$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: emP5CRdLm3AA74ORM6UiaZuWDy2Egh9htGJ8Dv5ZoqA= Subject key identifier: 4C:76:5D:F1:2A:F6:EF:D7:A2:A9:EB:18:C5:16:76:3E:4A:BC:70:E2 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0DCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0DB1 Signing time: Wed 20 May 2026 17:56:31 +0000 Manifest this update: Wed 20 May 2026 17:56:30 +0000 Manifest next update: Wed 27 May 2026 17:56:30 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: BYxT+orAnmK5SLPYZM4gLQ9WCN9Nif7OcclBlI8a8FQ=) 2: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: p0qRh9uijUrBuvk2zDLygs2mx5whlrqDAoU+cadOU2w=) 3: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: OCSQyHL40HhtFPxjiZ0aie03NCu9qKwOOGRctAZUKss=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3535 (0xdcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: May 20 17:56:30 2026 GMT Not After : May 27 17:56:30 2026 GMT Subject: CN=6a0df5cf-258d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:ed:00:b1:61:14:42:5a:7b:5e:22:bf:90: 70:9b:58:57:17:71:bc:c0:fc:61:6f:ce:9e:55:35: 66:7f:1c:cc:24:18:0b:00:08:df:b6:2a:9e:cb:d8: 3c:52:83:b3:ed:8f:f2:30:68:0f:80:5d:89:52:1e: 4d:de:24:e5:64:a8:ac:74:c3:8a:81:b4:34:34:c5: 0c:5e:84:68:78:fa:30:56:9a:4b:16:a7:68:68:3c: a6:08:92:6b:27:49:56:03:dd:1a:17:01:6f:ff:18: 17:8a:fc:7a:c3:22:25:92:b9:d3:cf:a6:33:df:01: 2f:39:15:c2:9a:3e:76:85:e5:ea:76:c9:e3:56:90: 2b:d6:21:de:e2:10:2f:52:a6:45:70:2e:a3:58:f5: c8:27:bb:35:cb:71:10:31:e0:fd:2b:53:f5:c7:8f: 01:39:36:8c:6b:e9:ac:6d:64:6f:94:3a:64:11:a0: 40:60:83:1e:36:13:d2:fb:e3:64:f0:61:9d:7e:fa: 09:84:0e:cf:fa:a1:c7:29:e0:fa:65:b7:9f:9e:e1: c0:d9:90:a0:64:0f:dc:a6:4a:b6:52:ed:24:5f:26: cd:89:a4:c8:1a:cd:3f:aa:cc:2c:1e:f4:3c:8f:87: 37:af:8a:69:a0:3b:83:c2:b4:e1:b7:77:27:2d:c3: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:76:5D:F1:2A:F6:EF:D7:A2:A9:EB:18:C5:16:76:3E:4A:BC:70:E2 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:be:80:eb:f0:b7:29:7e:c6:0f:c0:05:82:e6:1f:56:a4:fc: 60:7d:08:34:9d:91:4e:d0:51:e1:59:23:ca:0a:7e:92:ed:1c: 1f:e3:86:6a:cf:05:38:78:b0:6c:80:e2:05:e5:95:db:3d:a3: 20:ab:8d:cc:fa:ca:1a:5e:ff:7c:42:a4:87:57:36:1a:33:8f: d5:68:ab:6c:fa:70:9d:a5:d2:5d:dc:62:68:69:b6:8a:01:03: 89:a7:29:1b:c8:0d:a1:64:30:2f:79:2d:d5:e0:36:c4:c3:84: be:30:84:3c:18:28:62:fa:63:1b:0d:44:28:b5:73:fb:24:86: 51:86:6c:c8:d4:91:01:fe:e3:38:96:ec:8c:4b:d5:a8:48:30: 55:3f:e9:7d:9d:63:b4:ff:35:4f:cc:a3:90:0f:bf:8f:53:cc: 17:ab:10:d7:49:a2:bd:5a:f8:64:31:ac:1e:1d:86:e6:18:92: f6:ec:ba:51:3c:d3:5e:af:e6:56:36:32:01:f7:d4:22:2d:27: a9:55:0a:ee:59:e5:97:f7:88:57:ac:2b:20:9f:93:4b:ea:0c: 3b:d4:b7:05:eb:70:cd:69:67:3f:e3:00:ea:5f:3c:2e:ae:cb: ea:2f:c1:28:3f:e6:f6:27:fb:95:41:4c:ae:95:51:21:4d:a2: 44:fc:2c:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwNTIwMTc1NjMwWhcNMjYwNTI3MTc1NjMwWjAYMRYwFAYD VQQDEw02YTBkZjVjZi0yNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYjtALFhFEJae14iv5Bwm1hXF3G8wPxhb86eVTVmfxzMJBgLAAjftiqey9g8 UoOz7Y/yMGgPgF2JUh5N3iTlZKisdMOKgbQ0NMUMXoRoePowVppLFqdoaDymCJJr J0lWA90aFwFv/xgXivx6wyIlkrnTz6Yz3wEvORXCmj52heXqdsnjVpAr1iHe4hAv UqZFcC6jWPXIJ7s1y3EQMeD9K1P1x48BOTaMa+msbWRvlDpkEaBAYIMeNhPS++Nk 8GGdfvoJhA7P+qHHKeD6ZbefnuHA2ZCgZA/cpkq2Uu0kXybNiaTIGs0/qswsHvQ8 j4c3r4ppoDuDwrTht3cnLcO+hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEx2XfEq 9u/XoqnrGMUWdj5KvHDiMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgL6A6/C3KX7GD8AFguYfVqT8YH0INJ2RTtBR4Vkjygp+ku0cH+OGas8FOHiw bIDiBeWV2z2jIKuNzPrKGl7/fEKkh1c2GjOP1WirbPpwnaXSXdxiaGm2igEDiacp G8gNoWQwL3kt1eA2xMOEvjCEPBgoYvpjGw1EKLVz+ySGUYZsyNSRAf7jOJbsjEvV qEgwVT/pfZ1jtP81T8yjkA+/j1PMF6sQ10mivVr4ZDGsHh2G5hiS9uy6UTzTXq/m VjYyAffUIi0nqVUK7lnll/eIV6wrIJ+TS+oMO9S3BetwzWlnP+MA6l88Lq7L6i/B KD/m9if7lUFMrpVRIU2iRPwsiQ== -----END CERTIFICATE-----Generated at Thu May 21 14:43:56 2026 by rpki-client