$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json) Hash identifier: ++81o3FG2j+83wsJetpMNgTOGMP7fI/SUdS60I4HUjE= Subject key identifier: 00:E3:62:A1:14:8C:BD:7E:67:4C:3D:46:FB:C4:2E:56:D6:CD:D5:68 Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F Certificate issuer: /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft Manifest number: 26 Signing time: Sun 05 Apr 2026 08:08:22 +0000 Manifest this update: Sun 05 Apr 2026 08:08:21 +0000 Manifest next update: Sun 12 Apr 2026 08:08:21 +0000 Files and hashes: 1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: mupsOMK2bd52kuxAWM9jrhzJ3vMxN+kN1U3W+JAdvoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F Validity Not Before: Apr 5 08:08:21 2026 GMT Not After : Apr 12 08:08:21 2026 GMT Subject: CN=69d21876-4226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:70:c6:c1:56:50:10:07:91:78:9d:9d:50:9f: a6:27:50:00:3c:10:99:0d:9e:4b:56:a1:7e:7f:28: f2:5f:ae:4f:e6:ad:20:37:a6:b8:2f:2e:4f:b9:f6: a2:5f:2c:0c:7d:79:9b:65:8e:6a:8d:57:f2:85:98: ad:89:14:f3:5b:fa:3c:8a:0c:0d:e1:54:25:c9:fb: e1:2c:38:0c:44:96:6c:23:99:8a:32:64:59:3b:1e: 64:3b:d7:a3:91:4a:e9:3a:70:40:e6:8b:77:8d:1d: bd:4d:dd:a2:2b:8e:cb:8e:d6:22:96:17:d2:3f:e8: 4c:28:65:6f:8d:dd:40:3f:1d:88:45:ae:b6:20:e1: 58:7b:e5:b2:5e:ce:57:e7:a7:a6:6e:cb:cf:7a:8e: bc:79:8c:82:26:11:fd:ff:4c:16:22:21:11:ae:58: 0b:11:38:ef:b2:f7:a3:93:e7:53:dc:2a:73:45:20: 1d:b1:49:2a:85:e5:36:6b:75:1a:26:6e:64:16:a5: d2:6a:b9:bb:c2:a2:93:bf:56:7c:c4:e0:9e:7e:c6: 83:ed:89:88:16:88:a3:98:a3:df:f4:1b:39:51:78: 5d:3c:6d:b9:5f:2b:dc:09:61:82:ee:da:9b:7c:5a: 0e:f4:0c:36:f9:e9:48:04:32:9c:4c:7c:aa:20:ab: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E3:62:A1:14:8C:BD:7E:67:4C:3D:46:FB:C4:2E:56:D6:CD:D5:68 X509v3 Authority Key Identifier: keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:20:1a:49:0b:cb:84:3c:20:cf:3e:18:b6:f9:00:52:0f:15: 17:1c:03:63:94:ec:86:73:03:88:bf:2f:6c:82:4c:ed:34:5f: de:4b:ca:92:92:7c:a4:6a:ab:de:8d:21:b1:08:6e:0a:29:ae: 21:3e:a9:a4:93:60:51:d0:75:77:70:92:85:45:95:60:ab:cb: e4:89:07:68:dd:60:b5:61:68:04:c6:4b:aa:68:1d:37:3d:94: 0f:8f:cd:e4:85:f0:62:f6:e6:fd:38:36:c8:01:cc:cc:1d:f7: ae:3b:08:32:b5:b6:c0:9d:65:7c:3d:c2:08:7c:57:01:30:35: 41:73:8c:a9:dc:95:aa:e6:ca:e1:45:76:67:1e:a6:9e:a1:1c: dd:c9:03:4e:1a:67:0a:42:4c:9a:20:97:a4:cd:cb:29:7c:ad: 9c:35:ca:32:9e:45:2d:bd:1e:22:30:83:eb:ca:bd:30:bc:7c: 4c:36:a6:05:73:f5:d4:aa:bd:3a:3c:34:36:06:93:4e:32:e3: 48:e8:13:16:2a:87:4d:ad:d7:5d:c9:9f:1f:e1:18:f5:5b:51: c5:42:b8:cb:ef:e5:a6:dc:92:17:32:7a:15:91:2c:52:b3:f3: f7:d2:ae:ce:ab:5d:8f:5d:0b:68:d3:45:5c:de:ec:d7:46:3f: ec:32:fa:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJDQjExMC8GA1UEBRMoRjIxNzA2MzBBMDE0RjgyMThGRjMwNzU2NDlGNDEyNDIw MDNENDQ2RjAeFw0yNjA0MDUwODA4MjFaFw0yNjA0MTIwODA4MjFaMBgxFjAUBgNV BAMTDTY5ZDIxODc2LTQyMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQcMbBVlAQB5F4nZ1Qn6YnUAA8EJkNnktWoX5/KPJfrk/mrSA3prgvLk+59qJf LAx9eZtljmqNV/KFmK2JFPNb+jyKDA3hVCXJ++EsOAxElmwjmYoyZFk7HmQ716OR Suk6cEDmi3eNHb1N3aIrjsuO1iKWF9I/6EwoZW+N3UA/HYhFrrYg4Vh75bJezlfn p6Zuy896jrx5jIImEf3/TBYiIRGuWAsROO+y96OT51PcKnNFIB2xSSqF5TZrdRom bmQWpdJqubvCopO/VnzE4J5+xoPtiYgWiKOYo9/0GzlReF08bblfK9wJYYLu2pt8 Wg70DDb56UgEMpxMfKogqxphAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAONioRSM vX5nTD1G+8QuVtbN1WgwHwYDVR0jBBgwFoAU8hcGMKAU+CGP8wdWSfQSQgA9RG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0IyREZGNjU2RkRC QzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNHUDh3ZFdTZlFTUWdBOVJH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGhjR01LQVUtQ0dQOHdkV1NmUVNRZ0E5Ukc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNH UDh3ZFdTZlFTUWdBOVJHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLIBpJC8uEPCDPPhi2+QBSDxUXHANjlOyGcwOIvy9sgkztNF/eS8qSknykaqve jSGxCG4KKa4hPqmkk2BR0HV3cJKFRZVgq8vkiQdo3WC1YWgExkuqaB03PZQPj83k hfBi9ub9ODbIAczMHfeuOwgytbbAnWV8PcIIfFcBMDVBc4yp3JWq5srhRXZnHqae oRzdyQNOGmcKQkyaIJekzcspfK2cNcoynkUtvR4iMIPryr0wvHxMNqYFc/XUqr06 PDQ2BpNOMuNI6BMWKodNrdddyZ8f4Rj1W1HFQrjL7+Wm3JIXMnoVkSxSs/P30q7O q12PXQto00Vc3uzXRj/sMvpt -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:59 2026 by rpki-client