$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: lQhU/XR4O3gvpBPY2T4rctrAdm1TzUA5MPdSz+CIZ+0= Subject key identifier: D5:EC:45:88:42:D6:3B:13:C4:7B:3B:52:4D:6E:A3:04:E4:33:FE:0C Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 0AA3 Signing time: Sat 04 Apr 2026 19:19:41 +0000 Manifest this update: Sat 04 Apr 2026 19:19:41 +0000 Manifest next update: Sat 11 Apr 2026 19:19:41 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: ZJ8Mwbeqlzt1FO73tkVaQK5rJZoV4tBrRAWr02I1Ouw=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: 39ZisHTbo+nHiSIEXbaCF/1qoIat8w/3CiQIRNmhIe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Apr 4 19:19:41 2026 GMT Not After : Apr 11 19:19:41 2026 GMT Subject: CN=69d1644d-485d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:e5:f0:dc:12:21:06:0b:66:d9:b1:79:e2: b1:e1:2a:01:31:a1:f8:10:60:df:ac:30:58:f7:6e: 8d:1f:f5:d8:32:c9:09:ba:90:78:a5:5c:d9:07:24: 0f:9e:d8:7e:63:e6:25:6f:54:23:f6:0a:35:21:47: a1:26:83:64:51:ca:6e:38:87:5a:ca:c5:92:c4:7e: 33:72:ff:f0:d8:be:3f:4f:6d:13:5d:37:7d:af:bc: 17:34:d4:42:d4:78:e6:1d:bc:68:8f:74:21:77:c6: 9c:ae:6c:3b:48:1b:2f:f5:49:9d:6b:64:01:e1:ea: 27:a8:2b:5b:f2:a9:3d:bd:49:87:0f:e3:8e:2e:4a: d0:e4:84:29:d8:14:f2:f5:16:04:4d:b6:66:f2:b7: da:30:13:dc:1b:e9:64:73:71:5f:76:45:9e:b1:1f: 64:6c:98:76:b9:70:d3:20:49:4f:d8:7d:a5:a2:e5: 4d:35:e9:f4:1b:fd:21:48:6d:ee:2b:f2:db:81:3b: b0:68:37:9d:22:74:c4:d2:0a:83:2c:b8:84:e1:08: 51:8e:dd:03:5c:bd:e9:60:5f:f0:48:9a:e1:ce:b7: 29:a6:65:02:59:65:c4:6d:71:8a:38:2d:83:6d:e1: 61:85:9d:10:17:2b:67:77:68:aa:ce:fc:08:c6:2e: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EC:45:88:42:D6:3B:13:C4:7B:3B:52:4D:6E:A3:04:E4:33:FE:0C X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e0:f1:ca:9e:9f:a9:50:3e:a0:8c:ca:5c:1d:03:ff:a9:c5: 58:e2:8a:aa:65:ce:4b:b9:0d:4e:9b:82:5e:d1:e4:c4:30:75: 7b:d2:15:cd:fb:57:6d:51:5d:04:16:29:28:ce:5d:8e:03:52: 44:7b:53:0f:fd:2b:2a:ed:04:f4:62:01:00:c8:5f:93:5a:cd: c3:9c:a8:76:fb:90:c5:bc:a5:da:04:45:7b:34:95:5e:44:57: 5c:2a:38:cf:6b:cd:33:e3:93:a5:04:41:c3:ea:9c:7f:27:e0: e7:fb:8c:6c:39:ef:db:9f:b9:51:a8:2e:4d:15:96:49:43:bc: 6a:7f:99:55:9b:4f:07:07:b5:7c:f1:28:33:98:75:77:04:d7: 4f:e6:e8:00:74:0d:56:2c:b9:56:82:76:87:e0:46:47:98:22: 25:ec:00:03:87:34:ed:bc:56:a3:71:8d:35:37:3b:75:27:bb: c0:c4:7d:f2:28:f1:61:1d:bd:7e:e4:38:b2:dc:39:10:cf:35: 2f:94:36:4b:d0:18:a3:6c:a0:02:42:75:38:db:2e:db:43:ad: 25:7f:10:70:bb:a0:d4:6c:6a:b3:5c:70:b3:5a:69:e3:73:69: ba:ae:5b:77:d6:69:54:fd:5d:d6:64:03:06:08:46:b0:85:e3: 33:05:23:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjYwNDA0MTkxOTQxWhcNMjYwNDExMTkxOTQxWjAYMRYwFAYD VQQDEw02OWQxNjQ0ZC00ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRnl8NwSIQYLZtmxeeKx4SoBMaH4EGDfrDBY926NH/XYMskJupB4pVzZByQP nth+Y+Ylb1Qj9go1IUehJoNkUcpuOIdaysWSxH4zcv/w2L4/T20TXTd9r7wXNNRC 1HjmHbxoj3Qhd8acrmw7SBsv9Umda2QB4eonqCtb8qk9vUmHD+OOLkrQ5IQp2BTy 9RYETbZm8rfaMBPcG+lkc3FfdkWesR9kbJh2uXDTIElP2H2louVNNen0G/0hSG3u K/LbgTuwaDedInTE0gqDLLiE4QhRjt0DXL3pYF/wSJrhzrcppmUCWWXEbXGKOC2D beFhhZ0QFytnd2iqzvwIxi69GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNXsRYhC 1jsTxHs7Uk1uowTkM/4MMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ+Dxyp6fqVA+oIzKXB0D/6nFWOKKqmXOS7kNTpuCXtHkxDB1e9IVzftXbVFd BBYpKM5djgNSRHtTD/0rKu0E9GIBAMhfk1rNw5yodvuQxbyl2gRFezSVXkRXXCo4 z2vNM+OTpQRBw+qcfyfg5/uMbDnv25+5UaguTRWWSUO8an+ZVZtPBwe1fPEoM5h1 dwTXT+boAHQNViy5VoJ2h+BGR5giJewAA4c07bxWo3GNNTc7dSe7wMR98ijxYR29 fuQ4stw5EM81L5Q2S9AYo2ygAkJ1ONsu20OtJX8QcLug1Gxqs1xws1pp43Npuq5b d9ZpVP1d1mQDBghGsIXjMwUjcA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:07 2026 by rpki-client