$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: BFPhgYfOoXzpreBJl0tn3thldnIqczpzfbZgjGCjVII= Subject key identifier: 00:1A:9F:6B:1B:70:F1:FB:CB:BE:11:AC:D0:FD:A4:E8:7D:B4:CE:9F Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0CDC Signing time: Mon 02 Mar 2026 01:14:30 +0000 Manifest this update: Mon 02 Mar 2026 01:14:29 +0000 Manifest next update: Mon 09 Mar 2026 01:14:29 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: t5RArsb2yltcoZ59Egkch7HoYrdfqFTUPvlKWTgXXlc=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: 8onqQ0Hgne8VuBR8MMAfBmsUbYc+lMndFteIlBMEozQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Mar 2 01:14:29 2026 GMT Not After : Mar 9 01:14:29 2026 GMT Subject: CN=69a4e475-8edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0c:b0:f4:ad:89:88:da:3d:89:ea:f6:e4:99: c1:3c:05:2c:33:dc:7d:ec:bd:f9:df:35:61:ce:5f: 37:0b:74:0d:68:93:bd:cd:ad:a4:6b:6a:75:c7:36: ac:a9:bc:4a:4d:09:de:39:c7:a6:a5:7e:14:a7:26: 81:7c:bd:1e:03:86:9f:32:1b:4e:40:7c:19:ee:7f: 5e:a1:62:3a:7b:15:db:ff:ef:4d:9c:f3:de:cf:31: b6:2c:7c:88:e9:14:a3:46:52:b7:13:0c:bb:f4:55: 15:21:87:d2:70:11:fe:76:b1:3e:5e:fb:94:82:39: b0:4a:ac:80:84:9d:05:3b:0e:da:6b:24:6b:3b:34: 82:7a:44:3d:aa:15:77:b6:bf:38:20:df:7e:18:ee: 05:49:01:aa:e6:06:78:2f:f2:6d:79:85:d3:05:1a: 56:f2:a6:73:63:e4:c1:ed:ab:be:77:c0:24:92:d4: aa:ac:9d:e8:5d:7b:a6:d8:2a:e7:cb:3b:66:04:c6: ad:cc:20:6c:86:62:b1:bf:a0:68:57:3a:9a:66:ca: 26:b1:88:1b:cd:a7:e2:34:82:47:b1:d1:00:f7:8f: b3:37:fb:f9:96:3e:f9:c7:ef:a9:5a:40:50:df:2b: d5:3d:a4:0f:db:9a:42:17:96:1a:1d:5c:c1:06:e6: 20:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1A:9F:6B:1B:70:F1:FB:CB:BE:11:AC:D0:FD:A4:E8:7D:B4:CE:9F X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7b:f9:7e:23:af:f8:83:15:6d:cd:bd:ff:0c:e7:c7:70:77: 97:da:a2:44:a9:ab:11:d8:f6:3c:8e:e0:80:a9:94:22:68:78: 03:93:a5:9e:d7:49:dd:34:5f:32:82:62:3a:6a:29:45:d9:2f: 27:37:8a:0b:50:f4:54:b1:c5:ad:a2:e8:20:c9:de:03:54:54: 40:d4:fc:2c:fa:40:2b:37:71:11:b5:21:dc:2b:6a:7d:a8:a2: 41:79:df:17:12:43:5b:29:07:47:74:2b:97:05:41:aa:92:f3: bf:98:08:ee:8d:b7:3d:25:32:0c:11:cf:97:6e:0e:5a:aa:5b: 9f:88:c8:12:6b:46:6c:7a:38:44:2c:f3:0c:3c:87:f2:45:b0: f9:2d:4e:40:4f:8f:81:10:a1:69:8e:8c:3c:9f:24:bf:3c:68: 7b:3b:39:93:d8:30:18:7b:a4:15:60:bc:a3:53:ac:35:45:b2: d5:46:a9:ab:b2:db:f6:df:71:79:fe:0b:b9:f1:2f:7c:28:79: 06:5f:c2:65:77:2e:07:3c:06:6f:be:3a:07:fe:d6:76:ad:a4: d4:68:5e:34:dd:77:7d:09:c0:77:e2:34:49:52:dd:9c:34:55: 25:ae:2a:a7:fd:ff:a3:4f:47:c1:d6:53:cd:89:72:55:32:db: b4:4e:39:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjYwMzAyMDExNDI5WhcNMjYwMzA5MDExNDI5WjAYMRYwFAYD VQQDEw02OWE0ZTQ3NS04ZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Qyw9K2JiNo9ier25JnBPAUsM9x97L353zVhzl83C3QNaJO9za2ka2p1xzas qbxKTQneOcempX4UpyaBfL0eA4afMhtOQHwZ7n9eoWI6exXb/+9NnPPezzG2LHyI 6RSjRlK3Ewy79FUVIYfScBH+drE+XvuUgjmwSqyAhJ0FOw7aayRrOzSCekQ9qhV3 tr84IN9+GO4FSQGq5gZ4L/JteYXTBRpW8qZzY+TB7au+d8AkktSqrJ3oXXum2Crn yztmBMatzCBshmKxv6BoVzqaZsomsYgbzafiNIJHsdEA94+zN/v5lj75x++pWkBQ 3yvVPaQP25pCF5YaHVzBBuYgUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAan2sb cPH7y74RrND9pOh9tM6fMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR3v5fiOv+IMVbc29/wznx3B3l9qiRKmrEdj2PI7ggKmUImh4A5OlntdJ3TRf MoJiOmopRdkvJzeKC1D0VLHFraLoIMneA1RUQNT8LPpAKzdxEbUh3CtqfaiiQXnf FxJDWykHR3QrlwVBqpLzv5gI7o23PSUyDBHPl24OWqpbn4jIEmtGbHo4RCzzDDyH 8kWw+S1OQE+PgRChaY6MPJ8kvzxoezs5k9gwGHukFWC8o1OsNUWy1Uapq7Lb9t9x ef4LufEvfCh5Bl/CZXcuBzwGb746B/7Wdq2k1GheNN13fQnAd+I0SVLdnDRVJa4q p/3/o09HwdZTzYlyVTLbtE45Iw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:06 2026 by rpki-client