$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: a1ftpeuebmcnKYAmh7UsrEnSyHI/0zfsrQss+TOvTqM= Subject key identifier: 64:92:10:D6:82:68:8A:C3:2C:90:6A:69:7C:F7:91:A3:4D:41:FA:CF Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 0298 Signing time: Sun 29 Mar 2026 01:28:55 +0000 Manifest this update: Sun 29 Mar 2026 01:28:54 +0000 Manifest next update: Sun 05 Apr 2026 01:28:54 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: EvzkhxF0B/ambKueQ32KgT8pJbqqgy6yfhhdEYX0d/8=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: GzxKXa3buEq11SyhBYB0QOC/CAu38GX6nYU4rsrNTsE=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: CYGWWz/nixHL5zlXfnZLMHoHJguF5UwXiTUzH6J+3lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 01:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Validity Not Before: Mar 29 01:28:54 2026 GMT Not After : Apr 5 01:28:54 2026 GMT Subject: CN=69c88057-0f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:52:06:7d:6f:8d:a4:67:ee:ae:7f:e5:83: 9e:5d:5d:e2:7a:88:f5:53:76:8d:5e:2f:00:05:15: f9:03:82:3a:44:e6:43:47:98:20:69:be:45:5c:9c: 97:07:b2:bc:29:09:5e:f3:dd:81:70:a2:0c:9e:1a: 09:56:e8:d8:21:76:3e:e5:04:08:84:6c:d3:ed:d4: a7:19:45:b6:01:d9:ca:af:02:e4:c5:8d:0e:e4:84: 3d:d1:bb:f5:50:14:ff:74:d9:a6:a4:d2:44:6b:51: 97:40:ee:4e:f3:20:89:c9:71:f3:fc:bb:f4:52:1d: 5f:6c:8a:1e:69:4a:4b:1c:1d:e5:70:3a:39:70:af: 1a:c6:b7:26:03:c8:ec:4c:41:a3:ff:d9:f1:7e:6d: e4:f9:15:f3:bb:e5:08:28:18:7e:f7:1a:3f:fc:1f: f0:51:0f:5b:b0:c7:7b:fe:83:c4:fd:8c:9d:de:fb: ab:ac:eb:c7:76:e5:c9:1c:5e:17:be:bd:1e:64:b9: d5:cd:24:ab:02:d9:87:f3:e7:7c:83:4a:29:d5:34: 11:ae:8f:2f:b6:f5:52:92:ba:ae:1b:19:cd:05:cc: e2:43:e2:2d:6e:6e:1e:08:8a:1d:53:e8:cd:90:bd: 9f:af:fb:f2:a9:7a:30:1b:d8:ea:60:3c:79:e4:c8: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:92:10:D6:82:68:8A:C3:2C:90:6A:69:7C:F7:91:A3:4D:41:FA:CF X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:1c:20:5b:dc:10:5b:ab:62:6f:4c:bb:2e:af:62:3a:8e:43: 05:18:4b:ca:0e:db:d1:54:56:d9:5d:12:fa:44:02:6d:73:e5: c6:65:1c:b0:83:a6:c0:71:11:0c:ed:a0:8f:af:7a:c1:31:c2: e7:ae:cf:7e:80:3d:0d:dc:58:d9:53:f6:24:95:df:4e:a6:38: 8f:85:a2:d2:f0:6d:7e:1f:ba:bc:88:6f:60:32:a4:bb:1c:83: 5d:ca:fd:e3:53:ff:5f:d8:ed:57:28:6f:49:eb:3d:c6:c3:fa: c4:de:47:f3:2a:02:c9:4b:cd:9a:57:10:09:99:3f:0c:9f:2c: b8:fc:ad:43:a5:ad:fa:41:2d:9f:b1:85:c5:78:ad:62:b3:5f: 61:d3:8b:62:56:17:e4:a2:2b:90:db:6f:fb:cc:02:e6:cf:08: d6:14:33:27:c3:30:c9:1c:1c:42:97:33:14:dc:d8:10:ef:ab: eb:f6:a9:15:62:3d:ec:77:ac:6a:8e:4a:0d:a0:43:fe:74:71: 47:51:3e:3e:16:22:14:f5:25:1a:49:be:35:2e:9e:e5:01:fa: 10:f1:0c:8b:8f:d4:95:e2:5d:29:1f:f0:73:2c:f8:d2:df:28: 13:0f:2b:7c:c3:bf:1d:cf:d9:d6:99:b4:7d:22:ec:8c:a6:fa: 93:24:89:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjYwMzI5MDEyODU0WhcNMjYwNDA1MDEyODU0WjAYMRYwFAYD VQQDEw02OWM4ODA1Ny0wZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbZSBn1vjaRn7q5/5YOeXV3ieoj1U3aNXi8ABRX5A4I6ROZDR5ggab5FXJyX B7K8KQle892BcKIMnhoJVujYIXY+5QQIhGzT7dSnGUW2AdnKrwLkxY0O5IQ90bv1 UBT/dNmmpNJEa1GXQO5O8yCJyXHz/Lv0Uh1fbIoeaUpLHB3lcDo5cK8axrcmA8js TEGj/9nxfm3k+RXzu+UIKBh+9xo//B/wUQ9bsMd7/oPE/Yyd3vurrOvHduXJHF4X vr0eZLnVzSSrAtmH8+d8g0op1TQRro8vtvVSkrquGxnNBcziQ+Itbm4eCIodU+jN kL2fr/vyqXowG9jqYDx55MhhvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSSENaC aIrDLJBqaXz3kaNNQfrPMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsRwgW9wQW6tib0y7Lq9iOo5DBRhLyg7b0VRW2V0S+kQCbXPlxmUcsIOmwHER DO2gj696wTHC567PfoA9DdxY2VP2JJXfTqY4j4Wi0vBtfh+6vIhvYDKkuxyDXcr9 41P/X9jtVyhvSes9xsP6xN5H8yoCyUvNmlcQCZk/DJ8suPytQ6Wt+kEtn7GFxXit YrNfYdOLYlYX5KIrkNtv+8wC5s8I1hQzJ8MwyRwcQpczFNzYEO+r6/apFWI97Hes ao5KDaBD/nRxR1E+PhYiFPUlGkm+NS6e5QH6EPEMi4/UleJdKR/wcyz40t8oEw8r fMO/Hc/Z1pm0fSLsjKb6kySJBw== -----END CERTIFICATE-----Generated at Mon Mar 30 17:28:55 2026 by rpki-client