$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json) Hash identifier: Hzr2nRetJOXIPU1epO3KWbgzDS2jwslVRBKNvl2Fjk8= Subject key identifier: 78:88:FC:B2:35:0F:C7:B4:7A:C6:3E:BE:7C:D4:8D:83:A5:D4:79:ED Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft Manifest number: 23 Signing time: Fri 13 Mar 2026 07:47:07 +0000 Manifest this update: Fri 13 Mar 2026 07:47:07 +0000 Manifest next update: Fri 20 Mar 2026 07:47:07 +0000 Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: DZ/zcTwPZE90HIvm1SHi7+qs8+G1Qkpc4HRBIHfprZI=) 2: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=) 3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 07:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Validity Not Before: Mar 13 07:47:07 2026 GMT Not After : Mar 20 07:47:07 2026 GMT Subject: CN=69b3c0fb-f590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:d8:23:dc:7b:c1:40:56:f0:e0:7d:7a:04: 50:29:4b:d2:ac:37:96:13:6e:33:b5:cb:8d:af:69: fb:8e:3a:a6:9a:cd:98:86:8c:3f:da:20:e6:56:6f: 25:8d:06:90:62:3d:7f:72:03:98:8b:ee:85:f3:64: c6:bc:9d:b1:75:a8:3c:56:89:e3:44:d1:5f:82:a7: a4:c0:ec:55:e6:e5:57:d7:4c:26:90:46:23:7f:d1: be:b2:92:13:74:62:4a:ea:76:7c:a6:6d:b2:61:9b: e1:4c:d7:29:2f:6b:eb:fb:34:ad:c1:cd:29:8d:f8: 83:c0:0d:41:11:d7:9c:17:36:7d:f2:83:bb:8c:6e: cc:5d:b0:db:7d:3d:b0:8a:6a:fa:ed:ac:50:07:a8: 80:3e:ed:94:f6:6a:8b:64:07:5c:93:3e:8d:13:10: cf:21:58:7a:d7:36:61:80:40:71:29:bc:a2:1b:a0: ef:66:8f:cb:e2:dd:ca:03:82:b2:ff:2b:b4:9a:31: 37:17:4e:88:4a:72:df:77:1d:89:d3:b2:02:d4:55: ff:7a:7d:01:e8:52:8b:9e:b2:e1:cf:dc:16:11:76: 4c:9e:a3:08:da:3b:a8:89:54:89:0f:95:2c:18:a5: 4b:b3:c8:2c:20:54:55:0c:30:3b:15:ed:dc:0a:93: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:88:FC:B2:35:0F:C7:B4:7A:C6:3E:BE:7C:D4:8D:83:A5:D4:79:ED X509v3 Authority Key Identifier: keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6d:82:72:4c:a6:3b:02:5c:36:c9:a4:5e:e2:d2:a2:d7:2a: 1b:86:27:81:ef:de:46:82:7f:3c:c4:a1:73:d1:4c:ed:87:37: b5:bb:46:c1:6f:d4:d8:3b:28:43:94:a5:a7:16:e3:09:e8:21: 79:de:87:a5:0b:c3:37:f2:e3:90:d2:d7:21:ac:da:a9:06:93: c7:78:22:80:8f:6c:01:d9:16:51:9e:4f:c1:e7:2d:88:72:8c: d6:b7:7d:55:2a:9a:d0:1a:08:b4:b8:3a:95:d9:75:c4:7c:f5: e1:90:d9:eb:31:1f:1e:e5:08:ea:fa:d3:c8:27:60:34:0d:19: 0f:f7:55:ce:53:fd:35:7d:37:6c:e8:4f:e0:1c:ee:18:5b:a5: ef:30:61:1f:7e:f1:a6:42:02:f9:e4:36:67:e0:42:19:97:75: 39:21:57:2a:f9:1e:8c:3d:7f:56:16:14:76:e8:14:75:ae:50: 66:0c:a3:c6:82:52:fc:8e:1c:7c:c4:ff:ed:f2:a4:bf:ac:b6: f5:4e:4f:35:c6:a9:e1:a7:11:99:91:8e:0c:47:4b:54:83:d9: d4:ed:b3:4a:80:e5:ee:35:67:f1:8c:e9:e4:1d:f8:b2:5d:4c: f3:6e:4a:0c:ea:1c:36:91:f7:82:27:12:38:ae:94:4b:34:a8: b8:6d:16:7f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoRjBENzExMjBBOTJBODU4REI3Mjk0OTZGQ0NCRjE4MjVD OUYwM0M2MzAeFw0yNjAzMTMwNzQ3MDdaFw0yNjAzMjAwNzQ3MDdaMBgxFjAUBgNV BAMTDTY5YjNjMGZiLWY1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0ttgj3HvBQFbw4H16BFApS9KsN5YTbjO1y42vafuOOqaazZiGjD/aIOZWbyWN BpBiPX9yA5iL7oXzZMa8nbF1qDxWieNE0V+Cp6TA7FXm5VfXTCaQRiN/0b6ykhN0 YkrqdnymbbJhm+FM1ykva+v7NK3BzSmN+IPADUER15wXNn3yg7uMbsxdsNt9PbCK avrtrFAHqIA+7ZT2aotkB1yTPo0TEM8hWHrXNmGAQHEpvKIboO9mj8vi3coDgrL/ K7SaMTcXTohKct93HYnTsgLUVf96fQHoUouesuHP3BYRdkyeowjaO6iJVIkPlSwY pUuzyCwgVFUMMDsV7dwKk9vTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeIj8sjUP x7R6xj6+fNSNg6XUee0wHwYDVR0jBBgwFoAU8NcRIKkqhY23KUlvzL8YJcnwPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzQxRkREMzg4Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFkyM0tVbHZ6TDhZSmNud1BH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOE5jUklLa3FoWTIzS1VsdnpMOFlKY253UEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzQxRkREMzg4Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFky M0tVbHZ6TDhZSmNud1BHTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdbYJyTKY7Alw2yaRe4tKi1yobhieB795Ggn88xKFz0Uzthze1u0bBb9TYOyhD lKWnFuMJ6CF53oelC8M38uOQ0tchrNqpBpPHeCKAj2wB2RZRnk/B5y2IcozWt31V KprQGgi0uDqV2XXEfPXhkNnrMR8e5Qjq+tPIJ2A0DRkP91XOU/01fTds6E/gHO4Y W6XvMGEffvGmQgL55DZn4EIZl3U5IVcq+R6MPX9WFhR26BR1rlBmDKPGglL8jhx8 xP/t8qS/rLb1Tk81xqnhpxGZkY4MR0tUg9nU7bNKgOXuNWfxjOnkHfiyXUzzbkoM 6hw2kfeCJxI4rpRLNKi4bRZ/ -----END CERTIFICATE-----Generated at Sat Mar 14 07:37:25 2026 by rpki-client