$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json) Hash identifier: edBXGp/HcMR3koD8xFx7RJCB/WmHSnKMTaQVN0baLUE= Subject key identifier: 9A:70:1F:93:9D:40:07:FA:EF:56:8C:21:08:51:25:67:34:6C:A6:0E Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft Manifest number: 0887 Signing time: Sun 26 Apr 2026 22:27:43 +0000 Manifest this update: Sun 26 Apr 2026 22:27:43 +0000 Manifest next update: Sun 03 May 2026 22:27:43 +0000 Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: 4UD9p2t3Gw0j9p66raFHbnhFrdqNM8bZTk2AVj4Ifzw=) 2: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: ToDqmpyYy9fDyBGitKxxqoCmfFWhXOoX4JrjahgKPgk=) 3: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: Sqb1RnCHe7QmViOCcQqLHGN8k0RimMvBeGf+h/lyiNs=) 4: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: w4L8dHVS1XHD4h6I2xHvOIj7Z4mM+7gLcE1i72z+Mh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 22:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Validity Not Before: Apr 26 22:27:43 2026 GMT Not After : May 3 22:27:43 2026 GMT Subject: CN=69ee915f-9254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:bb:f7:7f:fc:6c:c3:08:d1:33:76:3a:66: 4d:09:2c:be:ce:96:a7:d2:57:05:e1:79:39:1d:e6: 16:3d:56:1c:25:b4:96:7e:85:93:d7:57:23:2c:f8: e4:04:33:c0:09:b5:b5:87:fd:67:14:2d:73:26:8e: 13:e1:7b:98:61:ad:6f:02:2a:fc:1d:09:f5:75:49: 4d:5b:ee:97:1e:8a:0a:18:69:99:9f:d3:00:ec:c6: e9:41:bf:bd:50:77:4d:d8:4a:5b:96:0b:ea:6f:59: 8d:43:b2:ab:cf:fa:68:57:cd:1b:07:e7:f2:40:d0: 04:3c:82:62:ef:f8:67:64:5c:5a:a4:e5:2d:3b:64: bc:2b:ab:a6:c1:c7:15:9a:8a:f0:d0:b2:7c:eb:8d: 5a:fe:b0:47:48:3b:12:64:03:45:90:e9:25:83:88: 6f:06:a1:57:a6:ff:26:9f:67:0d:65:06:18:4b:60: ca:6a:3f:de:e6:a6:fd:de:26:a5:2e:84:aa:b5:c3: b2:42:2d:12:46:df:cd:45:88:ee:b4:2f:f4:00:c7: ba:07:95:0d:8d:dd:11:ca:ae:7b:2a:90:99:3e:10: 9d:08:80:8c:0b:48:6c:5f:97:b4:7c:16:08:e0:b0: e8:63:cf:02:f5:8c:59:20:f3:4f:45:29:57:53:8f: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:1F:93:9D:40:07:FA:EF:56:8C:21:08:51:25:67:34:6C:A6:0E X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e2:72:e9:fb:71:a1:dd:4c:7d:ce:99:b1:35:85:4f:61:11: 18:1d:cd:19:91:88:0c:16:93:1b:06:fe:72:7e:06:c3:65:6b: a4:71:22:70:df:10:37:4c:06:ec:00:29:fa:2b:ac:f1:11:b3: ef:5c:cb:42:55:43:72:fb:62:6f:c4:17:1b:53:c3:5c:25:ed: ee:b5:63:f2:4a:cd:17:31:42:1b:3f:f8:e5:67:a0:95:04:aa: 41:74:1e:a8:13:d2:db:d7:0f:18:7a:c0:a3:47:22:6e:ab:ed: 41:95:4e:b6:68:91:78:ce:fe:51:ce:86:97:d6:9b:0b:7a:9e: c6:32:34:96:2d:74:82:ff:f8:99:70:5c:7d:3c:6f:94:22:34: 85:4a:e8:c4:5b:b3:12:90:16:25:44:13:2a:6c:f2:dd:10:77: 54:be:76:b2:a5:5e:92:2a:2c:23:eb:37:c9:a4:35:97:5e:c9: 42:4f:3c:b3:0a:3e:51:d3:e1:7a:35:54:7c:76:05:17:f0:c2: b4:96:03:9c:90:46:a0:d1:62:d5:fd:22:35:74:d8:74:fd:d5: 18:d1:d7:39:09:75:fd:7d:6c:99:e8:cc:3e:0f:bf:ec:79:be: 8e:11:b1:65:b2:06:d3:12:25:3c:d0:fd:32:dd:d8:1e:83:b8: 61:28:fe:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG MDYzMkEwNDkwHhcNMjYwNDI2MjIyNzQzWhcNMjYwNTAzMjIyNzQzWjAYMRYwFAYD VQQDEw02OWVlOTE1Zi05MjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbC793/8bMMI0TN2OmZNCSy+zpan0lcF4Xk5HeYWPVYcJbSWfoWT11cjLPjk BDPACbW1h/1nFC1zJo4T4XuYYa1vAir8HQn1dUlNW+6XHooKGGmZn9MA7MbpQb+9 UHdN2Epblgvqb1mNQ7Krz/poV80bB+fyQNAEPIJi7/hnZFxapOUtO2S8K6umwccV morw0LJ8641a/rBHSDsSZANFkOklg4hvBqFXpv8mn2cNZQYYS2DKaj/e5qb93ial LoSqtcOyQi0SRt/NRYjutC/0AMe6B5UNjd0Ryq57KpCZPhCdCICMC0hsX5e0fBYI 4LDoY88C9YxZIPNPRSlXU48a+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpwH5Od QAf671aMIQhRJWc0bKYOMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3 Qk83MTlPSDZXUmZ3WXlvRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS+Jy6ftxod1Mfc6ZsTWFT2ERGB3NGZGIDBaTGwb+cn4Gw2VrpHEicN8QN0wG 7AAp+ius8RGz71zLQlVDcvtib8QXG1PDXCXt7rVj8krNFzFCGz/45WeglQSqQXQe qBPS29cPGHrAo0cibqvtQZVOtmiReM7+Uc6Gl9abC3qexjI0li10gv/4mXBcfTxv lCI0hUroxFuzEpAWJUQTKmzy3RB3VL52sqVekiosI+s3yaQ1l17JQk88swo+UdPh ejVUfHYFF/DCtJYDnJBGoNFi1f0iNXTYdP3VGNHXOQl1/X1smejMPg+/7Hm+jhGx ZbIG0xIlPND9Mt3YHoO4YSj+XQ== -----END CERTIFICATE-----Generated at Tue Apr 28 12:47:27 2026 by rpki-client