$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: CkbDVZYuo1ToAUuHiVOcGWo/c3Fg70IpNfErsmA/Zxc= Subject key identifier: D9:5C:EA:73:55:15:35:02:68:72:0A:4E:B3:B7:E8:C4:61:2B:AF:8E Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 01D5 Signing time: Sun 05 Apr 2026 03:06:19 +0000 Manifest this update: Sun 05 Apr 2026 03:06:19 +0000 Manifest next update: Sun 12 Apr 2026 03:06:19 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: 7GdJi5MlYpY7SfXbItiGLIKEqnqZBHQgHa9Bm1JYNbo=) 2: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: WjgNxbDbrb74XmE1Jk0QE3DXYeIptytiMEIutAQrgFI=) 3: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: hUBkgyOeFfHyusrHl5Ul+wkZZtAL0ghWlOjjJyvQSKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Apr 5 03:06:19 2026 GMT Not After : Apr 12 03:06:19 2026 GMT Subject: CN=69d1d1ab-1590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:b9:ff:35:6d:7f:b4:f8:33:14:3e:95:98: 37:62:7f:5b:51:90:f1:c4:4a:af:f8:ef:9e:4c:11: 9a:f6:9b:f4:dd:12:c1:94:3c:66:16:be:cc:6a:1b: 27:8b:44:11:71:42:80:fb:4f:5b:7e:aa:a0:48:e1: 83:5a:93:de:7d:cf:6b:ae:d8:13:8a:9d:6a:4f:39: 8e:b9:79:64:41:75:9e:08:8e:ed:ca:7c:a4:d1:74: f3:8a:9c:32:82:1d:a9:b9:3c:cb:8a:8a:60:6d:0a: 6b:f4:aa:c0:28:38:f0:d7:ac:d7:8a:1b:01:95:7a: 53:68:ee:1a:8c:8a:6d:26:fe:29:0d:02:a9:0e:ad: 89:e6:ca:30:63:8a:82:be:dd:65:b1:02:64:6d:21: 3b:6e:ea:37:ed:ed:73:96:27:a3:6f:3d:69:4d:2f: 9b:c3:18:55:ec:fd:0c:b7:d3:b7:22:91:b1:a0:19: 4a:d1:b1:ef:72:7b:16:95:fe:de:76:d1:55:2f:43: 28:18:a4:d1:63:0b:26:c6:53:4f:26:9e:d5:8a:70: cd:8e:3f:6e:b9:0e:2f:e0:49:a7:95:b5:9f:a4:05: 9d:d5:b8:30:e3:16:44:8f:ea:1a:34:0c:11:5b:5c: 57:25:6f:6c:1c:43:8c:d4:23:9c:2e:e4:a7:6a:50: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5C:EA:73:55:15:35:02:68:72:0A:4E:B3:B7:E8:C4:61:2B:AF:8E X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ab:3e:8e:0e:45:50:09:b9:d4:76:f4:8e:ad:c4:b1:4e:ba: 6d:24:de:48:e7:c2:01:18:92:1a:46:7f:c6:d3:76:6b:18:84: d9:9a:0e:3b:db:d0:df:94:b8:2c:03:5f:0d:4e:48:03:ed:5d: 79:d1:6f:bb:1e:d9:8e:14:f7:1a:57:26:7b:bd:46:8c:b6:6d: 21:2b:7c:8f:9f:4a:45:2e:86:98:a7:13:48:d7:2a:fe:b3:53: 4f:0f:0b:be:8d:5d:e2:15:85:38:5f:ee:9f:42:a6:0b:93:fa: f6:ce:2f:26:08:7f:d8:7e:ef:5b:2f:fa:05:6d:78:40:55:db: fe:74:92:b3:57:db:54:81:37:77:b2:e1:24:4a:a7:5d:f4:89: 42:70:6a:64:73:a4:0f:24:2a:32:81:f4:24:55:7c:c5:e1:53: 2a:ed:ff:bc:40:9c:63:99:26:66:f0:d1:d6:4c:f5:5d:29:58: 01:2f:83:db:eb:31:c5:cf:e9:4e:45:9e:02:de:c4:66:91:96: 89:4f:73:64:ed:63:d5:bd:dd:ef:df:35:db:07:f7:df:d5:0a: 62:37:d8:8a:90:b9:05:59:6f:6c:de:5c:3c:40:87:89:20:38: 4e:ee:e5:44:a9:43:40:5b:56:c6:3b:7e:50:ff:8c:98:99:e9: 36:67:93:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjYwNDA1MDMwNjE5WhcNMjYwNDEyMDMwNjE5WjAYMRYwFAYD VQQDEw02OWQxZDFhYi0xNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTO5/zVtf7T4MxQ+lZg3Yn9bUZDxxEqv+O+eTBGa9pv03RLBlDxmFr7Mahsn i0QRcUKA+09bfqqgSOGDWpPefc9rrtgTip1qTzmOuXlkQXWeCI7tynyk0XTzipwy gh2puTzLiopgbQpr9KrAKDjw16zXihsBlXpTaO4ajIptJv4pDQKpDq2J5sowY4qC vt1lsQJkbSE7buo37e1zliejbz1pTS+bwxhV7P0Mt9O3IpGxoBlK0bHvcnsWlf7e dtFVL0MoGKTRYwsmxlNPJp7VinDNjj9uuQ4v4EmnlbWfpAWd1bgw4xZEj+oaNAwR W1xXJW9sHEOM1COcLuSnalAMFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlc6nNV FTUCaHIKTrO36MRhK6+OMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfas+jg5FUAm51Hb0jq3EsU66bSTeSOfCARiSGkZ/xtN2axiE2ZoOO9vQ35S4 LANfDU5IA+1dedFvux7ZjhT3Glcme71GjLZtISt8j59KRS6GmKcTSNcq/rNTTw8L vo1d4hWFOF/un0KmC5P69s4vJgh/2H7vWy/6BW14QFXb/nSSs1fbVIE3d7LhJEqn XfSJQnBqZHOkDyQqMoH0JFV8xeFTKu3/vECcY5kmZvDR1kz1XSlYAS+D2+sxxc/p TkWeAt7EZpGWiU9zZO1j1b3d79812wf339UKYjfYipC5BVlvbN5cPECHiSA4Tu7l RKlDQFtWxjt+UP+MmJnpNmeTGw== -----END CERTIFICATE-----Generated at Sun Apr 5 21:08:37 2026 by rpki-client