$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: g8oE6EI8ZUeZ3h5hMdAlXpTWye75ffoHcC417vxDbgE= Subject key identifier: C3:59:E5:FA:DA:EC:D6:DE:50:DE:71:17:74:F0:00:9C:55:1A:0D:94 Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: 47 Signing time: Wed 25 Mar 2026 07:33:44 +0000 Manifest this update: Wed 25 Mar 2026 07:33:44 +0000 Manifest next update: Wed 01 Apr 2026 07:33:44 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: yIMgTpzU2d4jCIevJmKYt7wGw4FOt/ssjpJYoi6jI3I=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Mar 25 07:33:44 2026 GMT Not After : Apr 1 07:33:44 2026 GMT Subject: CN=69c38fd8-5458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:40:34:db:f8:41:b8:9a:f0:2b:35:1c:32: c6:00:c3:b8:85:ad:c8:6d:42:c5:d0:97:97:c7:bd: 81:38:a7:45:eb:8a:62:eb:30:1a:b8:8d:17:cf:29: e2:ea:b7:df:1c:84:85:be:c0:aa:6e:71:7c:14:19: 75:ce:0e:c4:eb:34:e1:ae:58:3c:55:77:c9:ca:26: d3:f3:86:8b:3b:14:1f:db:0b:10:97:18:b2:26:66: 6f:50:de:19:4c:3d:70:77:ec:fa:3e:f6:5e:52:ab: f9:a3:b3:02:e3:58:c9:5e:7a:bc:43:68:c5:d5:6f: 7a:03:6b:7d:41:04:7f:9b:c0:c6:3e:f3:51:b3:3a: 94:49:ed:87:14:0a:93:6b:cc:01:3f:f2:e2:08:6f: 81:68:8d:d4:91:4c:a2:32:9d:58:35:7f:fe:c0:40: a6:ac:fa:f1:0b:c5:ad:02:33:d3:63:e4:2c:dc:be: e0:70:d1:3a:37:f8:65:32:3f:81:93:1e:24:23:91: 4d:b9:8d:21:1d:f3:a0:c0:3f:27:dc:34:d2:ad:e5: 9b:f1:35:c5:20:70:59:84:bb:55:90:85:68:67:c4: 3c:e5:2a:1d:33:25:be:f3:c1:7e:d0:50:46:72:b0: 75:c6:b8:c6:e5:30:ef:be:e2:bc:ef:5a:8b:64:17: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:59:E5:FA:DA:EC:D6:DE:50:DE:71:17:74:F0:00:9C:55:1A:0D:94 X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:00:24:d1:04:54:b0:25:9f:4a:13:be:9e:e9:cb:4e:dd:ee: dc:f9:6d:08:1a:df:d4:75:c2:09:46:23:9d:69:63:d2:40:f4: a7:87:21:09:a0:2c:db:b2:e8:9b:11:f1:a4:fc:15:9f:5b:3c: f2:71:df:1b:71:93:b3:8b:4c:12:06:bd:9e:8e:77:be:0c:a7: e3:83:87:a7:98:f4:47:40:e2:c1:03:65:5f:73:92:b2:c3:62: 01:9f:6b:e9:de:6c:34:69:4a:1f:11:11:48:9e:71:b8:cf:a0: 0b:d2:86:86:e6:8f:37:54:0e:40:21:0e:11:0d:11:33:ea:27: c4:24:66:32:ea:d9:14:91:57:cd:db:57:99:e2:69:bb:cc:1b: d0:8a:f4:8a:e6:db:83:6a:ca:fc:0a:9a:6a:e6:fc:33:f2:5e: b0:f5:32:c7:6e:33:03:31:dc:9d:54:4f:62:c8:be:7f:c0:2d: 26:6c:c0:fe:ec:dc:11:98:b8:57:69:87:d9:44:26:93:85:53: 14:fb:f5:50:f1:3b:58:f2:fd:b1:0d:4f:ba:15:9f:a2:3c:90: 55:32:66:c5:d3:1f:9d:8e:2f:3f:08:2e:27:c8:80:77:8e:ef: 1e:f9:79:f9:8a:75:12:32:32:30:48:a8:36:b5:2a:bb:32:76: 9c:2e:c4:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG REQ3NDA1RjAeFw0yNjAzMjUwNzMzNDRaFw0yNjA0MDEwNzMzNDRaMBgxFjAUBgNV BAMTDTY5YzM4ZmQ4LTU0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyrkA02/hBuJrwKzUcMsYAw7iFrchtQsXQl5fHvYE4p0XrimLrMBq4jRfPKeLq t98chIW+wKpucXwUGXXODsTrNOGuWDxVd8nKJtPzhos7FB/bCxCXGLImZm9Q3hlM PXB37Po+9l5Sq/mjswLjWMleerxDaMXVb3oDa31BBH+bwMY+81GzOpRJ7YcUCpNr zAE/8uIIb4FojdSRTKIynVg1f/7AQKas+vELxa0CM9Nj5CzcvuBw0To3+GUyP4GT HiQjkU25jSEd86DAPyfcNNKt5ZvxNcUgcFmEu1WQhWhnxDzlKh0zJb7zwX7QUEZy sHXGuMblMO++4rzvWotkF045AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw1nl+trs 1t5Q3nEXdPAAnFUaDZQwHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0RGQjQ5QzQ4QzUxMDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpx STRCRV9KUFZocHYzWFFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLACTRBFSwJZ9KE76e6ctO3e7c+W0IGt/UdcIJRiOdaWPSQPSnhyEJoCzbsuib EfGk/BWfWzzycd8bcZOzi0wSBr2ejne+DKfjg4enmPRHQOLBA2Vfc5Kyw2IBn2vp 3mw0aUofERFInnG4z6AL0oaG5o83VA5AIQ4RDREz6ifEJGYy6tkUkVfN21eZ4mm7 zBvQivSK5tuDasr8Cppq5vwz8l6w9TLHbjMDMdydVE9iyL5/wC0mbMD+7NwRmLhX aYfZRCaThVMU+/VQ8TtY8v2xDU+6FZ+iPJBVMmbF0x+dji8/CC4nyIB3ju8e+Xn5 inUSMjIwSKg2tSq7MnacLsQP -----END CERTIFICATE-----Generated at Thu Mar 26 21:51:00 2026 by rpki-client