$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: YiXzHh+MlDpt027+zLVxr8ARl0AiE4NpBfJG7Cwaca0= Subject key identifier: C6:31:CE:13:D6:A4:1F:6B:50:9E:90:D5:AF:A4:C8:E6:DE:75:77:52 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: 0133 Signing time: Sat 18 Apr 2026 14:23:18 +0000 Manifest this update: Sat 18 Apr 2026 14:23:17 +0000 Manifest next update: Sat 25 Apr 2026 14:23:17 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: fB2Tn94GuSddt415vbjlGS0ajl2qP01PorjlAAL9+/o=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: dtSxcZxOzJQEnPBNnUCjQqEgDanYjoo+1mcfrul1wgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Apr 18 14:23:17 2026 GMT Not After : Apr 25 14:23:17 2026 GMT Subject: CN=69e393d5-bff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:b3:72:f7:b6:d5:ab:db:43:90:7e:50:0c: 73:a0:fb:6b:d0:e9:da:c3:b0:a5:83:85:8c:3c:5e: 8e:b2:de:cc:1e:70:43:f7:05:4b:db:0d:be:dd:78: ce:25:1a:76:8b:05:39:40:be:df:c1:a6:f0:50:d4: ea:67:b0:e3:a1:a7:3d:bc:19:25:de:ce:85:13:01: 0e:15:47:c2:af:59:a4:9b:ad:4c:bd:e1:8a:54:6d: 7e:0b:38:8d:7a:8f:e4:22:79:fd:ac:37:58:fb:7e: 72:b2:ed:45:eb:e5:66:24:4a:71:6a:4e:87:c7:fd: 86:a3:b6:66:54:05:4d:62:d4:a7:29:de:28:96:2e: 57:88:fb:ed:19:b5:f7:bb:c8:5e:cd:ee:00:c6:de: 25:75:d0:b7:e9:ed:54:70:12:24:2b:5d:2b:40:e2: a9:3b:fe:f0:ba:3a:27:12:28:77:73:da:c4:35:42: b1:04:ea:ca:84:62:e1:e5:46:40:63:0e:2c:8e:ed: 10:6f:43:1c:cf:17:fd:aa:89:8c:70:38:e4:d8:ff: 00:e8:89:cf:a2:b5:5c:77:2d:47:60:33:a1:53:e9: 2a:b6:ef:8b:a1:78:d1:08:ef:7c:02:2b:00:f7:21: 6c:a8:8e:87:b2:60:0d:ef:ba:d4:12:ba:4c:ad:0f: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:31:CE:13:D6:A4:1F:6B:50:9E:90:D5:AF:A4:C8:E6:DE:75:77:52 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:9c:6e:10:db:57:4f:48:3c:a0:c4:62:b1:38:f2:31:db:92: 6e:f1:a7:06:5b:c3:d1:72:23:81:82:77:a6:b3:c0:b1:29:21: 0c:4b:b9:fa:c3:32:c9:c1:1c:18:b4:69:d7:26:ba:18:fd:e9: 86:81:06:4e:78:d2:fe:fa:37:83:6d:be:58:6e:5d:41:50:00: 55:ac:21:4b:86:e6:d0:0d:f5:46:81:ad:e1:02:45:67:66:bd: f2:66:9a:93:e5:70:8b:fa:c9:b7:f6:61:90:8c:56:f5:90:bb: 65:e2:9a:3b:5b:66:33:3d:d9:74:bd:0b:c3:1a:fb:f0:cc:03: f2:fc:e3:97:8f:38:94:84:3d:c8:de:c3:11:a8:fa:e5:99:d9: 87:37:25:d6:c4:60:9a:7e:1d:f4:51:3d:bf:cf:dc:3b:f2:c9: 0a:17:cd:8f:72:57:ed:e7:d2:7c:1c:a0:2e:08:0c:88:2a:39: 0c:ca:73:e7:62:9b:dc:34:64:53:87:6d:94:ab:87:41:49:f0: f1:8f:7b:0b:50:45:63:cd:0b:14:c1:d8:4e:e3:51:32:43:d2: 4c:46:dc:7a:f5:7f:e6:48:00:2a:92:69:a5:05:1c:7e:d4:75: ae:8f:b2:36:1c:bd:7c:68:af:11:33:ac:26:c4:35:dc:2e:cc: 40:e8:e8:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjYwNDE4MTQyMzE3WhcNMjYwNDI1MTQyMzE3WjAYMRYwFAYD VQQDEw02OWUzOTNkNS1iZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt6zcve21avbQ5B+UAxzoPtr0Onaw7Clg4WMPF6Ost7MHnBD9wVL2w2+3XjO JRp2iwU5QL7fwabwUNTqZ7Djoac9vBkl3s6FEwEOFUfCr1mkm61MveGKVG1+CziN eo/kInn9rDdY+35ysu1F6+VmJEpxak6Hx/2Go7ZmVAVNYtSnKd4oli5XiPvtGbX3 u8heze4Axt4lddC36e1UcBIkK10rQOKpO/7wujonEih3c9rENUKxBOrKhGLh5UZA Yw4sju0Qb0Mczxf9qomMcDjk2P8A6InPorVcdy1HYDOhU+kqtu+LoXjRCO98AisA 9yFsqI6HsmAN77rUErpMrQ9o5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYxzhPW pB9rUJ6Q1a+kyObedXdSMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQZxuENtXT0g8oMRisTjyMduSbvGnBlvD0XIjgYJ3prPAsSkhDEu5+sMyycEc GLRp1ya6GP3phoEGTnjS/vo3g22+WG5dQVAAVawhS4bm0A31RoGt4QJFZ2a98maa k+Vwi/rJt/ZhkIxW9ZC7ZeKaO1tmMz3ZdL0Lwxr78MwD8vzjl484lIQ9yN7DEaj6 5ZnZhzcl1sRgmn4d9FE9v8/cO/LJChfNj3JX7efSfBygLggMiCo5DMpz52Kb3DRk U4dtlKuHQUnw8Y97C1BFY80LFMHYTuNRMkPSTEbcevV/5kgAKpJppQUcftR1ro+y Nhy9fGivETOsJsQ13C7MQOjo4Q== -----END CERTIFICATE-----Generated at Sat Apr 18 21:07:07 2026 by rpki-client