$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: UtWC5P5NOV3PiqASKI+YO/fF2ZtF+SeVMxRS8M7ePdA= Subject key identifier: 85:02:1D:03:14:3E:C3:0A:A0:C2:8A:43:04:68:4E:B7:3C:72:3F:D6 Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 0818 Signing time: Sat 04 Apr 2026 20:52:23 +0000 Manifest this update: Sat 04 Apr 2026 20:52:23 +0000 Manifest next update: Sat 11 Apr 2026 20:52:23 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: sDzyBFDzYyjxe4oG4jGBjLkucOVrj8TaoDUL5HzgMq0=) 2: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=) 3: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=) 4: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Apr 4 20:52:23 2026 GMT Not After : Apr 11 20:52:23 2026 GMT Subject: CN=69d17a07-0cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:0e:cf:8a:79:79:35:ae:9d:0d:7c:8d:68: d4:6f:7a:e6:c2:23:3e:ba:2a:e5:1a:4c:d4:82:4e: b3:4a:f2:33:83:2f:18:a5:0e:4c:ed:11:e2:ea:55: ee:cf:66:17:ec:3d:99:0f:0e:cb:7a:53:d9:38:86: 0f:e2:73:2e:d3:b7:f6:90:d9:a4:1b:ed:7e:cf:5d: f3:0a:fd:9f:59:bf:3f:99:23:1c:23:1b:7d:c2:63: 96:fc:cc:72:88:21:b6:5c:af:33:6c:f6:db:92:f4: 75:e0:7d:1d:c2:17:01:5e:21:a8:12:4e:70:b1:1d: 38:3d:26:60:35:3c:67:1e:16:4b:a9:c0:15:59:32: c7:58:f3:81:96:11:35:75:c3:3a:2f:49:47:ed:2c: 9e:43:f4:fe:a8:c9:4b:21:88:21:05:a3:cf:d4:7e: 9f:99:a3:1c:73:55:f4:d4:96:81:6c:39:b8:43:08: f5:83:13:4b:58:c1:67:b8:3b:e2:f6:05:95:c9:fc: 6d:32:e1:11:45:de:ca:bd:02:c2:79:08:9e:0b:89: 5c:b7:81:f0:91:b0:8a:c4:9e:37:26:9f:39:bf:9c: 3b:0b:e8:65:a8:3d:be:8b:a9:92:f2:e4:4c:1e:4f: 4f:7f:e3:ee:61:50:7e:7f:4b:7b:84:50:b5:76:0b: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:02:1D:03:14:3E:C3:0A:A0:C2:8A:43:04:68:4E:B7:3C:72:3F:D6 X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:62:3c:15:db:67:21:f3:a9:04:a2:d0:85:39:5d:ac:f9:37: 7d:bc:79:17:46:d0:47:7d:ce:a1:f7:8b:6f:50:9a:04:d9:85: 46:24:46:aa:0c:85:dd:48:bc:1f:ae:03:3c:db:27:60:44:44: 51:a4:6e:c5:ee:39:ea:7b:49:30:e6:7e:da:ea:54:1c:70:39: 6f:74:11:41:6f:4c:ec:19:a9:d4:41:64:52:f4:bb:5e:7a:31: 5b:db:0a:b4:e9:b3:48:3e:7c:cf:e5:fd:56:be:08:e7:f2:8f: 1b:60:87:74:8c:75:e8:ca:85:0d:9c:ad:13:03:ae:9f:db:57: 5f:b7:6b:fe:ae:dd:47:a6:b3:5f:9f:8e:9a:d4:ef:8c:1b:3f: a2:27:c9:6c:4f:53:b5:aa:f1:45:5e:85:8d:88:3c:05:c2:a4: 76:85:0d:b8:62:43:94:5c:16:73:4f:f8:bc:8f:45:6b:78:8f: 47:c7:c1:20:a2:0b:25:f6:42:41:77:5f:be:07:a4:04:c9:49: 25:70:a8:63:eb:d6:fb:0f:8d:55:94:c5:d9:f1:17:2e:65:74: 38:00:59:b2:8c:e1:1a:92:57:77:3d:b0:3a:9e:f7:af:79:fd: b4:8a:ad:52:ee:12:3d:ce:9f:32:95:3f:d5:32:90:ec:e3:54: f7:48:fb:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjYwNDA0MjA1MjIzWhcNMjYwNDExMjA1MjIzWjAYMRYwFAYD VQQDEw02OWQxN2EwNy0wY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTsOz4p5eTWunQ18jWjUb3rmwiM+uirlGkzUgk6zSvIzgy8YpQ5M7RHi6lXu z2YX7D2ZDw7LelPZOIYP4nMu07f2kNmkG+1+z13zCv2fWb8/mSMcIxt9wmOW/Mxy iCG2XK8zbPbbkvR14H0dwhcBXiGoEk5wsR04PSZgNTxnHhZLqcAVWTLHWPOBlhE1 dcM6L0lH7SyeQ/T+qMlLIYghBaPP1H6fmaMcc1X01JaBbDm4Qwj1gxNLWMFnuDvi 9gWVyfxtMuERRd7KvQLCeQieC4lct4HwkbCKxJ43Jp85v5w7C+hlqD2+i6mS8uRM Hk9Pf+PuYVB+f0t7hFC1dgsKowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUCHQMU PsMKoMKKQwRoTrc8cj/WMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOmI8FdtnIfOpBKLQhTldrPk3fbx5F0bQR33OofeLb1CaBNmFRiRGqgyF3Ui8 H64DPNsnYEREUaRuxe456ntJMOZ+2upUHHA5b3QRQW9M7Bmp1EFkUvS7XnoxW9sK tOmzSD58z+X9Vr4I5/KPG2CHdIx16MqFDZytEwOun9tXX7dr/q7dR6azX5+OmtTv jBs/oifJbE9TtarxRV6FjYg8BcKkdoUNuGJDlFwWc0/4vI9Fa3iPR8fBIKILJfZC QXdfvgekBMlJJXCoY+vW+w+NVZTF2fEXLmV0OABZsozhGpJXdz2wOp73r3n9tIqt Uu4SPc6fMpU/1TKQ7ONU90j7iQ== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:49 2026 by rpki-client