$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: frI17vJRqsc6phUCYGokB/JpFYn+/qVZS4us0bDOJXE= Subject key identifier: 9C:44:0D:EB:A3:A5:B5:A3:1F:8F:E9:41:2E:4E:0E:50:6D:7C:9F:26 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 01E1 Signing time: Wed 25 Mar 2026 02:49:55 +0000 Manifest this update: Wed 25 Mar 2026 02:49:55 +0000 Manifest next update: Wed 01 Apr 2026 02:49:55 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: 9GDHFDUe9L5U/4UrCSgdOMc9DPQfhA8WuMHBl2inGOI=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc=) 3: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Mar 25 02:49:55 2026 GMT Not After : Apr 1 02:49:55 2026 GMT Subject: CN=69c34d53-e592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:54:48:04:08:7a:da:d3:72:63:6f:da:30: 7e:59:4d:98:71:6e:cc:3a:07:77:3b:af:d7:05:5b: bf:56:ba:08:22:e2:2c:6c:af:9d:6f:09:d7:08:b7: d5:89:d6:bb:0b:2d:a0:ee:21:60:ba:8a:4b:4b:65: 57:5f:6e:ed:8d:5a:c1:4c:d1:96:dd:c1:de:26:db: 8a:77:07:e9:ee:37:f4:14:08:f9:e9:c7:07:a9:4a: ff:a1:c0:d5:68:03:cc:93:8d:23:62:06:9f:5f:50: d6:c4:2e:b9:a8:64:0e:e1:10:65:e8:24:09:76:ce: e9:19:ea:f5:3f:21:f2:a7:d9:e5:a6:05:02:c7:38: bd:b0:fe:22:01:6c:d4:2a:30:2b:aa:a9:fe:70:ff: aa:3c:ac:9f:19:b5:3d:df:46:d7:77:01:20:8a:3c: a1:9c:db:6e:dc:86:35:6b:97:9c:66:b3:a5:b1:7e: 18:1b:a3:d4:e9:c8:8d:21:bb:d3:85:ae:ce:94:c7: ce:da:68:85:64:10:66:89:87:0e:33:30:c7:25:16: bb:cc:3a:64:41:d8:95:7a:94:de:1d:d3:d0:7a:7e: b8:a6:3e:d0:6a:a5:44:53:56:06:bb:94:4c:6d:1c: 6e:36:ca:87:f4:d2:c9:bb:5e:61:38:52:18:d0:ec: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:44:0D:EB:A3:A5:B5:A3:1F:8F:E9:41:2E:4E:0E:50:6D:7C:9F:26 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4d:8a:ab:8a:f5:0d:46:19:f2:7e:7b:4f:b3:56:56:28:ab: d4:a7:56:01:aa:8e:80:ce:60:eb:41:a5:04:0f:a3:1e:26:2a: a6:7f:88:1c:a0:a1:8a:fa:8b:7e:8e:b4:18:65:0d:77:25:11: 64:50:3c:52:f1:57:57:8e:24:78:63:2e:6c:0b:f1:74:68:41: 22:6b:d4:62:81:80:72:be:06:6f:82:7a:9b:69:5a:5c:6d:b5: 71:c5:38:ea:c3:9e:e5:e3:b5:bd:36:21:22:b5:90:45:02:20: c9:93:05:ae:86:16:87:be:13:7e:0c:33:ce:51:71:03:5d:71: c1:06:5a:53:ff:e4:f9:18:a9:da:14:3c:0e:4b:e3:6d:0d:5e: 19:fe:8e:48:86:7c:79:b3:64:ec:56:c9:7e:d2:5d:05:c8:87: 29:98:29:58:03:56:0a:88:16:7e:d5:e9:04:4e:6a:68:b0:45: 83:1c:41:06:0f:19:ff:f8:7b:ca:3f:78:f4:47:cf:0b:e3:d2: 75:f0:35:e5:0c:3f:5c:0f:b4:aa:69:22:a9:fb:da:f0:56:da: 95:a6:83:8b:8e:21:c3:e8:da:4a:2a:6a:e2:4d:d5:0a:79:7d: f9:ce:ec:1d:70:47:35:8d:84:51:ac:02:5c:40:7f:8a:8c:2b: 61:c1:e5:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjYwMzI1MDI0OTU1WhcNMjYwNDAxMDI0OTU1WjAYMRYwFAYD VQQDEw02OWMzNGQ1My1lNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMRUSAQIetrTcmNv2jB+WU2YcW7MOgd3O6/XBVu/VroIIuIsbK+dbwnXCLfV ida7Cy2g7iFguopLS2VXX27tjVrBTNGW3cHeJtuKdwfp7jf0FAj56ccHqUr/ocDV aAPMk40jYgafX1DWxC65qGQO4RBl6CQJds7pGer1PyHyp9nlpgUCxzi9sP4iAWzU KjArqqn+cP+qPKyfGbU930bXdwEgijyhnNtu3IY1a5ecZrOlsX4YG6PU6ciNIbvT ha7OlMfO2miFZBBmiYcOMzDHJRa7zDpkQdiVepTeHdPQen64pj7QaqVEU1YGu5RM bRxuNsqH9NLJu15hOFIY0Oxt3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxEDeuj pbWjH4/pQS5ODlBtfJ8mMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP02Kq4r1DUYZ8n57T7NWViir1KdWAaqOgM5g60GlBA+jHiYqpn+IHKChivqL fo60GGUNdyURZFA8UvFXV44keGMubAvxdGhBImvUYoGAcr4Gb4J6m2laXG21ccU4 6sOe5eO1vTYhIrWQRQIgyZMFroYWh74TfgwzzlFxA11xwQZaU//k+Rip2hQ8Dkvj bQ1eGf6OSIZ8ebNk7FbJftJdBciHKZgpWANWCogWftXpBE5qaLBFgxxBBg8Z//h7 yj949EfPC+PSdfA15Qw/XA+0qmkiqfva8FbalaaDi44hw+jaSipq4k3VCnl9+c7s HXBHNY2EUawCXEB/iowrYcHlcw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:41:41 2026 by rpki-client