$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: GcIJ8iM4ilOFtzcZrrbJJLAvlRWAJrCHfsC6i/ADMHI= Subject key identifier: C1:1D:71:35:76:5A:31:75:44:D8:D9:D2:37:DD:F2:ED:1D:9F:BC:3C Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: 011B Signing time: Mon 02 Mar 2026 14:24:04 +0000 Manifest this update: Mon 02 Mar 2026 14:24:03 +0000 Manifest next update: Mon 09 Mar 2026 14:24:03 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: qYvSQWdQtxNYVwg+hW1SVsefVWlRU0tWyQtxQOciQgQ=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: dtSxcZxOzJQEnPBNnUCjQqEgDanYjoo+1mcfrul1wgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Mar 2 14:24:03 2026 GMT Not After : Mar 9 14:24:03 2026 GMT Subject: CN=69a59d83-3cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1c:54:04:d7:72:d8:0d:df:63:0b:e4:1b:74: 61:6e:fe:80:d7:78:11:12:5d:8a:70:b2:62:fc:56: 5c:21:c2:3c:bd:82:c5:1b:a2:de:af:71:10:6f:51: 0e:c9:78:b9:5b:78:8b:db:fe:27:0a:89:5b:2a:b5: 89:a7:c3:03:af:ad:d1:92:68:f6:16:64:54:19:37: 1a:92:3d:93:ad:20:14:ed:32:de:eb:5c:b3:c2:18: b7:92:4b:41:1c:ce:13:69:fe:2f:d9:56:21:90:b9: 0a:d0:91:e6:74:a5:90:99:85:0f:fe:78:34:24:2d: a7:58:0e:bb:3a:e4:7f:16:e5:15:09:8c:db:43:fa: 6f:ca:02:c3:b4:cc:f6:68:49:4d:a0:8a:69:c2:50: 53:58:9d:6c:59:47:ac:50:2d:6d:0e:06:6b:07:e3: bd:5e:69:c8:11:2a:49:c9:79:63:2e:86:e4:f5:1d: 7b:3c:ac:81:9b:c4:83:36:79:11:fd:4e:b8:da:fa: f1:77:79:d7:74:66:4d:61:f0:21:f0:0b:b4:d9:a9: ae:d0:d7:3e:67:02:c4:ad:ad:ff:24:76:b4:33:fc: 2e:9b:b7:04:02:64:4f:a1:4f:91:01:37:d0:87:07: 83:19:8b:1c:73:d3:4e:e3:cd:e7:b3:51:7c:e2:6a: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1D:71:35:76:5A:31:75:44:D8:D9:D2:37:DD:F2:ED:1D:9F:BC:3C X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:6d:08:47:5d:ef:e0:5c:e4:f8:fc:38:5f:a0:53:d8:ec:ef: bc:b7:09:7c:42:32:36:0f:d0:d9:f3:a0:5d:18:b3:49:24:84: b3:1c:c2:c8:59:17:ac:07:a9:74:d1:ed:2a:d4:b2:aa:84:4f: 63:15:ac:4e:9a:08:22:ae:8e:ed:a7:08:3b:e1:01:b2:73:a0: 47:81:b9:2a:7b:e1:2a:de:2e:86:64:12:33:ba:71:0a:96:4a: 63:7b:47:ea:42:ab:92:61:50:06:d4:51:70:a0:d9:9b:45:8d: 97:98:5b:fe:6a:4c:15:39:76:01:8f:7c:ab:20:b3:7a:15:6a: 22:d0:32:9f:67:bf:90:cd:de:f9:59:7a:37:95:9f:cc:7a:2f: d9:b2:eb:c4:55:71:39:6b:3f:cd:cc:62:89:d9:93:d1:08:74: 57:e1:72:f9:cc:67:9d:8c:ae:7e:bf:13:7b:d5:e5:80:e6:5f: 4f:d8:d2:e1:38:04:22:77:dd:c6:b4:fa:39:86:42:cb:44:da: 2c:a4:bf:80:87:e2:e1:13:98:8b:13:a5:a9:92:82:cc:13:19: 7f:7d:77:d5:99:0e:8a:28:0d:eb:b5:d7:1e:00:aa:82:c0:a8: 50:0f:91:6b:25:0f:36:39:20:0b:9e:dc:ed:d1:be:5b:30:db: 1d:f9:54:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjYwMzAyMTQyNDAzWhcNMjYwMzA5MTQyNDAzWjAYMRYwFAYD VQQDEw02OWE1OWQ4My0zY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9hxUBNdy2A3fYwvkG3Rhbv6A13gREl2KcLJi/FZcIcI8vYLFG6Ler3EQb1EO yXi5W3iL2/4nColbKrWJp8MDr63Rkmj2FmRUGTcakj2TrSAU7TLe61yzwhi3kktB HM4Taf4v2VYhkLkK0JHmdKWQmYUP/ng0JC2nWA67OuR/FuUVCYzbQ/pvygLDtMz2 aElNoIppwlBTWJ1sWUesUC1tDgZrB+O9XmnIESpJyXljLobk9R17PKyBm8SDNnkR /U642vrxd3nXdGZNYfAh8Au02amu0Nc+ZwLEra3/JHa0M/wum7cEAmRPoU+RATfQ hweDGYscc9NO483ns1F84mof7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEdcTV2 WjF1RNjZ0jfd8u0dn7w8MB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOm0IR13v4Fzk+Pw4X6BT2OzvvLcJfEIyNg/Q2fOgXRizSSSEsxzCyFkXrAep dNHtKtSyqoRPYxWsTpoIIq6O7acIO+EBsnOgR4G5KnvhKt4uhmQSM7pxCpZKY3tH 6kKrkmFQBtRRcKDZm0WNl5hb/mpMFTl2AY98qyCzehVqItAyn2e/kM3e+Vl6N5Wf zHov2bLrxFVxOWs/zcxiidmT0Qh0V+Fy+cxnnYyufr8Te9XlgOZfT9jS4TgEInfd xrT6OYZCy0TaLKS/gIfi4ROYixOlqZKCzBMZf3131ZkOiigN67XXHgCqgsCoUA+R ayUPNjkgC57c7dG+WzDbHflUXg== -----END CERTIFICATE-----Generated at Wed Mar 4 08:38:41 2026 by rpki-client