$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: SFHwrGAQ1xSarb+89PPyBlEWcKl7E8zbUvtTJZvCQyA= Subject key identifier: C5:AC:DF:5B:C3:CC:6D:56:4D:07:95:44:C8:A4:62:8A:85:50:ED:24 Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 0785 Signing time: Sat 04 Apr 2026 23:35:48 +0000 Manifest this update: Sat 04 Apr 2026 23:35:47 +0000 Manifest next update: Sat 11 Apr 2026 23:35:47 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: MIkNrnatVGjuB42FIG6eXDanD7bxEeXBaPoQE1zS3sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Apr 4 23:35:47 2026 GMT Not After : Apr 11 23:35:47 2026 GMT Subject: CN=69d1a054-afc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:87:8d:46:06:76:9a:3e:dc:5d:4f:bf:b1: e3:d9:e5:b3:58:05:38:c7:5c:31:ad:86:5f:e2:45: 66:6b:8a:8c:f4:f6:4e:70:7e:47:cb:39:d3:d3:7b: 48:81:c7:42:02:a8:45:f8:67:88:51:9c:29:6a:d3: 65:36:a7:4a:20:18:a4:26:94:2b:52:82:1a:c9:21: d3:83:b1:14:d1:de:5b:9c:a8:1a:c2:63:1c:73:42: dd:27:fb:91:f2:25:b7:3d:f5:b7:9a:5e:90:83:5f: 9e:a2:22:9b:92:ed:49:c2:9c:0c:0c:46:3d:b4:b4: 73:84:ec:03:4c:26:46:7c:f0:51:9f:c9:83:8a:9c: d3:6f:93:b2:3b:8f:db:3d:73:ed:68:89:fd:4e:b7: be:ba:f7:24:42:1a:29:f5:77:bb:4c:5d:a2:d2:d4: db:7d:26:4b:1d:42:cd:7d:5a:66:17:38:ee:00:f1: 38:d3:ef:bb:23:ea:fc:7e:fa:e0:6c:df:8c:d5:2a: 8e:bc:af:36:0a:e5:5f:04:d4:d3:ea:ac:26:de:fa: 83:08:fc:42:64:ea:d8:6d:b7:44:c6:ad:79:ae:5c: 59:af:94:df:ae:8a:90:15:ed:00:12:1f:62:ae:34: 38:60:99:97:3e:7f:d6:bd:5b:50:45:9d:f3:e5:2a: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AC:DF:5B:C3:CC:6D:56:4D:07:95:44:C8:A4:62:8A:85:50:ED:24 X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:27:ca:0d:be:ff:de:10:66:87:4e:ee:6e:83:97:45:44:d5: 6f:8d:9d:d9:9f:a6:4c:d3:18:6f:44:4f:72:6c:e3:57:5a:32: 05:f1:8b:1a:18:57:a2:a0:d5:cc:1a:d1:71:a0:75:e1:7c:db: b7:39:2a:61:3b:06:db:8c:35:06:0f:54:ad:22:79:9b:71:13: 12:74:53:e3:3c:f1:89:30:cb:84:25:c8:5c:ef:be:b4:04:d6: 7a:08:a5:5e:04:da:fb:13:86:02:cd:c3:9a:fd:b2:64:e1:7c: e8:38:94:bb:a2:88:e7:89:40:24:02:f3:0e:cc:75:90:49:59: b3:b6:7b:b1:1a:38:ed:cf:d1:2a:c9:32:82:6f:cb:1d:eb:c6: 14:4d:02:54:75:7a:8f:1f:74:7c:9d:30:4b:da:a3:c9:2f:70: 8e:7c:70:00:25:1c:00:cb:4f:df:8f:02:88:b0:6b:8c:24:be: 8d:fa:e1:2d:d2:fa:86:32:78:2f:cf:fd:1d:44:d6:8a:34:2c: 6d:70:02:65:9b:d2:c8:10:af:dc:e7:ff:06:ee:14:51:f2:7b: ab:7d:d5:14:f5:e0:c2:b0:86:d6:24:da:b3:68:90:43:b4:47: fd:6e:ae:5d:7f:32:7a:db:41:cd:9a:e4:33:36:06:53:df:47: 9f:40:cd:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjYwNDA0MjMzNTQ3WhcNMjYwNDExMjMzNTQ3WjAYMRYwFAYD VQQDEw02OWQxYTA1NC1hZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WeHjUYGdpo+3F1Pv7Hj2eWzWAU4x1wxrYZf4kVma4qM9PZOcH5HyznT03tI gcdCAqhF+GeIUZwpatNlNqdKIBikJpQrUoIaySHTg7EU0d5bnKgawmMcc0LdJ/uR 8iW3PfW3ml6Qg1+eoiKbku1JwpwMDEY9tLRzhOwDTCZGfPBRn8mDipzTb5OyO4/b PXPtaIn9Tre+uvckQhop9Xe7TF2i0tTbfSZLHULNfVpmFzjuAPE40++7I+r8fvrg bN+M1SqOvK82CuVfBNTT6qwm3vqDCPxCZOrYbbdExq15rlxZr5TfroqQFe0AEh9i rjQ4YJmXPn/WvVtQRZ3z5SoZ2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWs31vD zG1WTQeVRMikYoqFUO0kMB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuSfKDb7/3hBmh07uboOXRUTVb42d2Z+mTNMYb0RPcmzjV1oyBfGLGhhXoqDV zBrRcaB14XzbtzkqYTsG24w1Bg9UrSJ5m3ETEnRT4zzxiTDLhCXIXO++tATWegil XgTa+xOGAs3Dmv2yZOF86DiUu6KI54lAJALzDsx1kElZs7Z7sRo47c/RKskygm/L HevGFE0CVHV6jx90fJ0wS9qjyS9wjnxwACUcAMtP348CiLBrjCS+jfrhLdL6hjJ4 L8/9HUTWijQsbXACZZvSyBCv3Of/Bu4UUfJ7q33VFPXgwrCG1iTas2iQQ7RH/W6u XX8yettBzZrkMzYGU99Hn0DNGQ== -----END CERTIFICATE-----Generated at Mon Apr 6 11:34:54 2026 by rpki-client