$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: v6utGubzACbwabzbUc1ErbN89T3CpnahgV+zhdqoffE= Subject key identifier: EF:3B:A5:DD:1D:9E:E9:23:FF:2A:5C:30:27:4B:89:61:CA:22:08:5F Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 250F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 24EC Signing time: Tue 24 Mar 2026 15:42:51 +0000 Manifest this update: Tue 24 Mar 2026 15:42:51 +0000 Manifest next update: Tue 31 Mar 2026 15:42:51 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: sa2oA9u9hQVUMzb9n0xzNvq4PWJQxmT8PnvY/YYZmvw=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: PfTF6IXqi6hNaj695aj5hjmooNnHrg5/s0sD8is22ZQ=) 3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: 2IWuioS/nodqvph5IdFPsL2bu4c6VdvpfkdYbMecCC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9487 (0x250f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Mar 24 15:42:51 2026 GMT Not After : Mar 31 15:42:51 2026 GMT Subject: CN=69c2b0fb-1e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:cc:6c:d2:be:9e:d1:ee:f4:d7:61:51:a3: 94:e4:44:d8:5c:f0:18:85:68:c6:5d:b9:15:07:42: eb:3a:bf:09:43:f7:d9:b3:c5:88:48:79:d0:c9:07: fc:28:94:b6:59:c2:36:1f:f4:33:03:8c:45:93:0c: fe:cd:96:70:8a:6f:e2:03:4e:4d:a3:f0:c0:19:08: 3d:54:0f:5f:c9:e0:ff:4f:ed:83:05:cf:a2:37:19: 35:a2:96:0b:92:8a:45:7c:bd:db:72:da:46:b0:76: dd:f6:3c:1d:c7:13:13:6c:09:2e:ed:83:2e:b4:89: 79:63:ce:d8:95:d0:9b:20:f7:ca:79:c2:30:c3:48: 05:f6:e7:0e:53:32:2a:7e:5b:a6:04:64:fa:00:b9: ff:1c:02:0a:a5:06:89:8d:86:d2:20:98:47:ed:48: c3:9f:8a:15:f3:17:4b:14:58:ce:9e:a6:3a:18:f2: e3:34:d4:70:58:26:f9:7d:58:57:b5:fc:ea:37:bf: fe:05:9e:cc:37:dc:b2:ec:6e:cd:d7:17:39:29:59: c8:d7:c8:f9:1f:9b:9f:7f:3d:07:76:6c:cd:71:4d: 23:e3:ac:7d:72:96:86:23:42:9b:49:37:fd:96:74: 26:a1:78:21:20:82:5c:ad:3b:3f:ba:31:75:fa:8c: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3B:A5:DD:1D:9E:E9:23:FF:2A:5C:30:27:4B:89:61:CA:22:08:5F X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b8:66:c8:01:d6:de:5a:c9:75:5c:e4:6e:d1:56:b3:72:e0: 12:21:99:5c:b9:8d:98:24:f4:8e:9b:3e:07:8e:fc:42:58:eb: f8:95:34:6e:11:4e:e6:69:64:ae:4f:6b:cf:ea:e1:0a:d8:a1: a0:4d:53:ac:43:f6:a2:e1:9e:a8:a8:fd:94:cd:be:cb:de:71: 48:7c:9c:13:34:6c:92:2a:36:ff:59:b0:0e:6f:1c:77:72:7d: e9:5d:92:80:ff:98:25:d7:d5:64:cc:96:be:34:b2:b7:51:6b: 91:b7:12:e8:07:af:66:19:72:0a:fa:7f:5e:b6:9d:c8:56:49: 6e:d0:2d:40:c0:f9:e4:37:58:a6:f4:87:e3:36:36:a4:be:2c: 35:4f:1a:29:fb:48:c3:48:2c:40:d2:7b:af:d1:c5:0c:19:5a: f1:7e:ad:c2:aa:e0:5c:25:fa:81:f9:8f:a9:4b:2c:52:ff:fe: 20:de:9f:e1:bf:7b:a0:ec:a0:c4:a1:8f:44:ae:5d:80:d0:d6: 11:72:35:bd:f7:18:85:fe:04:8a:0d:5a:f1:46:67:43:00:ad: fd:74:c7:60:52:71:e9:3a:a4:11:4b:46:1d:06:c1:c4:01:c3: dc:d3:28:ca:f2:42:db:df:18:8a:1e:39:8d:71:db:93:59:bd: bd:08:e1:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjYwMzI0MTU0MjUxWhcNMjYwMzMxMTU0MjUxWjAYMRYwFAYD VQQDEw02OWMyYjBmYi0xZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthrMbNK+ntHu9NdhUaOU5ETYXPAYhWjGXbkVB0LrOr8JQ/fZs8WISHnQyQf8 KJS2WcI2H/QzA4xFkwz+zZZwim/iA05No/DAGQg9VA9fyeD/T+2DBc+iNxk1opYL kopFfL3bctpGsHbd9jwdxxMTbAku7YMutIl5Y87YldCbIPfKecIww0gF9ucOUzIq flumBGT6ALn/HAIKpQaJjYbSIJhH7UjDn4oV8xdLFFjOnqY6GPLjNNRwWCb5fVhX tfzqN7/+BZ7MN9yy7G7N1xc5KVnI18j5H5uffz0HdmzNcU0j46x9cpaGI0KbSTf9 lnQmoXghIIJcrTs/ujF1+owqlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO87pd0d nukj/ypcMCdLiWHKIghfMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp7hmyAHW3lrJdVzkbtFWs3LgEiGZXLmNmCT0jps+B478Qljr+JU0bhFO5mlk rk9rz+rhCtihoE1TrEP2ouGeqKj9lM2+y95xSHycEzRskio2/1mwDm8cd3J96V2S gP+YJdfVZMyWvjSyt1FrkbcS6AevZhlyCvp/XradyFZJbtAtQMD55DdYpvSH4zY2 pL4sNU8aKftIw0gsQNJ7r9HFDBla8X6twqrgXCX6gfmPqUssUv/+IN6f4b97oOyg xKGPRK5dgNDWEXI1vfcYhf4Eig1a8UZnQwCt/XTHYFJx6TqkEUtGHQbBxAHD3NMo yvJC298Yih45jXHbk1m9vQjh2g== -----END CERTIFICATE-----Generated at Thu Mar 26 17:51:06 2026 by rpki-client