$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: 4WVxjENLI/f+KWD43DrZ2UKWC08tm9cSLRijt639kRU= Subject key identifier: 09:6F:71:85:BB:B4:76:C9:43:E7:47:F2:91:4A:ED:03:6C:B6:8C:48 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2AAE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2AA1 Signing time: Sat 04 Apr 2026 14:23:55 +0000 Manifest this update: Sat 04 Apr 2026 14:23:54 +0000 Manifest next update: Sat 11 Apr 2026 14:23:54 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: zyVgzSYBXfOE4XOTrIX5gQOvDWR5JexpnUheDb0VMy8=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: qeOImN/OPXFrmVSnTa/uFkjmKzAD8SUjcGoXbzqtLu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10926 (0x2aae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Apr 4 14:23:54 2026 GMT Not After : Apr 11 14:23:54 2026 GMT Subject: CN=69d11efb-361a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:c5:45:bc:4f:a4:b3:63:cd:ed:ed:e9:00: e4:93:e8:c0:ff:70:4f:02:1b:4e:76:49:7a:6b:00: 9b:66:4f:79:4c:24:8a:12:8d:f7:f2:99:4a:b1:08: 41:0b:b9:65:1c:1c:d9:3b:1f:38:6c:d8:b1:e8:0a: 76:77:30:be:48:57:96:9d:d3:ab:a0:5d:30:e9:5d: 9c:ab:43:2e:a2:31:39:fc:c4:5e:dc:ca:fa:44:50: 50:50:25:14:e5:0a:41:1a:16:de:95:99:4f:be:cf: 88:a7:99:5d:17:ab:77:00:3d:11:2b:a8:bc:3a:b0: 4c:c2:90:fa:aa:cc:e4:cb:94:9b:36:22:b7:f1:cd: a7:88:f1:fd:9e:ed:f1:b8:c4:c4:44:7a:92:87:75: 2e:d1:c0:e1:a7:51:cf:d7:3a:5f:d7:65:78:8d:dd: 58:a2:5b:84:65:b2:81:3f:f6:f4:8c:fa:1d:c9:6f: 86:02:97:e1:49:5c:f9:ac:d0:60:c6:cf:22:68:91: 5c:7f:04:e4:c9:1c:9b:a2:e0:75:29:5b:cb:53:2e: 6e:77:34:85:be:33:40:0d:0d:0d:25:c6:d1:4a:70: 29:c2:57:50:dd:18:1b:5c:1b:72:ed:1f:e8:ef:c5: bd:2e:41:18:e8:a1:f1:79:c4:fb:2d:34:d4:e8:db: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6F:71:85:BB:B4:76:C9:43:E7:47:F2:91:4A:ED:03:6C:B6:8C:48 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:67:53:c4:c4:45:62:3e:16:d6:94:20:8a:29:cb:1a:93:aa: 10:3a:7e:4e:00:31:25:72:ef:de:1c:a2:a3:9e:79:07:06:47: 6a:29:da:f5:d6:9e:28:93:a8:7f:f6:48:ef:58:95:c4:04:86: 66:9e:c2:12:8b:7e:46:c2:cc:98:ea:32:b1:a3:13:b5:2e:6b: c1:13:62:4a:eb:22:93:1a:6e:0d:9e:26:ea:5e:0f:1f:47:78: 9a:a6:c4:b1:60:07:03:ec:85:c4:33:01:b7:52:94:67:fa:97: 04:da:64:ee:70:bd:e1:91:63:48:2f:fa:47:f6:89:86:d7:97: d1:88:e7:4c:fb:a0:02:45:89:37:da:02:01:05:b8:39:0f:93: f6:cd:2e:a3:6f:b9:e6:09:eb:24:a1:0e:e1:ff:5a:48:65:d4: f8:21:8c:0e:6a:dd:0c:ec:ef:aa:1f:df:73:71:7e:7b:4f:3a: 6f:22:04:d5:6c:23:2b:44:91:ec:22:30:a7:ad:70:ea:eb:62: 25:26:53:d5:4e:94:f5:d5:86:43:99:66:e3:79:06:d0:dc:39: ab:4d:2d:a4:10:80:1c:59:1f:ac:a3:37:ba:0a:32:ba:94:7c: 35:b6:b8:36:05:f7:94:4d:9d:e2:1b:c1:7b:78:8c:81:f7:25: c7:b3:1c:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjYwNDA0MTQyMzU0WhcNMjYwNDExMTQyMzU0WjAYMRYwFAYD VQQDEw02OWQxMWVmYi0zNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvrFRbxPpLNjze3t6QDkk+jA/3BPAhtOdkl6awCbZk95TCSKEo338plKsQhB C7llHBzZOx84bNix6Ap2dzC+SFeWndOroF0w6V2cq0MuojE5/MRe3Mr6RFBQUCUU 5QpBGhbelZlPvs+Ip5ldF6t3AD0RK6i8OrBMwpD6qszky5SbNiK38c2niPH9nu3x uMTERHqSh3Uu0cDhp1HP1zpf12V4jd1YoluEZbKBP/b0jPodyW+GApfhSVz5rNBg xs8iaJFcfwTkyRybouB1KVvLUy5udzSFvjNADQ0NJcbRSnApwldQ3RgbXBty7R/o 78W9LkEY6KHxecT7LTTU6Ns0hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlvcYW7 tHbJQ+dH8pFK7QNstoxIMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPWdTxMRFYj4W1pQgiinLGpOqEDp+TgAxJXLv3hyio555BwZHaina9daeKJOo f/ZI71iVxASGZp7CEot+RsLMmOoysaMTtS5rwRNiSusikxpuDZ4m6l4PH0d4mqbE sWAHA+yFxDMBt1KUZ/qXBNpk7nC94ZFjSC/6R/aJhteX0YjnTPugAkWJN9oCAQW4 OQ+T9s0uo2+55gnrJKEO4f9aSGXU+CGMDmrdDOzvqh/fc3F+e086byIE1WwjK0SR 7CIwp61w6utiJSZT1U6U9dWGQ5lm43kG0Nw5q00tpBCAHFkfrKM3ugoyupR8Nba4 NgX3lE2d4hvBe3iMgfclx7MchQ== -----END CERTIFICATE-----Generated at Mon Apr 6 01:16:50 2026 by rpki-client