$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft File: 8WJXDJs0J9iIMy8qJEOCiAfghyM.mft (raw, json) Hash identifier: 05BTIUze+GQTmpIObRSGTuUl/82TNgr9ICNs9fjzKxM= Subject key identifier: CA:86:CA:E7:BD:24:80:1C:DC:32:61:30:37:9A:FB:58:2E:DC:52:C7 Authority key identifier: F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23 Certificate issuer: /CN=A91EA850/serialNumber=F162570C9B3427D888332F2A2443828807E08723 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft Manifest number: 22 Signing time: Sun 01 Mar 2026 10:21:04 +0000 Manifest this update: Sun 01 Mar 2026 10:21:04 +0000 Manifest next update: Sun 08 Mar 2026 10:21:04 +0000 Files and hashes: 1: 8WJXDJs0J9iIMy8qJEOCiAfghyM.crl (hash: kiCPD0wMmcguXWvXXRDj6MGeTYSAizZJ15N2LE9x9ug=) 2: 59A00586ED3B11F0828F39A04B6F56BC.roa (hash: avbMtWxCM2o2DX0P74mL3JeKWiHmBaAQM+9sixfY8qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA850, serialNumber=F162570C9B3427D888332F2A2443828807E08723 Validity Not Before: Mar 1 10:21:04 2026 GMT Not After : Mar 8 10:21:04 2026 GMT Subject: CN=69a41310-61de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:2e:24:35:d7:10:da:b8:33:e1:96:e2:5a: 4e:a7:96:2b:7c:0a:82:fd:32:bb:30:40:af:53:88: 4c:c1:6c:b1:cb:42:cc:2a:48:36:23:f6:1b:d5:6c: 4b:ac:dd:b1:85:8c:08:4c:a5:8d:8a:e7:83:65:ee: 7a:2a:40:f6:96:3c:95:cc:7a:c8:9e:a7:64:0d:69: b5:f2:76:f2:39:54:76:30:98:e8:a0:23:75:10:76: 6a:ab:d9:6a:92:f6:76:26:94:59:05:a6:59:58:c7: f3:36:bf:2d:d7:95:50:b4:fc:73:dd:68:b9:c5:36: e2:eb:b1:bf:e4:02:c4:33:7c:05:c8:26:23:0b:85: e4:84:47:bd:b8:b1:18:5d:34:61:f3:69:02:cd:40: eb:3d:65:d2:fe:70:30:5c:1b:04:34:36:53:df:bc: 95:8d:9f:ea:30:f1:21:1d:8d:c6:02:1d:0b:84:45: 16:03:4b:9f:fe:df:6d:0f:20:c8:1a:42:65:0a:fd: 08:71:38:18:31:49:d2:6d:a1:d8:9c:85:31:eb:12: 49:f9:0d:7c:3b:15:47:ce:3e:ce:9c:79:56:9f:97: 95:41:bb:9f:98:44:69:19:3e:e7:a8:2f:cb:76:29: f8:c4:a1:6b:b3:1f:2a:44:db:47:e4:e9:bf:7b:66: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:CA:E7:BD:24:80:1C:DC:32:61:30:37:9A:FB:58:2E:DC:52:C7 X509v3 Authority Key Identifier: keyid:F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cb:79:26:c4:1a:42:ec:7e:2b:5a:ab:ad:1c:9f:0e:a8:25: 72:ae:05:e5:52:eb:73:f1:40:b5:4f:6c:34:b2:46:27:cc:16: 96:c5:ba:d8:af:db:dd:70:93:32:fe:f4:13:37:8d:10:b4:b6: d6:3f:21:1d:bc:0b:10:5b:30:c7:1c:f3:72:e1:0e:3c:50:e6: 24:95:24:5f:4c:5c:a2:0f:b6:29:ea:f5:0c:4f:c5:94:03:ec: 01:66:b7:2c:1d:71:96:36:bd:da:b8:1c:c0:e0:d5:71:63:75: 40:7a:5a:2b:d7:72:ed:d1:13:44:01:7b:a2:d1:39:f6:e6:fa: 96:d5:80:41:f3:9f:1e:25:82:f6:bc:89:38:50:49:a5:28:a4: cf:9e:93:ec:7b:c3:0f:95:96:73:ac:ae:3c:8a:9a:0c:0c:f1: b2:67:c6:4e:2d:08:d7:64:ca:e4:3d:f9:74:39:c1:af:c5:9b: 9e:b2:34:a9:2c:07:6b:2e:70:db:17:b8:15:54:7d:ca:36:6c: 03:f5:b9:87:a7:11:02:48:5c:0b:6d:61:12:7d:80:27:6e:a4: d1:15:f5:d9:4c:2e:4d:c1:06:2b:fc:d7:38:5e:09:b0:f4:13: ab:67:eb:35:43:a4:89:f6:4e:bd:df:b6:5b:63:10:5f:86:4a: 23:21:9c:31 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTg1MDExMC8GA1UEBRMoRjE2MjU3MEM5QjM0MjdEODg4MzMyRjJBMjQ0MzgyODgw N0UwODcyMzAeFw0yNjAzMDExMDIxMDRaFw0yNjAzMDgxMDIxMDRaMBgxFjAUBgNV BAMTDTY5YTQxMzEwLTYxZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC+C4kNdcQ2rgz4ZbiWk6nlit8CoL9MrswQK9TiEzBbLHLQswqSDYj9hvVbEus 3bGFjAhMpY2K54Nl7noqQPaWPJXMesiep2QNabXydvI5VHYwmOigI3UQdmqr2WqS 9nYmlFkFpllYx/M2vy3XlVC0/HPdaLnFNuLrsb/kAsQzfAXIJiMLheSER724sRhd NGHzaQLNQOs9ZdL+cDBcGwQ0NlPfvJWNn+ow8SEdjcYCHQuERRYDS5/+320PIMga QmUK/QhxOBgxSdJtodichTHrEkn5DXw7FUfOPs6ceVafl5VBu5+YRGkZPueoL8t2 KfjEoWuzHypE20fk6b97ZqRRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyobK570k gBzcMmEwN5r7WC7cUscwHwYDVR0jBBgwFoAU8WJXDJs0J9iIMy8qJEOCiAfghyMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODUwLzMwMjgzM0MwRUM3 QTExRjA5QkE0RTI1RDU0NkY1NkJDLzhXSlhESnMwSjlpSU15OHFKRU9DaUFmZ2h5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFdKWERKczBKOWlJTXk4cUpFT0NpQWZnaHlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB ODUwLzMwMjgzM0MwRUM3QTExRjA5QkE0RTI1RDU0NkY1NkJDLzhXSlhESnMwSjlp SU15OHFKRU9DaUFmZ2h5TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8y3kmxBpC7H4rWqutHJ8OqCVyrgXlUutz8UC1T2w0skYnzBaWxbrYr9vdcJMy /vQTN40QtLbWPyEdvAsQWzDHHPNy4Q48UOYklSRfTFyiD7Yp6vUMT8WUA+wBZrcs HXGWNr3auBzA4NVxY3VAelor13Lt0RNEAXui0Tn25vqW1YBB858eJYL2vIk4UEml KKTPnpPse8MPlZZzrK48ipoMDPGyZ8ZOLQjXZMrkPfl0OcGvxZuesjSpLAdrLnDb F7gVVH3KNmwD9bmHpxECSFwLbWESfYAnbqTRFfXZTC5NwQYr/Nc4Xgmw9BOrZ+s1 Q6SJ9k6937ZbYxBfhkojIZwx -----END CERTIFICATE-----Generated at Sun Mar 1 20:11:37 2026 by rpki-client