$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json) Hash identifier: SqFr8zNbTAVtHg7elgaUHQt/53nYvjKanOsl2iqRPco= Subject key identifier: 7C:B3:A9:59:D2:20:A0:0E:1C:49:05:34:28:59:36:CB:A0:26:E5:06 Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F Certificate issuer: /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft Manifest number: 20 Signing time: Wed 25 Mar 2026 08:03:56 +0000 Manifest this update: Wed 25 Mar 2026 08:03:56 +0000 Manifest next update: Wed 01 Apr 2026 08:03:56 +0000 Files and hashes: 1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: /V7PgVh5XyW8iZJea/HN1rwxAsrDQbcnirTlYLEh0pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F Validity Not Before: Mar 25 08:03:56 2026 GMT Not After : Apr 1 08:03:56 2026 GMT Subject: CN=69c396ec-9514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:cc:c0:86:ae:82:97:6e:02:4e:11:d9:0e: 9d:f7:f1:b4:b6:ee:a8:9a:23:99:19:e1:50:0e:83: f9:1f:96:68:f7:46:00:d8:64:7f:d4:ef:6d:40:69: 81:b4:02:b2:90:ae:6c:ca:a4:41:85:47:eb:83:ba: 0e:80:ea:24:49:1a:c1:84:c5:3d:1d:0d:82:26:f1: eb:57:da:fb:20:78:bd:c7:8d:6d:ef:3b:b0:54:36: 88:9e:7f:40:7d:49:11:38:5a:e9:ed:14:ba:94:18: 97:43:16:ac:6c:6d:e7:e0:35:0c:c5:ff:88:3e:56: f8:3c:8f:c6:c7:79:9f:c6:ee:d6:8d:95:5d:13:1f: 99:1f:bf:07:23:02:20:42:7f:70:a9:f8:c3:1b:3e: 7b:38:8e:f0:7e:71:c1:2e:ad:bb:90:94:78:cf:e3: 78:a1:4c:e0:25:82:10:36:d0:3f:a7:94:6f:16:3f: 1a:60:a8:d5:a3:b7:d7:c3:39:8b:b1:ce:0d:9c:11: 40:38:69:8a:78:c0:15:1c:b7:ad:1d:7b:1c:12:7b: 1d:b7:3a:d8:7c:82:0e:a4:f9:eb:5e:a5:53:9f:86: eb:55:9f:a9:0a:48:da:34:74:bd:a3:57:3a:ab:5f: 31:f0:d3:ee:b3:b8:d7:db:95:61:8d:8a:68:f5:d9: dc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B3:A9:59:D2:20:A0:0E:1C:49:05:34:28:59:36:CB:A0:26:E5:06 X509v3 Authority Key Identifier: keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:dd:f3:71:bf:61:18:b6:0e:8e:b1:99:5f:38:1b:a6:24:49: 3b:c6:1a:b9:7b:98:83:00:40:af:f8:1f:5a:68:c3:bc:aa:09: ee:c5:a4:a9:45:e0:dd:b9:8c:be:09:e5:3a:97:6a:87:45:15: fc:50:3a:72:52:fe:e7:45:af:0b:8e:3a:7f:8d:1e:b7:ea:2b: c7:64:89:f9:78:33:bf:30:82:4f:0a:06:8c:54:c9:a1:b4:ee: 3e:7d:31:97:d3:53:cd:27:da:61:3a:c8:86:7f:97:d0:04:7c: 40:2d:36:b5:92:e3:62:b7:5b:2f:e9:25:5b:fb:fb:e9:fd:e5: e1:44:4e:89:dd:56:1f:73:75:27:41:01:12:c9:f0:ec:96:46: cc:c5:d1:ce:a0:5d:94:32:05:27:5a:ab:cb:80:03:cd:5c:18: 08:1e:b6:1e:f2:c8:fc:7b:a3:b3:9d:4b:ec:52:20:a0:d6:1f: b3:90:37:de:0f:85:77:6e:3b:f2:02:8b:42:e6:cf:13:56:72: f8:d4:ef:88:6f:22:96:46:10:58:40:2b:8a:32:85:6a:5c:14: e1:35:8e:ec:6e:01:31:ee:94:6c:52:e1:43:f9:46:82:52:9e: da:7b:58:93:22:7f:25:3a:7c:c8:1e:f5:ee:22:19:70:4b:8d: c2:de:df:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJDQjExMC8GA1UEBRMoRjIxNzA2MzBBMDE0RjgyMThGRjMwNzU2NDlGNDEyNDIw MDNENDQ2RjAeFw0yNjAzMjUwODAzNTZaFw0yNjA0MDEwODAzNTZaMBgxFjAUBgNV BAMTDTY5YzM5NmVjLTk1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLLczAhq6Cl24CThHZDp338bS27qiaI5kZ4VAOg/kflmj3RgDYZH/U721AaYG0 ArKQrmzKpEGFR+uDug6A6iRJGsGExT0dDYIm8etX2vsgeL3HjW3vO7BUNoief0B9 SRE4WuntFLqUGJdDFqxsbefgNQzF/4g+Vvg8j8bHeZ/G7taNlV0TH5kfvwcjAiBC f3Cp+MMbPns4jvB+ccEurbuQlHjP43ihTOAlghA20D+nlG8WPxpgqNWjt9fDOYux zg2cEUA4aYp4wBUct60dexwSex23Oth8gg6k+etepVOfhutVn6kKSNo0dL2jVzqr XzHw0+6zuNfblWGNimj12dz3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfLOpWdIg oA4cSQU0KFk2y6Am5QYwHwYDVR0jBBgwFoAU8hcGMKAU+CGP8wdWSfQSQgA9RG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0IyREZGNjU2RkRC QzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNHUDh3ZFdTZlFTUWdBOVJH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGhjR01LQVUtQ0dQOHdkV1NmUVNRZ0E5Ukc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNH UDh3ZFdTZlFTUWdBOVJHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAW3fNxv2EYtg6OsZlfOBumJEk7xhq5e5iDAECv+B9aaMO8qgnuxaSpReDduYy+ CeU6l2qHRRX8UDpyUv7nRa8Ljjp/jR636ivHZIn5eDO/MIJPCgaMVMmhtO4+fTGX 01PNJ9phOsiGf5fQBHxALTa1kuNit1sv6SVb+/vp/eXhRE6J3VYfc3UnQQESyfDs lkbMxdHOoF2UMgUnWqvLgAPNXBgIHrYe8sj8e6OznUvsUiCg1h+zkDfeD4V3bjvy AotC5s8TVnL41O+IbyKWRhBYQCuKMoVqXBThNY7sbgEx7pRsUuFD+UaCUp7ae1iT In8lOnzIHvXuIhlwS43C3t/Y -----END CERTIFICATE-----Generated at Thu Mar 26 19:06:53 2026 by rpki-client