$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: VkvHe+7kOxxGKFNWOFsDAH6YxsW3LBKwNRzmTaXGbvI= Subject key identifier: E4:96:C6:A3:10:9B:80:1D:78:18:5E:BC:78:1C:BF:6F:EE:8A:65:E4 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0949 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 0935 Signing time: Tue 24 Mar 2026 19:58:15 +0000 Manifest this update: Tue 24 Mar 2026 19:58:14 +0000 Manifest next update: Tue 31 Mar 2026 19:58:14 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: xXGSvfufHZOoWZtcdhB/ZLYxTM6PDcMpnmnAro+OOyM=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: P0LfgNEy7CqKh9pIHhj4qcJ24rvxzx8Qqj45ZPVVKg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2377 (0x949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Mar 24 19:58:14 2026 GMT Not After : Mar 31 19:58:14 2026 GMT Subject: CN=69c2ecd6-86b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:4c:33:83:06:dd:3f:a1:2c:4d:40:33:85: a2:0c:3a:bf:93:56:b2:d1:0c:46:f6:72:cc:81:69: a0:9b:9c:93:72:96:31:1b:67:42:7e:4c:1b:18:aa: ef:c3:e0:ef:94:27:ce:40:43:7d:6c:c0:67:e0:3d: 4d:9f:47:fe:ca:5b:e5:fa:cc:1c:6e:76:bb:2e:de: 1d:23:4b:7b:ab:d8:e3:c8:33:28:ef:e3:2d:7f:ef: 7f:97:54:a1:65:72:22:5a:ac:ea:1f:89:be:6b:64: 8e:7c:ac:24:68:93:86:1d:c3:2f:48:da:da:df:d9: d7:09:67:47:d3:50:97:ce:21:96:c6:0d:d5:19:45: 9a:85:a3:84:18:95:db:6d:83:4d:2c:86:82:87:fb: 2d:8f:77:50:ab:cf:0f:44:96:67:2a:74:75:dc:4e: b6:6e:ff:a4:57:5f:5d:ec:ce:1c:10:9e:ac:75:e4: 6d:bb:e4:da:bc:74:7d:33:0d:e3:1f:27:e2:be:a1: 3d:8d:09:55:ed:fb:98:8e:d5:2d:a2:2f:f1:08:77: 58:18:73:da:c3:9c:08:c3:34:83:ff:79:0b:26:14: 33:8a:f1:17:1e:39:e6:91:29:1b:e1:87:68:9d:bb: 86:f3:c4:97:d5:ee:c8:f6:fd:46:3d:96:71:18:48: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:96:C6:A3:10:9B:80:1D:78:18:5E:BC:78:1C:BF:6F:EE:8A:65:E4 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ca:4a:71:38:43:11:b2:7b:fe:5f:94:b4:cd:fa:2a:a1:02: 67:18:b4:e0:6f:ea:63:ad:ee:ab:f8:d2:c3:0d:98:85:b5:7e: 2e:70:ba:59:c1:8d:3d:cb:99:63:2d:6d:f8:44:05:12:6a:6a: 96:04:b4:73:51:39:98:03:2d:23:f2:13:ff:0e:bf:a7:8f:d0: 38:ec:9d:29:5c:bf:21:54:7d:96:f0:3e:8f:20:62:4c:50:5e: 11:ca:03:ce:16:cb:9e:97:e3:76:59:de:2a:b9:bf:2b:34:ee: 01:92:8e:96:ed:13:a0:ff:74:0f:97:f5:d2:6c:04:c1:0e:fc: d9:92:b7:fb:a8:df:a7:54:e2:15:65:79:fa:7b:84:f4:37:49: 2f:d0:46:41:fe:30:90:73:1e:57:73:2b:40:44:0b:78:b8:2a: ea:a6:ec:b8:4d:b8:8c:fb:fe:32:26:90:0f:bc:4f:65:f0:80: e3:01:75:63:6a:dd:3d:32:b9:d9:07:7c:f2:be:1b:75:dd:a5: 4d:29:03:5c:6e:12:9d:01:4a:51:d9:75:7c:79:90:14:78:1c: b0:29:ad:22:41:6b:5a:d8:3a:31:31:33:5c:43:db:a7:b1:1e: d4:77:09:d8:b7:d8:6b:a4:0f:e8:cf:cd:01:47:4b:41:31:c0: 16:1c:a9:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjYwMzI0MTk1ODE0WhcNMjYwMzMxMTk1ODE0WjAYMRYwFAYD VQQDEw02OWMyZWNkNi04NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1RMM4MG3T+hLE1AM4WiDDq/k1ay0QxG9nLMgWmgm5yTcpYxG2dCfkwbGKrv w+DvlCfOQEN9bMBn4D1Nn0f+ylvl+swcbna7Lt4dI0t7q9jjyDMo7+Mtf+9/l1Sh ZXIiWqzqH4m+a2SOfKwkaJOGHcMvSNra39nXCWdH01CXziGWxg3VGUWahaOEGJXb bYNNLIaCh/stj3dQq88PRJZnKnR13E62bv+kV19d7M4cEJ6sdeRtu+TavHR9Mw3j HyfivqE9jQlV7fuYjtUtoi/xCHdYGHPaw5wIwzSD/3kLJhQzivEXHjnmkSkb4Ydo nbuG88SX1e7I9v1GPZZxGEiWZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSWxqMQ m4AdeBhevHgcv2/uimXkMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArcpKcThDEbJ7/l+UtM36KqECZxi04G/qY63uq/jSww2YhbV+LnC6WcGNPcuZ Yy1t+EQFEmpqlgS0c1E5mAMtI/IT/w6/p4/QOOydKVy/IVR9lvA+jyBiTFBeEcoD zhbLnpfjdlneKrm/KzTuAZKOlu0ToP90D5f10mwEwQ782ZK3+6jfp1TiFWV5+nuE 9DdJL9BGQf4wkHMeV3MrQEQLeLgq6qbsuE24jPv+MiaQD7xPZfCA4wF1Y2rdPTK5 2Qd88r4bdd2lTSkDXG4SnQFKUdl1fHmQFHgcsCmtIkFrWtg6MTEzXEPbp7Ee1HcJ 2LfYa6QP6M/NAUdLQTHAFhypug== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:38 2026 by rpki-client