$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: FFuU+kQgjg0NIKW0aXDKlq0zLHiOhmbTyLyI6RUW3nU= Subject key identifier: 22:E9:F6:32:1D:E7:55:3D:29:07:74:67:2E:81:CC:BB:A3:3B:21:35 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 0504 Signing time: Sat 04 Apr 2026 23:26:15 +0000 Manifest this update: Sat 04 Apr 2026 23:26:15 +0000 Manifest next update: Sat 11 Apr 2026 23:26:15 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: NBr2CE1k/HX4qTdbII/vfv6S792uIfgpS0DisjmN0pI=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: jGT9DPCJHSotVx11OyuLlszzlR3EFrAj5UdwSuwi13Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Apr 4 23:26:15 2026 GMT Not After : Apr 11 23:26:15 2026 GMT Subject: CN=69d19e17-9767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:20:9f:85:ec:d6:c0:36:43:27:e6:92:3e: 24:e6:75:66:1a:93:91:7f:39:67:e6:d2:73:fc:d3: 2a:9c:b2:0c:aa:17:23:1f:5b:ee:50:60:3f:65:02: 73:6e:58:34:e9:62:e0:b1:68:9d:20:3c:db:8d:d2: 3f:fd:e7:69:cb:07:16:de:bf:c2:38:ee:e6:0a:b5: 7a:c2:bd:8c:4d:98:88:3e:68:3a:b3:7a:8e:f2:d5: dd:1c:47:ab:95:ac:cd:a6:ce:c7:26:a2:77:b5:c0: f6:0d:f9:04:f2:d8:18:b0:c8:76:56:8a:10:c3:81: 37:43:64:e3:85:e3:76:d6:16:d4:07:7a:ac:ea:31: 32:00:56:be:d0:97:e5:1d:05:2f:53:82:ef:28:85: e7:c5:c3:f1:b8:be:63:bd:24:12:67:02:7b:ec:6c: 92:c0:8c:19:7a:be:a6:8a:0b:f2:76:ca:eb:17:23: 23:5c:03:89:0e:5c:64:c8:3f:d0:0f:04:62:b9:b9: ea:03:bc:fe:a7:74:c0:d4:58:ad:7a:6a:8f:c2:1f: 29:ab:ed:1a:81:88:6e:c2:55:62:79:50:93:d4:4c: 23:de:b3:e9:01:7a:72:4b:3c:20:b8:f7:69:e8:cb: 92:53:10:8b:78:1e:98:a1:fe:10:56:26:f7:67:cd: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E9:F6:32:1D:E7:55:3D:29:07:74:67:2E:81:CC:BB:A3:3B:21:35 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ef:d7:82:ff:c3:7f:2b:8b:67:c0:d3:c3:40:eb:ff:f7:da: fb:91:e3:a0:31:66:80:1d:f8:59:0d:3c:60:23:d3:f9:d7:99: d8:55:c0:40:7c:b6:8e:0e:a0:ee:9f:38:c7:08:4c:b1:95:77: 5d:eb:c1:3e:4d:e0:9e:19:f5:cb:eb:30:38:6d:b7:62:fe:a5: 86:64:34:2a:a1:73:67:70:04:0b:a1:dd:30:81:9f:aa:8f:23: 77:f0:fc:0f:3b:b6:db:c1:30:c0:76:84:df:25:05:cd:1d:e1: e1:c7:de:69:6c:9a:d0:a1:92:9c:11:bb:85:dd:87:e8:fd:59: 52:c9:e4:57:fc:ac:b1:90:d7:c4:b2:3c:9c:ac:4f:bf:b9:a7: c4:2f:0c:43:83:1f:8c:cc:d2:6f:a8:a0:3b:d8:e6:22:3f:86: e6:9f:b7:af:ae:42:a7:77:78:62:71:e1:0d:e6:9c:4f:52:8e: 6a:8c:bc:6f:43:4c:0e:87:26:06:f5:7c:f5:82:53:9f:6f:23: 84:2a:16:e1:2c:4e:44:c8:7b:c0:d5:1c:65:e1:04:98:cb:fd: 02:33:1a:23:b0:29:0f:91:05:07:a8:9b:87:04:9e:36:c7:c8: 9d:0a:04:b1:a5:b2:76:fa:15:0d:b1:3a:3f:37:d4:e1:cc:73: 3c:bd:d5:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjYwNDA0MjMyNjE1WhcNMjYwNDExMjMyNjE1WjAYMRYwFAYD VQQDEw02OWQxOWUxNy05NzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs4gn4Xs1sA2Qyfmkj4k5nVmGpORfzln5tJz/NMqnLIMqhcjH1vuUGA/ZQJz blg06WLgsWidIDzbjdI//edpywcW3r/COO7mCrV6wr2MTZiIPmg6s3qO8tXdHEer lazNps7HJqJ3tcD2DfkE8tgYsMh2VooQw4E3Q2TjheN21hbUB3qs6jEyAFa+0Jfl HQUvU4LvKIXnxcPxuL5jvSQSZwJ77GySwIwZer6migvydsrrFyMjXAOJDlxkyD/Q DwRiubnqA7z+p3TA1FitemqPwh8pq+0agYhuwlVieVCT1Ewj3rPpAXpySzwguPdp 6MuSUxCLeB6Yof4QVib3Z825GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLp9jId 51U9KQd0Zy6BzLujOyE1MB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG+/Xgv/DfyuLZ8DTw0Dr//fa+5HjoDFmgB34WQ08YCPT+deZ2FXAQHy2jg6g 7p84xwhMsZV3XevBPk3gnhn1y+swOG23Yv6lhmQ0KqFzZ3AEC6HdMIGfqo8jd/D8 Dzu228EwwHaE3yUFzR3h4cfeaWya0KGSnBG7hd2H6P1ZUsnkV/yssZDXxLI8nKxP v7mnxC8MQ4MfjMzSb6igO9jmIj+G5p+3r65Cp3d4YnHhDeacT1KOaoy8b0NMDocm BvV89YJTn28jhCoW4SxORMh7wNUcZeEEmMv9AjMaI7ApD5EFB6ibhwSeNsfInQoE saWydvoVDbE6PzfU4cxzPL3VdQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:29 2026 by rpki-client