$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json) Hash identifier: RtuT22GphoHMl/5ES5JbbolYZhxc3NiAKEF0TIVjpVo= Subject key identifier: A3:F1:79:BB:8E:8E:D5:26:32:5C:86:11:37:8B:CD:5F:39:98:18:35 Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft Manifest number: 021D Signing time: Fri 27 Mar 2026 02:19:19 +0000 Manifest this update: Fri 27 Mar 2026 02:19:18 +0000 Manifest next update: Fri 03 Apr 2026 02:19:18 +0000 Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: wjiVASZgw8Gh4pJ6CR+aKnZZ5d9SmGnm5Odt4wfules=) 2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: NqQKBASAXdv1LlkB9yqcFqDG6FI2OUjfgdiKy6gJA/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Validity Not Before: Mar 27 02:19:18 2026 GMT Not After : Apr 3 02:19:18 2026 GMT Subject: CN=69c5e927-3d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:0f:ce:78:8c:58:91:e4:40:77:7a:e3:ac: 37:cd:04:f3:21:e5:f7:6d:76:b9:95:f6:01:5d:2d: 1f:8f:90:66:0d:24:22:1d:42:70:e7:40:71:1b:9b: 84:a0:7f:70:b3:0d:08:55:8a:51:69:90:4f:06:c7: 9f:7a:5c:c3:f2:d3:2a:35:67:39:8a:46:12:f7:73: 60:ee:60:77:92:cc:80:c3:4f:af:f5:b4:62:b6:2b: c8:0e:14:50:b3:61:2a:5f:81:0e:14:ee:ae:30:c2: d1:53:b8:ec:be:69:e4:4f:a3:b9:e5:11:a4:8e:37: 40:09:0f:8f:43:d2:ab:dd:9e:1b:7e:cf:d1:f3:8f: 55:8b:b9:67:ff:1a:20:c0:d3:00:69:be:c3:5f:25: 1c:b8:49:a4:78:7f:b9:dc:a8:22:34:7a:f4:3d:4a: 5b:8f:f9:fd:d4:76:4d:d1:10:8d:e4:de:a6:82:5c: 44:85:3f:0b:c5:c0:30:23:8b:16:d7:0e:a6:b4:5e: 86:fe:f0:5a:45:33:80:67:0a:c9:37:29:6b:57:8a: 03:3f:1e:35:f5:11:dd:90:f7:dd:22:9a:2f:de:50: 09:c2:ab:0e:4a:31:1d:4b:28:2b:40:ae:93:1a:6c: bb:3d:ed:9a:3e:2a:04:82:b8:52:ce:49:b5:87:60: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:79:BB:8E:8E:D5:26:32:5C:86:11:37:8B:CD:5F:39:98:18:35 X509v3 Authority Key Identifier: keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2c:d0:0e:8c:71:79:ad:1d:f0:ab:aa:8b:ac:3f:e5:88:81: a2:1e:fa:6e:7e:c1:1a:30:9f:67:69:d0:cf:18:9f:80:63:94: 93:53:b3:e7:b7:c1:fa:11:c9:e0:cb:5f:fc:10:37:80:1d:07: f4:da:cb:fa:ae:ca:86:2b:2d:03:5e:d7:50:b5:e7:08:47:ca: 57:ac:3e:30:ff:46:1f:2d:09:b4:d5:8a:2f:0f:7b:91:3c:e7: 78:a5:da:e9:d3:66:f0:c9:cc:a5:52:e2:0c:b7:20:67:41:f7: 2e:1e:d1:56:59:84:5b:a0:76:bb:e7:14:a7:1f:84:f2:71:3f: ca:b7:f4:02:7a:d0:48:7f:d2:28:0e:3c:60:9e:c8:83:1e:7e: 7e:3a:c9:80:dc:7d:e9:b0:84:c3:e2:18:83:ed:0e:82:16:dd: eb:33:a4:08:38:bb:af:3e:9b:35:06:08:af:d3:d8:12:10:46: 03:ef:b6:37:25:bc:bb:59:38:62:db:4e:0d:0d:91:2e:8e:25: e0:9d:0c:c9:e1:35:90:b0:06:00:6a:40:d0:f6:b9:5f:7f:0b: 61:74:ad:b8:3d:75:dd:d5:36:de:a6:91:fe:f9:a7:be:a6:44: 9d:6a:1d:29:71:7d:fe:67:75:fa:77:3d:c6:0e:45:81:a2:17: f9:87:22:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF MUQ4MTIxQTMwHhcNMjYwMzI3MDIxOTE4WhcNMjYwNDAzMDIxOTE4WjAYMRYwFAYD VQQDEw02OWM1ZTkyNy0zZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6sPzniMWJHkQHd646w3zQTzIeX3bXa5lfYBXS0fj5BmDSQiHUJw50BxG5uE oH9wsw0IVYpRaZBPBsefelzD8tMqNWc5ikYS93Ng7mB3ksyAw0+v9bRitivIDhRQ s2EqX4EOFO6uMMLRU7jsvmnkT6O55RGkjjdACQ+PQ9Kr3Z4bfs/R849Vi7ln/xog wNMAab7DXyUcuEmkeH+53KgiNHr0PUpbj/n91HZN0RCN5N6mglxEhT8LxcAwI4sW 1w6mtF6G/vBaRTOAZwrJNylrV4oDPx419RHdkPfdIpov3lAJwqsOSjEdSygrQK6T Gmy7Pe2aPioEgrhSzkm1h2AhfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPxebuO jtUmMlyGETeLzV85mBg1MB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjQ4RC9DM0VFRTJBOEVGRTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVl SXdVeHhhb1BDeVRoMkJJYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSzQDoxxea0d8Kuqi6w/5YiBoh76bn7BGjCfZ2nQzxifgGOUk1Oz57fB+hHJ 4Mtf/BA3gB0H9NrL+q7KhistA17XULXnCEfKV6w+MP9GHy0JtNWKLw97kTzneKXa 6dNm8MnMpVLiDLcgZ0H3Lh7RVlmEW6B2u+cUpx+E8nE/yrf0AnrQSH/SKA48YJ7I gx5+fjrJgNx96bCEw+IYg+0Oghbd6zOkCDi7rz6bNQYIr9PYEhBGA++2NyW8u1k4 YttODQ2RLo4l4J0MyeE1kLAGAGpA0Pa5X38LYXStuD113dU23qaR/vmnvqZEnWod KXF9/md1+nc9xg5FgaIX+Yciuw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:35 2026 by rpki-client