$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json) Hash identifier: 3OthpEQtpmNBwz8xQEDWOWGGsZaoKw/rllQpAg54mSQ= Subject key identifier: BD:3E:3D:96:D0:94:94:45:75:0C:DC:26:6E:60:C5:1F:90:A6:B2:28 Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F Certificate issuer: /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft Manifest number: 14 Signing time: Sun 01 Mar 2026 10:31:40 +0000 Manifest this update: Sun 01 Mar 2026 10:31:39 +0000 Manifest next update: Sun 08 Mar 2026 10:31:39 +0000 Files and hashes: 1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: /oebLQ98bmkcBG2jafa+DKx7e4W4CIfVor7wEmeZwa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F Validity Not Before: Mar 1 10:31:39 2026 GMT Not After : Mar 8 10:31:39 2026 GMT Subject: CN=69a4158b-570b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:19:45:6a:52:b7:d6:a7:fc:24:a7:6c:5c: 08:95:ce:57:c9:37:7f:0b:98:d3:d7:48:9a:97:d2: c4:da:6e:30:0a:2d:71:7b:a7:90:39:2d:6a:54:9f: 29:a7:f6:27:90:63:97:51:de:b4:ed:d8:50:d8:c4: 46:db:0c:85:5a:dc:b3:d1:63:a9:72:49:f9:4d:3f: 0a:01:09:4a:a0:5a:af:3b:27:66:d8:06:de:67:f1: e2:8c:f4:31:02:ac:66:d4:b5:40:8f:9c:d8:57:bf: f1:cb:5e:96:53:b6:64:af:2a:d9:01:47:c8:24:f5: bb:0a:b6:e8:43:30:f9:2e:18:b9:58:dd:81:81:e5: ea:99:5d:dc:07:74:b5:0b:93:84:e7:76:a5:29:ba: 07:9a:49:31:cf:49:5c:fb:32:ff:d0:1f:65:d4:fe: 15:09:70:b3:d6:1d:bb:96:60:e6:fd:3e:ff:9e:8e: fc:f4:90:ed:7c:19:23:5b:b0:b7:19:db:18:af:7f: ad:e0:41:75:7a:38:59:ff:57:67:dc:66:4d:44:ad: c9:63:e0:65:13:3b:01:23:36:29:4d:06:ae:7c:44: 41:6e:05:bb:ef:23:f6:47:2d:2e:5d:5c:01:79:2f: d4:6e:5e:36:2d:2c:6b:8a:66:d5:a7:a9:39:f1:9f: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3E:3D:96:D0:94:94:45:75:0C:DC:26:6E:60:C5:1F:90:A6:B2:28 X509v3 Authority Key Identifier: keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:de:f6:c9:77:6f:72:b3:bf:30:d9:dd:d7:cc:9d:fc:a5:36: 58:d4:d3:40:07:97:47:a3:ba:27:a8:6d:c2:4c:f5:bf:83:0e: 09:79:47:a2:24:58:14:92:54:5e:59:b7:ea:32:b8:52:db:22: e4:54:d6:ca:1b:e1:63:3a:d2:9b:89:17:89:eb:ca:0a:74:03: e0:28:5e:5e:e2:d0:08:71:54:63:ea:94:24:70:a9:e3:ba:18: 92:9b:7e:7d:17:75:63:59:22:04:13:7e:a7:5b:8a:75:ad:a4: 25:3a:10:68:97:52:4d:61:b9:ca:64:58:98:a0:87:da:1f:e9: e7:0e:f3:c7:2a:30:a0:3e:a8:c8:9d:4e:41:cb:97:2c:b8:78: 2f:4b:cb:a1:79:ee:d2:54:9b:f2:36:44:e3:4b:2e:2f:fe:b1: cb:30:4d:4c:16:3c:c8:aa:e7:2b:a1:de:59:5d:42:fd:fc:3d: 00:1c:db:8b:38:6e:4a:88:9a:64:ee:12:dd:24:55:09:79:bf: 89:e0:3c:fc:70:34:20:18:cb:95:2d:9d:ab:1f:fe:a5:f0:22: 34:3b:96:12:46:fd:90:17:e2:45:06:9e:51:b2:61:6c:44:fd: e7:70:28:7b:2e:1b:dc:98:65:ae:7b:e7:57:44:3e:20:97:6e: 5c:66:c5:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJDQjExMC8GA1UEBRMoRjIxNzA2MzBBMDE0RjgyMThGRjMwNzU2NDlGNDEyNDIw MDNENDQ2RjAeFw0yNjAzMDExMDMxMzlaFw0yNjAzMDgxMDMxMzlaMBgxFjAUBgNV BAMTDTY5YTQxNThiLTU3MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCDhlFalK31qf8JKdsXAiVzlfJN38LmNPXSJqX0sTabjAKLXF7p5A5LWpUnymn 9ieQY5dR3rTt2FDYxEbbDIVa3LPRY6lySflNPwoBCUqgWq87J2bYBt5n8eKM9DEC rGbUtUCPnNhXv/HLXpZTtmSvKtkBR8gk9bsKtuhDMPkuGLlY3YGB5eqZXdwHdLUL k4TndqUpugeaSTHPSVz7Mv/QH2XU/hUJcLPWHbuWYOb9Pv+ejvz0kO18GSNbsLcZ 2xivf63gQXV6OFn/V2fcZk1Erclj4GUTOwEjNilNBq58REFuBbvvI/ZHLS5dXAF5 L9RuXjYtLGuKZtWnqTnxnxx1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvT49ltCU lEV1DNwmbmDFH5CmsigwHwYDVR0jBBgwFoAU8hcGMKAU+CGP8wdWSfQSQgA9RG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0IyREZGNjU2RkRC QzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNHUDh3ZFdTZlFTUWdBOVJH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGhjR01LQVUtQ0dQOHdkV1NmUVNRZ0E5Ukc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNH UDh3ZFdTZlFTUWdBOVJHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAB3vbJd29ys78w2d3XzJ38pTZY1NNAB5dHo7onqG3CTPW/gw4JeUeiJFgUklRe WbfqMrhS2yLkVNbKG+FjOtKbiReJ68oKdAPgKF5e4tAIcVRj6pQkcKnjuhiSm359 F3VjWSIEE36nW4p1raQlOhBol1JNYbnKZFiYoIfaH+nnDvPHKjCgPqjInU5By5cs uHgvS8uhee7SVJvyNkTjSy4v/rHLME1MFjzIqucrod5ZXUL9/D0AHNuLOG5KiJpk 7hLdJFUJeb+J4Dz8cDQgGMuVLZ2rH/6l8CI0O5YSRv2QF+JFBp5RsmFsRP3ncCh7 LhvcmGWue+dXRD4gl25cZsVF -----END CERTIFICATE-----Generated at Sun Mar 1 20:04:17 2026 by rpki-client