$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: 546SzJwko3GJP2VCFK3C52gDjVARzN5grkqgAuO+9w0= Subject key identifier: 52:5F:BC:C6:67:6D:0F:78:F5:4F:02:8E:81:B4:3B:B4:C2:22:1A:ED Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 156D Signing time: Wed 20 May 2026 19:18:46 +0000 Manifest this update: Wed 20 May 2026 19:18:45 +0000 Manifest next update: Wed 27 May 2026 19:18:45 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: vYgmvHJNIfFz9RSHbECj3KFIOuQ1R3zWJfIasr3Oq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2852 (0xb24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: May 20 19:18:45 2026 GMT Not After : May 27 19:18:45 2026 GMT Subject: CN=6a0e0916-5bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:ae:8e:3a:dc:91:9f:5b:ce:06:96:66:29: 1a:bc:6a:a2:a6:15:3b:d6:4d:e4:b1:35:09:cc:59: f5:08:d8:70:d0:a4:c5:90:be:d7:55:5e:72:10:6c: 1e:97:c1:e3:01:3f:fa:eb:b0:75:9b:4c:fe:f0:a0: 73:a6:44:6f:ec:04:fc:91:32:16:75:ec:39:65:73: 2d:89:32:98:0d:8a:2b:c7:c5:21:8e:84:ca:2a:e2: 88:8f:98:19:25:cc:0a:50:6d:ed:22:3d:92:c6:95: 6f:37:37:3a:24:e3:66:9a:f3:26:89:78:ef:29:e9: ff:24:cf:cc:97:45:6d:df:00:05:db:01:7b:dd:5f: fb:f4:c2:b8:46:12:3a:57:a2:09:b8:bb:85:ae:25: fb:09:ca:61:48:e1:f5:7d:e9:d1:5b:ac:2d:f6:c2: 21:7b:f0:ed:22:2a:5d:e5:44:c1:65:66:29:96:3c: 9f:1e:05:db:9e:4c:19:2c:f9:85:6c:04:5c:4c:78: 81:bb:03:16:f1:fa:f9:0d:71:fd:d1:b6:79:d3:b8: 70:e4:f1:ae:23:61:66:3e:75:68:bf:0e:49:00:77: eb:0a:62:2a:22:8d:4e:5b:84:9c:34:f3:71:83:8b: 95:2f:70:7f:03:7e:99:c6:fa:3e:45:ba:9d:dc:72: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5F:BC:C6:67:6D:0F:78:F5:4F:02:8E:81:B4:3B:B4:C2:22:1A:ED X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:0f:45:bf:0e:68:90:f8:1d:b9:2a:8f:22:61:8b:d7:62:bf: e8:c3:2b:c0:83:e0:11:1a:20:4b:f5:5e:96:49:92:8b:94:6c: 04:03:1c:85:9c:91:bb:d0:70:6d:6b:aa:4b:e6:44:2f:90:d1: 09:ee:22:1b:af:ba:48:aa:be:7c:b9:b1:ba:b8:a0:f8:0a:2d: d6:da:a2:39:f7:45:dc:4a:23:8b:a0:bb:b5:8b:27:e6:dc:a6: 59:ac:74:9a:75:5e:3f:08:7c:72:13:b9:5b:55:86:a4:dd:04: 4b:5e:8e:bd:96:a2:e6:4e:90:ac:0f:41:5e:53:e5:02:67:20: c7:cc:87:3a:aa:24:e5:11:d0:b9:25:f4:d7:b9:3e:8c:8c:46: 73:3d:a6:67:2a:a0:cd:37:db:65:59:5f:8a:b1:14:e0:6c:56: b7:1b:d9:07:c2:42:02:b1:10:2e:99:eb:32:9e:00:19:9c:40: 02:af:ab:b2:df:3c:3d:90:eb:dd:42:de:14:9e:69:5a:6a:40: 42:a3:98:2a:a6:0d:a7:67:fa:a3:85:70:63:9a:1d:7f:c1:ab: 88:40:5f:32:17:58:10:71:7a:4b:89:a0:ac:58:c2:3a:fb:cf: 38:e3:53:2f:e0:4b:cb:f3:01:bd:f2:47:1f:69:31:71:5f:ad: fb:7b:0b:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjYwNTIwMTkxODQ1WhcNMjYwNTI3MTkxODQ1WjAYMRYwFAYD VQQDEw02YTBlMDkxNi01YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogGujjrckZ9bzgaWZikavGqiphU71k3ksTUJzFn1CNhw0KTFkL7XVV5yEGwe l8HjAT/667B1m0z+8KBzpkRv7AT8kTIWdew5ZXMtiTKYDYorx8UhjoTKKuKIj5gZ JcwKUG3tIj2SxpVvNzc6JONmmvMmiXjvKen/JM/Ml0Vt3wAF2wF73V/79MK4RhI6 V6IJuLuFriX7CcphSOH1fenRW6wt9sIhe/DtIipd5UTBZWYpljyfHgXbnkwZLPmF bARcTHiBuwMW8fr5DXH90bZ507hw5PGuI2FmPnVovw5JAHfrCmIqIo1OW4ScNPNx g4uVL3B/A36Zxvo+Rbqd3HJ8uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJfvMZn bQ949U8CjoG0O7TCIhrtMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvQ9Fvw5okPgduSqPImGL12K/6MMrwIPgERogS/VelkmSi5RsBAMchZyRu9Bw bWuqS+ZEL5DRCe4iG6+6SKq+fLmxurig+Aot1tqiOfdF3Eoji6C7tYsn5tymWax0 mnVePwh8chO5W1WGpN0ES16OvZai5k6QrA9BXlPlAmcgx8yHOqok5RHQuSX017k+ jIxGcz2mZyqgzTfbZVlfirEU4GxWtxvZB8JCArEQLpnrMp4AGZxAAq+rst88PZDr 3ULeFJ5pWmpAQqOYKqYNp2f6o4VwY5odf8GriEBfMhdYEHF6S4mgrFjCOvvPOONT L+BLy/MBvfJHH2kxcV+t+3sLTQ== -----END CERTIFICATE-----Generated at Thu May 21 11:15:44 2026 by rpki-client