$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft File: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft (raw, json) Hash identifier: wNJwHcfNyK2tKKxX1nZ1Oi/KGQShp6aWmZIkkXX/9uI= Subject key identifier: 18:0D:E3:CA:2E:E4:9F:36:30:5B:78:4A:A2:F1:91:2E:72:FB:EE:F5 Authority key identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50 Certificate issuer: /CN=A91E855B/serialNumber=F232408485CC1A4038BDB31BFAF3261540310950 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft Manifest number: 1D Signing time: Sun 01 Mar 2026 10:23:03 +0000 Manifest this update: Sun 01 Mar 2026 10:23:03 +0000 Manifest next update: Sun 08 Mar 2026 10:23:03 +0000 Files and hashes: 1: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl (hash: n8RxIA8MvautXA3iah0SQuMkHB9aD38BuC76hOAWLR4=) 2: 2D933FE8EF6711F0AD461381586F56BC.roa (hash: WqJt9JtnWtmIMdrj3ZxaQ9KA33C7zxy15e8t9pWBnaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E855B, serialNumber=F232408485CC1A4038BDB31BFAF3261540310950 Validity Not Before: Mar 1 10:23:03 2026 GMT Not After : Mar 8 10:23:03 2026 GMT Subject: CN=69a41387-a869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:58:b1:41:3b:64:26:5a:74:11:ea:40:89: d6:af:41:5f:e3:b5:69:fe:c3:38:bd:ad:56:54:25: 6a:a2:fe:8f:5a:61:bb:c4:5c:f7:6d:e6:4a:c3:64: 91:d2:76:22:68:21:8d:13:3c:97:58:04:63:3a:f0: 28:98:7e:27:04:49:c2:71:db:ae:c8:49:12:d0:6c: 40:3f:ef:ac:5d:90:eb:81:ae:51:d6:c7:d1:f2:5c: 15:f3:64:6f:00:b2:b0:22:4c:46:84:db:8e:f5:08: a0:c1:ce:a4:1e:ab:29:54:c7:e3:60:29:2b:80:1e: 6f:00:1c:55:05:6a:1e:ec:aa:10:d6:d5:5c:79:70: 4c:c4:70:31:a1:33:01:74:5f:47:95:ba:cc:42:15: 88:91:c6:30:8e:a8:10:c7:ad:21:77:51:c5:2e:a0: 63:ed:c8:34:8e:a5:66:19:63:8a:a1:b5:c7:ff:0a: 02:52:5c:79:56:a9:bb:49:a1:1b:e5:fd:6a:2c:6a: d1:71:6b:4c:a1:e6:fd:fc:7b:b3:52:66:6b:49:01: 8f:48:77:85:0a:63:fd:4c:08:a5:e6:9a:44:f5:fd: 42:1c:22:d7:7b:e0:11:20:e1:39:72:88:92:ba:11: b0:14:c6:2d:39:d8:25:b1:2c:e1:c8:20:98:37:c2: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0D:E3:CA:2E:E4:9F:36:30:5B:78:4A:A2:F1:91:2E:72:FB:EE:F5 X509v3 Authority Key Identifier: keyid:F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:7d:98:71:5f:5e:4b:78:b3:3f:97:45:61:98:1b:54:74:f4: ef:f3:bd:9b:80:97:dc:b1:37:1b:a8:57:41:a5:59:ad:20:a8: 5e:3b:61:0a:6e:54:26:e2:82:b8:46:31:76:0d:d0:a0:07:e5: 3f:ee:41:08:df:f5:08:c4:21:0b:48:f2:a8:71:1b:1d:eb:cb: f2:f1:17:62:fa:ab:0f:c1:88:95:98:22:6b:0c:d5:43:34:55: da:14:96:fd:0d:95:f4:af:ba:0e:21:35:0e:48:12:2f:59:2a: 65:25:f5:02:01:92:b3:0a:76:7a:fe:62:41:00:c7:9c:22:36: b7:8f:1d:c0:80:9b:48:36:7f:d6:35:c1:29:b0:9f:67:3b:54: 2d:24:5b:d4:d3:4b:b8:7c:f4:98:8a:50:cf:9a:ad:c4:53:12: 5c:49:3c:45:19:34:d9:36:08:4b:4e:ff:3e:ca:e2:9c:0e:67: ed:49:52:e7:36:49:dd:91:d4:26:25:48:5e:cf:0f:f2:40:e4: 49:fe:c9:cb:49:03:46:d0:32:3b:c6:35:86:80:ed:3d:85:f7: 60:27:fc:78:a8:0d:ea:94:00:b7:af:14:a0:df:82:01:f4:9c: af:b3:ec:3f:0a:23:cb:f9:51:49:31:3c:30:82:42:32:a6:e5: 40:ce:c6:3e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODU1QjExMC8GA1UEBRMoRjIzMjQwODQ4NUNDMUE0MDM4QkRCMzFCRkFGMzI2MTU0 MDMxMDk1MDAeFw0yNjAzMDExMDIzMDNaFw0yNjAzMDgxMDIzMDNaMBgxFjAUBgNV BAMTDTY5YTQxMzg3LWE4NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHAlixQTtkJlp0EepAidavQV/jtWn+wzi9rVZUJWqi/o9aYbvEXPdt5krDZJHS diJoIY0TPJdYBGM68CiYficEScJx267ISRLQbEA/76xdkOuBrlHWx9HyXBXzZG8A srAiTEaE2471CKDBzqQeqylUx+NgKSuAHm8AHFUFah7sqhDW1Vx5cEzEcDGhMwF0 X0eVusxCFYiRxjCOqBDHrSF3UcUuoGPtyDSOpWYZY4qhtcf/CgJSXHlWqbtJoRvl /WosatFxa0yh5v38e7NSZmtJAY9Id4UKY/1MCKXmmkT1/UIcItd74BEg4TlyiJK6 EbAUxi052CWxLOHIIJg3ws0dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGA3jyi7k nzYwW3hKovGRLnL77vUwHwYDVR0jBBgwFoAU8jJAhIXMGkA4vbMb+vMmFUAxCVAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NTVCLzY4MDVDMTI0RUY2 NjExRjA4MzNEN0IyNjU4NkY1NkJDLzhqSkFoSVhNR2tBNHZiTWItdk1tRlVBeENW QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGpKQWhJWE1Ha0E0dmJNYi12TW1GVUF4Q1ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NTVCLzY4MDVDMTI0RUY2NjExRjA4MzNEN0IyNjU4NkY1NkJDLzhqSkFoSVhNR2tB NHZiTWItdk1tRlVBeENWQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpfZhxX15LeLM/l0VhmBtUdPTv872bgJfcsTcbqFdBpVmtIKheO2EKblQm4oK4 RjF2DdCgB+U/7kEI3/UIxCELSPKocRsd68vy8Rdi+qsPwYiVmCJrDNVDNFXaFJb9 DZX0r7oOITUOSBIvWSplJfUCAZKzCnZ6/mJBAMecIja3jx3AgJtINn/WNcEpsJ9n O1QtJFvU00u4fPSYilDPmq3EUxJcSTxFGTTZNghLTv8+yuKcDmftSVLnNkndkdQm JUhezw/yQORJ/snLSQNG0DI7xjWGgO09hfdgJ/x4qA3qlAC3rxSg34IB9Jyvs+w/ CiPL+VFJMTwwgkIypuVAzsY+ -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:36 2026 by rpki-client