$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: JQ3M59RODRRidhSv5IDXwn5TEh8GpD2xkd8iSinOhFM= Subject key identifier: A9:B5:29:91:70:43:71:22:B4:8A:A7:98:90:5A:E1:85:BC:7C:76:DD Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0ABB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0AA7 Signing time: Thu 26 Mar 2026 19:25:35 +0000 Manifest this update: Thu 26 Mar 2026 19:25:34 +0000 Manifest next update: Thu 02 Apr 2026 19:25:34 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: 4ccTDAvNMwGRAbvcAZ0RhgyuHJKcdKFS4kOtfLj1+iA=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: xYfOlV7ly8PaoVxzHciXWWKH9nbZzy74G8B+L2wVsHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2747 (0xabb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Mar 26 19:25:34 2026 GMT Not After : Apr 2 19:25:34 2026 GMT Subject: CN=69c5882e-f8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:13:74:ad:f3:1b:34:ee:a9:93:0f:31:d2: b4:03:dc:e0:69:31:bc:76:03:c0:28:12:1d:70:b0: 87:d6:86:53:bb:35:74:b9:e1:61:7d:34:ea:d5:90: b8:f2:a0:94:42:f7:e1:42:4b:62:36:c9:4d:c7:b9: fb:9b:a0:48:b1:ef:cb:1e:6f:09:05:d4:37:4f:b7: 7e:e7:fe:ed:28:10:f9:04:54:36:db:5f:53:1c:ed: e8:08:9e:54:86:7b:50:d4:f0:cc:4a:6c:59:7b:5a: 37:13:04:04:e8:53:fa:f0:0a:82:17:2f:d6:b1:d6: 9e:d8:fa:54:9a:a5:a7:6c:fa:9e:c5:b3:e3:a3:8b: c7:22:de:db:bf:91:1f:61:95:85:52:a4:4b:f3:d4: 61:b2:49:e9:4f:5b:17:8c:14:fe:e5:b7:15:27:ba: 06:43:b6:88:be:db:2e:b5:53:d5:07:4b:2a:2c:16: cd:b9:67:0d:4a:a4:4d:46:89:47:0a:f7:b7:f2:94: c5:af:27:df:14:89:44:cf:7b:11:a6:64:35:05:1a: 30:ea:1c:e8:7c:cb:47:7f:75:23:a4:53:12:07:d7: bf:3a:3a:51:59:b2:3d:39:c7:8a:3e:1e:91:59:c7: b9:2e:bf:8e:9b:dd:66:2b:8f:e5:5b:f1:d9:16:8f: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B5:29:91:70:43:71:22:B4:8A:A7:98:90:5A:E1:85:BC:7C:76:DD X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d5:1d:ae:af:77:13:22:9a:b4:4a:92:95:f8:15:a8:00:3e: 32:61:04:f8:a8:81:80:95:fa:fc:3f:94:d5:d8:67:b8:ea:cc: 28:57:0d:51:ee:89:c9:93:05:a5:26:61:12:5d:cc:18:0a:dc: 0f:0d:56:92:1f:f5:27:27:29:3f:fb:a9:ba:f7:4d:be:16:25: 2f:5e:e5:90:d9:cd:c3:c7:a9:48:b7:63:97:17:f2:9b:ed:5b: 0a:89:fb:ea:23:fb:7b:2b:8f:35:f2:8a:31:08:9a:f1:76:37: 43:f8:75:4c:60:7f:b4:b8:c7:3f:61:08:6e:bc:ed:65:6c:8f: 88:1d:da:b6:d4:57:6a:15:21:1a:55:1c:7e:23:75:10:e4:2d: 7b:03:d8:24:ea:85:22:fd:fd:d3:85:f8:de:b4:5e:39:5d:11: 40:4b:45:00:af:d4:78:00:21:f5:24:d5:30:02:ff:ed:a7:61: ff:13:ff:14:f5:1a:d2:ea:91:cd:47:06:15:6a:9d:a6:a8:2d: 2a:47:69:20:6a:5c:14:f0:7f:1d:27:f1:f0:f3:e8:f0:70:9f: 67:81:b1:ab:50:22:d3:a7:c8:5f:d0:08:2d:65:24:db:f5:fe: 3c:e4:fa:1d:b9:cc:7f:72:7d:d5:db:aa:07:05:41:04:a9:c9: 80:ab:79:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjYwMzI2MTkyNTM0WhcNMjYwNDAyMTkyNTM0WjAYMRYwFAYD VQQDEw02OWM1ODgyZS1mOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRETdK3zGzTuqZMPMdK0A9zgaTG8dgPAKBIdcLCH1oZTuzV0ueFhfTTq1ZC4 8qCUQvfhQktiNslNx7n7m6BIse/LHm8JBdQ3T7d+5/7tKBD5BFQ2219THO3oCJ5U hntQ1PDMSmxZe1o3EwQE6FP68AqCFy/Wsdae2PpUmqWnbPqexbPjo4vHIt7bv5Ef YZWFUqRL89RhsknpT1sXjBT+5bcVJ7oGQ7aIvtsutVPVB0sqLBbNuWcNSqRNRolH Cve38pTFryffFIlEz3sRpmQ1BRow6hzofMtHf3UjpFMSB9e/OjpRWbI9OceKPh6R Wce5Lr+Om91mK4/lW/HZFo+9WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKm1KZFw Q3EitIqnmJBa4YW8fHbdMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP9Udrq93EyKatEqSlfgVqAA+MmEE+KiBgJX6/D+U1dhnuOrMKFcNUe6JyZMF pSZhEl3MGArcDw1Wkh/1JycpP/upuvdNvhYlL17lkNnNw8epSLdjlxfym+1bCon7 6iP7eyuPNfKKMQia8XY3Q/h1TGB/tLjHP2EIbrztZWyPiB3attRXahUhGlUcfiN1 EOQtewPYJOqFIv3904X43rReOV0RQEtFAK/UeAAh9STVMAL/7adh/xP/FPUa0uqR zUcGFWqdpqgtKkdpIGpcFPB/HSfx8PPo8HCfZ4Gxq1Ai06fIX9AILWUk2/X+POT6 HbnMf3J91duqBwVBBKnJgKt52w== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:31 2026 by rpki-client