$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: vV2ykREB5n1Ve5YGL57SDsVZ6+xuRk++uxzk3MKyo84= Subject key identifier: E4:27:A5:72:96:74:51:F0:58:07:D4:5A:43:6E:54:56:FC:D0:C3:7D Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 026E Signing time: Sun 01 Mar 2026 02:42:34 +0000 Manifest this update: Sun 01 Mar 2026 02:42:33 +0000 Manifest next update: Sun 08 Mar 2026 02:42:33 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: yHMzqtJF9IWWRDBzBb94Gv+NMWWjlH79mCkLJV7UdoI=) 2: 6A46CFE0126211F188E006892E3D8C67.roa (hash: vOJvFxKytvrdrqNxXwkJJTDEUHFcjzsiu2peSkriAqw=) 3: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: 93Fu4NJ+c74voGtnReTAbw0AMG9XfrkIqJTzM1zuS7E=) 4: 8333943E126211F1829E65892E3D8C67.roa (hash: /EPCYYOW/cqLzxLVzsYuv8NWY2KMBfiUOIGE8nV+BRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Mar 1 02:42:33 2026 GMT Not After : Mar 8 02:42:33 2026 GMT Subject: CN=69a3a79a-b371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:af:91:81:2c:6d:cb:83:4a:60:4d:55:dd: 19:1a:51:c0:fe:30:2e:3c:40:ee:52:81:ef:c3:58: e0:dd:d3:ec:27:ef:af:a7:22:09:e3:fe:03:82:ca: b3:c6:ee:33:fa:79:b3:89:b1:7a:36:46:24:ce:50: c1:85:23:5f:e3:5e:6a:39:aa:0d:e7:01:ac:96:a0: 79:c2:f7:56:6f:e1:a7:ad:d2:da:57:f6:0b:f8:7a: c2:91:46:4f:0c:55:aa:4f:bd:6b:50:20:f5:44:d2: ec:8b:bf:f9:14:9a:76:c3:4d:fe:fa:d9:05:b0:0a: 9e:26:3b:e5:a2:7a:ab:72:43:68:26:e2:60:7a:58: fa:ba:e7:fd:74:75:d4:74:fb:a7:11:a9:18:1f:28: df:cd:4c:8e:30:6d:bc:aa:21:de:c3:6b:7b:24:9c: bb:e3:f2:ba:68:0e:c3:19:a2:f9:0f:64:da:88:2e: 21:82:83:77:81:5d:17:02:e0:77:bc:eb:60:97:cc: d9:9e:31:39:40:e6:cf:51:5a:f9:e1:b2:e8:83:21: a7:97:29:1d:a6:48:c2:43:b1:ec:cc:1a:13:ad:bf: 68:6b:7d:96:55:56:8f:ec:6c:be:a3:02:71:66:37: 98:02:af:d0:de:1f:06:38:26:79:e3:12:93:b6:03: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:27:A5:72:96:74:51:F0:58:07:D4:5A:43:6E:54:56:FC:D0:C3:7D X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b2:7f:06:04:d5:b0:09:62:c5:c9:5c:53:dc:04:cf:77:90: 55:4d:d8:a5:e5:48:d1:18:a1:fa:cb:81:22:cc:78:52:ca:bc: 27:e2:88:f7:ab:c0:75:9b:a1:7a:2b:84:4a:5f:61:38:fa:96: f5:02:09:a2:12:21:01:9b:e5:df:fd:ae:a7:e3:31:2e:fd:fb: 7d:bc:67:4d:ef:8b:0b:90:b5:65:40:15:92:11:5c:62:ce:10: 76:85:6c:78:90:54:e4:29:65:e7:fc:3c:b1:ab:b6:24:8d:ed: 71:25:42:01:2e:e5:bb:12:12:e5:71:8d:08:34:a5:cf:c8:0f: 90:08:74:d0:9d:8b:57:9b:6d:2e:d5:03:10:bf:d5:96:26:d0: 64:16:74:d4:ea:19:35:8c:75:b5:ea:f9:ed:8a:f9:d9:a2:53: 66:66:14:08:f0:c9:8e:06:8e:d5:f2:f8:3a:a8:6b:a7:4f:07: fa:2d:53:e5:f4:ba:fe:c1:a8:45:90:21:16:6a:f2:59:7f:6e: 47:93:c5:86:7d:28:03:00:87:33:d7:26:fa:1c:ae:5f:09:55: d8:4a:49:ef:04:2e:54:01:0f:d0:44:6d:57:9b:7c:93:93:b9: c5:21:fc:fc:6d:bf:5b:e6:fa:5e:25:c6:ce:1b:c1:3b:a3:15: cb:79:09:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjYwMzAxMDI0MjMzWhcNMjYwMzA4MDI0MjMzWjAYMRYwFAYD VQQDDA02OWEzYTc5YS1iMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlx6vkYEsbcuDSmBNVd0ZGlHA/jAuPEDuUoHvw1jg3dPsJ++vpyIJ4/4Dgsqz xu4z+nmzibF6NkYkzlDBhSNf415qOaoN5wGslqB5wvdWb+GnrdLaV/YL+HrCkUZP DFWqT71rUCD1RNLsi7/5FJp2w03++tkFsAqeJjvlonqrckNoJuJgelj6uuf9dHXU dPunEakYHyjfzUyOMG28qiHew2t7JJy74/K6aA7DGaL5D2TaiC4hgoN3gV0XAuB3 vOtgl8zZnjE5QObPUVr54bLogyGnlykdpkjCQ7HszBoTrb9oa32WVVaP7Gy+owJx ZjeYAq/Q3h8GOCZ54xKTtgNRZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQnpXKW dFHwWAfUWkNuVFb80MN9MB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWrJ/BgTVsAlixclcU9wEz3eQVU3YpeVI0Rih+suBIsx4Usq8J+KI96vAdZuh eiuESl9hOPqW9QIJohIhAZvl3/2up+MxLv37fbxnTe+LC5C1ZUAVkhFcYs4QdoVs eJBU5Cll5/w8sau2JI3tcSVCAS7luxIS5XGNCDSlz8gPkAh00J2LV5ttLtUDEL/V libQZBZ01OoZNYx1ter57Yr52aJTZmYUCPDJjgaO1fL4Oqhrp08H+i1T5fS6/sGo RZAhFmryWX9uR5PFhn0oAwCHM9cm+hyuXwlV2EpJ7wQuVAEP0ERtV5t8k5O5xSH8 /G2/W+b6XiXGzhvBO6MVy3kJqw== -----END CERTIFICATE-----Generated at Mon Mar 2 01:11:19 2026 by rpki-client