$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: bX+5EERaBHgfznOvXN8PMEZlrFz6k1uqDsWrS5dW0M0= Subject key identifier: 1F:DD:A2:6C:64:85:99:06:8A:E4:D2:28:FC:A7:C6:FD:21:76:1A:F2 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 14E2 Signing time: Sat 04 Apr 2026 16:45:19 +0000 Manifest this update: Sat 04 Apr 2026 16:45:18 +0000 Manifest next update: Sat 11 Apr 2026 16:45:18 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: TUcy7si15KUr2pithRHoQ+zXZrOe56N5t7NpAMGaDtI=) 2: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: AG7+A5Yb2KDtnoNzA36Acb2KghCB+Rzmi98/tCvvjZ4=) 3: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: +whKNCKBWu/fW8ZOLuLgPSDmcXDG1KA00Y9l8DL/PP0=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: nHdgdCvKY1Y9twOWSJSJeHzjweCUK60NzNjzUvm1MXs=) 5: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: Hr7OpNKmlMWAc1DIpsosFxnOhgjPdStDv79SYsuEpFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5385 (0x1509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Apr 4 16:45:18 2026 GMT Not After : Apr 11 16:45:18 2026 GMT Subject: CN=69d1401f-8a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:87:e2:6a:ac:07:6c:62:b8:31:ab:5f:6e: 17:95:d9:82:d9:47:95:69:f7:a7:d1:6a:5e:49:a7: 57:39:41:b6:9f:5c:2e:3c:32:a6:61:29:f8:a1:9c: 04:3d:fe:79:b3:47:9f:66:2a:fe:46:af:0b:a5:5a: bf:7e:fc:ff:98:a1:b5:4a:fb:b6:42:c1:8f:19:cc: 49:2a:13:f4:da:67:a2:85:70:dc:7b:a3:61:fa:35: f0:52:40:09:ce:51:cc:d5:99:4a:54:a4:e3:1f:f5: aa:53:bb:e3:4b:d3:cf:97:21:3c:05:bb:53:33:26: d2:11:61:94:82:d0:86:8f:a9:0f:94:0f:8c:82:28: e6:fb:b6:ba:e0:54:ed:5b:1c:09:07:2e:a9:eb:15: aa:68:eb:9a:30:7c:11:9a:95:54:3d:2c:f2:c6:34: 90:58:5e:c5:4a:18:c5:4d:0e:de:f5:29:e6:59:71: 25:58:27:4e:53:bd:9a:fa:67:34:4a:b9:9f:32:b9: 5f:b9:d7:81:a1:6c:2e:6c:cc:c3:ed:9f:09:85:99: 5c:41:93:4a:bd:43:2f:d1:8a:20:0a:4b:d8:e9:8c: 7e:0d:bb:f8:79:48:36:92:f8:4b:54:a5:7f:5b:44: 26:b1:cb:b5:65:04:67:40:b9:5b:26:4f:79:ea:05: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DD:A2:6C:64:85:99:06:8A:E4:D2:28:FC:A7:C6:FD:21:76:1A:F2 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ea:bd:26:cc:92:f3:4c:f3:4f:06:e2:3c:b7:ee:3a:43:5f: f1:d8:2f:3a:60:7f:0a:c4:6a:b4:67:64:83:83:47:27:91:e0: 50:d0:27:bb:a9:71:3d:7e:04:c7:70:7f:5b:d7:f7:ad:ec:f7: 3f:e3:8a:1c:ac:c2:5c:4a:21:1d:1d:2d:6c:ed:83:f4:c9:ad: 16:75:f5:d7:88:bd:cf:c6:2d:5b:1d:e0:a2:7c:95:78:90:b0: a2:48:7a:d7:f7:12:79:33:3f:15:1a:6b:b1:58:e9:30:5e:47: 72:2f:22:ae:40:81:69:19:fb:e7:bd:d0:77:0d:bd:e9:b4:1e: 79:65:a3:ab:f9:cb:fe:d7:69:2b:1d:cf:e9:93:9a:98:c9:6d: bb:18:76:59:96:86:93:99:8c:56:8e:44:1f:8d:46:7e:c5:2a: 66:25:42:b5:f7:79:ec:bb:7d:53:41:aa:82:fc:49:62:63:f8: e5:66:c3:d7:17:29:c7:c3:63:3a:d1:19:ba:14:8c:80:ec:1f: a9:12:ad:2d:80:b4:d7:70:25:d6:3e:02:a3:0c:42:21:d4:6d: 89:bb:35:33:2f:b3:95:00:bb:6f:39:30:a0:06:66:b7:64:a1: 73:c1:fd:75:fd:db:76:0f:43:bc:25:a7:1f:88:52:f4:ca:66: 0f:ef:51:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjYwNDA0MTY0NTE4WhcNMjYwNDExMTY0NTE4WjAYMRYwFAYD VQQDEw02OWQxNDAxZi04YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2qH4mqsB2xiuDGrX24XldmC2UeVafen0WpeSadXOUG2n1wuPDKmYSn4oZwE Pf55s0efZir+Rq8LpVq/fvz/mKG1Svu2QsGPGcxJKhP02meihXDce6Nh+jXwUkAJ zlHM1ZlKVKTjH/WqU7vjS9PPlyE8BbtTMybSEWGUgtCGj6kPlA+Mgijm+7a64FTt WxwJBy6p6xWqaOuaMHwRmpVUPSzyxjSQWF7FShjFTQ7e9SnmWXElWCdOU72a+mc0 SrmfMrlfudeBoWwubMzD7Z8JhZlcQZNKvUMv0YogCkvY6Yx+Dbv4eUg2kvhLVKV/ W0Qmscu1ZQRnQLlbJk956gWdwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/domxk hZkGiuTSKPynxv0hdhryMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALOq9JsyS80zzTwbiPLfuOkNf8dgvOmB/CsRqtGdkg4NHJ5HgUNAnu6lxPX4E x3B/W9f3rez3P+OKHKzCXEohHR0tbO2D9MmtFnX114i9z8YtWx3gonyVeJCwokh6 1/cSeTM/FRprsVjpMF5Hci8irkCBaRn7573Qdw296bQeeWWjq/nL/tdpKx3P6ZOa mMltuxh2WZaGk5mMVo5EH41GfsUqZiVCtfd57Lt9U0GqgvxJYmP45WbD1xcpx8Nj OtEZuhSMgOwfqRKtLYC013Al1j4CowxCIdRtibs1My+zlQC7bzkwoAZmt2Shc8H9 df3bdg9DvCWnH4hS9MpmD+9REQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:45 2026 by rpki-client