$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft File: _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json) Hash identifier: 3gd0rkcofPKVi20hn5zBif1O3HklGCWHW9XXhlP8RsA= Subject key identifier: 11:3E:F4:66:DE:C7:79:69:FD:6A:D1:9C:8B:71:4F:56:84:FA:16:04 Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 Certificate issuer: /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft Manifest number: 0823 Signing time: Tue 24 Mar 2026 20:43:21 +0000 Manifest this update: Tue 24 Mar 2026 20:43:21 +0000 Manifest next update: Tue 31 Mar 2026 20:43:21 +0000 Files and hashes: 1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: FfRlCOV6nF3UMU/K/PB2EAd1j8uB78b1zFp6MSzEcxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Validity Not Before: Mar 24 20:43:21 2026 GMT Not After : Mar 31 20:43:21 2026 GMT Subject: CN=69c2f769-12da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1b:f9:3c:f6:df:3a:9d:a9:a6:b4:81:b4:42: 26:8e:c5:b3:49:ea:9a:06:df:fb:23:65:9a:0f:b7: a1:20:d2:b2:68:1d:40:e7:d5:ce:09:00:a6:d1:6e: 75:8a:33:ba:7d:3c:95:04:e9:f6:c2:cf:91:11:25: ff:64:fa:e9:c3:80:a1:0a:9c:cd:73:0c:89:4d:b4: 99:7c:c9:a9:4f:bd:39:cd:4e:6c:7d:63:a7:1a:9c: a9:1b:b8:ab:a1:0c:03:a5:71:cf:ca:80:d3:38:31: dc:ba:4f:2c:b3:97:83:f7:48:9d:f6:8a:e0:d2:bb: 08:8e:b7:1d:84:c4:33:d9:ee:36:d2:56:2a:03:cb: 67:d6:52:2e:9b:9f:cc:08:4b:23:08:93:45:9d:b4: e9:98:f6:a6:ff:8d:cb:38:03:3e:a0:63:8e:a1:e7: c2:dd:ab:47:4e:15:82:2d:9e:02:b4:97:f8:88:3c: c0:ed:37:ef:85:7c:70:52:0e:52:db:be:45:5b:a8: 12:0d:96:e3:9c:1a:70:a6:87:c1:db:76:f6:a8:be: d1:d3:e8:5e:88:0d:98:52:0d:f7:ad:0f:72:8a:dc: 43:72:31:00:2e:06:9c:4d:ef:0b:29:60:c8:dd:ee: bd:22:37:56:03:9f:9c:dd:c2:dc:10:50:70:3c:c1: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3E:F4:66:DE:C7:79:69:FD:6A:D1:9C:8B:71:4F:56:84:FA:16:04 X509v3 Authority Key Identifier: keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:11:af:93:21:b2:fe:e2:02:ca:0f:e8:57:30:7a:05:78:4b: c5:f6:8f:e1:77:f9:db:d0:27:81:db:2b:5b:fc:34:ab:25:e4: c6:95:96:17:40:07:23:c6:3a:58:bc:8e:6e:af:db:b9:76:88: ab:52:4c:cf:1c:8a:9d:c8:dc:84:6d:06:79:97:aa:49:2b:a9: ed:11:c8:eb:7d:b8:77:86:ab:07:6e:19:f0:3e:76:40:fc:0c: 23:6e:6e:ef:a3:58:4b:63:44:1f:d6:1e:0b:58:f9:f0:f0:09: 47:83:bc:d6:e4:f0:c5:56:47:8a:9a:a4:fb:a0:ed:77:f1:97: 45:ce:b0:de:11:9c:79:e6:7c:17:c0:cd:c0:a1:fe:f0:62:ba: b5:f7:21:8c:6e:54:48:fa:1c:d5:e9:a5:42:c8:e2:fe:4f:73: 27:54:d7:f5:d2:2f:b5:fb:11:80:1c:16:fc:12:f6:58:bb:4c: f9:5f:0f:1c:8c:7a:d3:34:86:70:3d:fb:30:11:bd:a3:71:94: a7:11:95:ae:17:11:be:ca:7c:88:3c:c3:40:10:cb:44:09:51: d9:f0:63:45:2f:e5:55:9c:a1:3f:9a:b3:5b:00:ac:5b:ac:2f: e2:92:24:b7:9d:cf:3e:43:60:7a:04:de:bb:b4:b4:b8:79:d6: 46:e8:d7:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyNDMxMTAvBgNVBAUTKEZDQ0YyOUU3QzNBMzVGQTgzNkM5MDkwRTY4MkM3ODBE MDIzOUU5NTUwHhcNMjYwMzI0MjA0MzIxWhcNMjYwMzMxMjA0MzIxWjAYMRYwFAYD VQQDEw02OWMyZjc2OS0xMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xv5PPbfOp2pprSBtEImjsWzSeqaBt/7I2WaD7ehINKyaB1A59XOCQCm0W51 ijO6fTyVBOn2ws+RESX/ZPrpw4ChCpzNcwyJTbSZfMmpT705zU5sfWOnGpypG7ir oQwDpXHPyoDTODHcuk8ss5eD90id9org0rsIjrcdhMQz2e420lYqA8tn1lIum5/M CEsjCJNFnbTpmPam/43LOAM+oGOOoefC3atHThWCLZ4CtJf4iDzA7TfvhXxwUg5S 275FW6gSDZbjnBpwpofB23b2qL7R0+heiA2YUg33rQ9yitxDcjEALgacTe8LKWDI 3e69IjdWA5+c3cLcEFBwPMGVswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBE+9Gbe x3lp/WrRnItxT1aE+hYEMB8GA1UdIwQYMBaAFPzPKefDo1+oNskJDmgseA0COelV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDI0My8wMTY2RkY2NDBE MUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2ZzJ5UWtPYUN4NERRSTU2 VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NOHA1OE9qWDZnMnlRa09hQ3g0RFFJNTZWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDI0My8wMTY2RkY2NDBEMUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2 ZzJ5UWtPYUN4NERRSTU2VlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYRGvkyGy/uICyg/oVzB6BXhLxfaP4Xf529AngdsrW/w0qyXkxpWWF0AHI8Y6 WLyObq/buXaIq1JMzxyKncjchG0GeZeqSSup7RHI6324d4arB24Z8D52QPwMI25u 76NYS2NEH9YeC1j58PAJR4O81uTwxVZHipqk+6Dtd/GXRc6w3hGceeZ8F8DNwKH+ 8GK6tfchjG5USPoc1emlQsji/k9zJ1TX9dIvtfsRgBwW/BL2WLtM+V8PHIx60zSG cD37MBG9o3GUpxGVrhcRvsp8iDzDQBDLRAlR2fBjRS/lVZyhP5qzWwCsW6wv4pIk t53PPkNgegTeu7S0uHnWRujX+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:26 2026 by rpki-client