$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json) Hash identifier: NxpMGAtLSuajd74NHZhyXCsbNZXLVt28rHkbWOSuNPQ= Subject key identifier: F5:8C:A5:7D:58:9C:A5:7C:EC:D0:F0:D0:B8:00:8B:7D:EA:69:F0:D5 Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Certificate serial: 0A64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft Manifest number: 0A5C Signing time: Sat 04 Apr 2026 19:26:36 +0000 Manifest this update: Sat 04 Apr 2026 19:26:35 +0000 Manifest next update: Sat 11 Apr 2026 19:26:35 +0000 Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: 0SOa+dqCaHSgzxpnKIX/4ja+LjloZrFO79z5Ezje6YQ=) 2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: fJPw+8jILHi38OrKB/eoJlQncOyg85Mi4es0uePIWEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660 (0xa64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Validity Not Before: Apr 4 19:26:35 2026 GMT Not After : Apr 11 19:26:35 2026 GMT Subject: CN=69d165ec-e9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:e5:a6:c2:9e:3b:56:27:99:8c:56:cd:7e: 58:4c:c5:88:56:50:cd:77:59:7a:66:65:f0:d8:56: fe:1d:f2:26:14:84:0d:a4:67:62:3e:49:46:e6:93: de:ff:d0:ec:a5:b1:32:2b:d5:0c:de:bd:12:75:7e: 57:90:79:0b:98:53:24:84:45:ab:e3:74:3c:6c:20: 0e:1c:9c:24:11:9c:63:17:72:3c:e8:f0:b7:6a:3d: b0:96:4a:2e:ca:13:f5:05:b8:ac:44:c5:bd:1e:c3: bf:63:c7:ec:d5:d4:b9:7f:d8:fb:b8:7f:f6:4c:66: 5d:0c:bc:08:be:06:d5:78:ce:ba:6d:73:13:55:bd: 7a:c5:a7:14:36:e2:b2:bd:ff:af:9e:5d:c9:3c:b2: 2b:3a:f2:cf:51:f8:30:37:72:23:a6:7b:b8:dc:fa: 85:ef:32:eb:9a:90:0f:f4:42:c6:b0:e7:26:06:b5: d7:75:6f:5e:b6:e9:9a:14:0c:43:40:d0:56:f6:2e: e2:f5:f7:95:d5:ef:53:be:12:42:7e:ae:8f:9d:6d: 96:78:18:52:05:41:c8:c7:e5:a6:b4:ba:8a:a8:69: b5:85:03:21:ab:37:9a:eb:e0:0b:3c:7b:fc:db:9b: 88:4f:39:51:87:e4:16:7c:a5:c7:54:62:23:75:fd: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8C:A5:7D:58:9C:A5:7C:EC:D0:F0:D0:B8:00:8B:7D:EA:69:F0:D5 X509v3 Authority Key Identifier: keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:3d:8e:87:1e:a5:cf:ed:a7:28:34:a8:e9:5f:22:4b:62:05: b2:2f:2d:e8:f5:15:3a:b6:ab:46:41:30:e7:8c:47:c8:23:c4: df:33:14:ec:aa:55:62:45:01:4b:31:2b:80:79:7d:5e:15:85: 34:e4:1e:e0:61:ea:92:dc:a3:d2:72:cc:79:3c:7c:23:65:1b: 11:af:74:e3:69:1d:5f:38:c3:c6:be:33:3b:bf:b3:1d:73:c7: b0:44:f1:db:3d:76:7f:f3:b2:55:55:f2:ab:4b:89:1d:1d:62: db:94:63:5a:4c:86:c8:a5:99:e1:4e:f1:b7:a8:4c:ea:c1:8f: 9a:e3:82:ac:65:93:a6:ae:f0:8d:d3:aa:3a:5f:97:e6:63:c4: d7:6e:77:e4:34:ff:43:ee:09:21:07:ca:07:20:6d:62:eb:44: c4:82:1c:cb:1a:9c:85:a9:a5:40:15:04:68:5d:8f:4b:57:7e: 2e:18:46:54:a4:ad:2e:8d:d2:ef:e7:29:4f:ba:19:81:49:be: 7c:c3:1f:53:8c:79:18:4a:e7:3d:f0:19:cb:93:85:e6:fa:1e: d6:ec:1a:69:42:5d:6e:d6:a0:8a:8e:ad:4f:b7:95:04:2b:1d: a2:e4:11:d5:87:83:04:0e:73:56:56:4b:7b:d1:dd:8c:2f:93: b3:b3:9c:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2QjUxMTAvBgNVBAUTKEYzMDEyQ0VEMTc2OERFQUE2NEM0RTkzNkI4NkNCMzFF MTZDRUZDQkEwHhcNMjYwNDA0MTkyNjM1WhcNMjYwNDExMTkyNjM1WjAYMRYwFAYD VQQDEw02OWQxNjVlYy1lOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdflpsKeO1YnmYxWzX5YTMWIVlDNd1l6ZmXw2Fb+HfImFIQNpGdiPklG5pPe /9DspbEyK9UM3r0SdX5XkHkLmFMkhEWr43Q8bCAOHJwkEZxjF3I86PC3aj2wlkou yhP1BbisRMW9HsO/Y8fs1dS5f9j7uH/2TGZdDLwIvgbVeM66bXMTVb16xacUNuKy vf+vnl3JPLIrOvLPUfgwN3Ijpnu43PqF7zLrmpAP9ELGsOcmBrXXdW9etumaFAxD QNBW9i7i9feV1e9TvhJCfq6PnW2WeBhSBUHIx+WmtLqKqGm1hQMhqzea6+ALPHv8 25uITzlRh+QWfKXHVGIjdf0CzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWMpX1Y nKV87NDw0LgAi33qafDVMB8GA1UdIwQYMBaAFPMBLO0XaN6qZMTpNrhssx4Wzvy6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDZCNS8wRjVBMDE0MDgy RjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNxcGt4T2sydUd5ekhoYk9f TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh3RXM3UmRvM3Fwa3hPazJ1R3l6SGhiT19Mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDZCNS8wRjVBMDE0MDgyRjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNx cGt4T2sydUd5ekhoYk9fTG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhD2Ohx6lz+2nKDSo6V8iS2IFsi8t6PUVOrarRkEw54xHyCPE3zMU7KpVYkUB SzErgHl9XhWFNOQe4GHqktyj0nLMeTx8I2UbEa9042kdXzjDxr4zO7+zHXPHsETx 2z12f/OyVVXyq0uJHR1i25RjWkyGyKWZ4U7xt6hM6sGPmuOCrGWTpq7wjdOqOl+X 5mPE12535DT/Q+4JIQfKByBtYutExIIcyxqchamlQBUEaF2PS1d+LhhGVKStLo3S 7+cpT7oZgUm+fMMfU4x5GErnPfAZy5OF5voe1uwaaUJdbtagio6tT7eVBCsdouQR 1YeDBA5zVlZLe9HdjC+Ts7Oc/g== -----END CERTIFICATE-----Generated at Mon Apr 6 13:59:06 2026 by rpki-client