$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: 0x8VeP2yAqTugi0EusEvleIoZRXoH2OJYiU4lCwLzYg= Subject key identifier: A4:5B:26:0F:E1:BF:6F:4E:1A:B4:8B:8E:73:2C:E4:D1:53:F5:C9:52 Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 280E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 27E6 Signing time: Thu 26 Mar 2026 15:38:43 +0000 Manifest this update: Thu 26 Mar 2026 15:38:43 +0000 Manifest next update: Thu 02 Apr 2026 15:38:43 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: eZsDpuG1bYMWnfEmWHkR+ZXm/s34Vokeo98MHfBARb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10254 (0x280e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B, serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: Mar 26 15:38:43 2026 GMT Not After : Apr 2 15:38:43 2026 GMT Subject: CN=69c55303-02a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:49:51:a0:00:4f:73:41:5b:d7:a1:ad:05: 4b:cf:92:42:55:0e:38:4a:e1:e5:e3:38:81:d7:d5: 6a:32:3f:77:22:4f:2a:e3:da:df:ba:79:07:44:36: 73:59:0f:04:27:39:5c:bf:ae:5e:91:0b:d3:5e:35: 30:da:d1:1e:cf:7f:f5:6e:51:78:6d:ce:5f:0a:6b: 1a:73:44:49:76:6f:68:8b:2c:6b:71:55:60:40:80: ec:27:fe:21:91:dd:8a:76:6c:f3:fd:87:20:8f:70: c4:75:62:06:f3:7a:01:4e:26:71:e0:28:4b:88:24: 00:7a:32:9e:fd:ad:c8:cb:4d:f8:65:8d:13:51:23: c8:1e:8e:35:ad:98:6b:0c:f5:eb:d3:96:c1:10:42: 47:22:92:4c:b3:10:a9:56:2f:9d:36:22:9d:7e:82: 89:2d:0b:ce:8c:5f:01:54:e9:5b:de:25:c7:8f:94: d5:e6:dc:6a:d4:84:2e:6f:a9:34:a5:fd:e3:98:c8: 4b:b5:ee:8b:f6:7d:d8:51:8d:81:66:f5:3c:65:73: a7:ad:27:12:ce:94:c3:75:c3:d2:c8:4f:0b:3f:20: ff:79:dc:b1:7b:01:6f:de:96:03:1d:9b:f6:a7:df: 6c:13:76:a7:e1:3c:08:d6:ec:8d:a5:78:e6:d5:f3: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5B:26:0F:E1:BF:6F:4E:1A:B4:8B:8E:73:2C:E4:D1:53:F5:C9:52 X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8f:a7:03:c4:c1:9a:03:47:b0:2d:1c:1b:be:41:ec:d0:b8: 4d:47:59:97:50:10:c2:e1:cf:90:2e:dd:a7:00:f6:3c:cf:c6: 30:7a:b0:0b:14:82:ba:a4:11:9c:0e:c9:3d:cf:5a:5f:81:7f: 38:fd:13:db:b8:1c:62:47:35:c1:a4:59:71:cf:d0:ed:b7:9a: d6:06:87:47:1c:74:e4:ea:c4:59:ed:7b:e9:c8:cd:89:a8:1f: 29:09:b4:05:18:31:e3:79:83:d4:27:6d:44:29:3b:04:73:c6: 4a:ae:2d:db:c0:b7:c5:97:e3:d7:da:f6:36:33:bc:95:ab:6a: ea:c7:6e:0e:63:ae:51:90:7c:3c:ed:f9:01:2e:2f:e4:6b:f4: cd:0a:e9:3b:ae:a4:86:db:72:03:6d:6d:34:da:76:88:aa:36: 0e:07:c1:0c:83:0a:8f:aa:4e:c4:e6:e4:14:e8:fd:6d:fe:cf: 9f:b2:f8:3a:1f:f5:9f:6f:1f:3c:de:86:9f:7f:dc:48:a8:65: d9:81:a2:ca:a1:e1:1f:53:ea:aa:91:ab:ac:f5:bb:a9:ae:67: e6:8a:53:b5:f1:5c:51:a7:bd:5c:4b:26:2c:9d:95:1e:95:4e: cd:19:de:32:42:18:db:a8:00:77:31:38:a4:2f:d9:2f:ae:5d: 89:3c:66:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjYwMzI2MTUzODQzWhcNMjYwNDAyMTUzODQzWjAYMRYwFAYD VQQDEw02OWM1NTMwMy0wMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/RJUaAAT3NBW9ehrQVLz5JCVQ44SuHl4ziB19VqMj93Ik8q49rfunkHRDZz WQ8EJzlcv65ekQvTXjUw2tEez3/1blF4bc5fCmsac0RJdm9oiyxrcVVgQIDsJ/4h kd2Kdmzz/Ycgj3DEdWIG83oBTiZx4ChLiCQAejKe/a3Iy034ZY0TUSPIHo41rZhr DPXr05bBEEJHIpJMsxCpVi+dNiKdfoKJLQvOjF8BVOlb3iXHj5TV5txq1IQub6k0 pf3jmMhLte6L9n3YUY2BZvU8ZXOnrScSzpTDdcPSyE8LPyD/edyxewFv3pYDHZv2 p99sE3an4TwI1uyNpXjm1fMu5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRbJg/h v29OGrSLjnMs5NFT9clSMB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAio+nA8TBmgNHsC0cG75B7NC4TUdZl1AQwuHPkC7dpwD2PM/GMHqwCxSCuqQR nA7JPc9aX4F/OP0T27gcYkc1waRZcc/Q7bea1gaHRxx05OrEWe176cjNiagfKQm0 BRgx43mD1CdtRCk7BHPGSq4t28C3xZfj19r2NjO8latq6sduDmOuUZB8PO35AS4v 5Gv0zQrpO66khttyA21tNNp2iKo2DgfBDIMKj6pOxObkFOj9bf7Pn7L4Oh/1n28f PN6Gn3/cSKhl2YGiyqHhH1PqqpGrrPW7qa5n5opTtfFcUae9XEsmLJ2VHpVOzRne MkIY26gAdzE4pC/ZL65diTxmyQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:16:57 2026 by rpki-client