$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft File: 8mF6VUFXzpkgnjn9-1PVFt3eePg.mft (raw, json) Hash identifier: CsaqP3ugneOtANBPhfjqXbkh4Z2WlxfuKi2F4QBopoE= Subject key identifier: F2:FF:49:8E:54:02:50:19:D6:10:C8:4C:29:E6:B4:52:13:65:2F:71 Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft Manifest number: 60 Signing time: Sun 05 Apr 2026 07:22:35 +0000 Manifest this update: Sun 05 Apr 2026 07:22:35 +0000 Manifest next update: Sun 12 Apr 2026 07:22:35 +0000 Files and hashes: 1: 8mF6VUFXzpkgnjn9-1PVFt3eePg.crl (hash: Y6KEZLOLzXcU9Aaen/fZ1sMCP5lACRA9xKMpMVb57f8=) 2: 43E43270A27D11F0862ABC17C4F9AE02.roa (hash: NZ2PR9JzupHRbIAvvTjexUgRAGHGGYmk/Ol3V3TWapU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Apr 5 07:22:35 2026 GMT Not After : Apr 12 07:22:35 2026 GMT Subject: CN=69d20dbb-0f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:17:b4:52:12:22:b7:06:b6:b3:b4:fa:90: 8c:58:d2:30:cf:a3:de:82:d8:6f:03:1b:30:03:93: 4f:33:9e:75:e8:18:b6:71:f6:d7:66:f2:39:a1:02: 75:7c:74:88:f2:cc:02:f8:de:b4:ee:60:96:53:21: de:7f:eb:e0:d3:8b:7d:01:c6:a8:d5:06:d3:19:ea: 14:46:04:8d:95:01:71:37:93:4e:be:d9:3b:c2:61: 00:60:d3:6c:08:f4:d9:5e:37:90:d9:70:85:af:00: e0:59:4b:6e:1a:cf:4c:40:28:5d:74:aa:0c:dd:ab: 7b:c4:02:56:a6:71:c4:8e:d1:2e:1c:1a:8b:70:a2: 62:40:83:80:e8:c8:44:f8:9d:94:c8:cf:e5:60:23: a6:d2:df:27:3f:aa:89:72:fa:28:f8:c1:a9:29:ba: a0:f5:0c:50:a1:ad:fa:50:99:07:eb:d0:d1:bc:e8: 04:ac:b7:7b:bc:07:74:fc:8d:2f:b1:49:84:80:da: d8:1e:f8:ee:39:aa:58:20:31:fa:d7:a2:c0:ae:83: c4:87:83:0b:67:9c:47:08:f6:ab:6e:04:32:b9:48: ee:36:11:79:34:39:d8:79:6a:9c:58:8b:68:86:d3: 27:7d:ee:bf:f4:51:2d:f0:2e:8f:e6:e7:2c:df:c7: 05:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FF:49:8E:54:02:50:19:D6:10:C8:4C:29:E6:B4:52:13:65:2F:71 X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5c:11:e9:e2:61:24:4c:d3:c1:65:11:6f:77:82:fd:be:68: 5d:b6:7a:e5:6a:58:ec:17:f6:c5:9c:23:68:6b:a9:b0:53:da: cb:40:ba:d9:43:53:7f:31:14:6b:64:c6:ba:9f:bc:41:36:38: 6d:38:2f:cd:39:a7:ca:74:a5:08:6f:9c:87:e6:95:91:a5:03: 08:c9:a8:39:69:8b:32:07:26:bd:84:52:a0:5c:21:5b:be:84: 0d:9a:f9:c6:09:68:4d:2a:5a:c6:75:97:70:1c:b2:50:ec:3c: 58:b8:22:87:5a:6f:19:cd:d6:c0:c0:28:34:f4:47:56:ec:98: 78:ac:71:00:5f:f2:38:4f:a9:e8:28:1f:be:7f:55:c1:83:77: 42:ef:f7:b0:39:70:77:7d:cb:e2:cd:76:71:2b:38:b0:e8:4a: 83:59:46:af:d4:f0:4b:f8:f8:fa:16:12:3c:a8:f1:94:d1:79: 9d:e4:23:4e:06:67:e6:c0:54:52:9a:6c:89:ea:c5:2f:f3:34: be:0a:9b:be:97:0f:9d:79:48:ea:d5:3a:81:c6:ac:19:37:13: bb:7b:e2:bd:12:a0:60:27:0a:ba:fb:bd:cf:94:88:74:02:e9: d5:5e:e5:db:05:96:c8:24:33:21:b1:f4:73:66:0e:fa:19:44: 99:83:8e:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE RERFNzhGODAeFw0yNjA0MDUwNzIyMzVaFw0yNjA0MTIwNzIyMzVaMBgxFjAUBgNV BAMTDTY5ZDIwZGJiLTBmOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBRhe0UhIitwa2s7T6kIxY0jDPo96C2G8DGzADk08znnXoGLZx9tdm8jmhAnV8 dIjyzAL43rTuYJZTId5/6+DTi30BxqjVBtMZ6hRGBI2VAXE3k06+2TvCYQBg02wI 9NleN5DZcIWvAOBZS24az0xAKF10qgzdq3vEAlamccSO0S4cGotwomJAg4DoyET4 nZTIz+VgI6bS3yc/qoly+ij4wakpuqD1DFChrfpQmQfr0NG86ASst3u8B3T8jS+x SYSA2tge+O45qlggMfrXosCug8SHgwtnnEcI9qtuBDK5SO42EXk0Odh5apxYi2iG 0yd97r/0US3wLo/m5yzfxwW1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8v9JjlQC UBnWEMhMKea0UhNlL3EwHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzNGMzc1RDI2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBr Z25qbjktMVBWRnQzZWVQZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+XBHp4mEkTNPBZRFvd4L9vmhdtnrlaljsF/bFnCNoa6mwU9rLQLrZQ1N/MRRr ZMa6n7xBNjhtOC/NOafKdKUIb5yH5pWRpQMIyag5aYsyBya9hFKgXCFbvoQNmvnG CWhNKlrGdZdwHLJQ7DxYuCKHWm8ZzdbAwCg09EdW7Jh4rHEAX/I4T6noKB++f1XB g3dC7/ewOXB3fcvizXZxKziw6EqDWUav1PBL+Pj6FhI8qPGU0Xmd5CNOBmfmwFRS mmyJ6sUv8zS+Cpu+lw+deUjq1TqBxqwZNxO7e+K9EqBgJwq6+73PlIh0AunVXuXb BZbIJDMhsfRzZg76GUSZg45Q -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:06 2026 by rpki-client