$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: PJieQoPz7jiGAvTln1HnHm/mea3mfcoQUAEtblkVW+I= Subject key identifier: E9:11:49:13:0A:0E:5D:2E:F3:F4:88:A4:EC:7E:D0:18:D2:D1:F3:3D Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: 40 Signing time: Sun 29 Mar 2026 08:11:43 +0000 Manifest this update: Sun 29 Mar 2026 08:11:42 +0000 Manifest next update: Sun 05 Apr 2026 08:11:42 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: OWuvD5AcVn8/IF9EDK2q3mXXekYSmgCneUZ84LnOxRU=) 2: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: hgGzaQ1cBrypk5ytpqpU7GEjdnOL4DAirIqjQZnghOs=) 3: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: 9RLAoZXHDep7ikUMuUeuOPjnOmGwHrIkt6BqprZz7KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Mar 29 08:11:42 2026 GMT Not After : Apr 5 08:11:42 2026 GMT Subject: CN=69c8debf-4346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:28:6f:76:4f:fe:44:38:06:6b:92:46:1a: d3:58:99:63:a9:45:c7:4b:f9:51:8f:9d:c9:56:9f: 92:da:14:cb:2d:aa:f2:65:c7:fe:47:a9:14:2c:f4: 0f:28:cf:db:27:8d:83:3b:d7:40:04:17:d4:a8:b8: c5:8e:28:59:a1:91:97:21:d4:b1:ef:04:34:e4:09: 5a:90:cb:d1:c2:29:0b:67:df:47:69:9c:36:90:3e: 61:bb:21:7f:3f:7c:d8:d8:9e:41:60:37:43:13:df: 03:40:ae:11:64:c5:66:bc:ed:8c:8c:d9:70:2b:33: 0e:4e:fd:03:cd:19:ad:34:46:00:b6:2c:1a:d4:61: 0a:0f:b8:47:32:91:1a:39:63:84:43:d5:92:55:16: bb:0e:8c:3d:1c:a8:98:a0:23:76:50:db:ba:d2:4d: f1:78:04:52:bd:a5:e3:8c:6b:8e:46:d7:dd:f0:d8: 94:ed:cc:09:5c:8f:19:b6:59:b6:40:ae:31:8c:ea: 55:d3:68:f2:74:40:d6:6b:2a:b6:28:2a:e2:d3:25: 13:ca:eb:da:e0:e3:d2:ab:aa:9a:27:2c:7f:ad:4d: 6f:a6:d9:68:bf:0b:ad:6c:f2:05:ba:e8:92:78:6f: 15:e3:7b:d8:af:5d:1e:1e:a3:70:7c:c9:99:fe:9a: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:11:49:13:0A:0E:5D:2E:F3:F4:88:A4:EC:7E:D0:18:D2:D1:F3:3D X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fb:51:c3:8d:d4:57:53:0e:d4:7e:47:15:81:fb:d0:07:73: 3e:8f:fd:9a:04:72:89:20:07:a8:86:a5:9e:dd:67:43:97:dd: 04:5c:51:0e:90:37:cf:0a:0e:ac:f2:74:8b:8c:a2:fd:c2:c4: ec:bb:9a:6f:bd:a4:e5:e1:02:5f:56:22:1e:fb:92:4b:9d:e5: 2f:11:e0:19:c6:97:1d:99:04:04:dd:d5:39:4a:23:28:5d:91: de:2c:d4:67:c4:39:0a:f9:1c:64:ab:f3:71:0f:8f:6b:fb:30: fe:b0:04:20:bd:1d:ab:a9:0e:7e:a0:eb:70:89:8d:fd:80:95: 39:54:a8:1d:b4:bd:c9:b1:e1:c5:c0:99:fa:80:40:c7:96:c5: c0:fd:b8:a1:08:15:93:7d:ba:6d:49:61:be:c3:0c:6c:67:d2: 2d:9c:9b:49:26:c9:d0:aa:8f:7b:4f:07:9c:46:17:87:56:13: ba:72:93:30:82:de:ef:a3:16:6a:9a:6a:10:a3:b5:d2:f3:33: bd:20:fb:d3:44:35:2a:65:8c:39:a4:b0:56:45:cd:45:8d:cb: 25:5e:72:42:97:4e:0a:89:a7:cf:07:19:2f:ec:97:03:dd:50: 42:b0:a0:e9:bf:aa:0f:d6:a5:95:a4:32:ce:10:ff:9a:4c:9d: 8d:85:14:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NThGRjExMC8GA1UEBRMoRjI0RjE0NzE3MjNBNjRFNEQ1NzBEQkIwRDQ0QzgyNDMw NTQyNjI2NjAeFw0yNjAzMjkwODExNDJaFw0yNjA0MDUwODExNDJaMBgxFjAUBgNV BAMTDTY5YzhkZWJmLTQzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+kihvdk/+RDgGa5JGGtNYmWOpRcdL+VGPnclWn5LaFMstqvJlx/5HqRQs9A8o z9snjYM710AEF9SouMWOKFmhkZch1LHvBDTkCVqQy9HCKQtn30dpnDaQPmG7IX8/ fNjYnkFgN0MT3wNArhFkxWa87YyM2XArMw5O/QPNGa00RgC2LBrUYQoPuEcykRo5 Y4RD1ZJVFrsOjD0cqJigI3ZQ27rSTfF4BFK9peOMa45G193w2JTtzAlcjxm2WbZA rjGM6lXTaPJ0QNZrKrYoKuLTJRPK69rg49KrqponLH+tTW+m2Wi/C61s8gW66JJ4 bxXje9ivXR4eo3B8yZn+mp9LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6RFJEwoO XS7z9Iik7H7QGNLR8z0wHwYDVR0jBBgwFoAU8k8UcXI6ZOTVcNuw1EyCQwVCYmYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1OEZGLzRFM0NCNkMwRDcx QjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1lt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGs4VWNYSTZaT1RWY051dzFFeUNRd1ZDWW1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 OEZGLzRFM0NCNkMwRDcxQjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9U VmNOdXcxRXlDUXdWQ1ltWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7+1HDjdRXUw7UfkcVgfvQB3M+j/2aBHKJIAeohqWe3WdDl90EXFEOkDfPCg6s 8nSLjKL9wsTsu5pvvaTl4QJfViIe+5JLneUvEeAZxpcdmQQE3dU5SiMoXZHeLNRn xDkK+Rxkq/NxD49r+zD+sAQgvR2rqQ5+oOtwiY39gJU5VKgdtL3JseHFwJn6gEDH lsXA/bihCBWTfbptSWG+wwxsZ9ItnJtJJsnQqo97TwecRheHVhO6cpMwgt7voxZq mmoQo7XS8zO9IPvTRDUqZYw5pLBWRc1FjcslXnJCl04KiafPBxkv7JcD3VBCsKDp v6oP1qWVpDLOEP+aTJ2NhRQU -----END CERTIFICATE-----Generated at Mon Mar 30 15:38:08 2026 by rpki-client