$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: kwOiM8CAWBspVH+LomMSMne9yasQu4J0550h//6ubWI= Subject key identifier: 40:54:5E:1A:9C:5F:E6:F3:1A:97:FB:C3:42:8D:B3:F5:CE:6A:D2:D0 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 01B6 Signing time: Wed 25 Mar 2026 03:14:32 +0000 Manifest this update: Wed 25 Mar 2026 03:14:31 +0000 Manifest next update: Wed 01 Apr 2026 03:14:31 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: 3mVCPDxxr5p5Z61vZbkvCJeVj8s18R+VGFbDbwr6lS4=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: yzwQF5BWuhV75DE3qzozKQNyER1bQqJr/dSB8bkYg7Q=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: p9m+Ky6KPaxoCxqhurBlkPRkCfywo+5r7qphI33Ipdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Mar 25 03:14:31 2026 GMT Not After : Apr 1 03:14:31 2026 GMT Subject: CN=69c35318-f5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:79:81:4c:91:89:69:74:bd:35:fb:a7:c0: 60:a4:f6:5b:89:2b:4c:54:0f:6a:aa:36:a7:54:42: c8:cd:87:8d:e3:60:c2:ff:82:3f:08:18:b8:98:fe: df:2c:31:14:48:a4:7e:60:9b:10:9f:5e:18:77:c6: f4:95:87:35:a5:a3:ed:91:80:b6:a3:40:1e:7c:92: 27:11:6f:21:98:0d:95:2e:8b:b0:f2:d2:7d:0a:73: be:67:5b:cf:2c:15:52:21:30:8d:b2:be:9e:08:79: c0:ae:ba:ef:dd:bb:12:a9:28:73:05:f7:4d:98:2e: 73:fb:12:28:0f:5e:50:5c:f3:3f:cb:3e:07:65:10: f0:c8:31:9a:d3:c3:df:04:d5:aa:bb:8f:1e:b3:61: 1b:06:be:68:a7:78:6c:4a:c1:69:63:14:3b:c8:95: 9f:64:03:ed:55:2c:14:df:41:fc:f0:2d:81:a6:21: 08:3d:38:6a:d2:ed:df:49:c9:9a:82:5f:2c:ed:6f: b1:94:e4:5c:19:63:b6:c5:b5:8c:7d:62:05:25:b3: 7a:85:a6:77:2e:26:69:a2:12:3b:11:ba:57:c1:8d: 40:84:bb:f9:79:42:56:8f:3d:10:1a:ca:3e:01:e8: da:6b:58:ef:8d:ef:da:e1:bf:69:3d:ff:10:16:93: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:54:5E:1A:9C:5F:E6:F3:1A:97:FB:C3:42:8D:B3:F5:CE:6A:D2:D0 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a0:61:3f:24:0f:0f:3f:1d:ec:0b:5d:0e:07:dc:16:ff:fe: aa:a4:bb:e2:61:7c:e4:fa:43:b3:5b:85:73:5e:e8:87:66:f8: eb:4b:24:b4:19:af:27:b9:75:30:af:f7:ac:2a:4a:45:3f:b0: 57:2b:39:06:9f:24:3b:c4:e3:f4:9a:83:f1:b6:d5:78:ce:00: 2a:8b:4b:0a:3d:03:c7:a9:ed:4e:bf:49:ee:39:0d:d5:b5:14: 78:ae:76:58:9c:86:5b:e9:89:2c:cd:86:ca:74:8c:06:db:99: ce:70:60:8c:cd:4f:35:3e:6b:1e:a5:17:b2:f2:51:36:40:01: 86:c9:c9:17:18:81:00:3c:dc:38:25:12:ce:a7:d6:59:24:d8: 7d:1b:1b:25:3b:55:97:99:ba:6a:53:9e:76:82:2d:7c:78:7f: 15:29:86:7c:f4:4b:5c:27:ce:52:4f:b8:ad:e0:5b:e1:c1:b4: d9:52:89:43:27:94:de:84:20:d5:ed:e6:98:65:f8:c9:85:6c: 4d:ec:5a:45:7d:b9:4f:29:2d:e6:b6:d4:12:9c:72:cf:7e:54: 31:91:08:6e:8c:78:08:9e:69:0f:d0:8b:a2:97:e8:3c:bf:d7: cc:cc:8a:58:56:96:ad:d6:07:0d:27:ed:22:4f:f5:16:05:70: 76:e6:44:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjYwMzI1MDMxNDMxWhcNMjYwNDAxMDMxNDMxWjAYMRYwFAYD VQQDEw02OWMzNTMxOC1mNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx15gUyRiWl0vTX7p8BgpPZbiStMVA9qqjanVELIzYeN42DC/4I/CBi4mP7f LDEUSKR+YJsQn14Yd8b0lYc1paPtkYC2o0AefJInEW8hmA2VLouw8tJ9CnO+Z1vP LBVSITCNsr6eCHnArrrv3bsSqShzBfdNmC5z+xIoD15QXPM/yz4HZRDwyDGa08Pf BNWqu48es2EbBr5op3hsSsFpYxQ7yJWfZAPtVSwU30H88C2BpiEIPThq0u3fScma gl8s7W+xlORcGWO2xbWMfWIFJbN6haZ3LiZpohI7EbpXwY1AhLv5eUJWjz0QGso+ Aejaa1jvje/a4b9pPf8QFpO4IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBUXhqc X+bzGpf7w0KNs/XOatLQMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKqBhPyQPDz8d7AtdDgfcFv/+qqS74mF85PpDs1uFc17oh2b460sktBmvJ7l1 MK/3rCpKRT+wVys5Bp8kO8Tj9JqD8bbVeM4AKotLCj0Dx6ntTr9J7jkN1bUUeK52 WJyGW+mJLM2GynSMBtuZznBgjM1PNT5rHqUXsvJRNkABhsnJFxiBADzcOCUSzqfW WSTYfRsbJTtVl5m6alOedoItfHh/FSmGfPRLXCfOUk+4reBb4cG02VKJQyeU3oQg 1e3mmGX4yYVsTexaRX25Tykt5rbUEpxyz35UMZEIbox4CJ5pD9CLopfoPL/XzMyK WFaWrdYHDSftIk/1FgVwduZEhQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:06 2026 by rpki-client