$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json) Hash identifier: jSj/3D4ZY2m7fos2xGF3TvtaXO2rMFmQxgseil/P8YY= Subject key identifier: 5B:B3:A6:8A:31:40:B8:24:C7:1C:7C:F2:53:8D:E2:8E:CD:EA:CB:95 Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft Manifest number: 03FD Signing time: Sun 05 Apr 2026 00:14:07 +0000 Manifest this update: Sun 05 Apr 2026 00:14:07 +0000 Manifest next update: Sun 12 Apr 2026 00:14:07 +0000 Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: Fms7mLmVcQiAORjswJDZRukAqDpj7qHZniDYsHj9TVc=) 2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: E0te7z7859at34MRFLNavnFyL+a8lv5dig7hn7bo8Ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Validity Not Before: Apr 5 00:14:07 2026 GMT Not After : Apr 12 00:14:07 2026 GMT Subject: CN=69d1a94f-17b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:89:4e:ab:cd:53:f2:3a:d4:ba:9c:da:3c: a8:75:52:c0:c1:50:63:38:5e:63:cc:ff:16:9a:5a: 84:b5:dd:3e:56:8b:6e:70:16:e6:c1:ff:e7:8f:94: ec:4e:89:2d:f2:fc:a0:89:48:e6:26:98:c2:3c:47: 48:05:a9:38:a1:e1:0c:62:ff:a8:18:52:aa:74:52: 09:0e:e7:55:93:c1:a1:10:6d:90:a7:f6:07:fc:3b: b7:9d:2a:be:99:fa:8a:ba:b8:f8:70:fe:f2:1b:35: ac:02:8b:00:a1:45:2d:fb:be:23:76:ce:43:e6:bd: 4b:b6:5f:49:5a:17:2b:b9:f7:22:95:00:7e:c4:ac: f0:2e:b6:08:48:6e:7e:08:cb:d3:6c:16:65:f2:cf: fc:f6:bc:77:cf:03:1c:4a:b5:60:fa:01:d2:c4:2f: 25:3b:56:47:02:e8:aa:b3:b6:45:e0:35:25:6d:ee: 78:fb:c6:9e:08:dc:ea:07:86:6e:90:17:e4:d7:b1: 9e:29:b0:3f:42:b5:77:2f:8e:ea:77:c7:a5:59:30: bb:c2:16:f9:24:d9:a7:98:41:20:4a:b2:3d:c8:66: e9:eb:ee:e9:2b:ac:6a:4c:38:39:83:82:f5:d1:19: 1e:53:52:ec:f2:96:c9:4d:c7:60:18:f2:11:27:0d: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:A6:8A:31:40:B8:24:C7:1C:7C:F2:53:8D:E2:8E:CD:EA:CB:95 X509v3 Authority Key Identifier: keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7e:f3:ad:c6:54:50:aa:ff:3c:1f:e3:fb:a4:8e:53:4d:1c: 4b:a3:d6:8a:5b:ed:d3:33:ac:c7:80:2b:60:f0:6c:f7:8f:35: 01:cd:37:4a:5d:74:ef:2e:ff:5c:2c:67:41:45:5d:50:68:eb: bb:ad:e0:c1:af:6a:9c:93:da:f2:73:17:6c:f1:19:88:0f:b4: 3a:7e:51:5c:5b:c2:f1:0c:10:58:da:20:19:b9:b3:c5:c7:f5: 99:1e:89:27:54:0b:4e:7c:f1:3b:44:c1:f4:39:d3:24:ef:e3: 23:44:26:f6:9f:18:c6:ac:4f:6a:ac:25:65:96:78:08:53:98: 3d:fa:58:71:d2:ee:fa:37:a5:c5:2c:9d:15:b7:d1:43:66:b3: 62:60:e4:57:a1:48:a9:fd:97:75:49:c2:23:d5:17:c2:a6:75: e4:d8:f2:89:57:0f:ec:48:1c:22:82:61:af:af:ee:1a:bb:93: 3c:a7:62:bf:65:a6:3d:73:c1:bd:91:56:0f:a0:ea:8f:f4:68: 0e:b9:7c:57:c1:05:3a:2e:73:71:2e:e2:34:08:49:b8:95:1b: a3:23:6b:b1:f5:f4:3a:b2:eb:e1:e5:63:9b:b3:48:18:68:20: 06:cb:cc:19:c5:7d:c2:33:33:65:13:5c:c7:ae:d1:7f:0b:5f: 4c:34:6d:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3 QzFDQzM4RjEwHhcNMjYwNDA1MDAxNDA3WhcNMjYwNDEyMDAxNDA3WjAYMRYwFAYD VQQDEw02OWQxYTk0Zi0xN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUaJTqvNU/I61Lqc2jyodVLAwVBjOF5jzP8WmlqEtd0+VotucBbmwf/nj5Ts Tokt8vygiUjmJpjCPEdIBak4oeEMYv+oGFKqdFIJDudVk8GhEG2Qp/YH/Du3nSq+ mfqKurj4cP7yGzWsAosAoUUt+74jds5D5r1Ltl9JWhcrufcilQB+xKzwLrYISG5+ CMvTbBZl8s/89rx3zwMcSrVg+gHSxC8lO1ZHAuiqs7ZF4DUlbe54+8aeCNzqB4Zu kBfk17GeKbA/QrV3L47qd8elWTC7whb5JNmnmEEgSrI9yGbp6+7pK6xqTDg5g4L1 0RkeU1Ls8pbJTcdgGPIRJw3bBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuzpoox QLgkxxx88lON4o7N6suVMB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlDMC82Q0IzODM1OEIzNDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9u d25FRGtVbl9vb3A4SE1PUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYX7zrcZUUKr/PB/j+6SOU00cS6PWilvt0zOsx4ArYPBs9481Ac03Sl107y7/ XCxnQUVdUGjru63gwa9qnJPa8nMXbPEZiA+0On5RXFvC8QwQWNogGbmzxcf1mR6J J1QLTnzxO0TB9DnTJO/jI0Qm9p8YxqxPaqwlZZZ4CFOYPfpYcdLu+jelxSydFbfR Q2azYmDkV6FIqf2XdUnCI9UXwqZ15NjyiVcP7EgcIoJhr6/uGruTPKdiv2WmPXPB vZFWD6Dqj/RoDrl8V8EFOi5zcS7iNAhJuJUboyNrsfX0OrLr4eVjm7NIGGggBsvM GcV9wjMzZRNcx67RfwtfTDRt6w== -----END CERTIFICATE-----Generated at Mon Apr 6 14:30:45 2026 by rpki-client