$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json) Hash identifier: ngYGPCdPfAnkhkEKuEm25RCdAbvTFzQQ0G2DCQXDoW8= Subject key identifier: 53:F8:49:21:10:8B:CE:3F:9C:E9:BC:D4:FA:7A:CA:9A:25:80:11:30 Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft Manifest number: 29 Signing time: Wed 25 Mar 2026 08:01:28 +0000 Manifest this update: Wed 25 Mar 2026 08:01:28 +0000 Manifest next update: Wed 01 Apr 2026 08:01:28 +0000 Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: P4nki8v/ZEASEmMFCQ9yWQTTl9064vj6mKcFYjflUkE=) 2: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=) 3: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Validity Not Before: Mar 25 08:01:28 2026 GMT Not After : Apr 1 08:01:28 2026 GMT Subject: CN=69c39658-94af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:a9:fd:75:71:65:5e:2d:e0:31:2f:8f:9c: 65:d2:b8:f8:ba:d2:6f:bc:e3:80:c7:ef:54:08:cf: 6f:ea:f3:a3:61:61:19:0a:2d:07:35:17:9c:40:09: 13:c5:f7:5e:07:db:bb:54:af:34:2b:d0:ec:70:77: 30:d7:70:4d:dc:10:f2:6d:45:e1:dd:9e:03:d1:b6: fb:c8:1f:4a:d7:fa:20:25:17:da:11:22:da:25:88: c1:c0:82:6a:a2:ac:ab:20:56:65:d1:fa:4c:31:df: 8c:d7:cf:b4:50:41:77:9b:0c:9b:b8:31:93:e7:a6: f0:d6:f9:d7:9f:36:11:af:0d:ed:c4:a7:67:51:69: ab:02:d8:ae:e5:0f:76:fb:40:38:65:a0:94:bf:1c: 01:fa:3e:09:db:73:9e:a8:81:58:7c:cd:61:72:cb: b0:4e:1b:ab:d8:cc:b4:33:9a:bc:f9:d5:09:8a:69: e1:59:f7:00:cf:1f:f8:f1:1b:f0:93:d5:27:c5:7f: 6d:2b:af:16:2e:3c:8f:a3:51:b4:75:11:fd:37:40: bc:73:1a:5e:6a:1b:94:5a:73:09:50:e9:c7:fa:5e: 29:b1:5d:55:3f:b6:31:e2:92:af:7a:31:52:01:60: 09:84:81:5c:08:05:8c:8a:85:1b:44:8f:56:70:ea: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F8:49:21:10:8B:CE:3F:9C:E9:BC:D4:FA:7A:CA:9A:25:80:11:30 X509v3 Authority Key Identifier: keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:58:65:99:c4:fb:98:ab:a6:7e:a7:ab:21:a5:a1:4c:71:4f: ba:de:d4:79:7e:10:2b:68:97:77:0e:9f:e2:76:21:a9:1b:61: 61:e2:38:4a:9d:46:81:ac:26:c6:2c:13:aa:84:c7:a9:0b:4c: 7d:17:d7:7a:3b:ef:ee:2c:2f:a4:f1:60:ce:c3:58:54:ce:8d: 6c:67:8c:3d:de:21:8e:0c:e2:1b:05:74:f7:30:7f:30:1b:78: f3:fa:93:85:fc:27:d6:f2:5d:87:3e:a8:a7:01:ca:96:7c:21: ef:af:ac:1b:a4:0e:ad:39:f8:49:62:0a:e3:e8:d4:ef:a2:cc: 57:2d:d2:05:db:c8:d3:c3:1b:a6:1b:01:eb:35:55:dd:77:d9: 0e:bb:00:60:23:06:cd:4e:ad:95:ac:f6:0d:e0:a3:e2:2c:b8: b5:c2:9b:24:05:ac:79:15:95:b8:4d:c0:ce:d4:f1:f6:8b:68: b4:cd:85:2a:37:8f:a9:aa:12:0c:d4:35:42:69:33:4a:b8:4d: 51:c8:ef:74:a1:7c:17:13:1d:e4:93:9d:9d:b4:0a:12:b1:c6: dd:a0:5b:6f:b6:8b:fa:e9:22:4d:a4:86:eb:93:6f:10:85:b2: 79:26:e3:ed:cb:22:1b:d4:58:2f:3c:ca:1b:10:75:b5:e6:87: 59:a3:e8:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoRjBENzExMjBBOTJBODU4REI3Mjk0OTZGQ0NCRjE4MjVD OUYwM0M2MzAeFw0yNjAzMjUwODAxMjhaFw0yNjA0MDEwODAxMjhaMBgxFjAUBgNV BAMTDTY5YzM5NjU4LTk0YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXIqn9dXFlXi3gMS+PnGXSuPi60m+844DH71QIz2/q86NhYRkKLQc1F5xACRPF 914H27tUrzQr0OxwdzDXcE3cEPJtReHdngPRtvvIH0rX+iAlF9oRItoliMHAgmqi rKsgVmXR+kwx34zXz7RQQXebDJu4MZPnpvDW+defNhGvDe3Ep2dRaasC2K7lD3b7 QDhloJS/HAH6Pgnbc56ogVh8zWFyy7BOG6vYzLQzmrz51QmKaeFZ9wDPH/jxG/CT 1SfFf20rrxYuPI+jUbR1Ef03QLxzGl5qG5RacwlQ6cf6XimxXVU/tjHikq96MVIB YAmEgVwIBYyKhRtEj1Zw6lDdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUU/hJIRCL zj+c6bzU+nrKmiWAETAwHwYDVR0jBBgwFoAU8NcRIKkqhY23KUlvzL8YJcnwPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzQxRkREMzg4Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFkyM0tVbHZ6TDhZSmNud1BH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOE5jUklLa3FoWTIzS1VsdnpMOFlKY253UEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzQxRkREMzg4Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFky M0tVbHZ6TDhZSmNud1BHTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVWGWZxPuYq6Z+p6shpaFMcU+63tR5fhAraJd3Dp/idiGpG2Fh4jhKnUaBrCbG LBOqhMepC0x9F9d6O+/uLC+k8WDOw1hUzo1sZ4w93iGODOIbBXT3MH8wG3jz+pOF /CfW8l2HPqinAcqWfCHvr6wbpA6tOfhJYgrj6NTvosxXLdIF28jTwxumGwHrNVXd d9kOuwBgIwbNTq2VrPYN4KPiLLi1wpskBax5FZW4TcDO1PH2i2i0zYUqN4+pqhIM 1DVCaTNKuE1RyO90oXwXEx3kk52dtAoSscbdoFtvtov66SJNpIbrk28QhbJ5JuPt yyIb1FgvPMobEHW15odZo+i1 -----END CERTIFICATE-----Generated at Thu Mar 26 04:23:19 2026 by rpki-client