$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: ba9YdS18GW4yThnXPPZoFZ5lc7ETqHknALk8x9n2W/o= Subject key identifier: 9A:18:29:27:1A:E5:8C:4A:8F:98:41:6E:6E:AF:1D:38:7A:C1:D9:A5 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0AF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0AEB Signing time: Thu 26 Mar 2026 19:17:44 +0000 Manifest this update: Thu 26 Mar 2026 19:17:43 +0000 Manifest next update: Thu 02 Apr 2026 19:17:43 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: H3983cA+19Lzq8h5gsydsS2mPCI3Rc9P/5wiSUifADw=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: ohQ7dmr4wlhGIPSZo4SYR6kjahOfosEHSoyiv0ooBGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2804 (0xaf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Mar 26 19:17:43 2026 GMT Not After : Apr 2 19:17:43 2026 GMT Subject: CN=69c58658-529f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:a5:a5:37:46:c1:11:6c:3d:5d:8c:e6:d8: 9a:66:0f:8c:c8:58:91:f8:e8:d4:17:df:91:a7:d6: 5e:21:8f:36:23:f5:7d:36:05:0e:ef:a1:c0:5b:36: 99:2f:ec:4e:88:78:45:22:f1:6c:23:9b:d5:39:83: bd:b9:20:a7:e0:1e:85:ce:00:b4:45:9f:55:a3:7e: 75:64:81:58:19:fb:41:a4:8b:da:4a:d7:71:72:2b: 8c:52:45:10:e8:43:b4:b2:a1:5e:da:cf:75:37:6b: d7:bc:53:78:29:8e:92:e1:82:49:73:47:12:b5:92: a4:27:20:f6:5e:89:08:8f:11:76:69:0f:a2:68:61: 4e:4c:cb:0f:22:23:78:3a:d7:b9:c6:71:aa:32:1d: c2:8f:67:dc:13:d0:95:cb:4c:d9:af:e9:26:2a:8a: f5:50:d9:7f:42:37:29:c4:74:94:d1:fa:5e:35:02: fa:be:5a:20:36:1d:99:92:36:07:fb:64:57:f1:53: 42:28:6b:ae:ee:52:c9:af:ba:b0:9e:60:14:86:bf: 56:7d:97:d8:69:8c:87:ab:e8:02:59:c7:a7:a9:1c: 52:6a:21:0f:5b:c2:10:95:b8:d6:e6:c7:54:34:74: 86:23:e1:34:9d:3a:3b:c5:9e:7a:55:b7:e6:aa:ea: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:18:29:27:1A:E5:8C:4A:8F:98:41:6E:6E:AF:1D:38:7A:C1:D9:A5 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:05:6e:3f:b5:32:bd:c0:eb:18:e3:69:df:c5:f7:e2:d3:e7: b4:1a:47:f9:af:76:b5:d6:ae:91:b7:26:0f:61:dd:bf:67:49: 45:9e:3a:55:91:1f:8c:52:d6:ec:22:ca:a3:bb:43:2d:37:93: ab:0e:88:6f:5b:63:a3:cc:6f:5d:6d:6b:88:53:99:ab:d6:f1: 7e:f5:8b:cc:02:9a:fa:07:3d:86:b7:68:24:3d:7a:04:31:e3: 1c:7c:4d:9f:58:0e:72:ef:1a:47:16:32:cd:b3:2a:4d:ff:b3: fb:9c:85:71:44:ed:d2:e8:18:b9:65:be:e1:03:c4:9e:48:4e: e3:c7:07:93:a1:39:df:ea:7e:e7:78:e8:13:81:9b:7f:33:ef: 2a:2c:ef:ba:13:20:9c:af:cc:6f:1e:3d:d1:d2:a4:ee:71:bf: e8:b1:63:d7:ca:2e:a5:82:f7:79:f7:89:71:6e:b6:27:18:8d: 92:6f:25:18:62:d1:18:4d:1d:27:af:c9:bf:53:51:d6:e3:4b: a4:12:d0:4b:78:c3:52:a9:e0:0e:d1:d7:db:99:cb:27:a1:c0: 11:9d:9d:fd:b4:99:e5:fd:17:e7:af:b9:0d:ff:37:dd:45:0b: 68:a9:00:88:f7:aa:22:d1:73:aa:f4:e9:93:fe:22:28:0e:8a: 42:da:fd:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjYwMzI2MTkxNzQzWhcNMjYwNDAyMTkxNzQzWjAYMRYwFAYD VQQDEw02OWM1ODY1OC01MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn6lpTdGwRFsPV2M5tiaZg+MyFiR+OjUF9+Rp9ZeIY82I/V9NgUO76HAWzaZ L+xOiHhFIvFsI5vVOYO9uSCn4B6FzgC0RZ9Vo351ZIFYGftBpIvaStdxciuMUkUQ 6EO0sqFe2s91N2vXvFN4KY6S4YJJc0cStZKkJyD2XokIjxF2aQ+iaGFOTMsPIiN4 Ote5xnGqMh3Cj2fcE9CVy0zZr+kmKor1UNl/QjcpxHSU0fpeNQL6vlogNh2ZkjYH +2RX8VNCKGuu7lLJr7qwnmAUhr9WfZfYaYyHq+gCWcenqRxSaiEPW8IQlbjW5sdU NHSGI+E0nTo7xZ56VbfmqupfTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJoYKSca 5YxKj5hBbm6vHTh6wdmlMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsAVuP7UyvcDrGONp38X34tPntBpH+a92tdaukbcmD2Hdv2dJRZ46VZEfjFLW 7CLKo7tDLTeTqw6Ib1tjo8xvXW1riFOZq9bxfvWLzAKa+gc9hrdoJD16BDHjHHxN n1gOcu8aRxYyzbMqTf+z+5yFcUTt0ugYuWW+4QPEnkhO48cHk6E53+p+53joE4Gb fzPvKizvuhMgnK/Mbx490dKk7nG/6LFj18oupYL3efeJcW62JxiNkm8lGGLRGE0d J6/Jv1NR1uNLpBLQS3jDUqngDtHX25nLJ6HAEZ2d/bSZ5f0X56+5Df833UULaKkA iPeqItFzqvTpk/4iKA6KQtr9QA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:54:17 2026 by rpki-client