$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: H0REptmZpvYU2qebENxVtP97jFCDR9hfmzx+ZZlXaC4= Subject key identifier: 46:61:12:3B:EA:0B:CA:58:9A:0E:B2:1E:0E:24:FE:68:F6:98:F3:83 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0DB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0D98 Signing time: Sat 04 Apr 2026 17:48:30 +0000 Manifest this update: Sat 04 Apr 2026 17:48:29 +0000 Manifest next update: Sat 11 Apr 2026 17:48:29 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: lAqnA99L4LQRdWRL7J6QHpDNgSCJ4IUwbZ1onSJestY=) 2: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: l2mydQuOVLMIeiJESXRJpx5wncrhcHvLmXdDnK7v4j8=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: hSHDKM9KQUXhHi7c/TM/bMOw3L9ZF0laC7/q7qjxH0U=) 4: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: xodjw8GRj356oQr1PfHbQDGoinJnokIgOKUey7NTlyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3507 (0xdb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Apr 4 17:48:29 2026 GMT Not After : Apr 11 17:48:29 2026 GMT Subject: CN=69d14eee-560c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:12:fb:fc:e9:b8:3e:b7:0f:64:15:f0:9d: 3a:c1:00:06:64:fc:dd:69:dd:7e:e0:02:20:6b:fc: cd:6a:6f:3a:da:e5:b4:09:f4:73:8a:c3:64:5f:03: 3f:77:47:75:f2:18:44:eb:c7:56:fe:8a:a2:17:d3: 45:fb:03:b2:0a:4b:51:00:94:c1:60:9a:6c:9c:22: 96:6c:77:f1:59:ce:a5:71:17:f4:bc:84:d1:9b:74: 37:58:68:4b:ec:c5:c9:2e:b5:af:96:f3:27:1a:29: ac:96:3b:f7:dd:e3:f5:32:dc:89:41:ae:a4:ab:77: 71:41:0b:b8:32:24:ea:5b:56:3f:f8:a6:31:58:48: d4:4d:a9:a8:dc:af:62:1f:99:18:8d:9b:96:a4:10: dd:4c:4d:28:08:02:7d:21:13:ad:e5:22:5f:02:5c: 21:b6:eb:6a:df:75:2b:61:0f:86:5b:10:4f:df:f6: 42:b4:42:fe:75:69:e2:cf:99:49:cd:e2:1e:41:07: 6f:22:c1:4a:7f:5c:d1:df:ba:0d:dd:7d:87:de:62: a2:32:54:76:eb:b3:f6:81:41:38:7a:5b:de:73:f2: dd:72:60:a7:a6:fc:56:da:45:80:e7:6c:f0:21:ea: a6:af:2f:2c:0b:2c:0c:1b:67:d5:eb:19:ef:21:7d: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:61:12:3B:EA:0B:CA:58:9A:0E:B2:1E:0E:24:FE:68:F6:98:F3:83 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8b:d3:f2:85:81:58:eb:45:81:48:cb:69:7c:a8:fd:1f:fd: bd:dd:b6:68:58:41:92:93:b3:dd:6d:f4:0b:08:02:a5:02:fb: 3c:8a:d7:1e:b5:65:8f:ed:39:74:12:c3:57:58:9e:2c:2f:8a: cd:8c:69:e2:c1:0a:d3:08:71:50:99:2f:3f:62:c6:74:a3:18: 7c:f1:04:6c:ed:01:ae:42:5a:c3:b3:51:e4:6f:7b:54:70:db: 14:85:91:f2:3f:93:cf:5c:40:33:95:52:f3:32:10:78:eb:ef: 46:01:56:3a:c2:99:1b:25:df:c7:ac:34:59:0a:12:eb:45:d8: 86:ef:8c:77:12:3a:05:e5:ff:f3:1d:af:86:4c:2a:59:03:06: 02:c2:84:2b:93:44:72:9a:3e:92:28:e1:d7:cf:6a:f2:60:e9: c9:a1:68:32:d3:61:e8:e8:36:de:67:57:92:e2:ea:6e:44:07: 83:de:b1:eb:f1:1d:ca:0f:cf:d1:c2:ac:7c:6b:ef:82:5a:56: 11:73:8e:ac:6c:a6:63:0a:29:9f:c7:60:1f:27:53:52:97:f2: fd:b0:2e:04:2d:34:67:b4:35:1d:b3:92:1c:78:94:22:27:bb: e5:7d:c5:ee:07:7c:31:bc:4d:ee:88:15:83:c9:cb:06:3d:a9: 7e:a2:55:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwNDA0MTc0ODI5WhcNMjYwNDExMTc0ODI5WjAYMRYwFAYD VQQDEw02OWQxNGVlZS01NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi0S+/zpuD63D2QV8J06wQAGZPzdad1+4AIga/zNam862uW0CfRzisNkXwM/ d0d18hhE68dW/oqiF9NF+wOyCktRAJTBYJpsnCKWbHfxWc6lcRf0vITRm3Q3WGhL 7MXJLrWvlvMnGimsljv33eP1MtyJQa6kq3dxQQu4MiTqW1Y/+KYxWEjUTamo3K9i H5kYjZuWpBDdTE0oCAJ9IROt5SJfAlwhtutq33UrYQ+GWxBP3/ZCtEL+dWniz5lJ zeIeQQdvIsFKf1zR37oN3X2H3mKiMlR267P2gUE4elvec/LdcmCnpvxW2kWA52zw Ieqmry8sCywMG2fV6xnvIX0CJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZhEjvq C8pYmg6yHg4k/mj2mPODMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvovT8oWBWOtFgUjLaXyo/R/9vd22aFhBkpOz3W30CwgCpQL7PIrXHrVlj+05 dBLDV1ieLC+KzYxp4sEK0whxUJkvP2LGdKMYfPEEbO0BrkJaw7NR5G97VHDbFIWR 8j+Tz1xAM5VS8zIQeOvvRgFWOsKZGyXfx6w0WQoS60XYhu+MdxI6BeX/8x2vhkwq WQMGAsKEK5NEcpo+kijh189q8mDpyaFoMtNh6Og23mdXkuLqbkQHg96x6/Edyg/P 0cKsfGvvglpWEXOOrGymYwopn8dgHydTUpfy/bAuBC00Z7Q1HbOSHHiUIie75X3F 7gd8MbxN7ogVg8nLBj2pfqJVpw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:34 2026 by rpki-client