$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft File: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft (raw, json) Hash identifier: mgeg7Y96DXRqIAvoWAR6Pd5EwNoreDuXFDFFP8sfPi4= Subject key identifier: 31:A8:BE:9C:E9:BB:1C:17:3D:67:F3:EC:1A:A9:6C:F3:55:3C:51:CA Authority key identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50 Certificate issuer: /CN=A91E855B/serialNumber=F232408485CC1A4038BDB31BFAF3261540310950 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft Manifest number: 1E Signing time: Tue 03 Mar 2026 08:33:07 +0000 Manifest this update: Tue 03 Mar 2026 08:33:07 +0000 Manifest next update: Tue 10 Mar 2026 08:33:07 +0000 Files and hashes: 1: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl (hash: tW3/z4m/HkSXyQBR6onoNl9KegvhAM/qxif1zJnEgJI=) 2: 2D933FE8EF6711F0AD461381586F56BC.roa (hash: WqJt9JtnWtmIMdrj3ZxaQ9KA33C7zxy15e8t9pWBnaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E855B, serialNumber=F232408485CC1A4038BDB31BFAF3261540310950 Validity Not Before: Mar 3 08:33:07 2026 GMT Not After : Mar 10 08:33:07 2026 GMT Subject: CN=69a69cc3-39d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:a2:a3:e3:73:e0:75:a1:8c:5c:89:b5:04: 55:da:55:a6:55:21:bb:6f:43:86:b5:b4:8b:96:0e: bf:84:ac:60:eb:43:54:f8:4a:83:15:46:5a:8c:ba: 18:46:d2:19:01:d6:84:15:28:d4:19:43:25:71:5c: 06:ce:bc:e7:b4:25:f4:3d:2e:07:9e:d5:34:15:b7: d4:81:ef:c3:85:ef:5e:57:da:ea:9a:df:da:69:93: 1e:7e:ec:2d:5e:8c:ab:16:35:19:63:38:5d:7e:67: dd:ca:c6:37:53:c6:51:a0:46:73:fd:23:55:c2:b4: 32:5c:21:d9:b5:a0:7d:5c:50:77:d0:82:99:c0:46: 6d:eb:a7:2a:b5:bc:ef:a8:1b:ad:fd:3c:6c:9a:a1: 8b:4d:ab:8b:f8:fe:06:69:d2:05:d9:6f:6e:45:54: ec:4b:23:7c:11:93:50:57:a3:ac:45:f9:fd:df:39: 46:bd:20:23:63:84:a8:d8:0b:4a:e7:ca:a4:18:5e: b9:73:dc:ad:df:26:0c:55:76:9a:72:8e:d5:2e:4a: f3:ff:54:4c:e8:b0:30:5e:f1:a8:1d:13:95:ea:0f: 46:da:d1:b9:02:bc:88:aa:58:00:2f:10:6c:ef:7e: 16:6d:25:fc:aa:98:b1:f5:2f:b9:59:de:ff:92:82: 17:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A8:BE:9C:E9:BB:1C:17:3D:67:F3:EC:1A:A9:6C:F3:55:3C:51:CA X509v3 Authority Key Identifier: keyid:F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5d:12:80:fd:dd:16:0f:6d:39:57:65:bd:fe:8e:f8:bd:3f: f8:30:5e:69:54:39:98:95:07:a9:af:c9:ec:06:bc:4a:e9:76: 0c:25:b5:83:fd:87:f0:04:e4:f4:fb:c9:b1:15:a7:e6:44:dc: 78:35:5a:69:3d:c1:5b:8a:c8:24:2f:98:70:ff:99:1c:ab:4e: fc:76:e4:e3:58:6f:fc:b5:fb:c8:42:5f:9d:26:d0:5c:13:c6: 69:2c:09:a6:40:44:53:9b:b8:d4:67:7a:d8:0d:61:f0:dd:23: 32:cd:41:00:e2:83:ad:ba:fa:91:3d:bc:9b:17:9b:b4:71:c0: 0d:c9:45:05:05:c8:c1:97:fb:2b:ba:b6:ab:16:45:fe:81:46: d7:02:00:da:bd:ff:b9:31:93:e3:ec:55:7c:e7:3e:14:6e:8e: 08:24:79:7b:95:ec:d0:1d:8a:39:87:fb:96:df:84:5b:65:77: dc:65:65:78:33:ad:bd:20:31:3d:d7:20:eb:8d:d7:82:05:a0: 57:ef:5b:04:0a:cf:ef:2b:63:8f:bb:0f:1d:ff:5b:10:28:1c: b7:d9:0c:15:59:6c:a0:f2:e7:53:ad:e8:a2:8a:64:31:5d:62: d0:f7:5b:7b:01:50:46:59:7d:d9:65:b7:de:30:06:25:ed:69: 7a:69:23:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODU1QjExMC8GA1UEBRMoRjIzMjQwODQ4NUNDMUE0MDM4QkRCMzFCRkFGMzI2MTU0 MDMxMDk1MDAeFw0yNjAzMDMwODMzMDdaFw0yNjAzMTAwODMzMDdaMBgxFjAUBgNV BAMTDTY5YTY5Y2MzLTM5ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVzaKj43PgdaGMXIm1BFXaVaZVIbtvQ4a1tIuWDr+ErGDrQ1T4SoMVRlqMuhhG 0hkB1oQVKNQZQyVxXAbOvOe0JfQ9Lgee1TQVt9SB78OF715X2uqa39ppkx5+7C1e jKsWNRljOF1+Z93KxjdTxlGgRnP9I1XCtDJcIdm1oH1cUHfQgpnARm3rpyq1vO+o G639PGyaoYtNq4v4/gZp0gXZb25FVOxLI3wRk1BXo6xF+f3fOUa9ICNjhKjYC0rn yqQYXrlz3K3fJgxVdppyjtUuSvP/VEzosDBe8agdE5XqD0ba0bkCvIiqWAAvEGzv fhZtJfyqmLH1L7lZ3v+SghefAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMai+nOm7 HBc9Z/PsGqls81U8UcowHwYDVR0jBBgwFoAU8jJAhIXMGkA4vbMb+vMmFUAxCVAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NTVCLzY4MDVDMTI0RUY2 NjExRjA4MzNEN0IyNjU4NkY1NkJDLzhqSkFoSVhNR2tBNHZiTWItdk1tRlVBeENW QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGpKQWhJWE1Ha0E0dmJNYi12TW1GVUF4Q1ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NTVCLzY4MDVDMTI0RUY2NjExRjA4MzNEN0IyNjU4NkY1NkJDLzhqSkFoSVhNR2tB NHZiTWItdk1tRlVBeENWQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAdXRKA/d0WD205V2W9/o74vT/4MF5pVDmYlQepr8nsBrxK6XYMJbWD/YfwBOT0 +8mxFafmRNx4NVppPcFbisgkL5hw/5kcq078duTjWG/8tfvIQl+dJtBcE8ZpLAmm QERTm7jUZ3rYDWHw3SMyzUEA4oOtuvqRPbybF5u0ccANyUUFBcjBl/srurarFkX+ gUbXAgDavf+5MZPj7FV85z4Ubo4IJHl7lezQHYo5h/uW34RbZXfcZWV4M629IDE9 1yDrjdeCBaBX71sECs/vK2OPuw8d/1sQKBy32QwVWWyg8udTreiiimQxXWLQ91t7 AVBGWX3ZZbfeMAYl7Wl6aSOb -----END CERTIFICATE-----Generated at Wed Mar 4 08:20:03 2026 by rpki-client