$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: Zs4+dDXCdVSn8kPRovXZ3gh7gcLkwH7lXL5pmow+Zhc= Subject key identifier: C8:82:5D:3F:B3:38:32:7F:07:F4:D1:01:AB:74:43:97:D6:95:6A:B4 Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 1516 Signing time: Tue 24 Mar 2026 19:08:49 +0000 Manifest this update: Tue 24 Mar 2026 19:08:49 +0000 Manifest next update: Tue 31 Mar 2026 19:08:49 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: j6A6zxfke/HjCQ2SVRQP+wCv0TrMdDDPTLbB6uTM7rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: Mar 24 19:08:49 2026 GMT Not After : Mar 31 19:08:49 2026 GMT Subject: CN=69c2e141-1ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:8c:0c:0c:32:70:f7:83:cb:51:28:28:32: a9:93:c7:e1:b2:4d:00:5f:b9:e4:5a:6a:67:26:b3: 77:fa:8e:37:f6:b7:25:df:72:a7:23:ba:5f:47:19: 68:ca:97:2e:53:e7:67:d5:59:50:68:79:80:2b:8a: a9:2c:4f:7e:3f:62:c3:59:77:3d:5d:71:79:34:b6: 5e:d7:98:2b:28:6a:ce:ad:79:84:c7:a8:3f:89:a5: b6:9a:6c:3c:ff:14:20:1e:34:26:95:15:3a:cd:f2: 91:09:86:ed:bf:64:df:8a:b0:50:d5:2a:bf:61:9b: 04:7a:b4:ca:22:90:b2:5c:9f:a9:45:cf:6f:da:17: 29:e1:37:ca:5c:cd:4c:ce:fd:d5:de:d3:95:d4:b1: 2e:5a:dd:e8:27:78:08:48:4d:d2:a1:2e:4f:00:84: 87:7e:32:48:b0:84:e0:d0:4c:5d:9a:1d:e0:a6:8b: 28:95:2f:13:93:ce:6f:97:93:93:de:96:36:20:1e: 92:50:44:4b:49:df:b5:63:ed:82:45:82:75:5f:4a: e0:76:8a:bf:50:11:b9:60:03:be:ec:a2:28:62:06: bf:5a:51:98:97:80:57:ff:f9:c8:8c:4e:86:be:3d: cd:53:5c:15:2e:17:56:15:22:b1:e3:e7:3b:61:f1: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:82:5D:3F:B3:38:32:7F:07:F4:D1:01:AB:74:43:97:D6:95:6A:B4 X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c6:87:05:d0:42:94:dc:c8:c4:8f:a1:13:1a:74:9d:b4:11: 1e:4e:10:1a:c3:db:e1:78:43:2b:34:67:95:49:d0:98:02:f7: 0e:66:2d:58:d7:79:3d:18:0b:52:a4:56:74:fc:f5:30:26:a4: 9c:bf:46:b9:b6:86:bd:07:8a:c6:86:04:77:34:87:d8:c0:d1: c8:da:cf:fe:cb:7b:c5:58:a4:8c:17:11:25:e8:23:3d:2a:4c: 9b:2f:22:e0:f0:58:0b:a7:14:b9:ce:48:92:08:ba:28:40:ce: 9d:a0:cb:31:ca:0a:08:58:2d:bc:4e:dd:58:0b:e3:66:9a:17: 4d:33:e0:f7:ba:12:d2:b9:da:ee:05:85:8e:92:06:3d:b5:27: a7:cd:dd:fa:78:94:eb:bc:51:d4:6d:3a:41:f0:90:02:89:a0: 0b:12:f0:66:ba:66:fe:9b:98:95:94:15:1e:91:5e:f3:d6:da: 45:86:af:b2:d6:60:d8:ec:38:94:56:7d:c6:c2:97:7d:88:f1: 75:05:73:0a:6c:14:46:23:65:38:9b:9b:7d:0e:4f:a0:df:df: 7a:0b:d9:41:05:13:79:54:a0:15:9a:aa:81:0b:74:78:7c:9d: 56:82:f0:ae:ed:14:e4:b9:9c:89:00:ee:fc:c6:3f:33:ad:02: 45:71:f0:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjYwMzI0MTkwODQ5WhcNMjYwMzMxMTkwODQ5WjAYMRYwFAYD VQQDEw02OWMyZTE0MS0xY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAOMDAwycPeDy1EoKDKpk8fhsk0AX7nkWmpnJrN3+o439rcl33KnI7pfRxlo ypcuU+dn1VlQaHmAK4qpLE9+P2LDWXc9XXF5NLZe15grKGrOrXmEx6g/iaW2mmw8 /xQgHjQmlRU6zfKRCYbtv2TfirBQ1Sq/YZsEerTKIpCyXJ+pRc9v2hcp4TfKXM1M zv3V3tOV1LEuWt3oJ3gISE3SoS5PAISHfjJIsITg0Exdmh3gposolS8Tk85vl5OT 3pY2IB6SUERLSd+1Y+2CRYJ1X0rgdoq/UBG5YAO+7KIoYga/WlGYl4BX//nIjE6G vj3NU1wVLhdWFSKx4+c7YfHMFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMiCXT+z ODJ/B/TRAat0Q5fWlWq0MB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmcaHBdBClNzIxI+hExp0nbQRHk4QGsPb4XhDKzRnlUnQmAL3DmYtWNd5PRgL UqRWdPz1MCaknL9GubaGvQeKxoYEdzSH2MDRyNrP/st7xVikjBcRJegjPSpMmy8i 4PBYC6cUuc5Ikgi6KEDOnaDLMcoKCFgtvE7dWAvjZpoXTTPg97oS0rna7gWFjpIG PbUnp83d+niU67xR1G06QfCQAomgCxLwZrpm/puYlZQVHpFe89baRYavstZg2Ow4 lFZ9xsKXfYjxdQVzCmwURiNlOJubfQ5PoN/fegvZQQUTeVSgFZqqgQt0eHydVoLw ru0U5LmciQDu/MY/M60CRXHwVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:50 2026 by rpki-client