$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: wDWs83RujGNNguibbHYX9j6tMVWiPCDr2562XAOrFaQ= Subject key identifier: 17:6A:00:91:BD:D9:B7:B8:BD:04:D6:0A:F2:51:C8:E6:5F:34:58:D1 Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0CE8 Signing time: Tue 24 Mar 2026 18:04:49 +0000 Manifest this update: Tue 24 Mar 2026 18:04:48 +0000 Manifest next update: Tue 31 Mar 2026 18:04:48 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: Q3b4S34zm+kaK2a6eVGBVENebJPhliiBDWux+UAyzZE=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: 8onqQ0Hgne8VuBR8MMAfBmsUbYc+lMndFteIlBMEozQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Mar 24 18:04:48 2026 GMT Not After : Mar 31 18:04:48 2026 GMT Subject: CN=69c2d241-9f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:bd:4e:40:b1:26:55:51:a9:9b:d3:0e:83: cd:18:0b:3a:d2:0f:03:97:1f:5a:8c:83:70:6d:5e: 0b:ad:64:bc:8b:80:62:e6:cc:53:51:80:e9:f3:10: b9:c2:52:57:b5:d2:20:59:70:8f:4c:3c:98:0b:f1: 2a:3a:70:a9:9f:78:aa:a7:99:ba:09:20:a7:a3:4b: 70:42:18:3e:1c:89:ff:3d:0c:ec:29:aa:ea:b8:8d: 57:d0:ef:d4:fe:73:a5:5a:5c:a2:25:c6:8c:ad:6b: 0a:04:34:c4:7e:27:7d:c1:99:4b:a1:f4:f3:86:03: 92:10:21:e4:3c:70:3f:8d:97:c9:34:5f:b8:7a:49: 51:e9:29:2c:be:ee:9f:a0:cd:a2:57:cc:b9:8a:ad: b5:ea:7b:cb:c4:ad:61:5e:cf:ac:12:46:35:3e:12: eb:46:a6:61:71:ec:a7:a1:dd:57:24:d8:fa:dd:27: d3:09:fb:19:e6:fb:77:cc:a6:f7:c0:53:97:3c:1b: 35:e6:e3:4a:ca:62:77:b6:c7:b5:6f:36:a0:f2:4f: e2:1b:85:17:bc:41:9a:c4:d4:3c:47:30:72:63:5a: ab:38:91:ab:ec:79:6a:d7:67:19:c4:8a:b4:4c:8f: ca:15:f6:f7:74:5e:d5:0f:46:31:13:3e:99:a1:d6: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6A:00:91:BD:D9:B7:B8:BD:04:D6:0A:F2:51:C8:E6:5F:34:58:D1 X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:34:bd:ab:b6:5f:d5:55:94:25:1c:f5:8c:3f:45:8a:81:5d: bb:2d:2a:f0:71:22:32:36:d5:f4:0e:1c:ce:60:91:73:74:bc: 0c:9e:f6:27:ee:d4:2d:02:d5:1d:f3:a6:7b:c9:7a:c3:a3:27: ee:4c:2c:b8:99:10:df:32:b1:4b:58:a3:8e:59:0e:b7:49:93: e1:f8:46:68:e0:30:90:19:ab:e9:79:73:09:aa:cc:c9:73:de: 9a:a1:ac:ff:ed:cb:f7:c1:2a:e5:2c:10:96:1a:3f:66:f2:c4: 0e:a9:6d:95:d6:55:a1:61:60:3d:90:ba:5f:92:3c:0d:89:b9: c6:c7:93:d7:86:b9:04:91:13:ae:f8:10:da:92:f2:a9:fa:0f: 73:80:01:76:5c:cf:07:8b:2f:98:45:88:a9:7b:67:34:c2:04: e2:15:c4:93:c8:d6:3b:93:62:a5:e0:7a:f4:07:0d:2b:d7:bc: de:6d:7a:7a:e5:9b:5c:6f:32:bd:4c:7b:76:f0:af:9d:61:bc: d8:d3:84:c5:48:26:8b:a1:48:fb:af:9a:7f:bf:ab:14:e9:e3: dd:5f:d1:9d:9d:53:fe:0d:ba:1d:20:c1:36:89:c9:70:cf:80: c4:b7:42:c3:e7:b4:72:04:21:5b:d9:0f:6d:16:57:cf:fa:44: cd:4e:09:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjYwMzI0MTgwNDQ4WhcNMjYwMzMxMTgwNDQ4WjAYMRYwFAYD VQQDEw02OWMyZDI0MS05ZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKW9TkCxJlVRqZvTDoPNGAs60g8Dlx9ajINwbV4LrWS8i4Bi5sxTUYDp8xC5 wlJXtdIgWXCPTDyYC/EqOnCpn3iqp5m6CSCno0twQhg+HIn/PQzsKarquI1X0O/U /nOlWlyiJcaMrWsKBDTEfid9wZlLofTzhgOSECHkPHA/jZfJNF+4eklR6Sksvu6f oM2iV8y5iq216nvLxK1hXs+sEkY1PhLrRqZhceynod1XJNj63SfTCfsZ5vt3zKb3 wFOXPBs15uNKymJ3tse1bzag8k/iG4UXvEGaxNQ8RzByY1qrOJGr7Hlq12cZxIq0 TI/KFfb3dF7VD0YxEz6ZodZz+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdqAJG9 2be4vQTWCvJRyOZfNFjRMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHDS9q7Zf1VWUJRz1jD9FioFduy0q8HEiMjbV9A4czmCRc3S8DJ72J+7ULQLV HfOme8l6w6Mn7kwsuJkQ3zKxS1ijjlkOt0mT4fhGaOAwkBmr6XlzCarMyXPemqGs /+3L98Eq5SwQlho/ZvLEDqltldZVoWFgPZC6X5I8DYm5xseT14a5BJETrvgQ2pLy qfoPc4ABdlzPB4svmEWIqXtnNMIE4hXEk8jWO5NipeB69AcNK9e83m16euWbXG8y vUx7dvCvnWG82NOExUgmi6FI+6+af7+rFOnj3V/RnZ1T/g26HSDBNonJcM+AxLdC w+e0cgQhW9kPbRZXz/pEzU4Jvw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:30 2026 by rpki-client