$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: 9Lywzvibyz+WpCQfYc4+SmrvV0oWHKT/tbopHw8btOE= Subject key identifier: 96:7A:5E:CB:86:75:4C:AE:7F:01:06:7F:FE:9A:D1:87:47:22:C2:11 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 061C Signing time: Tue 10 Mar 2026 22:25:19 +0000 Manifest this update: Tue 10 Mar 2026 22:25:18 +0000 Manifest next update: Tue 17 Mar 2026 22:25:18 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: 5wrE+SjZLy5KfgWCIeb1xAVw2rWc2er1I7ImrUYi88Y=) 2: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=) 3: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 22:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Mar 10 22:25:18 2026 GMT Not After : Mar 17 22:25:18 2026 GMT Subject: CN=69b09a4e-76d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:0c:46:b6:d0:57:f8:7c:1c:8d:b5:cd:d2: 26:38:7c:93:fa:94:1a:28:ab:25:12:34:27:2d:b9: 2d:02:cf:43:ce:f7:66:84:57:d5:70:8a:82:4a:68: 51:79:4b:d5:46:b2:7d:76:6a:49:df:fe:a1:26:0c: 44:39:f6:98:ee:97:ae:18:99:3d:88:40:7a:7d:ba: a1:38:7b:c4:cb:ed:79:0f:07:6d:69:0e:94:8d:a4: f4:e8:8a:3e:86:44:1d:bf:cc:ba:98:84:16:a0:3b: 3b:0a:ab:d5:af:28:a4:33:3d:6d:75:77:0e:11:d2: 1e:d9:5c:ba:af:82:49:41:ca:e3:45:01:ea:06:bc: bc:8b:e8:41:b3:ee:9c:17:0a:ec:2f:02:a4:dc:fa: 34:7e:3d:38:e9:49:58:08:18:95:ca:89:bc:0e:6f: b6:ca:95:0e:54:c3:c0:93:39:45:09:6b:2e:51:9b: 7b:eb:49:79:73:bf:0f:88:6c:a9:e3:e2:12:7d:6d: 4c:0a:2e:a1:28:a6:2e:27:0f:98:f7:69:20:a5:f2: e1:f6:53:ff:82:53:fd:1e:4f:ca:6d:a1:6c:2b:86: 48:6c:17:36:6e:50:cf:04:5c:06:9d:de:4c:d0:14: fa:cc:eb:81:48:d6:63:2d:20:90:24:ba:2b:b2:1a: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7A:5E:CB:86:75:4C:AE:7F:01:06:7F:FE:9A:D1:87:47:22:C2:11 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:93:84:f5:12:80:dd:24:4a:94:be:5c:6b:4c:3a:cc:34:13: e6:81:7f:e2:34:a1:65:63:1e:ba:10:c8:fd:45:a7:aa:c0:49: 8b:53:b7:b1:d6:40:fb:fd:af:bb:cf:50:a4:f3:a5:34:01:f4: 63:a1:c9:f4:ba:26:34:8a:8b:07:3d:fe:ac:e8:c0:31:c4:b0: b5:02:9d:48:17:29:26:e8:65:51:d8:14:c1:a8:00:0d:3b:49: ce:b2:05:12:14:5f:dc:55:03:00:f7:41:5a:92:5a:be:82:60: 29:ce:c5:74:07:e8:ec:9d:ef:5b:19:e6:65:36:f9:75:0b:7b: aa:23:0d:e1:0a:c8:2b:dd:d5:be:e0:bf:3b:24:60:c0:7a:87: da:9e:4d:de:ec:9e:80:51:97:eb:a1:c0:ee:94:86:96:94:1e: 4a:52:c5:af:4b:2e:07:24:dc:50:19:e7:d9:dd:f5:fd:63:21: c5:3b:c5:2b:ee:12:f8:01:97:58:6e:05:41:dd:b9:e1:39:d3: 04:62:5a:b9:06:47:bb:2f:f6:af:24:8a:56:f6:8e:64:2d:56: 3b:cb:64:29:24:e4:a8:77:80:3d:d6:4f:33:44:8e:c1:43:b1: 85:2e:c6:f1:eb:0d:de:ab:0e:8d:85:23:83:91:4f:cc:6a:32: e4:6d:70:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYwMzEwMjIyNTE4WhcNMjYwMzE3MjIyNTE4WjAYMRYwFAYD VQQDEw02OWIwOWE0ZS03NmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjiIMRrbQV/h8HI21zdImOHyT+pQaKKslEjQnLbktAs9DzvdmhFfVcIqCSmhR eUvVRrJ9dmpJ3/6hJgxEOfaY7peuGJk9iEB6fbqhOHvEy+15DwdtaQ6UjaT06Io+ hkQdv8y6mIQWoDs7CqvVryikMz1tdXcOEdIe2Vy6r4JJQcrjRQHqBry8i+hBs+6c FwrsLwKk3Po0fj046UlYCBiVyom8Dm+2ypUOVMPAkzlFCWsuUZt760l5c78PiGyp 4+ISfW1MCi6hKKYuJw+Y92kgpfLh9lP/glP9Hk/KbaFsK4ZIbBc2blDPBFwGnd5M 0BT6zOuBSNZjLSCQJLorshrCEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZ6XsuG dUyufwEGf/6a0YdHIsIRMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh5OE9RKA3SRKlL5ca0w6zDQT5oF/4jShZWMeuhDI/UWnqsBJi1O3sdZA+/2v u89QpPOlNAH0Y6HJ9LomNIqLBz3+rOjAMcSwtQKdSBcpJuhlUdgUwagADTtJzrIF EhRf3FUDAPdBWpJavoJgKc7FdAfo7J3vWxnmZTb5dQt7qiMN4QrIK93VvuC/OyRg wHqH2p5N3uyegFGX66HA7pSGlpQeSlLFr0suByTcUBnn2d31/WMhxTvFK+4S+AGX WG4FQd254TnTBGJauQZHuy/2rySKVvaOZC1WO8tkKSTkqHeAPdZPM0SOwUOxhS7G 8esN3qsOjYUjg5FPzGoy5G1wwg== -----END CERTIFICATE-----Generated at Fri Mar 13 00:17:41 2026 by rpki-client