$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: uGodrHvT1ji7I/r/thWvxz5xGKT09MP20din6JefwNw= Subject key identifier: 55:EF:0C:41:E1:EE:54:E7:00:C9:EB:96:1F:94:EC:A8:D6:7C:D5:0A Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: 017D Signing time: Sun 05 Apr 2026 04:04:35 +0000 Manifest this update: Sun 05 Apr 2026 04:04:34 +0000 Manifest next update: Sun 12 Apr 2026 04:04:34 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: 9gniBXBY7YsnbIrxtxPWwXvtwQ5PELmp3+jWB5CLvCA=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: aM682PrmS/WCpTQwMbZ4q2Rx5fNH71CAoijcXAt+A2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: Apr 5 04:04:34 2026 GMT Not After : Apr 12 04:04:34 2026 GMT Subject: CN=69d1df53-da14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:ff:b4:d0:f9:ca:51:dc:9d:0b:df:f5:48: 76:e0:9c:0b:0d:0d:a8:ee:b6:8b:6b:ea:fb:de:39: 5d:92:de:7a:21:bc:20:2e:ea:b8:1b:f0:dd:36:52: 8a:d0:40:af:60:90:25:05:f0:b6:08:1c:cf:2a:f5: 8d:66:4c:72:a5:2b:cc:c7:7a:78:77:b7:5c:f1:ce: 93:71:03:50:f4:c6:a1:e7:ef:a6:98:82:a3:67:1d: fd:d8:42:be:0b:3d:5b:6f:71:c8:21:6e:73:5f:17: 06:e1:f9:e7:fd:85:01:4f:c9:a4:a2:71:f1:0e:32: dd:79:52:d5:b0:16:61:ee:e4:35:92:e9:8d:0e:f2: c6:9f:8b:f4:04:aa:97:4b:ec:fa:e0:bc:cf:07:9a: 72:2b:ce:82:df:80:6e:7f:16:7e:08:1d:be:d6:b6: ac:5c:c1:0a:36:99:6a:52:86:8d:f8:09:3b:2b:25: 23:9a:f5:2e:2b:b3:70:1d:3f:89:78:b0:50:64:84: 6b:ff:6f:af:4e:ed:91:b0:23:de:3e:36:41:92:c2: 68:f2:13:66:57:14:ce:36:14:ac:93:df:b6:a3:5a: 1b:ff:07:0d:3f:2c:63:e6:a4:77:6a:27:b8:21:f5: 15:e8:42:08:d0:2f:c7:e5:dc:6f:5f:20:67:04:19: 0a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EF:0C:41:E1:EE:54:E7:00:C9:EB:96:1F:94:EC:A8:D6:7C:D5:0A X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:53:49:bb:2b:eb:ea:14:06:77:8d:70:1a:81:9f:da:5f:f0: e0:97:db:bc:46:74:2f:f0:6a:f5:c4:df:cd:ad:ac:fc:7a:c1: 9c:3c:c0:59:35:06:7a:78:62:38:da:1a:9b:b2:d6:91:7c:33: 6e:37:8e:23:18:da:e3:25:0b:ff:23:7f:df:8d:02:88:19:0f: 46:35:bb:bf:a7:27:f9:fc:e9:50:6e:0b:12:5f:f4:a5:d3:c5: 8e:a0:ec:d0:cf:b0:02:82:47:ec:fa:72:b0:19:56:e0:25:01: 9f:a9:b7:58:29:6e:aa:ec:b9:e9:52:a8:c9:7e:4e:62:29:b3: 46:eb:58:06:69:66:fc:54:18:4c:bd:1f:34:c3:98:a3:3f:ae: 28:0c:14:b2:fa:53:e2:70:7a:9d:08:26:74:30:8d:83:fe:f1: e6:ec:8e:a2:28:71:66:08:f6:dd:5e:82:aa:56:40:9f:7a:fc: 74:95:71:f7:43:24:ac:69:18:0e:05:e6:0c:95:61:8f:f8:06: 66:ff:2c:0c:9a:4c:ba:66:92:bb:5c:c8:e7:f2:72:5d:75:24: 99:33:14:8f:dc:11:61:c2:4d:61:56:ff:ce:e9:2d:fc:d4:8a: e4:c9:9b:18:76:df:3b:44:06:6f:63:e0:0f:fc:cf:e1:cf:f7: 1f:f9:61:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBM0ExMTAvBgNVBAUTKDgzRTRCQ0I3NjNCOENFRDAzNjUxOTBFNzI4MEYwQTZB MzRCMzVCNTEwHhcNMjYwNDA1MDQwNDM0WhcNMjYwNDEyMDQwNDM0WjAYMRYwFAYD VQQDEw02OWQxZGY1My1kYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiz7/tND5ylHcnQvf9Uh24JwLDQ2o7raLa+r73jldkt56IbwgLuq4G/DdNlKK 0ECvYJAlBfC2CBzPKvWNZkxypSvMx3p4d7dc8c6TcQNQ9Mah5++mmIKjZx392EK+ Cz1bb3HIIW5zXxcG4fnn/YUBT8mkonHxDjLdeVLVsBZh7uQ1kumNDvLGn4v0BKqX S+z64LzPB5pyK86C34BufxZ+CB2+1rasXMEKNplqUoaN+Ak7KyUjmvUuK7NwHT+J eLBQZIRr/2+vTu2RsCPePjZBksJo8hNmVxTONhSsk9+2o1ob/wcNPyxj5qR3aie4 IfUV6EII0C/H5dxvXyBnBBkKDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXvDEHh 7lTnAMnrlh+U7KjWfNUKMB8GA1UdIwQYMBaAFIPkvLdjuM7QNlGQ5ygPCmo0s1tR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEEzQS8xODE0RjM2NkVD QjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0QTJVWkRuS0E4S2FqU3pX MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEEzQS8xODE0RjM2NkVDQjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0 QTJVWkRuS0E4S2FqU3pXMUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdFNJuyvr6hQGd41wGoGf2l/w4JfbvEZ0L/Bq9cTfza2s/HrBnDzAWTUGenhi ONoam7LWkXwzbjeOIxja4yUL/yN/340CiBkPRjW7v6cn+fzpUG4LEl/0pdPFjqDs 0M+wAoJH7PpysBlW4CUBn6m3WCluquy56VKoyX5OYimzRutYBmlm/FQYTL0fNMOY oz+uKAwUsvpT4nB6nQgmdDCNg/7x5uyOoihxZgj23V6CqlZAn3r8dJVx90MkrGkY DgXmDJVhj/gGZv8sDJpMumaSu1zI5/JyXXUkmTMUj9wRYcJNYVb/zukt/NSK5Mmb GHbfO0QGb2PgD/zP4c/3H/lhJw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:14 2026 by rpki-client