$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: A1DpfDLgpd+1dh/KiHTJd8WFnxZlHLWGSQlI/nE2T4U= Subject key identifier: 37:72:16:00:68:E9:EE:B4:87:33:B9:63:8C:7D:F5:0C:16:85:BA:DC Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 01A8 Signing time: Sun 01 Mar 2026 04:52:15 +0000 Manifest this update: Sun 01 Mar 2026 04:52:14 +0000 Manifest next update: Sun 08 Mar 2026 04:52:14 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: 97WtRdupBXHKLfddD6N07Nl7fKDQxICFvSRjHX6pQ/E=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: +4AW806nYQQldZTlXaAUhGx5mMXdQVdMZ5gscLzr3Uc=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: ZB9eAMVWfBK9MN4S24RR8d1yaBGavhdyzDSgtXBT9U4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Mar 1 04:52:14 2026 GMT Not After : Mar 8 04:52:14 2026 GMT Subject: CN=69a3c5ff-8e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:8e:b2:26:9b:5e:ef:38:17:66:32:32:f1: 49:c0:76:6a:98:e3:6e:0a:fd:0a:46:30:3f:c1:bb: cd:2f:c0:fb:62:7d:6f:52:b7:a1:c3:32:97:76:2f: 76:88:18:78:09:12:a2:07:a0:18:bc:1e:9b:6e:37: 7f:9c:88:85:60:02:c9:37:10:a3:f1:85:f7:47:20: 7b:b0:36:57:f5:9c:74:33:97:3e:a9:a7:2a:79:96: ab:fc:a8:db:04:87:f5:55:04:59:17:6a:a9:36:d1: 2e:16:95:c6:e1:1c:2b:d3:ff:4e:4a:05:9e:b2:48: de:71:17:11:c1:5a:03:16:09:96:69:bd:d7:84:0a: a5:dd:d5:55:e7:27:9c:c1:10:cd:81:3d:bc:fc:d6: 80:58:59:40:14:69:9b:d2:66:ab:8c:68:f0:9d:51: 81:b1:4a:ad:97:f5:86:d1:58:5a:b9:67:b7:61:62: 0e:c0:ec:96:19:e8:54:bc:be:be:60:9d:b5:a5:72: 91:95:97:35:02:30:eb:2a:8a:78:29:be:98:8e:92: f6:20:62:77:ea:8c:d6:a3:91:30:80:ae:52:37:f1: 1f:03:f0:58:c2:dd:98:ba:e1:b3:ea:5d:bb:02:13: f5:ed:70:11:c4:a2:72:4c:71:f9:46:ec:aa:77:4b: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:72:16:00:68:E9:EE:B4:87:33:B9:63:8C:7D:F5:0C:16:85:BA:DC X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:16:cf:6e:10:c6:4b:47:69:25:5a:d0:1c:b5:df:cd:28:c8: 27:6f:d6:13:e6:e1:70:58:42:1c:40:e8:47:be:41:40:b7:d3: 92:2d:39:6a:36:40:a4:f1:97:f8:2d:08:7e:88:b1:5a:2d:03: b1:3a:c3:46:74:e8:d6:f7:6d:21:7b:aa:91:c9:63:9a:56:f2: be:59:e6:cd:b7:b8:ce:1b:31:23:9c:31:db:0d:48:fb:a3:d3: 34:8b:59:5e:0d:78:8b:20:47:d9:f3:ee:20:2f:44:ab:41:3c: 99:58:2b:ef:0a:24:c3:c9:03:a8:21:87:6b:f6:9e:aa:cd:75: 09:f7:5d:07:89:93:68:2c:4d:bf:c3:46:05:53:a5:17:54:32: cd:e1:73:cb:a6:38:46:ec:c6:4f:92:7a:e3:6d:d4:89:c1:78: 0b:78:3d:1e:2f:df:06:9c:01:ac:c4:80:3b:96:81:37:3e:23: dd:f9:0d:65:8c:98:64:7e:74:3e:22:54:cf:4e:27:b0:ac:b6: 11:ef:0b:74:45:67:ee:e7:1e:32:91:d9:71:00:17:4a:a2:fa: 9c:12:c8:8f:2c:3c:d0:33:4c:b4:07:63:66:62:fb:4f:92:1e: e7:c3:d2:65:d1:00:47:21:fd:81:c9:d7:95:c2:9c:de:1e:89: 4f:42:23:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjYwMzAxMDQ1MjE0WhcNMjYwMzA4MDQ1MjE0WjAYMRYwFAYD VQQDDA02OWEzYzVmZi04ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvESOsiabXu84F2YyMvFJwHZqmONuCv0KRjA/wbvNL8D7Yn1vUrehwzKXdi92 iBh4CRKiB6AYvB6bbjd/nIiFYALJNxCj8YX3RyB7sDZX9Zx0M5c+qacqeZar/Kjb BIf1VQRZF2qpNtEuFpXG4Rwr0/9OSgWeskjecRcRwVoDFgmWab3XhAql3dVV5yec wRDNgT28/NaAWFlAFGmb0marjGjwnVGBsUqtl/WG0VhauWe3YWIOwOyWGehUvL6+ YJ21pXKRlZc1AjDrKop4Kb6YjpL2IGJ36ozWo5EwgK5SN/EfA/BYwt2YuuGz6l27 AhP17XARxKJyTHH5Ruyqd0vRuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdyFgBo 6e60hzO5Y4x99QwWhbrcMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxbPbhDGS0dpJVrQHLXfzSjIJ2/WE+bhcFhCHEDoR75BQLfTki05ajZApPGX +C0IfoixWi0DsTrDRnTo1vdtIXuqkcljmlbyvlnmzbe4zhsxI5wx2w1I+6PTNItZ Xg14iyBH2fPuIC9Eq0E8mVgr7wokw8kDqCGHa/aeqs11CfddB4mTaCxNv8NGBVOl F1QyzeFzy6Y4RuzGT5J6423UicF4C3g9Hi/fBpwBrMSAO5aBNz4j3fkNZYyYZH50 PiJUz04nsKy2Ee8LdEVn7uceMpHZcQAXSqL6nBLIjyw80DNMtAdjZmL7T5Ie58PS ZdEARyH9gcnXlcKc3h6JT0Ij1w== -----END CERTIFICATE-----Generated at Sun Mar 1 23:04:48 2026 by rpki-client