$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft File: 8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json) Hash identifier: 2ChgCE6gJEwMchgU9WUZYflesEkoog7oe9ek71la7QY= Subject key identifier: 56:D5:3C:ED:0C:9B:8A:C4:98:93:FF:6F:25:13:4D:6C:3C:79:38:B7 Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 03DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft Manifest number: 03D9 Signing time: Sun 05 Apr 2026 00:19:41 +0000 Manifest this update: Sun 05 Apr 2026 00:19:41 +0000 Manifest next update: Sun 12 Apr 2026 00:19:41 +0000 Files and hashes: 1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: ZhrqDPj3ItPjR7tUvWHhHF3bUvEaUCQzciyRzeI3tDQ=) 2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: i4wGybB1WdffwImrTNHdx7mWqUy/NNLm8IvjBsrlwTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: Apr 5 00:19:41 2026 GMT Not After : Apr 12 00:19:41 2026 GMT Subject: CN=69d1aa9d-3c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bf:cc:66:b6:2e:99:ad:c8:93:3f:0b:b9:a8: 8b:04:21:9c:ec:e8:9d:a5:84:19:0b:ba:07:b0:c1: a9:cb:bc:ba:b5:5b:c0:5c:66:d9:10:a2:61:28:38: 7e:9b:41:32:dc:31:fd:bc:c3:73:8a:75:b1:60:8b: c3:d7:2b:7e:66:e8:3a:2d:bf:af:01:bc:f3:65:cf: 01:4e:86:2d:0a:87:17:c6:aa:67:73:4a:93:3c:f2: fc:ce:65:88:d0:a0:e7:db:87:33:fd:b8:b2:ce:e8: 4d:bd:4e:eb:5c:0b:32:ae:0b:75:31:61:db:6c:af: 49:56:95:d4:9a:97:8e:57:5d:9c:ea:7f:9f:d1:8b: 4f:2f:5e:91:fb:b2:7b:b4:8c:1e:8a:b3:5e:29:e1: 18:a5:3d:62:af:80:b5:17:d8:f2:93:27:ed:af:36: 83:ad:0a:df:aa:c3:29:14:40:78:ad:5a:9e:6d:eb: aa:14:90:c8:ea:49:99:32:bb:7e:6c:f0:59:2e:58: c6:6d:6e:60:82:54:20:b6:78:f5:2f:bb:21:15:a3: 1f:4b:f8:97:bc:85:55:14:de:62:36:7d:4c:f4:b8: d5:cb:6b:24:4b:ba:56:80:04:0a:ff:d5:0b:b5:43: 6b:f6:92:53:5a:fa:42:a2:6e:07:aa:8f:3b:c7:4a: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D5:3C:ED:0C:9B:8A:C4:98:93:FF:6F:25:13:4D:6C:3C:79:38:B7 X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f4:4c:d3:01:7d:b5:33:39:c7:d9:26:ca:fa:5d:b3:28:c4: 8c:f3:b5:33:48:88:61:30:4d:0a:38:74:be:74:d3:9c:32:67: 08:da:18:73:50:68:d4:06:d7:cc:fb:e5:79:ed:08:ca:8c:5a: 20:94:10:6c:94:71:23:a9:d5:9d:34:42:9f:1b:5a:e6:fb:9b: 9c:60:8c:49:2a:81:aa:ae:43:e2:12:7e:2c:71:1e:9f:ed:80: 94:4c:e1:d4:01:61:82:e6:fd:12:ac:52:c2:21:ed:57:23:f0: f9:89:a1:d1:70:91:6f:66:41:7e:46:0c:33:6c:bd:16:43:fc: 65:76:ae:61:ff:ea:27:b7:65:fc:3a:94:b4:a2:c7:80:db:c4: 1e:d0:a3:8d:e3:f8:c9:e9:7e:b1:8d:7e:e7:b5:23:35:da:03: c0:b5:b9:ca:41:04:09:b5:73:dd:6e:5d:d5:53:78:78:76:27: 60:49:8f:8d:45:35:82:a2:e6:f0:07:1b:18:2f:6f:60:2d:0c: f0:22:92:3e:be:09:16:0b:08:61:36:b7:a8:20:68:73:ef:6d: f4:61:98:09:97:b0:c5:da:d2:7f:db:b6:40:6b:f3:05:a0:54: 5a:78:22:84:a8:c6:9f:65:8c:95:f6:ed:00:a7:a9:35:5f:30: 66:52:ab:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjYwNDA1MDAxOTQxWhcNMjYwNDEyMDAxOTQxWjAYMRYwFAYD VQQDEw02OWQxYWE5ZC0zYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg7/MZrYuma3Ikz8LuaiLBCGc7OidpYQZC7oHsMGpy7y6tVvAXGbZEKJhKDh+ m0Ey3DH9vMNzinWxYIvD1yt+Zug6Lb+vAbzzZc8BToYtCocXxqpnc0qTPPL8zmWI 0KDn24cz/biyzuhNvU7rXAsyrgt1MWHbbK9JVpXUmpeOV12c6n+f0YtPL16R+7J7 tIweirNeKeEYpT1ir4C1F9jykyftrzaDrQrfqsMpFEB4rVqebeuqFJDI6kmZMrt+ bPBZLljGbW5gglQgtnj1L7shFaMfS/iXvIVVFN5iNn1M9LjVy2skS7pWgAQK/9UL tUNr9pJTWvpCom4Hqo87x0qgQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbVPO0M m4rEmJP/byUTTWw8eTi3MB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOPRM0wF9tTM5x9kmyvpdsyjEjPO1M0iIYTBNCjh0vnTTnDJnCNoYc1Bo1AbX zPvlee0IyoxaIJQQbJRxI6nVnTRCnxta5vubnGCMSSqBqq5D4hJ+LHEen+2AlEzh 1AFhgub9EqxSwiHtVyPw+Ymh0XCRb2ZBfkYMM2y9FkP8ZXauYf/qJ7dl/DqUtKLH gNvEHtCjjeP4yel+sY1+57UjNdoDwLW5ykEECbVz3W5d1VN4eHYnYEmPjUU1gqLm 8AcbGC9vYC0M8CKSPr4JFgsIYTa3qCBoc+9t9GGYCZewxdrSf9u2QGvzBaBUWngi hKjGn2WMlfbtAKepNV8wZlKrLQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:35 2026 by rpki-client