$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json) Hash identifier: Htwt1936fX5rCLisKba7hw288g1ip72/XolG2ahE6ds= Subject key identifier: 66:A2:8C:26:48:2F:CC:82:2E:C6:48:FF:4F:41:2F:95:D8:60:76:AA Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft Manifest number: CA Signing time: Sun 05 Apr 2026 06:14:32 +0000 Manifest this update: Sun 05 Apr 2026 06:14:31 +0000 Manifest next update: Sun 12 Apr 2026 06:14:31 +0000 Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: Z1jSG6jwc6LRiYdIIA67Y8y4n5wNChN6kKPQw5xHaR8=) 2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: duqpca6K+f3FNkiOtsfEqtlyMmxhg4ZVn8NvukwRevs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Validity Not Before: Apr 5 06:14:31 2026 GMT Not After : Apr 12 06:14:31 2026 GMT Subject: CN=69d1fdc7-7480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:ff:70:da:b0:c3:42:5d:a2:f1:66:5b:f7: 74:f8:f9:39:60:d4:d0:d0:8e:9c:da:9c:bc:43:69: 8e:a3:80:f2:37:9b:2d:5c:c7:c3:c0:4d:3e:0c:b3: 38:3a:93:7e:ee:67:1d:33:40:78:78:3b:1c:5d:42: 02:9f:74:ba:dd:dd:1a:e7:fa:7b:05:ac:fb:5a:46: 61:bc:bd:79:52:12:43:b1:90:61:43:b6:8a:40:2b: 19:b5:03:bf:67:47:18:49:2a:66:2e:82:02:da:00: 6f:5a:76:1a:90:7f:2d:66:55:df:db:f5:86:db:45: 14:66:7f:c9:4a:34:17:a1:76:14:4d:3c:4c:33:da: bc:16:30:3e:a8:20:81:15:d9:4c:d0:9a:3e:cb:aa: 7a:97:0c:8f:e4:00:88:db:be:6d:88:d3:00:38:95: af:fe:f7:47:b0:49:13:f6:b1:0a:1b:91:49:40:64: 00:77:9f:74:12:3a:82:8b:c8:63:40:64:66:a9:94: 26:86:95:ba:ae:b4:04:e8:bc:22:db:7d:74:8a:df: 7b:aa:a3:13:34:74:d0:cb:89:e4:25:e8:ac:a6:49: 10:0c:cb:38:ae:ae:26:1d:4d:4d:41:ec:b7:1e:21: 47:68:06:5a:59:9a:f2:40:87:db:ae:e4:18:99:eb: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:8C:26:48:2F:CC:82:2E:C6:48:FF:4F:41:2F:95:D8:60:76:AA X509v3 Authority Key Identifier: keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:95:3e:53:91:f8:c0:96:ee:70:60:56:0d:c2:0f:96:b4:e3: 70:e7:a3:25:7d:81:d1:36:4e:4f:c2:19:cc:3b:c4:2f:e6:16: 65:a3:15:2c:81:ee:a5:08:b3:0a:ca:df:99:7e:34:a3:14:a1: ac:25:73:37:cf:c3:ce:d5:4c:87:57:b9:71:92:c4:25:a4:93: be:f0:1b:f2:0b:cf:e2:c3:ab:8f:4e:6f:14:78:49:0f:13:fa: 02:2f:5e:85:84:95:f0:d3:b0:74:ea:b7:58:7c:cf:92:46:04: f2:58:76:60:f9:03:61:f9:1d:3a:99:58:14:6f:b9:ef:f3:4c: a1:0f:fc:57:46:f0:5c:e7:ca:4e:a3:f5:42:30:dd:cc:2b:29: 6f:83:55:6c:3d:05:9d:26:66:3d:3a:6e:f8:65:95:f4:20:81: e6:4a:5e:cd:bc:76:ac:51:fc:7f:7b:bb:0f:48:fd:98:88:4e: 48:d1:cc:07:6a:ad:0a:7d:dc:84:4f:e5:ba:83:2a:81:62:89: 30:ea:87:99:88:1c:d5:6f:02:1a:a4:a8:b1:3c:c2:25:ca:98: 82:64:ab:27:24:90:bb:ef:ef:2d:d1:a4:6d:99:08:cb:30:91: d6:1e:97:ef:a6:f4:7b:7f:5d:1e:db:83:c4:17:83:52:1a:23: e1:b5:29:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2QzQxMTAvBgNVBAUTKEM3QzMyMzRCRDI2REFENjI5RTJEN0VGNDQ0NDg0RkU1 NDFEODE0OEUwHhcNMjYwNDA1MDYxNDMxWhcNMjYwNDEyMDYxNDMxWjAYMRYwFAYD VQQDEw02OWQxZmRjNy03NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tb/cNqww0JdovFmW/d0+Pk5YNTQ0I6c2py8Q2mOo4DyN5stXMfDwE0+DLM4 OpN+7mcdM0B4eDscXUICn3S63d0a5/p7Baz7WkZhvL15UhJDsZBhQ7aKQCsZtQO/ Z0cYSSpmLoIC2gBvWnYakH8tZlXf2/WG20UUZn/JSjQXoXYUTTxMM9q8FjA+qCCB FdlM0Jo+y6p6lwyP5ACI275tiNMAOJWv/vdHsEkT9rEKG5FJQGQAd590EjqCi8hj QGRmqZQmhpW6rrQE6Lwi2310it97qqMTNHTQy4nkJeispkkQDMs4rq4mHU1NQey3 HiFHaAZaWZryQIfbruQYmesC7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaijCZI L8yCLsZI/09BL5XYYHaqMB8GA1UdIwQYMBaAFMfDI0vSba1ini1+9ERIT+VB2BSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzZDNC9DMTYwNTg1MkZF RUQxMUVGOUZGNkNFODBDNEY5QUUwMi94OE1qUzlKdHJXS2VMWDcwUkVoUDVVSFlG STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4TWpTOUp0cldLZUxYNzBSRWhQNVVIWUZJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzZDNC9DMTYwNTg1MkZFRUQxMUVGOUZGNkNFODBDNEY5QUUwMi94OE1qUzlKdHJX S2VMWDcwUkVoUDVVSFlGSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJJU+U5H4wJbucGBWDcIPlrTjcOejJX2B0TZOT8IZzDvEL+YWZaMVLIHupQiz CsrfmX40oxShrCVzN8/DztVMh1e5cZLEJaSTvvAb8gvP4sOrj05vFHhJDxP6Ai9e hYSV8NOwdOq3WHzPkkYE8lh2YPkDYfkdOplYFG+57/NMoQ/8V0bwXOfKTqP1QjDd zCspb4NVbD0FnSZmPTpu+GWV9CCB5kpezbx2rFH8f3u7D0j9mIhOSNHMB2qtCn3c hE/luoMqgWKJMOqHmYgc1W8CGqSosTzCJcqYgmSrJySQu+/vLdGkbZkIyzCR1h6X 76b0e39dHtuDxBeDUhoj4bUpPA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:59:20 2026 by rpki-client