$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json) Hash identifier: oGamdBpdTmGi8oUoSLGu8iCKbYg37JuclL9u8viBAl0= Subject key identifier: 45:64:25:C1:65:DB:54:2E:87:E8:29:6B:D8:D3:6C:85:35:11:E4:9A Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft Manifest number: 0A55 Signing time: Thu 26 Mar 2026 19:32:00 +0000 Manifest this update: Thu 26 Mar 2026 19:32:00 +0000 Manifest next update: Thu 02 Apr 2026 19:32:00 +0000 Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: nP4zxl9CVg1ZFpJCTMT4zg1mtVxqgkD7PX/Jb395hQk=) 2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: i4ZxxqpQ+3zI5So5ObXBzu07nchHUX/1pbi3p0o+9eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Validity Not Before: Mar 26 19:32:00 2026 GMT Not After : Apr 2 19:32:00 2026 GMT Subject: CN=69c589b0-d6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:44:78:47:6a:43:cb:b7:52:f8:d2:b4:2d:5a: c0:fa:2a:92:1a:88:cb:5f:04:f1:3c:72:e6:ee:2b: 1e:ee:29:bb:7e:0e:8e:94:f4:37:2e:2e:62:cd:c7: 3a:3e:e8:4b:d4:36:ba:49:6c:89:07:ce:2c:e7:4e: 90:8d:d2:64:12:4d:4b:02:bc:e9:c9:98:19:64:79: fc:62:65:2d:6d:73:f9:2f:a3:93:81:6d:5e:b8:6c: e6:c8:b4:0f:a6:fc:ea:c8:61:25:af:16:8b:c0:86: b3:a3:53:0e:76:59:57:14:3e:59:5a:39:e6:d6:65: 20:c7:ed:4f:83:bf:f5:f8:c3:12:2b:f0:06:55:c1: a6:33:ad:d4:47:64:9c:80:a1:92:1a:d7:f5:07:3e: 8c:c2:42:14:ec:14:f3:af:2f:c8:8c:a8:e7:11:e3: b4:da:6c:d4:fd:f1:5e:52:a6:4f:ce:12:9a:3f:89: 41:fc:4f:a4:05:96:43:f7:d6:06:17:ed:81:c3:c8: e2:8b:14:28:99:1e:0b:c5:83:8d:96:de:e4:a3:ea: d9:d8:eb:73:98:b7:dd:a7:d9:5b:c6:3a:b6:2a:fd: ef:0c:fd:96:42:e0:f7:76:35:b6:f2:e4:4a:b3:e8: d3:f8:c3:e2:bc:b7:fc:ab:f3:76:f1:0c:f2:4e:e7: 0c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:64:25:C1:65:DB:54:2E:87:E8:29:6B:D8:D3:6C:85:35:11:E4:9A X509v3 Authority Key Identifier: keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:50:38:fe:04:5b:3c:23:ed:97:17:a5:d0:44:f5:51:93:d2: 91:79:f7:55:3d:ae:b1:47:75:8f:df:94:64:88:d9:e6:70:e2: ad:63:ed:50:a7:ea:89:32:74:a2:48:92:9d:db:d9:39:0f:56: 96:8f:cd:d9:59:8e:47:4d:3d:d0:04:e9:32:c3:ce:fd:9b:36: 36:67:49:6f:7d:1c:9f:50:96:02:ac:53:51:e8:c5:54:39:f1: 89:74:15:05:92:d7:01:84:6e:8c:9d:31:c9:fb:cc:7d:da:d7: 02:53:89:9e:44:8b:08:4d:e7:8a:fe:47:ee:60:83:d2:7d:73: a5:c3:cb:bc:a7:00:93:e0:e7:39:18:54:e3:37:cb:cf:0e:43: e7:04:f2:8c:0c:60:11:9d:eb:30:03:9f:0e:36:8c:e6:d0:e4: 42:28:53:d0:9c:4c:f6:87:25:73:54:61:50:5e:3b:06:d7:54: 63:6a:6e:34:d3:17:af:57:9c:22:bd:c4:47:17:b1:af:54:3c: de:fe:60:52:bd:3b:3c:1f:29:a3:c1:27:8a:3c:ed:cf:38:ce: 69:a4:d1:ce:c3:51:90:4e:0b:17:09:d5:71:fb:f9:cd:46:3b: b3:c3:f4:c6:e7:25:55:84:ce:32:a8:09:5d:2b:27:fe:43:24: 46:9d:e8:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2QjUxMTAvBgNVBAUTKEYzMDEyQ0VEMTc2OERFQUE2NEM0RTkzNkI4NkNCMzFF MTZDRUZDQkEwHhcNMjYwMzI2MTkzMjAwWhcNMjYwNDAyMTkzMjAwWjAYMRYwFAYD VQQDEw02OWM1ODliMC1kNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkR4R2pDy7dS+NK0LVrA+iqSGojLXwTxPHLm7ise7im7fg6OlPQ3Li5izcc6 PuhL1Da6SWyJB84s506QjdJkEk1LArzpyZgZZHn8YmUtbXP5L6OTgW1euGzmyLQP pvzqyGElrxaLwIazo1MOdllXFD5ZWjnm1mUgx+1Pg7/1+MMSK/AGVcGmM63UR2Sc gKGSGtf1Bz6MwkIU7BTzry/IjKjnEeO02mzU/fFeUqZPzhKaP4lB/E+kBZZD99YG F+2Bw8jiixQomR4LxYONlt7ko+rZ2OtzmLfdp9lbxjq2Kv3vDP2WQuD3djW28uRK s+jT+MPivLf8q/N28QzyTucMxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVkJcFl 21Quh+gpa9jTbIU1EeSaMB8GA1UdIwQYMBaAFPMBLO0XaN6qZMTpNrhssx4Wzvy6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDZCNS8wRjVBMDE0MDgy RjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNxcGt4T2sydUd5ekhoYk9f TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh3RXM3UmRvM3Fwa3hPazJ1R3l6SGhiT19Mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDZCNS8wRjVBMDE0MDgyRjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNx cGt4T2sydUd5ekhoYk9fTG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyVA4/gRbPCPtlxel0ET1UZPSkXn3VT2usUd1j9+UZIjZ5nDirWPtUKfqiTJ0 okiSndvZOQ9Wlo/N2VmOR0090ATpMsPO/Zs2NmdJb30cn1CWAqxTUejFVDnxiXQV BZLXAYRujJ0xyfvMfdrXAlOJnkSLCE3niv5H7mCD0n1zpcPLvKcAk+DnORhU4zfL zw5D5wTyjAxgEZ3rMAOfDjaM5tDkQihT0JxM9oclc1RhUF47BtdUY2puNNMXr1ec Ir3ERxexr1Q83v5gUr07PB8po8EnijztzzjOaaTRzsNRkE4LFwnVcfv5zUY7s8P0 xuclVYTOMqgJXSsn/kMkRp3opw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:48 2026 by rpki-client