$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json) Hash identifier: Ipmdck6tn0QI+TG/Sjj8ZjiVjWfljEmtLEHVw3TM2ro= Subject key identifier: 9C:41:C4:26:51:48:16:29:5C:6F:85:45:F3:42:19:70:9F:7C:C4:48 Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft Manifest number: 0B5B Signing time: Sat 04 Apr 2026 22:14:31 +0000 Manifest this update: Sat 04 Apr 2026 22:14:30 +0000 Manifest next update: Sat 11 Apr 2026 22:14:30 +0000 Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: ctxAv/qUOBqo0XV71RNGcda5tUjbyJiU7PgsR98CqZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Validity Not Before: Apr 4 22:14:30 2026 GMT Not After : Apr 11 22:14:30 2026 GMT Subject: CN=69d18d47-d223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:d7:e1:9c:c1:32:72:61:5e:f7:1d:65:a4: f7:1a:cf:3a:7a:e4:67:f0:ff:59:34:13:91:05:25: bf:31:6c:0a:f0:03:01:ba:cf:78:2b:19:0d:47:05: e7:2c:88:51:e6:18:17:f5:57:c2:f1:80:8c:91:81: 24:d9:07:72:1b:33:25:4c:75:d0:ab:cc:fe:b0:4e: d3:40:f4:17:48:cb:1a:87:1c:b0:bf:30:76:6d:51: f7:94:be:55:8e:53:9b:5c:1c:19:54:63:02:30:00: e0:67:62:14:b9:fb:c4:d0:7f:26:54:08:ce:a4:10: 7a:df:b1:9b:3c:69:c5:74:8f:78:f7:58:a2:a2:b5: 98:ec:4c:e8:10:1f:68:04:d0:64:45:57:d6:cd:37: 9c:46:28:eb:7a:31:bb:8c:b2:ec:17:47:8d:15:94: 5b:b8:e6:1c:59:58:e1:41:96:70:86:fa:4e:52:20: d9:19:59:2e:c5:e0:d1:ad:db:de:95:1e:a0:6c:67: e0:a3:1d:a5:19:cb:22:75:8d:98:30:8b:35:1c:48: b5:f3:18:38:55:e9:29:27:bd:36:48:5a:56:5f:91: 84:04:2e:34:c1:ac:af:a0:8c:5d:05:fb:2e:ba:a3: 62:d8:84:a5:ea:b7:c8:61:c3:22:7b:d0:38:f6:c9: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:41:C4:26:51:48:16:29:5C:6F:85:45:F3:42:19:70:9F:7C:C4:48 X509v3 Authority Key Identifier: keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:10:c7:d3:af:95:dc:78:0e:07:bd:ea:a3:db:27:a7:99:1e: 5a:6f:25:93:6f:df:14:39:1d:76:8a:7a:0e:04:84:06:72:5e: 28:bd:c7:11:5e:94:50:14:4c:3d:a8:11:73:d3:e8:48:d9:37: a4:94:d4:28:82:66:46:5c:63:06:4c:e3:06:95:51:e6:ca:89: bd:bd:73:b1:37:96:49:50:0b:de:a6:41:79:c5:68:d0:00:33: 88:c2:49:88:47:35:b4:36:22:ac:b5:e1:9a:08:63:68:17:3e: fc:00:74:d0:51:19:15:95:aa:61:a2:89:4c:e6:68:81:93:b4: a7:95:80:43:a7:24:a9:d6:fc:6a:81:9d:b2:c8:cb:ee:af:51: 70:8a:fc:4e:3b:5a:e6:0c:cf:72:2d:8c:8e:47:62:35:b9:ce: 1b:78:5d:8f:1c:e5:83:92:99:27:55:8f:11:01:ef:c3:60:27: 22:3b:4f:66:0e:f2:6d:04:33:61:6d:86:82:a4:8f:9d:e8:a8: fe:9a:3d:68:c6:33:e2:a3:4d:bc:3e:16:d0:fb:54:10:66:14: e1:07:08:0e:20:1e:eb:7e:0e:e9:39:dc:88:60:42:66:ce:05: 17:0c:d7:91:4f:15:08:fa:74:a7:c9:87:05:60:db:f7:f5:ba: 63:55:d3:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKEYyRTdCRjlCQTlBN0M0NDE3QkRCNUVGRjIxNzMwQzVF Qzg0MDI0MEQwHhcNMjYwNDA0MjIxNDMwWhcNMjYwNDExMjIxNDMwWjAYMRYwFAYD VQQDEw02OWQxOGQ0Ny1kMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+7X4ZzBMnJhXvcdZaT3Gs86euRn8P9ZNBORBSW/MWwK8AMBus94KxkNRwXn LIhR5hgX9VfC8YCMkYEk2QdyGzMlTHXQq8z+sE7TQPQXSMsahxywvzB2bVH3lL5V jlObXBwZVGMCMADgZ2IUufvE0H8mVAjOpBB637GbPGnFdI9491iiorWY7EzoEB9o BNBkRVfWzTecRijrejG7jLLsF0eNFZRbuOYcWVjhQZZwhvpOUiDZGVkuxeDRrdve lR6gbGfgox2lGcsidY2YMIs1HEi18xg4VekpJ702SFpWX5GEBC40wayvoIxdBfsu uqNi2ISl6rfIYcMie9A49snkvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxBxCZR SBYpXG+FRfNCGXCffMRIMB8GA1UdIwQYMBaAFPLnv5upp8RBe9te/yFzDF7IQCQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhFRjcyMTdfSVhNTVhzaEFK QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1ZV9tNm1ueEVGNzIxN19JWE1NWHNoQUpBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhF RjcyMTdfSVhNTVhzaEFKQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIBDH06+V3HgOB73qo9snp5keWm8lk2/fFDkddop6DgSEBnJeKL3HEV6UUBRM PagRc9PoSNk3pJTUKIJmRlxjBkzjBpVR5sqJvb1zsTeWSVAL3qZBecVo0AAziMJJ iEc1tDYirLXhmghjaBc+/AB00FEZFZWqYaKJTOZogZO0p5WAQ6ckqdb8aoGdssjL 7q9RcIr8Tjta5gzPci2MjkdiNbnOG3hdjxzlg5KZJ1WPEQHvw2AnIjtPZg7ybQQz YW2GgqSPneio/po9aMYz4qNNvD4W0PtUEGYU4QcIDiAe634O6TnciGBCZs4FFwzX kU8VCPp0p8mHBWDb9/W6Y1XTUQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:02 2026 by rpki-client