$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: p4CITqJVf/3GIsTCQ5IRhug0tIa6ZNpPOSBn+GGlP/o= Subject key identifier: 23:7F:E2:E0:FA:90:DB:58:21:73:ED:73:7F:A1:52:F7:9A:3B:B3:57 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0CEF Signing time: Thu 26 Mar 2026 18:09:06 +0000 Manifest this update: Thu 26 Mar 2026 18:09:06 +0000 Manifest next update: Thu 02 Apr 2026 18:09:06 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: kkjoCaKSHwiDScdh01r3ZWDpOY2bs2jjwzYRwQW3n0o=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: DvZA6XJDkyHfkolYQVEDhxnUbcvdyFYpNYGE/Rx6mkk=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: zG4D1s2xrlJsIzyQLjKkrbBcFvkHI/PRTbX5mMwZqTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Mar 26 18:09:06 2026 GMT Not After : Apr 2 18:09:06 2026 GMT Subject: CN=69c57642-1ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:3a:cc:b4:72:c7:c5:2d:28:66:44:4a:e7: 67:14:ba:ed:67:41:7d:53:87:59:5f:13:fc:b2:1a: da:e4:60:1c:21:71:11:c1:5f:3e:89:28:a3:eb:92: a6:38:ac:0b:b2:d5:5e:39:7a:9f:99:13:2f:24:94: 88:77:93:9b:d8:b3:8e:7a:6b:7b:4d:ea:29:b3:70: e9:4f:7c:71:d8:8f:94:37:d6:7f:5a:26:aa:43:f2: ac:6e:5c:21:c3:ff:47:1d:c0:65:86:49:4d:98:85: 61:9b:72:3a:7f:8d:f6:a5:5c:39:c7:fc:b6:c9:4d: a3:9c:0e:3c:c8:2c:21:5a:9f:56:2e:8c:d0:ac:12: ee:8f:66:25:a0:6e:dd:24:62:8f:69:f8:cd:9d:5c: d1:b4:49:62:a5:f9:9c:c8:4f:b7:41:19:ce:a1:bb: 9a:76:b5:25:b6:3c:b2:c9:c1:f2:42:c2:ba:e6:3a: be:f6:dc:2d:ef:cb:86:e1:7f:7e:b2:df:02:01:9f: 49:1a:4a:d2:80:2a:24:87:c2:40:99:51:52:30:bf: 4c:e5:ad:e5:fe:b6:87:44:6a:cb:0a:2a:28:30:d3: ed:7b:5a:44:8e:6e:26:23:c1:df:5d:d3:b3:26:61: ab:59:e6:db:77:1c:16:c0:54:0a:62:da:ab:13:a2: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7F:E2:E0:FA:90:DB:58:21:73:ED:73:7F:A1:52:F7:9A:3B:B3:57 X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:03:b7:1b:7e:c3:76:6b:c5:1b:4c:e1:0d:a7:54:d7:47:89: 0c:06:e2:9f:4f:52:2a:3d:79:a1:93:9e:da:2a:c3:b0:b2:60: 43:99:e5:c5:1e:12:2e:6a:9c:65:60:45:87:f1:b8:7c:cf:35: b9:70:2d:9b:b6:31:87:c1:3e:ba:d6:1d:65:fb:f8:f5:d9:cd: 9d:12:2e:45:30:92:8b:75:09:e7:c7:48:44:d2:88:36:ec:bd: 6a:0c:ec:15:4e:52:14:8f:c5:cb:52:38:90:6c:97:9a:3d:f2: 3c:17:a8:7c:ad:46:1b:92:42:44:d8:0c:7c:a3:ee:6e:5c:b0: fc:ee:b8:3e:ae:1e:2b:ed:68:08:bc:9a:39:5e:7b:fb:e5:cf: c8:14:cd:e2:76:03:e8:e9:32:70:83:06:7d:d3:c2:3d:99:7c: b3:1a:04:f0:53:da:00:7c:60:06:53:f6:a9:f3:8b:13:52:e2: 45:19:8a:50:3b:7b:05:21:57:53:d8:d4:11:89:54:19:b0:19: ad:4f:59:73:82:74:ac:a9:f5:1d:d8:f5:f8:cd:78:86:90:7e: e1:9e:64:4f:c5:1a:c6:3d:c7:9c:98:34:1a:e9:e3:e9:a7:66: 71:ef:b9:ea:62:31:a1:50:2b:ec:be:a1:2d:29:30:9a:6b:d0: 1c:1c:ba:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjYwMzI2MTgwOTA2WhcNMjYwNDAyMTgwOTA2WjAYMRYwFAYD VQQDEw02OWM1NzY0Mi0xZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5w6zLRyx8UtKGZESudnFLrtZ0F9U4dZXxP8shra5GAcIXERwV8+iSij65Km OKwLstVeOXqfmRMvJJSId5Ob2LOOemt7Teops3DpT3xx2I+UN9Z/WiaqQ/Ksblwh w/9HHcBlhklNmIVhm3I6f432pVw5x/y2yU2jnA48yCwhWp9WLozQrBLuj2YloG7d JGKPafjNnVzRtElipfmcyE+3QRnOobuadrUltjyyycHyQsK65jq+9twt78uG4X9+ st8CAZ9JGkrSgCokh8JAmVFSML9M5a3l/raHRGrLCiooMNPte1pEjm4mI8HfXdOz JmGrWebbdxwWwFQKYtqrE6LxLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCN/4uD6 kNtYIXPtc3+hUveaO7NXMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXAO3G37DdmvFG0zhDadU10eJDAbin09SKj15oZOe2irDsLJgQ5nlxR4SLmqc ZWBFh/G4fM81uXAtm7Yxh8E+utYdZfv49dnNnRIuRTCSi3UJ58dIRNKINuy9agzs FU5SFI/Fy1I4kGyXmj3yPBeofK1GG5JCRNgMfKPublyw/O64Pq4eK+1oCLyaOV57 ++XPyBTN4nYD6OkycIMGfdPCPZl8sxoE8FPaAHxgBlP2qfOLE1LiRRmKUDt7BSFX U9jUEYlUGbAZrU9Zc4J0rKn1Hdj1+M14hpB+4Z5kT8Uaxj3HnJg0Gunj6admce+5 6mIxoVAr7L6hLSkwmmvQHBy6Gw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:52 2026 by rpki-client