Subject key identifier: D8:A7:D8:9D:44:C6:F4:78:E1:7A:DA:9D:E2:E7:33:3B:11:25:FA:28 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 011D Signing time: Wed 25 Mar 2026 05:01:28 +0000 Manifest this update: Wed 25 Mar 2026 05:01:27 +0000 Manifest next update: Wed 01 Apr 2026 05:01:27 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: sPEJnYT81URSEMXHraebBy9RuMO4EHxv50oeuHTFXQg=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: oAjj91kJNdl6x4fcpwdxCt9rZpIKF2EG4dXbvx2fHlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Mar 25 05:01:27 2026 GMT Not After : Apr 1 05:01:27 2026 GMT Subject: CN=69c36c27-117e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:12:3e:4f:f6:0c:11:7f:f5:a0:f2:09:63:5a: cd:8c:0f:42:06:6a:48:72:c3:b2:d1:5c:e2:12:12: 18:89:2d:09:67:ff:82:fd:d2:9f:c8:47:f9:68:d9: 44:12:3d:79:95:9b:86:3c:0c:8e:11:3a:31:51:97: f9:16:e4:ab:57:5d:5d:e0:e2:ce:2d:e4:d3:cc:ca: e2:d8:60:f2:79:c9:92:f5:fd:04:e5:b5:92:e5:fc: ab:99:5b:61:50:0f:41:b2:7b:32:fa:e2:09:7f:59: 30:43:a4:1a:c8:ad:6b:d4:9a:54:6d:2d:cf:0d:b4: d8:83:1a:bb:e5:bf:08:05:2a:33:2d:13:e0:64:dc: 9b:0e:35:a7:8d:0b:9b:18:4a:5c:c4:d9:c1:cb:ef: ec:09:26:82:b4:42:df:15:0f:69:6c:79:1b:3a:ee: 3a:13:3a:9f:73:e3:0b:7e:71:dd:a7:a2:69:66:a2: 05:f9:42:c1:a6:4c:e3:29:10:c9:6e:fa:88:a0:10: e6:3c:0b:d5:20:e8:44:97:5e:00:b5:a0:13:48:cc: f3:1f:11:b6:7b:fa:ad:c2:5d:5b:e6:f3:7d:d3:07: 0c:40:c7:38:45:88:0d:10:ad:e2:2d:25:b9:8b:e7: 09:72:fa:d1:0a:1b:23:04:92:f2:8e:b3:74:54:50: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A7:D8:9D:44:C6:F4:78:E1:7A:DA:9D:E2:E7:33:3B:11:25:FA:28 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:28:83:7d:02:25:9a:54:93:49:90:e4:7f:94:bf:7e:4a:4f: fe:00:ee:8a:2a:2a:fe:ff:a0:09:4e:12:30:ec:3e:a6:2d:ce: d4:ae:3a:49:f2:3c:ee:09:8b:bc:9d:aa:79:df:19:1d:9f:e5: 89:18:01:c9:4e:de:1c:94:a3:ca:a5:43:71:da:a8:a5:4c:dc: 0b:6a:d6:53:c0:41:b3:1c:5e:06:e6:95:1e:65:b7:cd:52:85: 14:d1:66:f5:bf:90:d4:0c:fd:32:d2:68:fa:ac:b2:69:60:e6: 88:da:29:37:3c:52:24:03:08:52:ce:82:49:3f:04:34:57:1a: 29:06:06:b7:4f:8e:f1:f0:87:80:81:31:e7:48:80:06:70:42: 70:da:13:30:bc:1f:23:b0:f5:0e:86:94:25:52:cb:f3:eb:fa: 53:79:3a:75:7f:b7:96:bf:48:cc:c1:0b:64:95:ba:f1:e2:34: 6f:e7:77:18:0f:57:b5:05:0d:fe:56:46:90:6b:cb:7b:60:21: 14:5a:3a:0f:b6:8e:46:8c:29:d5:4e:88:b4:05:b4:34:f6:65: 97:e0:0d:2a:b2:66:41:b2:ba:b1:42:06:e9:74:d8:4b:6b:15: d2:72:b9:87:a2:c2:cb:2b:9c:f2:8e:99:bf:e1:cb:f1:89:c0: 30:a6:9f:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjYwMzI1MDUwMTI3WhcNMjYwNDAxMDUwMTI3WjAYMRYwFAYD VQQDEw02OWMzNmMyNy0xMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BI+T/YMEX/1oPIJY1rNjA9CBmpIcsOy0VziEhIYiS0JZ/+C/dKfyEf5aNlE Ej15lZuGPAyOEToxUZf5FuSrV11d4OLOLeTTzMri2GDyecmS9f0E5bWS5fyrmVth UA9Bsnsy+uIJf1kwQ6QayK1r1JpUbS3PDbTYgxq75b8IBSozLRPgZNybDjWnjQub GEpcxNnBy+/sCSaCtELfFQ9pbHkbOu46Ezqfc+MLfnHdp6JpZqIF+ULBpkzjKRDJ bvqIoBDmPAvVIOhEl14AtaATSMzzHxG2e/qtwl1b5vN90wcMQMc4RYgNEK3iLSW5 i+cJcvrRChsjBJLyjrN0VFBVNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNin2J1E xvR44XraneLnMzsRJfooMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoiiDfQIlmlSTSZDkf5S/fkpP/gDuiioq/v+gCU4SMOw+pi3O1K46SfI87gmL vJ2qed8ZHZ/liRgByU7eHJSjyqVDcdqopUzcC2rWU8BBsxxeBuaVHmW3zVKFFNFm 9b+Q1Az9MtJo+qyyaWDmiNopNzxSJAMIUs6CST8ENFcaKQYGt0+O8fCHgIEx50iA BnBCcNoTMLwfI7D1DoaUJVLL8+v6U3k6dX+3lr9IzMELZJW68eI0b+d3GA9XtQUN /lZGkGvLe2AhFFo6D7aORowp1U6ItAW0NPZll+ANKrJmQbK6sUIG6XTYS2sV0nK5 h6LCyyuc8o6Zv+HL8YnAMKafvA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:04 2026 by rpki-client