$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: gcUKhgP8+jYOCwSYJgNaamGX+BBxYmZpS93dEwQx6Ac= Subject key identifier: BB:E4:8C:70:98:B8:B3:F4:FE:C4:32:7F:22:B9:0A:56:1A:45:3D:E2 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 0355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 0343 Signing time: Wed 25 Mar 2026 00:39:09 +0000 Manifest this update: Wed 25 Mar 2026 00:39:08 +0000 Manifest next update: Wed 01 Apr 2026 00:39:08 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: V3SHIlC1K3m9Tp0j0QPAt8xTbY6C6Sq+AO3YY/jNkKg=) 2: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: BahbEschYMgJrMF0BLS9CUwIvpM5/L/G8tn8FPtp9ik=) 3: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: 2bSuW/W2EAJDExuMn72UQi0Hj4wXVmW13H/TPfYijPA=) 4: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wgip0DQGeaZ0QNSC6Osjp3LdtBXVxXRo5X2o3r8AIKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Mar 25 00:39:08 2026 GMT Not After : Apr 1 00:39:08 2026 GMT Subject: CN=69c32ead-5e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:2e:07:f3:25:87:bb:12:7e:c8:f4:63:df: bb:27:fd:4c:5b:4f:f6:73:c1:4b:c1:c8:6f:08:56: 46:dd:89:ca:db:6a:71:79:55:4b:67:75:97:5e:d5: f3:ac:92:a8:cb:24:d6:6f:61:c1:48:0e:39:2f:51: 64:7c:28:a2:15:79:b2:9f:24:d7:ae:b0:2d:f2:68: 04:b1:88:67:db:ba:ee:6b:3c:3c:03:b4:e4:36:b9: 8b:6e:39:14:85:eb:d8:b4:76:ce:8f:41:57:1c:e4: 39:7d:14:34:8c:80:8d:c3:ea:f6:e8:7e:18:d8:50: 0b:dc:07:3f:ec:2c:0c:ed:55:82:57:0d:91:b9:93: 2f:94:84:b6:be:81:96:56:0e:32:7a:24:20:1f:9f: 46:54:aa:75:fe:42:a6:b4:10:ba:df:bf:76:93:b4: 5c:cc:44:0d:df:08:ef:6c:fc:65:9b:4d:66:10:a9: 38:88:c6:b5:06:a2:b2:d6:a0:c1:94:81:ca:5a:3a: fd:e3:48:a9:48:1f:c4:58:ff:ac:70:8a:74:ec:48: 6c:21:5f:37:63:56:31:65:4d:0a:17:16:94:24:78: 86:c5:d8:e9:30:dc:19:7d:ea:a5:87:af:8e:9c:94: ad:68:65:58:a4:13:34:97:4b:57:32:da:c0:c9:03: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:8C:70:98:B8:B3:F4:FE:C4:32:7F:22:B9:0A:56:1A:45:3D:E2 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e6:8e:74:c8:56:7c:10:20:c9:78:8e:7c:4f:b8:54:cd:37: 98:88:08:c2:6a:54:ad:40:ea:d1:a0:37:64:fc:1c:f6:bf:d2: dc:60:94:53:cd:3b:cb:8e:95:d0:c7:f9:c1:dd:f6:86:e0:73: 4d:2c:8f:82:e7:e6:fe:f3:2a:d5:89:3b:9d:5a:a4:c6:07:c4: 66:d4:8b:6e:87:f4:f4:a9:68:3b:10:fc:ab:8f:ac:ed:a6:0c: ac:79:f4:23:6c:f2:77:3a:49:87:3a:cb:2d:fd:c9:28:af:f9: 7e:74:48:ec:ca:0a:83:a9:a5:f1:29:be:e7:a0:1d:3a:18:ef: 10:b4:70:0d:7a:a0:9b:63:78:37:cd:d9:0d:cc:4e:e9:23:70: a0:59:5a:5d:dc:a9:0b:be:f4:ad:71:74:8e:b9:8b:25:c1:e4: 2e:68:43:7e:cf:df:75:72:ec:70:19:76:bf:d1:8b:df:15:c0: 62:bc:4e:91:ee:58:85:8a:7c:cc:63:9d:87:e0:d0:42:b5:e7: b4:d2:08:a3:31:23:b3:49:81:e6:dd:b3:23:d2:4f:30:96:71: a8:d8:97:11:f5:58:ad:fb:94:a3:92:35:24:63:2c:18:89:47: 56:a8:f0:ea:c4:2f:1c:b2:0c:04:71:87:13:f0:51:fb:bd:ce: 96:6f:01:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjYwMzI1MDAzOTA4WhcNMjYwNDAxMDAzOTA4WjAYMRYwFAYD VQQDEw02OWMzMmVhZC01ZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw70uB/Mlh7sSfsj0Y9+7J/1MW0/2c8FLwchvCFZG3YnK22pxeVVLZ3WXXtXz rJKoyyTWb2HBSA45L1FkfCiiFXmynyTXrrAt8mgEsYhn27ruazw8A7TkNrmLbjkU hevYtHbOj0FXHOQ5fRQ0jICNw+r26H4Y2FAL3Ac/7CwM7VWCVw2RuZMvlIS2voGW Vg4yeiQgH59GVKp1/kKmtBC63792k7RczEQN3wjvbPxlm01mEKk4iMa1BqKy1qDB lIHKWjr940ipSB/EWP+scIp07EhsIV83Y1YxZU0KFxaUJHiGxdjpMNwZfeqlh6+O nJStaGVYpBM0l0tXMtrAyQOuMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvkjHCY uLP0/sQyfyK5ClYaRT3iMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp+aOdMhWfBAgyXiOfE+4VM03mIgIwmpUrUDq0aA3ZPwc9r/S3GCUU807y46V 0Mf5wd32huBzTSyPgufm/vMq1Yk7nVqkxgfEZtSLbof09KloOxD8q4+s7aYMrHn0 I2zydzpJhzrLLf3JKK/5fnRI7MoKg6ml8Sm+56AdOhjvELRwDXqgm2N4N83ZDcxO 6SNwoFlaXdypC770rXF0jrmLJcHkLmhDfs/fdXLscBl2v9GL3xXAYrxOke5YhYp8 zGOdh+DQQrXntNIIozEjs0mB5t2zI9JPMJZxqNiXEfVYrfuUo5I1JGMsGIlHVqjw 6sQvHLIMBHGHE/BR+73Olm8BOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:31 2026 by rpki-client