$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: vQxWh9rIz44z6vTW7AarowR38QQQlrf0QkC515PUvJs= Subject key identifier: A4:BE:83:2C:4E:36:2F:94:D1:FA:27:31:31:78:71:96:BA:EA:2E:F3 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 07D7 Signing time: Thu 26 Mar 2026 21:12:26 +0000 Manifest this update: Thu 26 Mar 2026 21:12:25 +0000 Manifest next update: Thu 02 Apr 2026 21:12:25 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: L3c4YlI6PC+6MIm/LB9naOuvN1fl49gitM2++nYkxNI=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: CCeYRNeMxbpOCPaIE3BqCoWORj/K4Cmf/wyUKaeIcyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Mar 26 21:12:25 2026 GMT Not After : Apr 2 21:12:25 2026 GMT Subject: CN=69c5a13a-5d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:5c:a0:3f:27:2e:fd:13:ed:ce:18:ca:74: de:c8:e3:b0:18:e0:83:0d:71:eb:af:5e:ce:68:16: ca:b8:5f:6d:09:16:98:8b:ea:ab:c1:42:ea:2d:38: 23:7a:79:7a:75:98:a1:b9:cb:25:93:80:fc:d8:ae: 73:48:21:c1:7a:4f:fa:33:da:d5:eb:42:c7:08:96: ff:c4:00:e5:c0:f1:91:55:3d:77:69:51:20:07:ea: 63:d3:6b:ce:82:9e:61:ab:3f:11:cf:3a:53:10:03: 85:42:32:02:0c:a3:1d:b9:e0:d4:63:2a:0e:68:b4: b6:15:2b:c6:d5:03:8a:65:17:a2:39:47:26:f3:5d: 58:32:bc:a2:c1:78:8c:13:1d:8b:d0:b3:d4:bf:3c: 62:37:6c:e9:41:30:39:a5:d2:79:8c:b7:10:62:ea: 1c:35:fa:9d:3d:75:d1:aa:43:52:d9:68:a3:4a:46: 5d:47:bb:68:48:08:5c:36:57:93:67:7c:10:5c:09: 33:95:a5:32:ca:93:dd:47:4e:43:38:58:c5:c1:f7: 4f:76:d1:5b:0d:dd:f7:29:05:15:d4:b3:03:8a:35: f3:e5:6b:ce:55:ae:44:be:63:e3:7c:7f:ed:00:e1: 19:d0:a2:34:21:3d:ab:3b:f7:4d:0f:31:26:53:0f: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BE:83:2C:4E:36:2F:94:D1:FA:27:31:31:78:71:96:BA:EA:2E:F3 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:4e:ba:2c:fc:58:f1:e8:1b:86:bb:4f:66:94:ce:4d:dc:98: 84:a4:6e:5c:8d:0d:e5:4c:1b:d2:55:fb:79:0a:dd:e4:e2:f2: 53:e4:eb:78:4e:4d:f0:92:a6:b2:59:cc:1b:99:8e:41:63:88: 35:9e:d1:b3:65:f6:de:35:a5:45:f7:4a:75:26:2a:78:be:5f: 53:17:8e:4f:53:7f:5d:49:a4:bf:de:14:c3:99:84:2e:40:a0: b8:85:f7:08:0e:cf:f8:82:9d:68:06:36:c3:4a:ba:4a:aa:7d: 50:90:12:70:56:be:70:c0:e2:c0:10:1c:6b:db:8f:8c:d4:8f: fe:35:9f:21:56:50:50:cb:48:6a:bc:b5:79:93:21:96:0e:13: 8a:9e:4d:0f:bf:b4:bb:a3:d4:5f:dc:7e:54:98:ec:f4:46:f5: 9e:b0:30:0b:9e:c7:66:76:73:b7:96:d0:4b:d9:f5:72:60:3c: d7:af:db:54:eb:77:4c:66:a8:9a:82:b3:92:19:fd:14:93:fb: b4:ae:5a:53:03:11:84:10:c9:73:fc:6f:03:ea:5c:92:40:86: 66:84:22:43:bf:fe:05:69:4f:5d:eb:10:76:f6:1b:5d:e0:37: 15:05:e8:68:eb:ae:0c:98:6b:b8:f9:c8:27:c6:dd:4b:cb:4c: 33:94:f7:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjYwMzI2MjExMjI1WhcNMjYwNDAyMjExMjI1WjAYMRYwFAYD VQQDEw02OWM1YTEzYS01ZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgxcoD8nLv0T7c4YynTeyOOwGOCDDXHrr17OaBbKuF9tCRaYi+qrwULqLTgj enl6dZihucslk4D82K5zSCHBek/6M9rV60LHCJb/xADlwPGRVT13aVEgB+pj02vO gp5hqz8RzzpTEAOFQjICDKMdueDUYyoOaLS2FSvG1QOKZReiOUcm811YMryiwXiM Ex2L0LPUvzxiN2zpQTA5pdJ5jLcQYuocNfqdPXXRqkNS2WijSkZdR7toSAhcNleT Z3wQXAkzlaUyypPdR05DOFjFwfdPdtFbDd33KQUV1LMDijXz5WvOVa5EvmPjfH/t AOEZ0KI0IT2rO/dNDzEmUw9R0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKS+gyxO Ni+U0fonMTF4cZa66i7zMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF066LPxY8egbhrtPZpTOTdyYhKRuXI0N5Uwb0lX7eQrd5OLyU+TreE5N8JKm slnMG5mOQWOINZ7Rs2X23jWlRfdKdSYqeL5fUxeOT1N/XUmkv94Uw5mELkCguIX3 CA7P+IKdaAY2w0q6Sqp9UJAScFa+cMDiwBAca9uPjNSP/jWfIVZQUMtIary1eZMh lg4Tip5ND7+0u6PUX9x+VJjs9Eb1nrAwC57HZnZzt5bQS9n1cmA816/bVOt3TGao moKzkhn9FJP7tK5aUwMRhBDJc/xvA+pckkCGZoQiQ7/+BWlPXesQdvYbXeA3FQXo aOuuDJhruPnIJ8bdS8tMM5T3qw== -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:01 2026 by rpki-client