$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: mIgOZyXd65TE9hGdDTn8IO1gw2409fwmAlSFBqXL84c= Subject key identifier: 10:75:25:77:FC:55:3B:F6:12:F4:A9:91:17:07:C9:08:9E:C0:ED:CC Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 0617 Signing time: Mon 02 Mar 2026 01:59:50 +0000 Manifest this update: Mon 02 Mar 2026 01:59:48 +0000 Manifest next update: Mon 09 Mar 2026 01:59:48 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: F2LnRohC4hm+4GBXG4d+lxwI1DHPf/MhNA2iYYcOw8Q=) 2: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=) 3: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=) 4: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Mar 2 01:59:48 2026 GMT Not After : Mar 9 01:59:48 2026 GMT Subject: CN=69a4ef16-92b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:a2:e5:d6:5d:8b:17:ec:80:63:05:0c:78: 35:6f:58:eb:61:2b:20:15:54:2e:fb:ed:47:86:1c: 2e:eb:d3:3a:f3:87:28:31:18:66:7f:a0:4b:1c:8e: 32:00:b8:87:c1:dd:2e:55:bf:58:46:b4:51:35:91: 4d:99:45:e5:7b:ff:03:cb:a1:db:5f:23:b7:7e:37: 9a:1c:3a:3d:67:c9:57:ff:fd:42:46:c0:a6:20:0c: 02:7c:dd:9f:c6:73:df:80:82:18:0b:4b:84:b1:3b: f5:4a:c6:06:e4:c4:a4:be:8f:99:b9:2d:73:75:57: 4a:07:e8:82:28:05:74:9c:7d:11:10:d7:24:af:db: a3:ef:22:58:71:4f:ba:5b:4a:2f:0a:ca:47:e5:5a: 19:0a:f1:a4:43:77:57:a5:47:cf:46:3b:3a:f3:28: 6a:73:4f:07:1e:3e:b7:b6:44:2f:7c:a2:5c:70:af: 9f:b2:f2:6a:05:c6:7d:22:e4:0a:57:76:42:a4:b2: fc:de:c3:93:50:d6:91:58:39:52:84:17:79:97:dc: 21:97:9f:81:d5:98:4d:92:90:2e:38:81:96:bd:42: 50:28:b3:7d:41:22:c0:16:2c:a1:5c:d3:19:9f:6d: f6:4b:d8:7b:60:fe:45:dc:61:8a:31:ef:e6:fe:84: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:75:25:77:FC:55:3B:F6:12:F4:A9:91:17:07:C9:08:9E:C0:ED:CC X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b9:5a:2d:f5:ab:aa:be:c5:8d:2a:5e:3b:b4:c4:fe:9e:dd: d4:a5:5d:d8:82:62:72:19:5f:49:52:25:a3:a5:aa:f4:b4:e8: 68:3b:fd:68:64:a5:4c:28:58:60:0a:33:30:e4:e6:f2:4c:86: f5:6c:7b:0f:b5:ad:97:5d:bf:c3:a5:15:e6:fe:13:34:4a:1d: af:09:77:5f:ba:2e:59:c5:96:84:4a:72:0c:1e:53:99:5d:f2: b0:4d:e4:87:f2:e5:b9:b5:84:f0:9a:f2:bf:29:65:87:dd:43: 89:57:2b:13:9e:06:ac:13:cb:1b:e5:52:df:93:35:e0:95:1f: 4d:57:72:93:48:eb:34:c2:04:5e:cf:f5:1a:90:52:8c:26:1a: 0e:f2:62:b2:56:b3:5f:ee:fa:bd:67:a6:b4:73:fd:61:11:2d: ea:29:00:e3:a7:49:ac:73:6d:c6:11:cc:d2:79:cb:ad:86:a5: ea:61:c6:66:6e:52:f2:1f:55:a2:f0:47:51:15:fb:03:0f:e6: 3f:90:40:a4:fb:5e:fe:d8:79:09:99:51:b5:e5:b6:15:19:dc: 1b:60:a5:c0:df:5c:16:0d:a3:16:65:b4:60:12:9b:49:ac:a2: 6e:0e:86:ed:88:cb:80:b4:55:88:d6:5a:4d:e5:09:e9:e9:fc: b5:46:62:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYwMzAyMDE1OTQ4WhcNMjYwMzA5MDE1OTQ4WjAYMRYwFAYD VQQDEw02OWE0ZWYxNi05MmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0P2i5dZdixfsgGMFDHg1b1jrYSsgFVQu++1Hhhwu69M684coMRhmf6BLHI4y ALiHwd0uVb9YRrRRNZFNmUXle/8Dy6HbXyO3fjeaHDo9Z8lX//1CRsCmIAwCfN2f xnPfgIIYC0uEsTv1SsYG5MSkvo+ZuS1zdVdKB+iCKAV0nH0RENckr9uj7yJYcU+6 W0ovCspH5VoZCvGkQ3dXpUfPRjs68yhqc08HHj63tkQvfKJccK+fsvJqBcZ9IuQK V3ZCpLL83sOTUNaRWDlShBd5l9whl5+B1ZhNkpAuOIGWvUJQKLN9QSLAFiyhXNMZ n232S9h7YP5F3GGKMe/m/oSnewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBB1JXf8 VTv2EvSpkRcHyQiewO3MMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH7laLfWrqr7FjSpeO7TE/p7d1KVd2IJichlfSVIlo6Wq9LToaDv9aGSlTChY YAozMOTm8kyG9Wx7D7Wtl12/w6UV5v4TNEodrwl3X7ouWcWWhEpyDB5TmV3ysE3k h/LlubWE8Jryvyllh91DiVcrE54GrBPLG+VS35M14JUfTVdyk0jrNMIEXs/1GpBS jCYaDvJislazX+76vWemtHP9YREt6ikA46dJrHNtxhHM0nnLrYal6mHGZm5S8h9V ovBHURX7Aw/mP5BApPte/th5CZlRteW2FRncG2ClwN9cFg2jFmW0YBKbSayibg6G 7YjLgLRViNZaTeUJ6en8tUZi4g== -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:25 2026 by rpki-client