$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: y23w3exmmCnk7o1J4YOD5lTsfZnm0Ke91wNTkfDkxRw= Subject key identifier: 42:7D:B1:A8:93:B4:20:46:67:31:4F:C4:D0:3D:2A:32:AF:5E:33:DC Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 027C Signing time: Wed 25 Mar 2026 01:24:48 +0000 Manifest this update: Wed 25 Mar 2026 01:24:47 +0000 Manifest next update: Wed 01 Apr 2026 01:24:47 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: ftm/tBU0kRP7v8qa0wh348yds5oLpdbjPUHiVuy/nVw=) 2: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=) 3: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=) 4: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Mar 25 01:24:47 2026 GMT Not After : Apr 1 01:24:47 2026 GMT Subject: CN=69c3395f-1d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:34:aa:4e:60:ec:79:f8:ea:5b:b0:74:11: b6:9a:23:9a:41:db:08:d0:f2:cb:fd:c1:9f:f8:1e: 8b:a7:02:cb:d6:7b:23:f7:fb:c8:a5:67:69:d9:2a: 0d:f7:dc:a8:47:0e:16:d3:fc:76:9d:6a:b1:a0:bc: 2c:d9:8d:24:8e:07:53:94:c3:85:10:b1:f7:f5:cf: d2:e3:b7:be:c6:24:bb:6f:25:d2:4e:62:0f:d0:9d: 51:59:d7:73:7c:e1:0f:10:93:7a:2c:04:6b:d8:de: f7:ec:7a:11:12:e0:b3:e9:b4:2f:81:eb:de:57:7b: 94:ab:e1:c9:31:52:78:f6:60:c7:31:f6:f9:fd:22: 02:b5:20:4b:5f:19:57:c6:93:c0:08:23:01:13:57: 41:53:bb:bb:bc:f5:57:34:80:0e:62:4c:9f:37:cf: b4:c2:e5:ea:44:d6:4e:65:6e:94:08:d6:0d:0d:5e: 03:ea:c6:bf:5e:c4:95:77:9a:df:69:f9:fa:de:7d: 71:b0:1c:06:71:94:92:62:fd:5c:c7:76:19:10:0d: 6a:f4:52:03:a9:c1:1a:d8:83:30:b7:d9:be:b4:af: dc:2e:2a:52:66:cc:bc:ba:b6:65:31:d6:04:21:11: e7:94:2c:96:b0:cf:12:b2:69:5c:9f:2f:9a:96:2b: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7D:B1:A8:93:B4:20:46:67:31:4F:C4:D0:3D:2A:32:AF:5E:33:DC X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:af:f4:93:09:eb:66:c0:bc:88:a6:a9:3e:ef:7c:51:c1:a4: e3:a0:b0:9a:68:9b:79:22:22:ed:72:75:28:46:b3:2b:e4:25: 37:6e:5d:4f:ee:57:1c:9b:0e:67:35:b4:b7:ec:bc:9b:48:0f: e7:97:d7:2e:b7:db:e6:fe:eb:4e:e0:34:58:d6:c5:bf:9e:e1: a8:21:d4:a5:28:98:a4:91:24:b4:4a:91:7d:79:bb:9b:36:15: 28:f3:f0:bf:23:7a:78:e0:ac:5e:f2:49:3a:8e:46:56:73:c0: c4:7f:ca:40:a5:9c:f7:70:45:50:76:03:dc:d6:83:ca:89:c7: 82:21:7f:06:de:80:29:65:24:d6:c8:1c:0e:29:10:2a:68:21: 4d:d2:7f:e3:29:b2:64:54:e8:d7:12:77:8c:bc:38:b9:20:5e: 05:79:e3:4b:d5:e5:cf:eb:e1:25:c8:cb:60:f3:42:d2:39:96: 7d:b6:d7:24:fa:16:99:f2:1e:1c:90:21:d1:4e:b1:af:36:18: 90:21:b3:bc:8e:68:d8:03:da:7e:18:22:55:9c:26:5d:26:a3: 33:97:17:0d:f5:0e:58:05:c4:94:5f:75:80:88:57:da:50:b3: 56:95:54:e1:99:49:4d:4a:ed:a4:de:cd:a0:f0:f4:a2:75:5f: 19:d4:05:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjYwMzI1MDEyNDQ3WhcNMjYwNDAxMDEyNDQ3WjAYMRYwFAYD VQQDEw02OWMzMzk1Zi0xZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYQ0qk5g7Hn46luwdBG2miOaQdsI0PLL/cGf+B6LpwLL1nsj9/vIpWdp2SoN 99yoRw4W0/x2nWqxoLws2Y0kjgdTlMOFELH39c/S47e+xiS7byXSTmIP0J1RWddz fOEPEJN6LARr2N737HoREuCz6bQvgeveV3uUq+HJMVJ49mDHMfb5/SICtSBLXxlX xpPACCMBE1dBU7u7vPVXNIAOYkyfN8+0wuXqRNZOZW6UCNYNDV4D6sa/XsSVd5rf afn63n1xsBwGcZSSYv1cx3YZEA1q9FIDqcEa2IMwt9m+tK/cLipSZsy8urZlMdYE IRHnlCyWsM8Ssmlcny+alisHDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJ9saiT tCBGZzFPxNA9KjKvXjPcMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAea/0kwnrZsC8iKapPu98UcGk46CwmmibeSIi7XJ1KEazK+QlN25dT+5XHJsO ZzW0t+y8m0gP55fXLrfb5v7rTuA0WNbFv57hqCHUpSiYpJEktEqRfXm7mzYVKPPw vyN6eOCsXvJJOo5GVnPAxH/KQKWc93BFUHYD3NaDyonHgiF/Bt6AKWUk1sgcDikQ KmghTdJ/4ymyZFTo1xJ3jLw4uSBeBXnjS9Xlz+vhJcjLYPNC0jmWfbbXJPoWmfIe HJAh0U6xrzYYkCGzvI5o2APafhgiVZwmXSajM5cXDfUOWAXElF91gIhX2lCzVpVU 4ZlJTUrtpN7NoPD0onVfGdQFig== -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:27 2026 by rpki-client