$ rpki-client -vvf rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft File: R-8IU6LX3qJJt8P694FpyPjbx-k.mft (raw, json) Hash identifier: CjTatSdx6jQO5J6WwD0d4igMwclLL2YepVJt+Y+3jFs= Subject key identifier: 35:A0:1E:C9:F4:02:73:5C:57:5D:DF:40:C6:71:BA:A5:57:E6:5B:B9 Authority key identifier: 47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9 Certificate issuer: /CN=A912946F/serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft Manifest number: 53 Signing time: Wed 25 Mar 2026 07:21:35 +0000 Manifest this update: Wed 25 Mar 2026 07:21:34 +0000 Manifest next update: Wed 01 Apr 2026 07:21:34 +0000 Files and hashes: 1: R-8IU6LX3qJJt8P694FpyPjbx-k.crl (hash: NpWFl7ao5AEKpZGfIr/IYZ4y1g3vW0WFWBc11BYVG0U=) 2: 6F324D3CAB2811F08D96D563C4F9AE02.roa (hash: kD5lmzkNkNAiRMyL5raIyZmwcauj/GPpt1ud3VtpSR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912946F, serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9 Validity Not Before: Mar 25 07:21:34 2026 GMT Not After : Apr 1 07:21:34 2026 GMT Subject: CN=69c38cfe-f5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:03:16:89:a7:f3:bd:fd:73:80:1a:db:f8: c7:cd:a5:ca:f7:21:42:5f:70:df:d3:66:bc:f0:8f: 20:a0:08:87:d4:2a:7a:1f:8c:68:7e:68:5d:05:89: 04:79:3c:ef:37:75:b4:50:1b:26:12:91:ea:59:77: 50:6e:b4:43:ec:65:9a:4a:f1:98:df:0c:ff:18:d4: 52:cd:b2:48:de:0a:ce:22:67:c6:57:bf:04:62:dc: 6a:70:fe:f9:1a:32:de:dd:2f:6e:27:a1:f4:a5:40: 25:15:17:02:ae:64:d0:90:5d:10:9b:6f:04:c2:94: 4c:0f:7c:ee:46:4b:d8:66:56:cc:7b:e9:d6:ee:ff: 42:4a:f4:bb:60:53:49:5b:76:23:8d:fe:2f:8c:30: 52:6a:39:bd:3d:20:d7:3d:e6:bc:53:7a:08:4c:f3: 10:73:7b:19:d3:27:e8:b3:ce:c3:0a:c0:71:db:20: 9d:af:61:7f:8b:09:f4:dc:5f:b5:26:1d:a9:1f:ea: 19:14:05:de:e4:66:b8:33:16:cd:79:e4:34:5a:6d: ab:7a:30:37:e0:e8:d8:2d:fa:86:9b:c3:ad:40:9d: 3a:e3:a3:0a:b4:33:d7:ad:0b:37:a5:be:b0:4f:57: 7b:e6:3a:a4:d8:d0:85:0a:d4:71:6f:e0:13:a6:1e: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A0:1E:C9:F4:02:73:5C:57:5D:DF:40:C6:71:BA:A5:57:E6:5B:B9 X509v3 Authority Key Identifier: keyid:47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:24:75:50:1a:d1:99:c2:85:21:c5:34:9a:df:e5:d1:9c:e1: f2:4e:ab:e7:09:91:bd:43:43:be:b2:bd:f7:54:9b:ad:44:e9: 2b:db:22:64:a7:9f:f9:2c:51:d1:b2:b8:89:dc:89:73:74:1c: 5f:d7:46:ad:ea:96:67:a9:83:52:6f:bd:ff:49:2f:6b:2d:7b: 80:6a:21:75:70:97:c5:00:13:b4:d9:67:57:67:78:da:e2:57: 69:fd:5d:44:7a:e6:7c:9b:08:b2:d5:b0:01:29:a5:c3:53:54: 12:8b:44:6b:18:24:d6:2d:6d:11:92:1e:dd:4a:89:01:42:60: f6:06:d5:12:55:70:3d:ea:95:ce:7a:a9:80:51:32:54:b4:a3: 40:c7:91:b4:b9:f1:b6:ca:dd:ad:21:ce:04:d0:5f:1b:db:48: 35:00:03:3f:08:35:ce:0d:b7:3b:49:63:f5:41:63:42:05:54: a1:af:7c:85:cf:0f:e2:8f:aa:4b:5f:36:da:d9:35:9a:f6:e0: 17:41:dd:41:ca:8e:9b:1b:bd:22:bc:86:e2:f5:85:d6:bb:4c: d9:e5:14:bb:5f:d2:5c:c4:b8:30:cb:ba:b8:aa:0e:59:12:9e: eb:b1:07:39:0f:2e:69:70:31:c5:fa:cf:55:8e:03:c1:7e:84: 1c:f2:33:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTQ2RjExMC8GA1UEBRMoNDdFRjA4NTNBMkQ3REVBMjQ5QjdDM0ZBRjc4MTY5QzhG OERCQzdFOTAeFw0yNjAzMjUwNzIxMzRaFw0yNjA0MDEwNzIxMzRaMBgxFjAUBgNV BAMTDTY5YzM4Y2ZlLWY1ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8rgMWiafzvf1zgBrb+MfNpcr3IUJfcN/TZrzwjyCgCIfUKnofjGh+aF0FiQR5 PO83dbRQGyYSkepZd1ButEPsZZpK8ZjfDP8Y1FLNskjeCs4iZ8ZXvwRi3Gpw/vka Mt7dL24nofSlQCUVFwKuZNCQXRCbbwTClEwPfO5GS9hmVsx76dbu/0JK9LtgU0lb diON/i+MMFJqOb09INc95rxTeghM8xBzexnTJ+izzsMKwHHbIJ2vYX+LCfTcX7Um Hakf6hkUBd7kZrgzFs155DRabat6MDfg6Ngt+oabw61AnTrjowq0M9etCzelvrBP V3vmOqTY0IUK1HFv4BOmHi0DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNaAeyfQC c1xXXd9AxnG6pVfmW7kwHwYDVR0jBBgwFoAUR+8IU6LX3qJJt8P694FpyPjbx+kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NDZGLzI1RDU5OERFQUIy NzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FKSnQ4UDY5NEZweVBqYngt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUi04SVU2TFgzcUpKdDhQNjk0RnB5UGpieC1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NDZGLzI1RDU5OERFQUIyNzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FK SnQ4UDY5NEZweVBqYngtay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMJHVQGtGZwoUhxTSa3+XRnOHyTqvnCZG9Q0O+sr33VJutROkr2yJkp5/5LFHR sriJ3IlzdBxf10at6pZnqYNSb73/SS9rLXuAaiF1cJfFABO02WdXZ3ja4ldp/V1E euZ8mwiy1bABKaXDU1QSi0RrGCTWLW0Rkh7dSokBQmD2BtUSVXA96pXOeqmAUTJU tKNAx5G0ufG2yt2tIc4E0F8b20g1AAM/CDXODbc7SWP1QWNCBVShr3yFzw/ij6pL Xzba2TWa9uAXQd1Byo6bG70ivIbi9YXWu0zZ5RS7X9JcxLgwy7q4qg5ZEp7rsQc5 Dy5pcDHF+s9VjgPBfoQc8jOq -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:48 2026 by rpki-client