$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: 4RU+CFpRWvW5oZK6rZRzm+hRsULr51hna5h0PLFJovg= Subject key identifier: 1E:B6:A7:FC:EC:61:A7:DF:68:AD:06:BF:CD:1C:AC:32:5D:2F:8D:39 Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1A8D Signing time: Sat 04 Apr 2026 17:08:57 +0000 Manifest this update: Sat 04 Apr 2026 17:08:56 +0000 Manifest next update: Sat 11 Apr 2026 17:08:56 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: /o3di/RZ9ISady10tHn1d+qFAv8cNllGl4lxxz2km4A=) 2: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: /fSSOJI7jFisIiwSV1Hdvr6sWlr18P2YAd74KzyYiiA=) 3: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (hash: xT4ltQ0fqXtOZbKoSwpsdMTsY3mOeI0/8WHutWp7LmI=) 4: C3D424C4F4F611F0B230A1D14E6F56BC.roa (hash: egk9xsmfxgJd9+6b30PcTbtfCGdbVQzHasvNcINufMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Apr 4 17:08:56 2026 GMT Not After : Apr 11 17:08:56 2026 GMT Subject: CN=69d145a9-0142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:a6:25:65:36:fe:1a:2a:65:0e:06:bb:fa: a8:d6:d0:39:70:21:8f:85:22:9b:35:01:9b:87:7e: b0:1f:15:a2:fe:f7:9c:59:cc:1a:a3:e9:86:16:a3: e3:94:84:41:7d:ad:04:17:ec:47:ad:aa:ab:49:dd: 5b:c1:99:0e:81:70:5a:a7:c2:56:ff:87:32:d3:cb: bc:a4:56:2e:ee:12:a4:15:c5:43:03:e7:ed:0d:14: a3:59:e5:82:d2:94:4a:ce:72:ac:26:41:ff:46:f2: 59:67:f1:22:da:74:22:74:0f:d5:fc:7a:fd:69:d6: b8:e0:70:78:4f:cc:aa:b6:2c:52:f2:c3:f6:4c:90: c8:8f:15:20:9a:dc:d6:a8:31:8c:4d:0f:98:21:8f: ed:1f:a9:f8:7c:40:74:3f:8d:9c:c6:35:38:ff:88: c2:ae:aa:f1:b9:a8:be:1a:61:9c:1e:1a:90:0c:4b: 61:16:cc:2c:49:5f:89:9f:99:95:ef:92:b5:83:ce: 3a:2b:06:52:44:02:a1:51:a9:d2:c7:83:b6:16:9b: b4:f9:42:3f:02:3a:fe:d1:0b:a2:3c:2d:98:da:15: 08:ee:12:1b:28:51:5a:77:9b:e9:47:44:2c:9d:70: c6:fc:64:0c:a8:2e:ca:8a:c0:41:f1:1d:39:61:c1: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B6:A7:FC:EC:61:A7:DF:68:AD:06:BF:CD:1C:AC:32:5D:2F:8D:39 X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b9:46:87:40:0c:77:ba:2a:89:ce:be:cd:7c:9f:38:8f:44: cc:18:f6:2f:d8:be:b0:7b:d2:22:84:3d:2a:1a:75:ab:b3:9d: 8d:4a:c0:60:06:e8:ee:42:16:b3:53:c9:08:d2:01:51:a4:eb: 19:4c:25:cc:46:86:fb:3e:70:cc:1b:2a:c5:52:3f:25:06:4a: 98:e2:7c:9a:38:3a:bf:78:36:36:90:90:60:b6:19:95:d3:b0: d9:3b:f9:ef:40:a6:78:f1:ab:71:a0:2a:2a:a3:5c:f2:5c:23: d3:ad:60:b5:88:2e:38:d6:70:1c:4d:4b:37:02:9e:01:c3:b0: 75:ee:a9:37:6b:15:1a:8f:22:6d:ea:db:a9:f3:a9:53:b7:b1: 87:3b:3f:93:86:ee:49:78:49:c3:b7:ca:58:9d:84:3b:0f:5c: af:d0:7f:33:8e:05:97:c8:56:5f:ce:7f:be:44:7b:77:88:36: cb:35:a7:48:d3:ef:4d:3f:cd:d5:17:27:d2:f6:44:f8:e1:84: fa:f2:24:0b:d1:ac:26:75:34:9c:bd:8b:6a:32:d7:46:77:66: 2c:a7:db:16:74:80:ab:e6:4b:44:69:c0:02:be:42:96:45:8b: 98:28:dc:c1:df:2e:07:7c:7a:a3:14:8b:7d:e9:84:a8:02:b0: 2d:14:38:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjYwNDA0MTcwODU2WhcNMjYwNDExMTcwODU2WjAYMRYwFAYD VQQDEw02OWQxNDVhOS0wMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJemJWU2/hoqZQ4Gu/qo1tA5cCGPhSKbNQGbh36wHxWi/vecWcwao+mGFqPj lIRBfa0EF+xHraqrSd1bwZkOgXBap8JW/4cy08u8pFYu7hKkFcVDA+ftDRSjWeWC 0pRKznKsJkH/RvJZZ/Ei2nQidA/V/Hr9ada44HB4T8yqtixS8sP2TJDIjxUgmtzW qDGMTQ+YIY/tH6n4fEB0P42cxjU4/4jCrqrxuai+GmGcHhqQDEthFswsSV+Jn5mV 75K1g846KwZSRAKhUanSx4O2Fpu0+UI/Ajr+0QuiPC2Y2hUI7hIbKFFad5vpR0Qs nXDG/GQMqC7KisBB8R05YcFfhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB62p/zs YaffaK0Gv80crDJdL405MB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmrlGh0AMd7oqic6+zXyfOI9EzBj2L9i+sHvSIoQ9Khp1q7OdjUrAYAbo7kIW s1PJCNIBUaTrGUwlzEaG+z5wzBsqxVI/JQZKmOJ8mjg6v3g2NpCQYLYZldOw2Tv5 70CmePGrcaAqKqNc8lwj061gtYguONZwHE1LNwKeAcOwde6pN2sVGo8iberbqfOp U7exhzs/k4buSXhJw7fKWJ2EOw9cr9B/M44Fl8hWX85/vkR7d4g2yzWnSNPvTT/N 1Rcn0vZE+OGE+vIkC9GsJnU0nL2LajLXRndmLKfbFnSAq+ZLRGnAAr5ClkWLmCjc wd8uB3x6oxSLfemEqAKwLRQ4tw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:17 2026 by rpki-client