$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: FL+zkfxdj6dSeeYc+SCPaqlCoxvftBayNMIxYXpVVsI= Subject key identifier: FC:8C:F1:CB:CF:4C:59:97:34:1C:A4:31:9C:74:48:E3:74:03:BC:8F Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 0836 Signing time: Sat 04 Apr 2026 20:44:13 +0000 Manifest this update: Sat 04 Apr 2026 20:44:12 +0000 Manifest next update: Sat 11 Apr 2026 20:44:12 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: nT/fefQi+uHxkIRTSrMYM9buh0XNkW9dZ3eA6qP2SI0=) 2: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: Q6lv4o/3Jij+rHVdIBqh1xWcK9rJcZVqL65gj1LOUUI=) 3: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: rlg+gGkjSIov6YUxyCKFbKYRg4bl/u2eQA54uzAkE6Q=) 4: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: +acs6cDfXRcUtwRZJW2mfAQSN9xt4ZIb9KF9+TPjR6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Apr 4 20:44:12 2026 GMT Not After : Apr 11 20:44:12 2026 GMT Subject: CN=69d1781c-eed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:75:c6:1c:b9:46:98:d8:c4:c9:c7:16:fb: c9:1b:6b:53:6b:d3:45:25:36:7e:78:6a:1c:54:25: ac:61:26:d4:fd:a9:e8:92:73:34:43:64:d0:a5:d8: 12:a5:fe:14:76:21:ab:ac:7d:26:1f:76:84:c2:ee: 0c:0b:f0:6a:09:5d:91:24:d0:e8:4a:2b:41:7d:47: d9:7b:86:c7:7a:0a:10:f8:3e:57:d9:b0:66:e5:96: 04:c1:ed:61:29:b6:62:e4:b0:65:3f:c7:8d:d4:57: 6e:44:54:72:46:79:d4:5a:ee:4a:79:04:cf:06:e3: 85:ac:76:a4:0e:26:35:a5:93:8a:7b:55:16:57:ae: 5b:c1:d7:18:3b:77:18:b9:c7:57:c7:6e:4c:59:5b: 48:d5:0c:dc:ec:3d:bb:1e:91:fe:74:02:60:2c:bb: 96:2c:a9:19:b7:83:bb:cc:17:b6:3a:92:5a:54:90: 52:26:b5:49:b0:ca:d7:8e:aa:95:fb:1a:2e:43:ec: c9:ad:9d:d3:51:06:fb:55:ff:66:f5:08:09:0b:e3: dc:23:07:3d:12:7d:28:06:24:d7:f8:93:97:bb:2b: d8:6c:bb:5e:dc:c6:1a:67:a3:d1:47:bf:da:a9:b4: d1:1b:ec:a4:96:e8:b4:4f:28:0f:8b:11:e8:80:5d: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8C:F1:CB:CF:4C:59:97:34:1C:A4:31:9C:74:48:E3:74:03:BC:8F X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:08:df:fb:21:ac:dc:45:be:6e:e6:96:05:20:ec:b8:72:c0: be:28:6f:84:c0:84:82:c8:4e:5f:f0:2d:0f:5e:69:b8:d3:f6: 76:86:24:c4:59:3f:70:81:7b:d1:51:3a:0c:d3:00:66:b9:27: d2:35:4d:88:2d:61:80:35:ef:b6:b0:1e:c7:76:9d:eb:d4:5c: 59:d3:ac:9d:f8:cf:eb:71:7e:45:61:ab:c8:d1:35:aa:51:a6: 83:8b:40:03:65:9f:57:ac:5e:c0:0f:86:12:48:d6:f6:eb:92: aa:57:7e:89:6f:29:e9:55:52:ac:9b:e3:8d:f1:66:69:02:8e: b5:9b:f4:3a:69:ed:bc:0d:c6:8a:92:bb:34:eb:d5:1e:be:d1: 97:ae:e9:71:b0:a1:df:fd:8b:c0:e0:50:3c:55:fb:56:bf:2a: 77:30:6b:16:87:8b:cb:7a:9b:2b:4f:f1:2d:fc:88:a2:39:4a: 9d:76:14:00:fa:0f:cd:f1:8d:16:dd:1e:f1:a6:6f:c1:41:27: 0d:22:35:da:5c:47:79:e7:d3:b3:67:5a:f9:45:fc:ac:88:e8: 56:b2:27:c3:38:17:cf:c2:fc:41:21:37:b8:76:24:78:35:fc: f3:2e:a6:c8:fa:9f:c8:9b:60:01:9f:91:dd:57:c9:09:15:b5: 70:da:23:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjYwNDA0MjA0NDEyWhcNMjYwNDExMjA0NDEyWjAYMRYwFAYD VQQDEw02OWQxNzgxYy1lZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAN1xhy5RpjYxMnHFvvJG2tTa9NFJTZ+eGocVCWsYSbU/anoknM0Q2TQpdgS pf4UdiGrrH0mH3aEwu4MC/BqCV2RJNDoSitBfUfZe4bHegoQ+D5X2bBm5ZYEwe1h KbZi5LBlP8eN1FduRFRyRnnUWu5KeQTPBuOFrHakDiY1pZOKe1UWV65bwdcYO3cY ucdXx25MWVtI1Qzc7D27HpH+dAJgLLuWLKkZt4O7zBe2OpJaVJBSJrVJsMrXjqqV +xouQ+zJrZ3TUQb7Vf9m9QgJC+PcIwc9En0oBiTX+JOXuyvYbLte3MYaZ6PRR7/a qbTRG+yklui0TygPixHogF0zbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPyM8cvP TFmXNBykMZx0SON0A7yPMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQjf+yGs3EW+buaWBSDsuHLAvihvhMCEgshOX/AtD15puNP2doYkxFk/cIF7 0VE6DNMAZrkn0jVNiC1hgDXvtrAex3ad69RcWdOsnfjP63F+RWGryNE1qlGmg4tA A2WfV6xewA+GEkjW9uuSqld+iW8p6VVSrJvjjfFmaQKOtZv0OmntvA3GipK7NOvV Hr7Rl67pcbCh3/2LwOBQPFX7Vr8qdzBrFoeLy3qbK0/xLfyIojlKnXYUAPoPzfGN Ft0e8aZvwUEnDSI12lxHeefTs2da+UX8rIjoVrInwzgXz8L8QSE3uHYkeDX88y6m yPqfyJtgAZ+R3VfJCRW1cNojuQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:13 2026 by rpki-client