$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json) Hash identifier: g3MGkR0IBpfBgETfeVrCSHndneI5A42COViq6ZDF0Ro= Subject key identifier: C7:20:91:D0:A2:CA:E3:F5:96:22:8E:2A:B1:98:7A:5B:12:82:D2:83 Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Certificate serial: 0B9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft Manifest number: 0B94 Signing time: Tue 24 Mar 2026 18:54:07 +0000 Manifest this update: Tue 24 Mar 2026 18:54:06 +0000 Manifest next update: Tue 31 Mar 2026 18:54:06 +0000 Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: V53ctRDD+h50e0obTCblGQdZS9sHq4iFJvF3xfbqB0g=) 2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Validity Not Before: Mar 24 18:54:06 2026 GMT Not After : Mar 31 18:54:06 2026 GMT Subject: CN=69c2ddcf-f429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:8b:69:6b:eb:05:f4:7c:2a:b1:3d:5d:f9: b9:e6:b6:01:bf:9f:04:79:3d:4a:2b:83:51:89:6b: aa:74:81:b6:1f:23:5c:bd:e5:82:c9:8d:00:46:30: 89:47:2e:06:ae:d7:ef:3c:41:bc:0b:09:6b:dc:c6: ca:4a:81:49:d0:58:de:83:53:de:7f:fa:08:31:ee: ff:d9:e4:26:18:0e:eb:17:4d:5f:91:67:a4:db:39: a4:ef:4a:9b:0e:43:99:d6:bb:40:ed:a1:be:9d:0a: 45:ee:35:97:a1:6c:3e:28:e5:27:e9:03:38:18:cb: a7:ee:e3:23:d1:39:9b:af:84:96:0b:08:c2:37:4c: ab:12:d8:75:96:74:0e:a2:4c:f2:11:30:95:82:b6: 18:b3:a4:71:a5:23:cc:6f:3e:5d:27:96:d1:3c:2e: 72:d9:ce:a3:fd:6d:9d:1c:58:47:64:a5:7c:cb:b8: 8c:c0:6c:3d:fc:35:a9:33:c4:ec:c5:37:e5:5f:cc: be:e0:84:65:da:1a:dd:65:58:fe:2d:0e:90:c1:ca: b9:92:b6:5c:7d:ff:2c:1b:12:4e:b4:a4:d1:47:a6: d2:68:a7:29:39:16:7e:95:ac:65:ae:bc:e7:99:97: 3b:9c:2e:d9:91:94:2f:21:42:7a:bd:04:26:a6:9b: 24:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:20:91:D0:A2:CA:E3:F5:96:22:8E:2A:B1:98:7A:5B:12:82:D2:83 X509v3 Authority Key Identifier: keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:81:d9:95:33:c0:24:9e:1e:ca:06:cd:05:d8:09:68:c7:b8: ba:60:a3:65:77:fa:d3:16:0c:92:29:f9:81:e8:ab:a2:2c:93: 59:20:6b:ef:e2:2f:ff:c7:38:e6:4f:eb:61:0e:36:bb:1e:82: dc:1d:22:36:e0:be:45:f6:f8:4a:5a:17:e6:d2:8e:bb:cd:6e: d0:6f:de:96:93:16:1b:a4:4c:47:c2:17:e9:67:34:3f:52:c5: cf:4b:0d:e9:b8:f1:eb:e7:18:e9:26:14:83:b3:e2:34:e1:c1: fe:0d:d5:0a:4c:c5:1a:fc:77:b6:00:36:e8:46:7b:51:4d:cd: b4:9e:15:74:76:21:8d:46:22:39:87:d4:a0:a9:80:2f:cd:3d: 36:36:ac:bb:fa:07:ac:dc:88:6a:d8:17:32:72:12:34:a3:fe: 76:28:51:d0:9f:d7:a9:73:76:0d:a8:83:19:6c:80:52:8a:f6: 62:e4:f0:96:30:c8:dc:62:df:6c:f6:f4:1a:66:ec:84:dc:7e: 01:0a:2d:a7:9d:62:57:6c:3c:da:f4:32:33:69:12:f2:16:74: 8b:1b:ba:0b:30:8f:21:12:aa:1c:1a:1f:52:d3:e3:86:92:57: 5a:76:07:08:99:9a:0b:d8:84:e9:d2:14:b1:96:1e:41:cb:cc: 53:f4:70:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw RjcyODdDOUEwHhcNMjYwMzI0MTg1NDA2WhcNMjYwMzMxMTg1NDA2WjAYMRYwFAYD VQQDEw02OWMyZGRjZi1mNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuumLaWvrBfR8KrE9Xfm55rYBv58EeT1KK4NRiWuqdIG2HyNcveWCyY0ARjCJ Ry4GrtfvPEG8Cwlr3MbKSoFJ0Fjeg1Pef/oIMe7/2eQmGA7rF01fkWek2zmk70qb DkOZ1rtA7aG+nQpF7jWXoWw+KOUn6QM4GMun7uMj0Tmbr4SWCwjCN0yrEth1lnQO okzyETCVgrYYs6RxpSPMbz5dJ5bRPC5y2c6j/W2dHFhHZKV8y7iMwGw9/DWpM8Ts xTflX8y+4IRl2hrdZVj+LQ6Qwcq5krZcff8sGxJOtKTRR6bSaKcpORZ+laxlrrzn mZc7nC7ZkZQvIUJ6vQQmppsk7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcgkdCi yuP1liKOKrGYelsSgtKDMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1 QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH LXEzSkl6aUxtR1lQY29mSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi4HZlTPAJJ4eygbNBdgJaMe4umCjZXf60xYMkin5geiroiyTWSBr7+Iv/8c4 5k/rYQ42ux6C3B0iNuC+Rfb4SloX5tKOu81u0G/elpMWG6RMR8IX6Wc0P1LFz0sN 6bjx6+cY6SYUg7PiNOHB/g3VCkzFGvx3tgA26EZ7UU3NtJ4VdHYhjUYiOYfUoKmA L809Njasu/oHrNyIatgXMnISNKP+dihR0J/XqXN2DaiDGWyAUor2YuTwljDI3GLf bPb0GmbshNx+AQotp51iV2w82vQyM2kS8hZ0ixu6CzCPIRKqHBofUtPjhpJXWnYH CJmaC9iE6dIUsZYeQcvMU/RwyQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:19 2026 by rpki-client