$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json) Hash identifier: nAYSGY/galdrb0doou34ruNaLKGs59iz7uXkKt+DqJI= Subject key identifier: C7:79:A4:10:B1:04:35:EB:E5:CB:A7:0E:64:22:B8:59:59:BB:51:9A Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft Manifest number: 08 Signing time: Wed 25 Mar 2026 08:21:13 +0000 Manifest this update: Wed 25 Mar 2026 08:21:13 +0000 Manifest next update: Wed 01 Apr 2026 08:21:13 +0000 Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: 0/88j7WAgtyEGXogm8Q4EX0LEkuyA4+SNH5DB31zYBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Validity Not Before: Mar 25 08:21:13 2026 GMT Not After : Apr 1 08:21:13 2026 GMT Subject: CN=69c39af9-d4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b5:4b:9e:1f:34:d5:7c:ed:8c:6b:a6:22:94: e0:76:c9:ae:a2:ca:39:c8:fc:b3:11:f1:22:2e:94: 2b:64:12:8b:ee:17:3a:42:d8:34:69:7b:2b:a6:02: 58:ff:c8:d8:55:0a:c8:cf:2c:11:fa:2d:07:7a:e4: 47:b4:e5:e2:b6:26:4a:a3:2b:e8:63:e4:a3:00:13: 21:3c:63:85:30:02:b6:39:69:c0:44:4f:c2:56:e0: 43:c6:0b:31:95:68:82:c2:7e:e6:32:a5:64:35:3f: 20:d1:80:9f:50:89:27:b9:cf:cd:a1:fa:60:4e:7a: 1a:a1:3f:e1:47:54:1e:02:c9:87:5b:65:8b:26:fc: b2:b1:c6:83:78:ca:7a:54:66:5b:55:be:b9:23:44: df:16:16:7f:28:eb:1d:9a:55:41:a0:7c:f5:69:cc: 76:88:ab:9e:e0:f5:cb:8c:f3:5a:e5:25:51:20:82: 12:22:02:ef:17:94:39:52:9f:69:6a:43:da:80:d9: 12:5f:a8:1d:6f:60:8e:28:93:85:ca:24:0d:04:59: 5a:74:4f:60:5b:c0:03:1d:9e:bd:94:63:27:c7:03: ec:ac:34:3c:1f:04:51:a9:81:9b:00:38:b5:13:d8: 82:24:68:c8:5a:9d:fd:61:42:ac:35:0e:14:12:43: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:79:A4:10:B1:04:35:EB:E5:CB:A7:0E:64:22:B8:59:59:BB:51:9A X509v3 Authority Key Identifier: keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:09:b0:1e:69:a2:f0:4c:0d:19:90:de:b6:ea:c1:73:d6:b5: e6:84:a6:8f:1c:3c:f1:3e:8e:73:bb:0c:8d:b3:37:59:0d:7f: 51:69:63:24:30:ff:ef:ab:b5:ef:74:94:61:ee:8c:04:5d:df: 61:a8:4a:51:3f:df:58:1f:d2:5e:a8:e4:52:c5:41:84:8e:6b: e4:74:35:0f:03:3d:73:01:54:c9:89:4a:88:40:1d:34:09:9a: a6:6d:f6:93:91:36:ec:65:44:64:f6:e9:70:70:68:54:82:9e: 39:61:80:54:2c:d7:2b:81:61:5f:a0:57:c3:8c:ea:65:ab:5a: c9:42:a8:3c:d7:29:9d:c8:c1:d7:b4:c3:dd:27:09:2f:c2:47: 79:ba:41:c2:4b:03:6c:5e:1b:b5:57:3b:e6:43:8b:fa:fd:dc: a3:67:82:c5:c9:93:46:8c:29:e1:5a:8f:f9:f7:38:05:28:bd: 40:de:75:7b:0e:f9:ca:9a:32:71:50:02:05:e5:ec:e5:48:55: 66:6c:31:c3:4b:35:41:0b:de:79:cf:63:b6:42:c6:9b:4e:64: a5:af:61:94:cd:89:27:de:87:18:60:8e:3c:d4:6a:ce:27:a2: 83:33:23:65:fd:fd:8b:9c:80:56:00:a7:fb:e2:a7:fa:8a:20: 7f:7a:3d:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy MURFNDE0QjAeFw0yNjAzMjUwODIxMTNaFw0yNjA0MDEwODIxMTNaMBgxFjAUBgNV BAMTDTY5YzM5YWY5LWQ0ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPtUueHzTVfO2Ma6YilOB2ya6iyjnI/LMR8SIulCtkEovuFzpC2DRpeyumAlj/ yNhVCsjPLBH6LQd65Ee05eK2JkqjK+hj5KMAEyE8Y4UwArY5acBET8JW4EPGCzGV aILCfuYypWQ1PyDRgJ9QiSe5z82h+mBOehqhP+FHVB4CyYdbZYsm/LKxxoN4ynpU ZltVvrkjRN8WFn8o6x2aVUGgfPVpzHaIq57g9cuM81rlJVEgghIiAu8XlDlSn2lq Q9qA2RJfqB1vYI4ok4XKJA0EWVp0T2BbwAMdnr2UYyfHA+ysNDwfBFGpgZsAOLUT 2IIkaMhanf1hQqw1DhQSQxOzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx3mkELEE Nevly6cOZCK4WVm7UZowHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBaCbAeaaLwTA0ZkN626sFz1rXmhKaPHDzxPo5zuwyNszdZDX9RaWMkMP/vq7Xv dJRh7owEXd9hqEpRP99YH9JeqORSxUGEjmvkdDUPAz1zAVTJiUqIQB00CZqmbfaT kTbsZURk9ulwcGhUgp45YYBULNcrgWFfoFfDjOplq1rJQqg81ymdyMHXtMPdJwkv wkd5ukHCSwNsXhu1VzvmQ4v6/dyjZ4LFyZNGjCnhWo/59zgFKL1A3nV7DvnKmjJx UAIF5ezlSFVmbDHDSzVBC955z2O2QsabTmSlr2GUzYkn3ocYYI481GrOJ6KDMyNl /f2LnIBWAKf74qf6iiB/ej1d -----END CERTIFICATE-----Generated at Thu Mar 26 04:48:14 2026 by rpki-client