$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: Msh6Uw57GkI/4Z6jsuB/DHo6tKbOrgJGw3+wX8OuvBU= Subject key identifier: 59:E7:A3:BD:29:99:E6:E3:DF:23:08:50:F7:DC:78:64:9C:8A:4B:85 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0DAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0D92 Signing time: Tue 24 Mar 2026 17:48:38 +0000 Manifest this update: Tue 24 Mar 2026 17:48:38 +0000 Manifest next update: Tue 31 Mar 2026 17:48:38 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: oo0ju/0QaYqJnmDzGzhOVAeY6zz0xvYlRO5HUkldyy0=) 2: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: hSHDKM9KQUXhHi7c/TM/bMOw3L9ZF0laC7/q7qjxH0U=) 3: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: l2mydQuOVLMIeiJESXRJpx5wncrhcHvLmXdDnK7v4j8=) 4: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: xodjw8GRj356oQr1PfHbQDGoinJnokIgOKUey7NTlyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3501 (0xdad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Mar 24 17:48:38 2026 GMT Not After : Mar 31 17:48:38 2026 GMT Subject: CN=69c2ce76-3aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:77:24:23:d3:f6:65:c3:ed:ae:34:0e:c9: 82:96:96:67:ba:94:89:b2:ce:22:29:19:21:8f:cc: 8b:75:bf:12:84:0d:93:9f:83:36:86:a7:70:d4:7c: 22:6e:65:92:08:90:a2:1b:6f:d5:d1:e4:f2:5e:07: 32:ce:b1:9e:05:d4:31:5a:46:c5:fe:4b:5e:b8:f5: 2c:d8:61:59:e5:f4:1d:99:c5:f4:78:54:70:b5:bc: 6d:50:c4:ba:40:82:cd:3d:05:1d:89:9a:a2:c8:c5: 02:6d:95:8f:ad:84:b4:15:70:94:58:6b:53:95:5c: 52:df:ba:57:7c:5d:59:68:3e:01:48:3d:e0:38:03: b3:85:af:c4:54:3e:78:64:77:e3:cd:8a:54:48:36: cd:39:75:04:f3:0c:b3:f1:65:81:01:45:f3:a2:db: 14:59:1c:38:13:47:4f:40:50:08:f2:3c:dc:d4:66: 16:b7:e6:90:7e:cb:4b:44:85:dc:73:df:d9:cd:a0: 96:98:04:2b:da:4b:14:0b:83:fa:42:f4:21:70:73: e9:2b:36:3c:c9:26:bc:52:1f:bd:58:9b:66:50:5b: c1:43:9f:af:94:2a:98:61:67:d6:10:27:53:bc:af: 0e:5f:19:61:7e:7f:7a:ff:6f:49:af:8c:aa:00:41: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E7:A3:BD:29:99:E6:E3:DF:23:08:50:F7:DC:78:64:9C:8A:4B:85 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a4:fe:24:44:1f:fe:ba:67:d8:66:3f:a8:95:52:52:f8:70: 60:f2:a9:85:71:81:e3:01:57:18:80:44:b5:9b:1b:58:b3:2a: b0:75:6b:7b:9f:94:6d:1d:f1:db:41:53:b8:3a:96:c8:5b:72: 45:8a:46:3b:b9:df:f3:be:3b:dd:62:26:38:95:18:8e:b5:ff: 19:7a:0a:e4:66:15:2d:64:50:02:86:46:f4:67:a4:ab:26:96: 01:26:1f:9f:f1:9f:f2:c5:1b:1b:42:02:d4:02:4d:ba:69:9d: 9d:d4:c3:c8:04:50:37:0d:a9:41:6d:ff:23:2b:2f:5d:8e:05: 59:0c:1c:a9:8f:91:1d:b7:1e:07:0b:fc:b2:1e:30:01:a0:2c: 46:65:d9:ad:50:f4:f2:6c:de:dd:75:66:08:6d:f2:81:9c:9c: 54:3d:53:af:85:60:a2:10:87:7e:66:c6:de:54:bd:e4:64:dd: 1d:f2:6c:77:f2:59:51:ee:06:c2:a6:e3:55:03:2f:68:17:c3: 2d:e0:bc:4b:f9:59:39:fa:3c:8f:ab:40:7a:f2:1c:40:35:cc: 93:44:fe:26:d4:ec:68:d3:a9:7f:42:bd:8c:d7:b9:2b:5b:07: 0d:93:1f:a9:32:8e:bf:9f:31:aa:05:36:13:8b:73:9e:fe:5a: e7:ba:dc:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwMzI0MTc0ODM4WhcNMjYwMzMxMTc0ODM4WjAYMRYwFAYD VQQDEw02OWMyY2U3Ni0zYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPt3JCPT9mXD7a40DsmClpZnupSJss4iKRkhj8yLdb8ShA2Tn4M2hqdw1Hwi bmWSCJCiG2/V0eTyXgcyzrGeBdQxWkbF/kteuPUs2GFZ5fQdmcX0eFRwtbxtUMS6 QILNPQUdiZqiyMUCbZWPrYS0FXCUWGtTlVxS37pXfF1ZaD4BSD3gOAOzha/EVD54 ZHfjzYpUSDbNOXUE8wyz8WWBAUXzotsUWRw4E0dPQFAI8jzc1GYWt+aQfstLRIXc c9/ZzaCWmAQr2ksUC4P6QvQhcHPpKzY8ySa8Uh+9WJtmUFvBQ5+vlCqYYWfWECdT vK8OXxlhfn96/29Jr4yqAEHTYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnno70p mebj3yMIUPfceGScikuFMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhKT+JEQf/rpn2GY/qJVSUvhwYPKphXGB4wFXGIBEtZsbWLMqsHVre5+UbR3x 20FTuDqWyFtyRYpGO7nf87473WImOJUYjrX/GXoK5GYVLWRQAoZG9GekqyaWASYf n/Gf8sUbG0IC1AJNummdndTDyARQNw2pQW3/IysvXY4FWQwcqY+RHbceBwv8sh4w AaAsRmXZrVD08mze3XVmCG3ygZycVD1Tr4VgohCHfmbG3lS95GTdHfJsd/JZUe4G wqbjVQMvaBfDLeC8S/lZOfo8j6tAevIcQDXMk0T+JtTsaNOpf0K9jNe5K1sHDZMf qTKOv58xqgU2E4tznv5a57rcIQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:57 2026 by rpki-client