$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: eZ965sLutt7wSWSyRYmqJp+aNF4zfl4qR4zbmNtkVgw= Subject key identifier: A6:A3:CB:AB:69:1C:83:A5:4F:2A:5A:2A:91:36:A7:B2:BD:9F:FF:D1 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0AEA Signing time: Tue 24 Mar 2026 19:11:53 +0000 Manifest this update: Tue 24 Mar 2026 19:11:52 +0000 Manifest next update: Tue 31 Mar 2026 19:11:52 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: KHD8msPyipxgNrmQILfoxZzuMphD7VLFkAP1XlD0V6Y=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: ohQ7dmr4wlhGIPSZo4SYR6kjahOfosEHSoyiv0ooBGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Mar 24 19:11:52 2026 GMT Not After : Mar 31 19:11:52 2026 GMT Subject: CN=69c2e1f8-5250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:c2:be:a1:2c:f6:ee:77:f9:76:cf:e4:ed: d4:7b:ed:5f:e5:13:02:58:eb:a3:a4:55:3b:2d:bd: 70:88:5f:df:14:49:8f:c0:c8:51:b1:31:a7:f9:28: c0:15:b2:e4:02:e1:6b:5f:1d:f1:c0:00:54:8c:01: 15:1e:b4:7c:8c:86:b7:c0:3f:4d:6c:de:22:96:43: 46:9f:81:56:53:be:ca:e2:df:48:db:dd:b6:08:a0: f3:96:ce:0c:45:79:55:1c:ba:2b:f9:df:4c:a0:cc: 6b:70:3e:62:ca:f8:18:db:c7:59:2d:c4:dd:ff:04: ba:d6:24:d7:7f:d4:6d:9d:e7:3b:cf:cb:34:68:85: 8d:83:d2:ab:81:b2:a1:83:c6:4a:3e:a0:10:85:3b: 26:bc:96:d7:30:39:7e:31:2d:ff:fa:13:73:6f:f0: fb:0e:88:b6:3a:70:55:55:b2:93:af:86:34:77:72: 7d:ed:04:69:ec:ae:6b:9d:57:76:fd:8e:cc:07:86: fe:c7:30:ef:c4:4d:be:1d:93:bd:0f:b2:d7:b6:d0: 1a:d6:3b:2c:a2:9c:aa:3d:dd:bd:d6:45:29:88:23: b7:04:17:10:59:8b:3c:eb:9c:24:13:43:d5:b4:bb: fb:e1:d7:51:7c:a9:21:a5:0a:7c:d5:61:fd:0c:bc: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A3:CB:AB:69:1C:83:A5:4F:2A:5A:2A:91:36:A7:B2:BD:9F:FF:D1 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dc:60:5d:9a:22:f8:dd:3c:a5:0d:26:2f:1b:32:24:e7:15: a6:84:9c:07:f2:e3:4d:d5:9f:d2:5b:1e:b3:ea:b3:16:6c:a9: 4e:4a:0a:dd:bf:b2:93:37:03:7c:05:9d:8f:e2:9b:c6:80:0f: 16:68:dd:3d:a5:f0:2a:02:e5:eb:41:32:68:30:cf:18:aa:c1: 23:31:eb:43:14:ef:c5:fb:2d:1e:f3:a6:b5:a9:12:d7:0d:92: eb:63:bc:0d:0b:e8:da:b9:18:78:64:bc:63:26:4c:ac:42:68: 23:c7:c8:bc:df:d6:59:8f:9b:33:2f:c2:9d:c2:0e:46:99:46: 01:cb:07:74:22:44:2b:37:36:3b:df:b1:cc:f9:89:1d:cc:2d: be:89:02:c3:58:36:7a:17:ee:e6:70:b3:f0:6e:39:14:ac:40: e4:17:33:ff:85:e0:e7:c1:c1:3f:f5:0c:81:d0:f8:28:e4:f3: d7:9f:7a:68:a3:c2:e8:6b:7b:6c:24:30:3c:a1:eb:7e:c1:73: 33:53:b6:b2:0f:7b:72:f9:1a:87:1a:e7:38:45:48:89:e8:8f: d4:4f:a9:6e:5d:5e:02:f6:95:a5:b3:04:bc:b1:83:94:e7:a4: 47:29:a0:8b:84:60:0c:6b:f6:c1:a8:88:a5:d0:5e:50:07:11: 27:33:c6:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjYwMzI0MTkxMTUyWhcNMjYwMzMxMTkxMTUyWjAYMRYwFAYD VQQDEw02OWMyZTFmOC01MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiwLCvqEs9u53+XbP5O3Ue+1f5RMCWOujpFU7Lb1wiF/fFEmPwMhRsTGn+SjA FbLkAuFrXx3xwABUjAEVHrR8jIa3wD9NbN4ilkNGn4FWU77K4t9I2922CKDzls4M RXlVHLor+d9MoMxrcD5iyvgY28dZLcTd/wS61iTXf9Rtnec7z8s0aIWNg9KrgbKh g8ZKPqAQhTsmvJbXMDl+MS3/+hNzb/D7Doi2OnBVVbKTr4Y0d3J97QRp7K5rnVd2 /Y7MB4b+xzDvxE2+HZO9D7LXttAa1jssopyqPd291kUpiCO3BBcQWYs865wkE0PV tLv74ddRfKkhpQp81WH9DLxRIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKajy6tp HIOlTypaKpE2p7K9n//RMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtxgXZoi+N08pQ0mLxsyJOcVpoScB/LjTdWf0lses+qzFmypTkoK3b+ykzcD fAWdj+KbxoAPFmjdPaXwKgLl60EyaDDPGKrBIzHrQxTvxfstHvOmtakS1w2S62O8 DQvo2rkYeGS8YyZMrEJoI8fIvN/WWY+bMy/CncIORplGAcsHdCJEKzc2O9+xzPmJ HcwtvokCw1g2ehfu5nCz8G45FKxA5Bcz/4Xg58HBP/UMgdD4KOTz1596aKPC6Gt7 bCQwPKHrfsFzM1O2sg97cvkahxrnOEVIieiP1E+pbl1eAvaVpbMEvLGDlOekRymg i4RgDGv2waiIpdBeUAcRJzPGQA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:52 2026 by rpki-client