$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: Lkxay00ySkeghRPsrKf39s7f8BUJRTBs5onnHDW1zdY= Subject key identifier: 87:DA:5D:06:E3:AE:2C:3B:11:5B:3B:B2:50:15:C5:F4:0E:01:8F:19 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 2218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 220C Signing time: Sat 04 Apr 2026 15:48:59 +0000 Manifest this update: Sat 04 Apr 2026 15:48:58 +0000 Manifest next update: Sat 11 Apr 2026 15:48:58 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: S77+c1CS37FuPwU5wgfSktuccJxCCNTHQmWVSjKcXTA=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: 42CVSUWYduLQVb9MG+B2vLMlfp0/6VbB2Jlt8i5PPHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8728 (0x2218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Apr 4 15:48:58 2026 GMT Not After : Apr 11 15:48:58 2026 GMT Subject: CN=69d132eb-ac17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:e7:ab:3e:48:23:08:00:f3:9b:18:f2:1f: 2e:e5:2f:aa:d7:6f:8d:3e:7a:a2:af:3a:cd:a8:73: 53:fa:ec:e7:47:ad:ec:71:a9:8a:e5:ce:9f:56:fa: ff:98:5c:7c:9d:40:e7:87:7a:b2:46:94:0b:a4:da: f2:5a:6a:6d:1b:39:08:ab:e8:4e:7f:11:ce:fd:7e: 41:62:dc:ee:55:f1:ba:42:a2:42:97:0a:69:f9:ea: 41:d3:dc:d0:11:b2:8f:c0:f0:50:e0:5f:5d:8d:6b: 8a:50:95:3a:b5:fa:d5:47:e5:ae:45:e5:03:bb:35: 93:f7:fc:10:b6:2c:db:62:e9:64:c6:53:b9:04:cd: 72:1e:2f:ad:e7:0b:c3:33:e5:e7:09:3a:b0:b0:d4: 12:aa:9b:78:99:e4:1f:a3:40:a9:28:1e:03:1f:56: f9:3c:ef:04:b7:55:a8:b2:2e:99:b4:fe:58:f2:e2: c3:b0:d0:57:b9:d7:54:ed:1c:4d:9e:d7:e8:5f:fc: f6:62:fd:68:f9:64:e1:dd:dd:f3:1e:40:da:c4:49: 78:9b:69:d8:46:d5:db:28:e5:43:0a:44:f3:6b:6b: 5c:83:be:61:4c:67:f2:46:09:d7:4f:49:64:3d:75: a1:69:45:0e:a1:23:bf:fd:8c:fe:a3:4a:f1:45:44: 78:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DA:5D:06:E3:AE:2C:3B:11:5B:3B:B2:50:15:C5:F4:0E:01:8F:19 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:75:d0:24:f8:f0:69:b0:46:f7:d0:e7:a1:2b:49:50:e8:2a: d2:e5:4f:e4:f5:7f:49:7d:19:71:21:38:60:e3:c9:e8:53:4c: da:15:83:74:90:9d:c3:f7:14:b6:4d:fc:eb:d7:cf:4b:5e:f7: 9a:44:e3:f2:83:e4:67:14:1d:43:2f:67:85:07:af:e7:88:92: 43:d3:23:1a:f0:fd:a2:34:6f:b6:79:84:de:95:ed:48:82:36: 19:d8:c4:60:df:f6:3b:c7:21:04:b5:d6:25:8e:37:34:94:14: f3:b8:13:e8:8e:2d:80:1e:8e:c9:59:37:cc:df:0f:7b:d8:59: ea:46:79:b6:79:e7:6e:b2:9f:5e:e0:24:65:04:90:41:04:2b: 40:45:5d:86:15:a6:e3:05:e2:66:09:13:9c:79:eb:60:e4:75: 4e:2a:30:0c:2a:0e:d4:89:e0:6f:20:b9:d5:b8:ca:99:96:ae: 79:e6:d9:66:4d:b8:63:43:1e:ad:d3:a6:e1:74:69:fe:2b:6c: ff:d4:0e:9a:ce:f4:ec:94:ee:2b:d9:27:a2:5c:80:9b:a0:01: f4:26:d2:56:a2:e4:16:f2:a7:1a:19:28:47:36:d7:42:50:58: 29:c7:1e:7c:8a:0f:cc:df:58:1e:1c:d6:4c:3d:db:77:12:60: 61:46:8c:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjYwNDA0MTU0ODU4WhcNMjYwNDExMTU0ODU4WjAYMRYwFAYD VQQDEw02OWQxMzJlYi1hYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuHnqz5IIwgA85sY8h8u5S+q12+NPnqirzrNqHNT+uznR63scamK5c6fVvr/ mFx8nUDnh3qyRpQLpNryWmptGzkIq+hOfxHO/X5BYtzuVfG6QqJClwpp+epB09zQ EbKPwPBQ4F9djWuKUJU6tfrVR+WuReUDuzWT9/wQtizbYulkxlO5BM1yHi+t5wvD M+XnCTqwsNQSqpt4meQfo0CpKB4DH1b5PO8Et1Wosi6ZtP5Y8uLDsNBXuddU7RxN ntfoX/z2Yv1o+WTh3d3zHkDaxEl4m2nYRtXbKOVDCkTza2tcg75hTGfyRgnXT0lk PXWhaUUOoSO//Yz+o0rxRUR4GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfaXQbj riw7EVs7slAVxfQOAY8ZMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATHXQJPjwabBG99DnoStJUOgq0uVP5PV/SX0ZcSE4YOPJ6FNM2hWDdJCdw/cU tk3869fPS173mkTj8oPkZxQdQy9nhQev54iSQ9MjGvD9ojRvtnmE3pXtSII2GdjE YN/2O8chBLXWJY43NJQU87gT6I4tgB6OyVk3zN8Pe9hZ6kZ5tnnnbrKfXuAkZQSQ QQQrQEVdhhWm4wXiZgkTnHnrYOR1TiowDCoO1IngbyC51bjKmZaueebZZk24Y0Me rdOm4XRp/its/9QOms707JTuK9knolyAm6AB9CbSVqLkFvKnGhkoRzbXQlBYKcce fIoPzN9YHhzWTD3bdxJgYUaMtA== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:15 2026 by rpki-client