$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json) Hash identifier: 76SG7bRQdyiEXmgjgip1fQppK/VfCr0HJ/HUpmQP/0s= Subject key identifier: DE:3A:F7:CB:2B:17:64:8A:F6:3C:4F:FB:A9:60:DA:81:F6:44:DA:53 Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft Manifest number: F8 Signing time: Fri 17 Apr 2026 06:00:32 +0000 Manifest this update: Fri 17 Apr 2026 06:00:32 +0000 Manifest next update: Fri 24 Apr 2026 06:00:32 +0000 Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: lGagrsHzCqtW0nAATIeRfFsQutR198kUnx9O9D1FqWw=) 2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Apr 17 06:00:32 2026 GMT Not After : Apr 24 06:00:32 2026 GMT Subject: CN=69e1cc80-bc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:17:bd:be:4a:95:87:69:f5:a0:2d:80:54: 16:e5:73:31:db:ec:96:3d:74:0a:ec:d5:82:0b:53: 93:e8:bf:12:35:1a:fc:7f:6a:29:63:db:04:2c:87: db:fc:b3:a5:73:d2:c0:05:b5:d5:4c:de:91:48:30: 28:23:50:9a:8b:ec:82:5b:40:66:27:3f:b1:8c:be: 90:01:d6:13:bc:2e:59:29:d1:69:d8:fe:5e:84:f5: 40:1b:b1:69:84:12:08:74:99:6e:6d:a8:1a:bb:32: 08:19:bc:4f:ae:54:4c:4e:c6:12:3a:95:4a:ad:b2: dc:aa:88:66:2a:7b:b9:5a:a6:47:34:ee:bf:f6:8b: cf:5b:3c:15:5c:6b:8a:0e:6a:c5:41:ef:d0:54:f4: 67:3b:f3:d7:e8:7b:de:0f:df:67:5c:2d:a9:fb:4b: 48:39:4a:e1:c6:f7:7d:a4:a4:37:01:51:d3:2b:18: c2:ea:54:ee:e7:e9:f9:e0:9d:2f:8b:38:c5:c1:c4: 60:45:4f:ff:27:97:d3:02:f6:ff:ef:ee:9e:31:1e: 9c:56:f8:4b:de:89:fb:30:71:e8:75:12:1d:ed:3d: f1:2e:18:39:b0:16:b1:0c:4f:a7:0a:71:9e:95:ea: bf:8a:30:fa:4d:09:a5:a9:7f:ef:57:ab:46:71:97: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3A:F7:CB:2B:17:64:8A:F6:3C:4F:FB:A9:60:DA:81:F6:44:DA:53 X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:70:26:3f:52:56:54:6f:b3:fb:14:f9:14:0d:fe:0b:86:d2: 6a:a9:c3:66:82:d3:64:f4:d5:ee:2c:fe:6b:48:6c:b7:8b:9e: a7:d0:a0:ea:fd:eb:68:71:0c:93:b1:b2:77:bc:10:18:fd:58: 8f:be:9b:67:a8:8a:de:aa:54:5f:4e:6f:a1:04:b8:76:72:e4: 26:cd:32:87:16:93:54:ef:df:6b:2e:cb:62:1d:ca:13:f8:60: dc:8b:30:72:b3:9b:b8:19:8a:05:05:61:b5:4d:01:cc:b6:d9: 5b:8c:37:66:f6:43:8b:2d:15:f1:de:06:d5:04:99:c4:bc:09: 9b:f3:97:73:67:59:10:2f:97:d5:5c:3c:54:48:ed:76:8c:94: af:f9:e9:73:61:e6:2c:d2:30:95:d8:1a:e6:c3:01:ab:f8:e9: a9:dc:d8:41:6c:b5:e7:ec:2d:72:65:fd:0d:82:9c:fb:88:7b: c1:3b:b9:e1:84:bf:77:95:78:a9:df:3f:f8:4e:66:77:88:c9: 59:4e:c2:78:b3:d9:65:30:b2:fd:e5:1e:60:55:d5:7f:0c:93: d8:5c:18:2c:ea:94:04:40:fc:b9:6d:19:33:51:1f:56:44:4a: 5d:b0:fa:3d:99:0d:5f:b4:90:fc:b1:ee:d2:88:e3:9b:16:38: ff:de:77:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RTIxMTAvBgNVBAUTKDZBQUYzRDlCQzNERkEzQTEyNTA4Mjk2NUQ4RkYzM0I4 MTI4RjI5MUYwHhcNMjYwNDE3MDYwMDMyWhcNMjYwNDI0MDYwMDMyWjAYMRYwFAYD VQQDEw02OWUxY2M4MC1iYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnsXvb5KlYdp9aAtgFQW5XMx2+yWPXQK7NWCC1OT6L8SNRr8f2opY9sELIfb /LOlc9LABbXVTN6RSDAoI1Cai+yCW0BmJz+xjL6QAdYTvC5ZKdFp2P5ehPVAG7Fp hBIIdJlubagauzIIGbxPrlRMTsYSOpVKrbLcqohmKnu5WqZHNO6/9ovPWzwVXGuK DmrFQe/QVPRnO/PX6HveD99nXC2p+0tIOUrhxvd9pKQ3AVHTKxjC6lTu5+n54J0v izjFwcRgRU//J5fTAvb/7+6eMR6cVvhL3on7MHHodRId7T3xLhg5sBaxDE+nCnGe leq/ijD6TQmlqX/vV6tGcZeibwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4698sr F2SK9jxP+6lg2oH2RNpTMB8GA1UdIwQYMBaAFGqvPZvD36OhJQgpZdj/M7gSjykf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi8zQjU0MUYyMENC M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82RWxDQ2xsMlA4enVCS1BL UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzZFMi8zQjU0MUYyMENCM0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82 RWxDQ2xsMlA4enVCS1BLUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWXAmP1JWVG+z+xT5FA3+C4bSaqnDZoLTZPTV7iz+a0hst4uep9Cg6v3raHEM k7Gyd7wQGP1Yj76bZ6iK3qpUX05voQS4dnLkJs0yhxaTVO/fay7LYh3KE/hg3Isw crObuBmKBQVhtU0BzLbZW4w3ZvZDiy0V8d4G1QSZxLwJm/OXc2dZEC+X1Vw8VEjt doyUr/npc2HmLNIwldga5sMBq/jpqdzYQWy15+wtcmX9DYKc+4h7wTu54YS/d5V4 qd8/+E5md4jJWU7CeLPZZTCy/eUeYFXVfwyT2FwYLOqUBED8uW0ZM1EfVkRKXbD6 PZkNX7SQ/LHu0ojjmxY4/953Aw== -----END CERTIFICATE-----Generated at Sat Apr 18 22:23:55 2026 by rpki-client