$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: CCLwvJW0VgELjQqk0Ja57pA43B0ih/KD6BiN6Azl0wA= Subject key identifier: C7:AB:79:25:8F:70:45:AE:E3:7E:88:30:B1:6D:4D:3C:D6:24:56:DE Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 01B8 Signing time: Sun 29 Mar 2026 03:36:13 +0000 Manifest this update: Sun 29 Mar 2026 03:36:12 +0000 Manifest next update: Sun 05 Apr 2026 03:36:12 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: yb+ZZ5Ij0m4HjlbBCKTYL0gFrnE420U/iYAi0wxjl40=) 2: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: p9m+Ky6KPaxoCxqhurBlkPRkCfywo+5r7qphI33Ipdo=) 3: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: yzwQF5BWuhV75DE3qzozKQNyER1bQqJr/dSB8bkYg7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Mar 29 03:36:12 2026 GMT Not After : Apr 5 03:36:12 2026 GMT Subject: CN=69c89e2d-07b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ef:8d:c5:84:93:2b:3c:5b:0f:e3:a0:44:74: 86:8e:21:a2:f1:20:73:0c:fc:65:e6:77:c7:fe:56: 2c:0c:c0:70:21:fc:a2:ca:56:a9:ed:81:5b:aa:fd: a1:cd:0a:69:da:98:9c:32:e3:27:74:fc:02:3f:fb: dd:51:cb:da:33:cd:30:22:4e:70:d3:5c:44:a7:a9: f6:75:4e:87:05:b7:ef:ec:2a:35:54:3b:75:b6:43: 55:bb:03:dd:b0:d0:0b:7e:f5:77:bb:d7:e1:d9:b4: ee:5b:9e:c0:75:e0:a5:5d:82:60:29:76:e9:df:d0: 94:45:31:af:77:3a:eb:fb:5a:23:b3:5c:00:92:0b: c6:29:c7:c8:c4:c0:9e:6d:31:3f:fd:87:4c:4e:97: 32:d1:1f:2e:ec:46:94:7c:d5:04:2e:bc:a0:23:16: 6e:37:36:9f:b1:19:36:a4:d4:54:8b:29:54:ae:d0: e0:b0:4d:23:c7:6e:17:7a:49:b3:81:a9:1d:cc:ec: 9f:11:f7:31:4e:5b:f2:53:d6:c2:ff:a6:40:04:ad: 07:97:2d:5f:51:9e:39:2f:86:c3:55:07:fa:e8:ab: 8b:36:ea:e8:26:12:1b:bd:3c:7d:66:08:8c:89:b6: ef:64:df:5f:6f:06:e4:1d:85:5f:7a:33:c5:39:e9: 6b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AB:79:25:8F:70:45:AE:E3:7E:88:30:B1:6D:4D:3C:D6:24:56:DE X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fd:74:40:e0:bd:93:e3:22:f8:56:41:ae:59:2f:a8:00:4e: 38:e5:6f:43:49:5c:53:2f:fb:2a:7b:33:ee:ce:97:63:20:94: c9:83:2b:e3:10:25:4f:de:71:7d:91:06:fb:b2:9f:c1:3d:7c: 81:96:ed:54:75:c5:bb:bc:58:79:a2:5c:f3:f0:9f:15:5f:2d: a4:9b:7f:5e:28:95:e2:8f:57:7c:26:72:08:f5:5c:7a:b0:2f: 89:6f:b0:f8:fc:3b:64:b6:cd:cd:e9:ad:b3:84:a6:7c:ef:6a: 3c:64:b7:07:4f:d0:9e:e5:b7:7d:fb:df:49:e9:46:1b:76:9b: 2c:f8:df:d3:19:b4:e1:c2:d3:76:ea:38:cf:ba:dc:ef:87:7b: b2:fd:11:d6:46:12:e6:62:92:e0:13:e9:d5:5e:87:37:6a:da: 7b:aa:78:25:d3:6d:9b:c7:30:a1:e9:cf:72:ca:16:52:24:fb: 39:c9:ff:cc:75:05:9e:ba:0a:92:41:df:2f:f7:30:fc:ec:9d: 20:78:f0:ba:4c:92:3e:53:a4:53:7c:09:e7:1d:c2:96:64:84: 18:ef:45:cf:da:79:88:c9:7c:14:e3:a3:ce:5e:79:89:19:45: 8b:ef:67:df:b2:2e:ae:4b:6e:45:6d:81:52:32:de:ff:93:e9: 6f:6b:74:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjYwMzI5MDMzNjEyWhcNMjYwNDA1MDMzNjEyWjAYMRYwFAYD VQQDEw02OWM4OWUyZC0wN2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6u+NxYSTKzxbD+OgRHSGjiGi8SBzDPxl5nfH/lYsDMBwIfyiylap7YFbqv2h zQpp2picMuMndPwCP/vdUcvaM80wIk5w01xEp6n2dU6HBbfv7Co1VDt1tkNVuwPd sNALfvV3u9fh2bTuW57AdeClXYJgKXbp39CURTGvdzrr+1ojs1wAkgvGKcfIxMCe bTE//YdMTpcy0R8u7EaUfNUELrygIxZuNzafsRk2pNRUiylUrtDgsE0jx24Xekmz gakdzOyfEfcxTlvyU9bC/6ZABK0Hly1fUZ45L4bDVQf66KuLNuroJhIbvTx9ZgiM ibbvZN9fbwbkHYVfejPFOelrPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMereSWP cEWu436IMLFtTTzWJFbeMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAif10QOC9k+Mi+FZBrlkvqABOOOVvQ0lcUy/7Knsz7s6XYyCUyYMr4xAlT95x fZEG+7KfwT18gZbtVHXFu7xYeaJc8/CfFV8tpJt/XiiV4o9XfCZyCPVcerAviW+w +Pw7ZLbNzemts4SmfO9qPGS3B0/QnuW3ffvfSelGG3abLPjf0xm04cLTduo4z7rc 74d7sv0R1kYS5mKS4BPp1V6HN2rae6p4JdNtm8cwoenPcsoWUiT7Ocn/zHUFnroK kkHfL/cw/OydIHjwukySPlOkU3wJ5x3ClmSEGO9Fz9p5iMl8FOOjzl55iRlFi+9n 37IurktuRW2BUjLe/5Ppb2t06g== -----END CERTIFICATE-----Generated at Sun Mar 29 20:05:30 2026 by rpki-client