$ rpki-client -vvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft File: lol8zXHJvUMVr4FaYvp6Ii1teFg.mft (raw, json) Hash identifier: l944lPHdsW73zFbhq7SF3e4oEKCS7C5BnTOrIubPt80= Subject key identifier: 77:07:80:F3:80:E0:A2:D9:80:C2:D8:B5:9D:63:AD:86:E3:B8:A6:89 Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft Manifest number: 08 Signing time: Sun 05 Apr 2026 08:33:00 +0000 Manifest this update: Sun 05 Apr 2026 08:32:59 +0000 Manifest next update: Sun 12 Apr 2026 08:32:59 +0000 Files and hashes: 1: lol8zXHJvUMVr4FaYvp6Ii1teFg.crl (hash: MNLRzmdJKaoWY/EEsotbrwmg/x2OTdnm326vtOBZcxI=) 2: 7656BF722DF911F1BA96C6D6BD833773.roa (hash: iR7Kdiz0oZDEZo38JiQAMAm9JRzy6cWra24N0sBArps=) 3: 9A5A24842DB011F1BFD489B0A5833773.roa (hash: XJsWHL3ugMeUbfYGNS+bzJUHfrHHR6vw3+mpKlurlZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: Apr 5 08:32:59 2026 GMT Not After : Apr 12 08:32:59 2026 GMT Subject: CN=69d21e3c-bd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:dd:90:59:70:21:b6:ff:52:65:1a:e2:a2: 6f:74:89:6d:f4:bc:bb:06:f9:4b:b7:17:15:d5:27: 5c:ac:49:95:bf:76:7b:d7:5d:f9:75:78:8f:0c:78: 20:66:51:91:52:dc:74:a3:f2:c1:4c:13:2e:b7:8d: ab:1c:1e:32:a7:23:91:05:2c:ff:b2:41:11:9a:d4: 96:25:8a:69:e7:b7:82:16:61:d8:f4:16:e5:94:a6: 63:23:2b:0f:6c:48:f3:6b:c0:ae:9c:1a:71:df:54: 90:f7:01:81:3e:9a:43:a3:a6:53:e5:63:f6:7c:d6: 38:74:58:8e:83:a4:f4:32:82:c1:d7:e8:f0:0f:cf: 7e:68:35:7f:7d:de:ef:a1:11:1f:1f:9e:b4:cb:71: 70:8c:d1:7f:d4:b7:d3:51:84:cb:e3:8c:fc:6c:e3: c0:42:9f:ed:ba:da:d8:e5:c5:56:b1:0f:7d:eb:bd: 3d:ab:f8:2d:6f:c5:98:dc:d2:e9:3b:fc:c0:81:cf: 51:79:23:5e:e2:30:7a:f7:28:29:6d:0d:28:f0:54: 89:bd:d8:3d:5c:e4:db:43:56:9e:c4:eb:bd:d2:46: d7:37:fa:b0:13:5a:db:35:d6:d4:a8:77:a1:2a:1a: b8:b0:dc:74:27:b9:14:e6:1c:ec:96:a9:c4:68:d2: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:07:80:F3:80:E0:A2:D9:80:C2:D8:B5:9D:63:AD:86:E3:B8:A6:89 X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cf:9e:be:97:f0:48:b6:ec:db:ae:fe:8d:25:31:24:de:2d: 5f:4a:6d:61:eb:ae:ea:b5:0b:82:e2:3e:be:43:e5:a4:10:7b: 5e:5b:c6:dc:e7:fd:6c:d4:c6:d9:bb:42:06:a7:54:53:da:aa: 4c:94:be:54:53:25:24:f0:8a:64:25:05:46:e0:28:97:52:2a: 30:8c:65:54:ea:52:8c:64:c8:24:34:03:10:7a:17:79:a2:46: 5a:bd:b4:a0:d1:ed:25:a4:e1:5d:08:42:b3:a2:c1:e3:20:6f: 9f:a6:e2:3b:b9:4f:30:5c:12:21:09:57:bc:7e:43:e5:44:32: 94:be:1f:20:54:bc:c0:fe:a7:f8:bd:06:4c:0f:55:d0:df:73: d7:43:25:64:27:ba:a3:e2:77:2d:6c:c9:09:0e:ef:e3:cf:bf: 82:42:ca:1e:75:63:b1:a7:c6:54:6b:5f:32:3d:93:1f:c0:17: a4:47:f0:d8:fb:e3:b7:34:72:33:0c:f6:32:e6:78:0a:f9:51: 1f:44:a6:7b:53:0f:94:e3:6b:3a:5b:76:d4:5c:2c:17:c4:87: 2e:26:7e:08:65:97:a8:f4:02:5f:14:65:47:b7:a5:03:c6:67: 03:0a:44:ae:13:6e:36:6c:00:83:d6:6f:a6:43:5f:17:3a:70: bb:19:ce:c0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjA0MDUwODMyNTlaFw0yNjA0MTIwODMyNTlaMBgxFjAUBgNV BAMTDTY5ZDIxZTNjLWJkNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU7t2QWXAhtv9SZRriom90iW30vLsG+Uu3FxXVJ1ysSZW/dnvXXfl1eI8MeCBm UZFS3HSj8sFMEy63jascHjKnI5EFLP+yQRGa1JYlimnnt4IWYdj0FuWUpmMjKw9s SPNrwK6cGnHfVJD3AYE+mkOjplPlY/Z81jh0WI6DpPQygsHX6PAPz35oNX993u+h ER8fnrTLcXCM0X/Ut9NRhMvjjPxs48BCn+262tjlxVaxD33rvT2r+C1vxZjc0uk7 /MCBz1F5I17iMHr3KCltDSjwVIm92D1c5NtDVp7E673SRtc3+rATWts11tSod6Eq Griw3HQnuRTmHOyWqcRo0lxbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdweA84Dg otmAwti1nWOthuO4pokwHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RkM4L0IzRENGMUI2MkQ5NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVN VnI0RmFZdnA2SWkxdGVGZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqz56+l/BItuzbrv6NJTEk3i1fSm1h667qtQuC4j6+Q+WkEHteW8bc5/1s1MbZ u0IGp1RT2qpMlL5UUyUk8IpkJQVG4CiXUiowjGVU6lKMZMgkNAMQehd5okZavbSg 0e0lpOFdCEKzosHjIG+fpuI7uU8wXBIhCVe8fkPlRDKUvh8gVLzA/qf4vQZMD1XQ 33PXQyVkJ7qj4nctbMkJDu/jz7+CQsoedWOxp8ZUa18yPZMfwBekR/DY++O3NHIz DPYy5ngK+VEfRKZ7Uw+U42s6W3bUXCwXxIcuJn4IZZeo9AJfFGVHt6UDxmcDCkSu E242bACD1m+mQ18XOnC7Gc7A -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:16 2026 by rpki-client