$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: Wf5esRSSTto98rbdBF2m29TXqIYXwPK3fTepz0zWfDw= Subject key identifier: 62:FB:A6:F4:5A:C6:52:9D:93:07:0E:5E:C7:68:D6:2F:F4:74:C9:A4 Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 0A34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 0A2A Signing time: Sat 18 Apr 2026 19:38:26 +0000 Manifest this update: Sat 18 Apr 2026 19:38:26 +0000 Manifest next update: Sat 25 Apr 2026 19:38:26 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: R9QxzuX/9InxjJUEvb0znMRIrM7FUNvcmJxy2kCKRNg=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Apr 18 19:38:26 2026 GMT Not After : Apr 25 19:38:26 2026 GMT Subject: CN=69e3ddb2-79a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:e0:29:81:e7:bf:be:07:a8:f2:ae:26:75: b0:4b:00:54:a6:2c:1b:da:b1:71:9c:7f:c1:5f:cd: 7e:11:67:08:a6:98:54:e4:66:9c:65:15:7e:4a:55: 3f:ac:af:c4:a8:23:43:42:26:75:72:7a:77:25:ef: 09:0a:da:9d:ad:77:b5:ff:16:fe:c6:32:dd:e4:b6: b9:83:7f:d1:2a:b2:b6:39:34:3f:a0:a0:43:70:e7: 33:26:df:9e:8f:ae:dc:ad:c3:aa:ef:13:ae:f2:12: 2b:e2:91:25:4d:d0:ea:c3:33:68:72:46:1c:f0:98: 3a:d0:9d:76:01:55:eb:aa:a1:17:5c:1e:a0:c7:96: 05:a8:60:f4:5e:c4:d5:68:58:ec:28:36:32:7b:0b: 9c:af:7b:7c:29:15:ad:95:17:e8:0d:a6:7a:cf:9e: d2:27:fb:ec:38:20:d0:83:73:4c:8f:b4:df:26:57: c3:68:9c:a4:a3:07:9a:31:14:95:a4:73:27:46:f5: 7e:46:b3:6d:fa:4a:72:d4:27:cc:0e:78:81:38:47: bd:0a:5e:ea:9c:5e:e7:bb:ce:84:24:3b:f9:76:46: 83:89:6d:3d:7d:d6:65:6e:a2:c2:57:05:6b:54:d6: 3f:7b:af:da:99:66:10:13:a8:9f:da:74:d2:97:91: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FB:A6:F4:5A:C6:52:9D:93:07:0E:5E:C7:68:D6:2F:F4:74:C9:A4 X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:70:2b:2e:f4:17:0f:77:f9:27:27:fc:88:ff:ae:61:1c:37: b8:b0:40:93:bc:c1:7a:10:0d:2d:8a:be:21:1d:41:56:c4:f4: 38:7b:cd:58:03:31:b9:b5:9c:da:b5:27:f6:0d:61:f3:e1:af: c4:45:94:28:f1:e6:6c:dd:f5:ad:8a:55:e6:da:aa:6b:81:b2: b6:59:1a:da:dc:4d:3b:17:90:ce:e3:12:8e:91:21:a1:b2:ca: 65:d2:c4:1e:3f:67:f7:27:35:22:2a:06:a2:ed:c1:38:ad:6b: 89:5d:9c:c2:54:7c:11:aa:d9:fa:8d:dd:92:34:b4:d5:c0:0e: a4:bd:b6:a3:69:c4:c2:5a:e8:ef:cf:44:4e:7d:06:33:79:6f: e7:72:d7:28:17:e2:a7:84:e4:bb:e3:c2:cf:d3:c9:9b:92:f6: 00:4e:d7:61:96:3a:e7:d3:03:ca:cc:cb:61:13:70:89:8a:dc: 38:0c:0a:5c:21:68:03:eb:93:35:8e:e1:c4:75:06:53:88:25: 07:9e:c7:93:2c:d0:e1:7f:39:10:d3:37:fe:a6:4d:97:60:50: 2b:35:63:ed:74:1a:fb:71:0b:c4:88:77:95:bd:9d:2b:0e:a1: ac:f6:37:00:91:bf:22:04:c3:89:1a:8e:9a:8c:38:c4:06:e4: bb:2b:72:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjYwNDE4MTkzODI2WhcNMjYwNDI1MTkzODI2WjAYMRYwFAYD VQQDEw02OWUzZGRiMi03OWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRbgKYHnv74HqPKuJnWwSwBUpiwb2rFxnH/BX81+EWcIpphU5GacZRV+SlU/ rK/EqCNDQiZ1cnp3Je8JCtqdrXe1/xb+xjLd5La5g3/RKrK2OTQ/oKBDcOczJt+e j67crcOq7xOu8hIr4pElTdDqwzNockYc8Jg60J12AVXrqqEXXB6gx5YFqGD0XsTV aFjsKDYyewucr3t8KRWtlRfoDaZ6z57SJ/vsOCDQg3NMj7TfJlfDaJykoweaMRSV pHMnRvV+RrNt+kpy1CfMDniBOEe9Cl7qnF7nu86EJDv5dkaDiW09fdZlbqLCVwVr VNY/e6/amWYQE6if2nTSl5FSawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGL7pvRa xlKdkwcOXsdo1i/0dMmkMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPXArLvQXD3f5Jyf8iP+uYRw3uLBAk7zBehANLYq+IR1BVsT0OHvNWAMxubWc 2rUn9g1h8+GvxEWUKPHmbN31rYpV5tqqa4Gytlka2txNOxeQzuMSjpEhobLKZdLE Hj9n9yc1IioGou3BOK1riV2cwlR8EarZ+o3dkjS01cAOpL22o2nEwlro789ETn0G M3lv53LXKBfip4Tku+PCz9PJm5L2AE7XYZY659MDyszLYRNwiYrcOAwKXCFoA+uT NY7hxHUGU4glB57HkyzQ4X85ENM3/qZNl2BQKzVj7XQa+3ELxIh3lb2dKw6hrPY3 AJG/IgTDiRqOmow4xAbkuytywg== -----END CERTIFICATE-----Generated at Sun Apr 19 02:24:12 2026 by rpki-client