$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: /jabkPZsCjoMWA4FqSbtklQVOzrW1cXPLhQw6UpOrYM= Subject key identifier: 1C:82:DF:39:3C:8B:B9:C7:AF:0F:F0:05:DF:F6:01:F9:F2:8A:69:BC Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 08D7 Signing time: Sat 04 Apr 2026 20:36:28 +0000 Manifest this update: Sat 04 Apr 2026 20:36:28 +0000 Manifest next update: Sat 11 Apr 2026 20:36:28 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: LkAqItu58vlSfwLT3YW2MTIgorsGaQ2n4Z6uc9Rk1+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Apr 4 20:36:28 2026 GMT Not After : Apr 11 20:36:28 2026 GMT Subject: CN=69d1764c-8f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:59:9b:34:e1:59:2c:d3:fa:1a:3b:16:b8:aa: 61:fc:c7:2e:e1:cf:50:e4:43:10:ac:68:44:e9:af: e2:0e:88:23:42:d4:e1:a9:2d:97:47:dd:15:60:43: 3a:24:92:f8:34:22:19:ee:25:e9:a2:ab:e6:3d:81: 1f:e0:6b:a3:68:cf:5d:d8:8c:05:29:5f:c0:37:25: de:de:53:0c:98:89:81:88:ce:a0:48:8a:8f:30:16: 7c:3e:de:aa:27:03:f7:7c:25:d2:e8:7f:59:3c:af: 46:a6:eb:a5:d1:54:4c:c5:39:de:36:c7:e0:c7:87: f4:8b:06:10:98:3d:a1:d7:46:c6:0e:48:82:79:35: 75:e1:cb:2b:2d:2f:41:56:1a:16:01:fd:09:b8:05: da:1e:35:15:8c:7a:67:a8:00:ea:2e:54:a2:a9:04: 18:c8:60:93:c7:7a:80:9c:11:19:d6:ea:26:97:d3: c9:59:e4:a8:6c:dd:ee:8e:a8:50:1d:f6:b3:df:8f: 94:0b:32:4f:6c:db:0f:e0:9e:72:b2:75:ef:ee:fa: 8c:7b:b7:ae:e0:99:6e:c7:67:c1:c6:26:f9:d0:be: 61:c6:23:b6:ec:33:ea:7b:7d:7d:95:cd:b2:3d:71: ed:de:9b:43:c9:1c:ca:4e:33:43:9d:95:50:f5:2a: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:82:DF:39:3C:8B:B9:C7:AF:0F:F0:05:DF:F6:01:F9:F2:8A:69:BC X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:25:1f:36:88:05:9c:8a:13:39:ad:8a:37:a9:35:4e:4e:63: 28:7e:4d:48:23:b4:6e:dd:ea:d9:42:06:24:64:89:85:15:58: ea:e2:da:2b:2b:61:2c:30:62:35:9b:e0:0a:11:d6:0c:dc:05: b3:24:5e:45:01:69:a8:b4:90:40:5b:e7:c8:93:38:ce:f9:15: 61:46:84:28:e4:2f:29:78:49:d6:a6:9a:c8:65:52:c2:56:b5: 0b:08:5f:5e:0c:f2:82:81:60:05:1a:d9:de:6b:51:5e:70:76: 80:82:22:6a:cf:9e:98:b7:ff:bd:d2:82:86:40:ed:11:0a:7f: 1e:4d:eb:a3:dc:2c:5b:e1:4a:a2:02:da:9f:86:8d:ec:ad:d7: 5d:c6:e6:3c:cc:a2:49:1f:14:e8:0b:77:ec:0e:fb:ec:c9:bf: f5:7c:67:f9:95:08:7c:af:cd:34:b4:ec:95:55:7e:52:32:9c: b3:7d:47:e6:d1:e6:a0:36:19:2e:5e:2d:8e:58:f9:66:58:15: cc:75:d1:8d:79:6a:fa:67:7c:0d:05:1c:e6:0d:81:f7:9b:37: f5:6d:1e:d5:c4:6f:ff:69:4c:0d:fb:0c:26:db:99:19:83:5d: b0:83:aa:53:42:ff:50:07:17:a3:c9:d5:36:7e:d7:45:f9:4c: 29:6f:01:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjYwNDA0MjAzNjI4WhcNMjYwNDExMjAzNjI4WjAYMRYwFAYD VQQDEw02OWQxNzY0Yy04ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmlmbNOFZLNP6GjsWuKph/Mcu4c9Q5EMQrGhE6a/iDogjQtThqS2XR90VYEM6 JJL4NCIZ7iXpoqvmPYEf4GujaM9d2IwFKV/ANyXe3lMMmImBiM6gSIqPMBZ8Pt6q JwP3fCXS6H9ZPK9Gpuul0VRMxTneNsfgx4f0iwYQmD2h10bGDkiCeTV14csrLS9B VhoWAf0JuAXaHjUVjHpnqADqLlSiqQQYyGCTx3qAnBEZ1uoml9PJWeSobN3ujqhQ Hfaz34+UCzJPbNsP4J5ysnXv7vqMe7eu4Jlux2fBxib50L5hxiO27DPqe319lc2y PXHt3ptDyRzKTjNDnZVQ9SrvpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByC3zk8 i7nHrw/wBd/2Afnyimm8MB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWyUfNogFnIoTOa2KN6k1Tk5jKH5NSCO0bt3q2UIGJGSJhRVY6uLaKythLDBi NZvgChHWDNwFsyReRQFpqLSQQFvnyJM4zvkVYUaEKOQvKXhJ1qaayGVSwla1Cwhf XgzygoFgBRrZ3mtRXnB2gIIias+emLf/vdKChkDtEQp/Hk3ro9wsW+FKogLan4aN 7K3XXcbmPMyiSR8U6At37A777Mm/9Xxn+ZUIfK/NNLTslVV+UjKcs31H5tHmoDYZ Ll4tjlj5ZlgVzHXRjXlq+md8DQUc5g2B95s39W0e1cRv/2lMDfsMJtuZGYNdsIOq U0L/UAcXo8nVNn7XRflMKW8BWg== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:24 2026 by rpki-client