$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json) Hash identifier: OjDZg9wkTI1ZnrCMdZnhCHJnG4NknajS+Z6u6GH21vM= Subject key identifier: 23:C1:3B:63:08:CF:5C:EE:32:48:4C:5F:63:58:8A:CB:45:55:22:1E Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft Manifest number: 0E Signing time: Sun 05 Apr 2026 08:25:05 +0000 Manifest this update: Sun 05 Apr 2026 08:25:05 +0000 Manifest next update: Sun 12 Apr 2026 08:25:05 +0000 Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: mwakbwFRzx28scFZ52qwwhynHQ+Jehxc2DPbm/OFhtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Validity Not Before: Apr 5 08:25:05 2026 GMT Not After : Apr 12 08:25:05 2026 GMT Subject: CN=69d21c61-57e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:e4:89:37:5d:75:1a:83:3b:a0:b2:e5:3e: 28:bb:31:5c:68:9a:d5:01:11:e5:6b:94:5b:34:85: 49:ef:cc:31:ab:de:fe:82:09:5c:cb:ac:f6:6f:13: 2f:8e:20:cc:0d:1f:eb:c8:8f:7f:c6:bc:e8:6d:16: 42:43:ab:e7:7f:a9:63:d1:41:5d:e6:61:e8:d5:b2: e3:1b:86:f5:f4:91:a8:2c:58:c7:5b:f4:cc:fb:15: af:12:15:f7:92:22:fd:ac:6f:0b:61:2b:a7:e4:b4: ba:10:90:67:07:36:f1:10:e6:c8:7d:46:af:98:cd: 21:1b:c5:59:d9:96:37:42:e8:92:f7:e0:24:5d:82: b8:12:e4:8f:9c:ff:59:2f:ec:42:6e:80:74:f8:b3: 5d:6b:7a:8e:4c:82:90:66:84:b8:18:ba:b0:a0:0a: f9:13:52:af:36:b9:d8:85:0e:40:51:c0:7a:ca:20: 65:0f:94:8c:85:39:77:ac:5b:64:df:39:16:83:36: b1:ea:c2:19:1e:a1:c4:f0:6a:94:02:b7:f1:8c:d7: c0:21:93:d1:c4:c9:66:f5:49:de:6f:bb:32:8e:d6: b7:3c:95:6a:4b:eb:aa:9c:cf:d0:6b:91:00:fe:cc: 78:03:98:4f:81:9a:97:c2:78:5d:f3:f8:1d:87:cb: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:3B:63:08:CF:5C:EE:32:48:4C:5F:63:58:8A:CB:45:55:22:1E X509v3 Authority Key Identifier: keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:75:56:b8:7b:6e:5f:83:69:e5:52:8d:17:3f:3c:20:59:16: 75:73:ed:5c:e0:e3:b4:84:61:d5:af:1f:8a:60:87:c7:f1:3a: 4e:71:16:d3:fd:05:04:eb:4b:7c:eb:26:58:db:6c:ff:39:6b: 9a:1a:35:f3:d0:58:fd:ed:74:3b:46:e1:b2:21:8c:6c:df:54: 91:48:22:c5:50:36:ec:ac:39:db:18:9b:05:9c:09:0a:e6:03: 78:57:e6:38:c0:b5:c7:79:da:ef:df:a1:d5:35:fd:99:05:00: 34:8a:a7:a5:8c:ce:6e:00:dc:b7:9f:28:e6:b2:7b:25:99:ae: 52:a9:8c:3a:d5:1e:00:3e:f9:7e:b2:4f:93:76:84:48:d8:10: 6f:2a:22:49:c4:96:89:51:0f:f7:61:20:ac:7b:bb:21:9c:e8: f7:3c:11:e1:f3:84:b2:cd:04:c9:aa:08:19:13:ec:24:e7:e2: 3e:f2:66:7e:84:fc:32:57:9b:2a:cd:50:a1:09:d8:0d:17:73: 28:81:81:c6:8a:be:e8:de:93:32:8a:70:1a:6e:52:ff:17:ae: ce:c6:c0:23:83:ab:5a:43:84:f1:91:25:41:06:0a:6d:26:1e: 4f:44:c1:c5:1b:e2:83:3b:46:9d:20:00:01:e6:67:02:0d:36: 07:59:34:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy MURFNDE0QjAeFw0yNjA0MDUwODI1MDVaFw0yNjA0MTIwODI1MDVaMBgxFjAUBgNV BAMTDTY5ZDIxYzYxLTU3ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj7eSJN111GoM7oLLlPii7MVxomtUBEeVrlFs0hUnvzDGr3v6CCVzLrPZvEy+O IMwNH+vIj3/GvOhtFkJDq+d/qWPRQV3mYejVsuMbhvX0kagsWMdb9Mz7Fa8SFfeS Iv2sbwthK6fktLoQkGcHNvEQ5sh9Rq+YzSEbxVnZljdC6JL34CRdgrgS5I+c/1kv 7EJugHT4s11reo5MgpBmhLgYurCgCvkTUq82udiFDkBRwHrKIGUPlIyFOXesW2Tf ORaDNrHqwhkeocTwapQCt/GM18Ahk9HEyWb1Sd5vuzKO1rc8lWpL66qcz9BrkQD+ zHgDmE+BmpfCeF3z+B2Hy6nfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI8E7YwjP XO4ySExfY1iKy0VVIh4wHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBadVa4e25fg2nlUo0XPzwgWRZ1c+1c4OO0hGHVrx+KYIfH8TpOcRbT/QUE60t8 6yZY22z/OWuaGjXz0Fj97XQ7RuGyIYxs31SRSCLFUDbsrDnbGJsFnAkK5gN4V+Y4 wLXHedrv36HVNf2ZBQA0iqeljM5uANy3nyjmsnslma5SqYw61R4APvl+sk+TdoRI 2BBvKiJJxJaJUQ/3YSCse7shnOj3PBHh84SyzQTJqggZE+wk5+I+8mZ+hPwyV5sq zVChCdgNF3MogYHGir7o3pMyinAablL/F67OxsAjg6taQ4TxkSVBBgptJh5PRMHF G+KDO0adIAAB5mcCDTYHWTR6 -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:40 2026 by rpki-client