$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: Fxk2JQCdJgo4ePXVXcwVSU6IuAfitOvloXzrWEpve7I= Subject key identifier: E0:7C:6C:8B:1E:F4:40:04:34:B9:6C:87:8F:7D:2C:83:6B:B1:6D:4A Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 0296 Signing time: Wed 25 Mar 2026 01:12:14 +0000 Manifest this update: Wed 25 Mar 2026 01:12:14 +0000 Manifest next update: Wed 01 Apr 2026 01:12:14 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: uKbtkA3xLty0a2RK8utopQK+ZQF02YBo9IF7YAPYW4Q=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: GzxKXa3buEq11SyhBYB0QOC/CAu38GX6nYU4rsrNTsE=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: CYGWWz/nixHL5zlXfnZLMHoHJguF5UwXiTUzH6J+3lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Validity Not Before: Mar 25 01:12:14 2026 GMT Not After : Apr 1 01:12:14 2026 GMT Subject: CN=69c3366e-bc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:c8:3f:9c:46:e1:a6:1c:ce:e8:65:de:49: 13:6a:20:eb:81:d8:85:8a:c1:84:57:87:70:f5:fa: ac:4a:f7:ab:91:0d:30:37:89:f0:a6:1f:5f:c0:5e: bb:1e:e1:48:5d:c5:7b:48:42:ce:67:ee:72:75:70: 28:a0:aa:41:73:b5:21:6e:8f:9d:a7:89:72:8f:9f: dc:18:1b:b6:15:b2:26:8b:c5:6b:5c:a8:03:31:c2: 60:7e:e6:70:7e:64:44:7c:d0:a5:df:48:6f:9b:67: c9:6c:1c:bf:e3:03:5d:7c:5c:45:de:11:16:dd:88: a9:b2:f9:cb:a5:ba:22:b0:66:c9:22:6a:fc:88:e2: a0:c8:ff:94:8f:fb:f2:73:e1:36:35:d0:3f:99:a5: 2b:07:1d:e2:a8:4a:24:35:42:3f:24:e3:aa:d9:72: ef:79:0e:ae:15:cc:c8:06:32:1b:1f:73:2e:e1:53: 97:e0:2a:92:db:e7:59:be:83:49:b3:67:d6:95:7b: 0c:af:55:d8:43:10:92:b3:b0:55:32:23:b7:30:4e: e8:4c:97:a5:6e:9d:87:f0:84:9a:60:dc:39:c9:a3: e3:c9:ea:74:f9:98:28:40:78:64:83:6d:ed:ff:6d: 31:2d:6d:e5:07:88:52:e2:2a:b5:9b:5c:03:7f:e4: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7C:6C:8B:1E:F4:40:04:34:B9:6C:87:8F:7D:2C:83:6B:B1:6D:4A X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0a:aa:1c:ce:90:45:aa:85:c7:63:e1:12:8a:40:96:14:d3: 52:2f:0e:a2:39:ea:b4:9a:b1:cc:03:56:c1:cf:0a:7a:2e:5e: 5b:8f:40:41:67:b1:8c:3e:1c:ab:2c:29:70:70:f3:00:8d:52: 73:de:f8:43:83:e3:d2:d1:11:6f:9d:fd:9c:c9:2f:07:72:b9: 81:a2:ca:40:4d:58:8c:03:91:73:02:be:26:b0:81:7c:99:0b: 53:22:dc:b1:a0:57:73:60:0b:7d:4d:73:c6:ad:7c:54:cf:f3: 62:cc:ec:77:90:b8:ce:45:6c:7d:06:b5:df:f2:6e:3d:b1:6a: 57:26:0c:f3:da:2e:c8:03:e8:bd:96:5b:c0:ec:c3:0e:66:4d: 7a:11:78:d1:4c:62:da:33:fa:52:62:a6:0d:ec:96:59:b2:80: de:22:3f:1b:e9:04:ea:8e:bc:34:58:2c:90:f4:69:49:81:00: bb:8b:2e:42:2f:a4:cd:22:47:5e:c9:7d:5c:a9:e0:35:ae:fe: c4:dd:4b:1c:97:80:36:35:61:54:d3:89:8f:d0:b8:9c:56:0f: 5c:70:2c:7f:6c:65:98:65:54:75:04:45:05:6b:9c:66:ab:f0: 34:17:9a:37:6c:f5:d2:8e:e0:07:dc:39:de:b4:15:7b:58:8a: 65:19:4b:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjYwMzI1MDExMjE0WhcNMjYwNDAxMDExMjE0WjAYMRYwFAYD VQQDEw02OWMzMzY2ZS1iYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7DIP5xG4aYczuhl3kkTaiDrgdiFisGEV4dw9fqsSverkQ0wN4nwph9fwF67 HuFIXcV7SELOZ+5ydXAooKpBc7Uhbo+dp4lyj5/cGBu2FbImi8VrXKgDMcJgfuZw fmREfNCl30hvm2fJbBy/4wNdfFxF3hEW3YipsvnLpboisGbJImr8iOKgyP+Uj/vy c+E2NdA/maUrBx3iqEokNUI/JOOq2XLveQ6uFczIBjIbH3Mu4VOX4CqS2+dZvoNJ s2fWlXsMr1XYQxCSs7BVMiO3ME7oTJelbp2H8ISaYNw5yaPjyep0+ZgoQHhkg23t /20xLW3lB4hS4iq1m1wDf+RFWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOB8bIse 9EAENLlsh499LINrsW1KMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHAqqHM6QRaqFx2PhEopAlhTTUi8OojnqtJqxzANWwc8Kei5eW49AQWexjD4c qywpcHDzAI1Sc974Q4Pj0tERb539nMkvB3K5gaLKQE1YjAORcwK+JrCBfJkLUyLc saBXc2ALfU1zxq18VM/zYszsd5C4zkVsfQa13/JuPbFqVyYM89ouyAPovZZbwOzD DmZNehF40Uxi2jP6UmKmDeyWWbKA3iI/G+kE6o68NFgskPRpSYEAu4suQi+kzSJH Xsl9XKngNa7+xN1LHJeANjVhVNOJj9C4nFYPXHAsf2xlmGVUdQRFBWucZqvwNBea N2z10o7gB9w53rQVe1iKZRlLIA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:13:43 2026 by rpki-client