$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: dig6SIEKLdkGU+TOj3kCRxtwUFi2P6alHa/xoUMXkOc= Subject key identifier: AE:76:08:98:35:8E:1F:A5:7A:50:92:21:1E:90:5B:98:4C:0C:A1:1A Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 0409 Signing time: Fri 27 Mar 2026 00:12:45 +0000 Manifest this update: Fri 27 Mar 2026 00:12:44 +0000 Manifest next update: Fri 03 Apr 2026 00:12:44 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: q4puV+WHan14E15NqQAT3LpbviA83Y101f/Wvv+Shw4=) 2: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: yasiUvU6UoXOIBspAAELMW2y9DYtiMBdgsKStLMK/z0=) 3: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: tydWvEpfC9ZYQWtZTlfP2ovVxVE62eL40Huj/J90jJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Mar 27 00:12:44 2026 GMT Not After : Apr 3 00:12:44 2026 GMT Subject: CN=69c5cb7d-6c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:32:47:c8:fc:8f:e6:9d:bf:5b:fe:3f:bf: f0:15:40:16:7c:65:f1:e2:74:63:63:aa:95:f2:e7: 40:ce:69:95:c4:69:9a:40:c7:19:56:aa:67:c5:7f: 75:0e:c1:3e:bb:1f:65:4d:82:93:aa:68:78:3c:14: 40:f4:84:5c:df:01:75:e1:90:28:dc:94:c6:1c:b6: b8:5b:77:33:d2:95:47:f6:98:c4:bc:ea:5d:6d:35: ce:c1:5e:75:06:b6:de:03:1d:b2:aa:46:d8:f0:d1: d1:38:59:86:79:ca:a6:50:09:44:31:96:66:42:9c: 3a:a3:49:87:e8:15:75:7c:e8:a3:1c:b3:ca:47:88: 70:bb:d6:9d:73:25:00:d5:31:16:e6:29:d7:8f:cf: c8:ad:7b:59:18:9d:4b:f0:da:82:39:38:44:5f:56: 83:a7:96:4b:98:2e:46:c7:c6:db:d0:c9:c9:da:3d: 9d:70:58:50:d7:2a:e9:84:1b:a4:22:a2:d8:9e:8e: 96:37:c5:4b:88:d8:d2:1a:10:13:79:38:5d:f7:24: ac:70:e1:fb:b9:cf:56:18:ff:40:e2:55:f1:a7:38: b7:25:58:72:8a:a7:97:ca:8c:5c:84:20:d3:65:d3: d7:f4:75:09:fd:f0:97:89:de:5e:96:fa:45:f3:7e: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:76:08:98:35:8E:1F:A5:7A:50:92:21:1E:90:5B:98:4C:0C:A1:1A X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5d:6b:f9:4f:3e:5d:3f:d7:99:e4:a4:23:ca:ab:b7:8b:99: 4a:8a:13:b2:63:66:c1:1f:cf:9a:32:00:26:e2:f1:49:04:54: 83:30:e2:f7:09:b3:41:09:89:57:52:50:76:35:9f:6f:63:b3: dc:3e:94:2a:f7:72:07:7b:79:bb:b8:b8:41:99:b6:76:5c:5f: 54:16:ae:e7:6a:a7:38:ba:30:a6:6e:a2:c6:34:c2:67:92:e7: 3e:1b:71:dc:cc:0e:c2:90:17:e9:23:2b:09:40:c7:d1:55:03: 01:b4:26:81:77:cb:66:28:a1:89:b4:1f:af:ef:dc:54:7b:99: 5a:e6:45:74:93:36:82:a8:56:49:ba:ea:70:ea:7a:a8:e8:72: e9:f7:70:cf:43:ae:30:c0:1b:20:2d:51:4b:45:60:8b:d8:b5: 35:52:3c:99:d7:cd:e6:cc:83:52:36:45:0d:b7:cb:9e:1e:ff: a7:b8:2d:f6:96:1d:9d:2e:8a:6f:62:fe:20:c9:be:24:dc:72: 79:83:08:db:09:6a:24:9d:24:09:47:2d:1e:ba:16:3e:87:a1: a2:6a:12:70:1a:17:4f:66:f6:e8:bf:06:7f:51:3f:56:1f:a1: 4d:08:3d:3c:aa:fe:5b:54:49:4a:da:30:6b:c4:ab:42:a6:b8: 86:28:bb:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjYwMzI3MDAxMjQ0WhcNMjYwNDAzMDAxMjQ0WjAYMRYwFAYD VQQDEw02OWM1Y2I3ZC02YzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vUyR8j8j+adv1v+P7/wFUAWfGXx4nRjY6qV8udAzmmVxGmaQMcZVqpnxX91 DsE+ux9lTYKTqmh4PBRA9IRc3wF14ZAo3JTGHLa4W3cz0pVH9pjEvOpdbTXOwV51 BrbeAx2yqkbY8NHROFmGecqmUAlEMZZmQpw6o0mH6BV1fOijHLPKR4hwu9adcyUA 1TEW5inXj8/IrXtZGJ1L8NqCOThEX1aDp5ZLmC5Gx8bb0MnJ2j2dcFhQ1yrphBuk IqLYno6WN8VLiNjSGhATeThd9ySscOH7uc9WGP9A4lXxpzi3JVhyiqeXyoxchCDT ZdPX9HUJ/fCXid5elvpF83532QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK52CJg1 jh+lelCSIR6QW5hMDKEaMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi11r+U8+XT/XmeSkI8qrt4uZSooTsmNmwR/PmjIAJuLxSQRUgzDi9wmzQQmJ V1JQdjWfb2Oz3D6UKvdyB3t5u7i4QZm2dlxfVBau52qnOLowpm6ixjTCZ5LnPhtx 3MwOwpAX6SMrCUDH0VUDAbQmgXfLZiihibQfr+/cVHuZWuZFdJM2gqhWSbrqcOp6 qOhy6fdwz0OuMMAbIC1RS0Vgi9i1NVI8mdfN5syDUjZFDbfLnh7/p7gt9pYdnS6K b2L+IMm+JNxyeYMI2wlqJJ0kCUctHroWPoehomoScBoXT2b26L8Gf1E/Vh+hTQg9 PKr+W1RJStowa8SrQqa4hii7Pg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:29:52 2026 by rpki-client