$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: GSgL2Yz9WVbmzeX5uERJhPpx/kwmTvM7q2gnwB7+oP8= Subject key identifier: 67:59:2C:AC:89:E2:FA:66:04:C4:CD:CB:7E:2F:63:50:07:CB:08:FE Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 0750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 0749 Signing time: Thu 26 Mar 2026 21:35:50 +0000 Manifest this update: Thu 26 Mar 2026 21:35:50 +0000 Manifest next update: Thu 02 Apr 2026 21:35:50 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: ntauGlCWVhjaMKvgffST5cUADpOpJAHNnsGU65J33AA=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: EK917a0brIXozyOjUJuFME0or9oqwhvu136xFaoo3CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Mar 26 21:35:50 2026 GMT Not After : Apr 2 21:35:50 2026 GMT Subject: CN=69c5a6b6-f447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:04:1f:d0:19:98:92:ef:c7:e5:7f:02:32: d6:e4:03:ef:42:2d:61:a4:45:b3:88:1d:74:7b:ea: 56:75:3d:f6:da:88:53:55:71:15:3f:4a:83:de:61: 54:d0:8b:6f:ce:9d:5b:ef:0b:c8:2e:cf:12:9b:1a: 57:01:5a:6c:e5:63:82:53:84:1a:12:13:04:6f:1d: cc:6b:66:3b:c9:de:9f:82:c1:e1:19:e0:9f:40:09: b2:f8:83:2e:f5:44:8f:17:52:ab:7a:6b:ff:f4:14: 9d:51:7b:66:54:fe:08:bc:a2:19:da:20:5b:05:78: 9a:4f:4d:0e:b2:a4:42:7c:ff:ec:a6:b9:b9:ef:b5: a3:2c:9e:69:91:ac:95:85:9f:f3:83:75:6a:12:c4: a3:ff:7d:f8:84:30:9d:ae:c7:53:ae:2a:cb:96:fa: 4c:36:05:24:f0:ac:28:8f:7b:a2:2f:70:49:02:2d: 23:65:39:b5:32:4d:dc:df:ff:c9:67:8e:d7:ab:24: c8:4d:c4:1b:61:d6:4d:85:cc:83:f3:f5:a2:84:11: 0a:d4:f8:51:9b:cc:8d:b7:c9:14:67:02:1c:fe:20: 23:ea:28:40:26:c8:b3:b4:3a:00:20:25:42:9f:23: 7c:9b:d6:e0:46:04:5e:67:41:27:a7:dd:37:af:9d: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:59:2C:AC:89:E2:FA:66:04:C4:CD:CB:7E:2F:63:50:07:CB:08:FE X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d4:23:0f:0c:a9:96:5e:a6:9b:c8:92:a2:13:7e:bc:13:dd: 70:5c:01:b0:43:c2:b7:7d:49:d7:7b:32:6f:7d:c8:b5:73:d0: cf:51:12:22:92:0d:3b:60:d8:13:11:56:b7:83:5e:19:67:27: 87:3c:a0:4a:d8:7d:87:f9:e4:7a:5c:0b:80:29:a9:87:f1:91: fc:48:51:43:41:f5:c6:bd:43:4c:ad:92:8f:e2:62:a4:11:ce: bc:1c:38:92:f6:e5:a2:4f:2d:0d:95:7a:6c:49:fe:e5:3d:04: 0e:1f:7e:22:45:87:2c:e2:54:ef:c8:30:1f:87:87:e3:36:3c: 75:a2:98:35:6e:d1:19:a2:50:a8:65:98:be:35:53:cb:41:7b: f9:5f:24:34:a1:4f:72:f6:12:d1:8f:1c:a9:4f:0a:dd:24:72: 5b:0d:5c:30:49:08:55:e7:59:81:ee:45:1b:05:64:46:27:9e: 77:c4:9c:3d:e6:70:c8:3d:cd:e8:5e:96:48:4d:74:5e:2b:2c: e7:5d:f9:d1:70:5a:dc:b1:66:21:e5:ff:bd:11:28:bb:8e:80: 0d:27:55:cc:f9:2e:fa:8a:6e:e4:6f:81:ee:2d:e7:97:9b:7a: ae:53:24:53:0e:16:8e:03:fe:c6:bb:c3:e4:a6:60:06:e4:85: a0:e4:8d:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjYwMzI2MjEzNTUwWhcNMjYwNDAyMjEzNTUwWjAYMRYwFAYD VQQDEw02OWM1YTZiNi1mNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7gEH9AZmJLvx+V/AjLW5APvQi1hpEWziB10e+pWdT322ohTVXEVP0qD3mFU 0Itvzp1b7wvILs8SmxpXAVps5WOCU4QaEhMEbx3Ma2Y7yd6fgsHhGeCfQAmy+IMu 9USPF1Kremv/9BSdUXtmVP4IvKIZ2iBbBXiaT00OsqRCfP/sprm577WjLJ5pkayV hZ/zg3VqEsSj/334hDCdrsdTrirLlvpMNgUk8Kwoj3uiL3BJAi0jZTm1Mk3c3//J Z47XqyTITcQbYdZNhcyD8/WihBEK1PhRm8yNt8kUZwIc/iAj6ihAJsiztDoAICVC nyN8m9bgRgReZ0Enp903r52HJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdZLKyJ 4vpmBMTNy34vY1AHywj+MB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXtQjDwypll6mm8iSohN+vBPdcFwBsEPCt31J13syb33ItXPQz1ESIpINO2DY ExFWt4NeGWcnhzygSth9h/nkelwLgCmph/GR/EhRQ0H1xr1DTK2Sj+JipBHOvBw4 kvblok8tDZV6bEn+5T0EDh9+IkWHLOJU78gwH4eH4zY8daKYNW7RGaJQqGWYvjVT y0F7+V8kNKFPcvYS0Y8cqU8K3SRyWw1cMEkIVedZge5FGwVkRieed8ScPeZwyD3N 6F6WSE10Xiss51350XBa3LFmIeX/vREou46ADSdVzPku+opu5G+B7i3nl5t6rlMk Uw4WjgP+xrvD5KZgBuSFoOSNbQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:45:20 2026 by rpki-client