$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: D8M8SUNedQc4aGerl93e+2iRf3Hrslwgr3P+AzYyvuc= Subject key identifier: 45:52:E7:B9:01:E5:D8:B8:72:65:08:26:5E:93:3E:EE:B4:DE:32:9F Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 0282 Signing time: Sun 05 Apr 2026 01:30:25 +0000 Manifest this update: Sun 05 Apr 2026 01:30:25 +0000 Manifest next update: Sun 12 Apr 2026 01:30:25 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: rC5laWgPxCa4tXQoi+y6GVodQf7OzN8spRl4VYgXCvc=) 2: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=) 3: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=) 4: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Apr 5 01:30:25 2026 GMT Not After : Apr 12 01:30:25 2026 GMT Subject: CN=69d1bb31-c78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:8a:c6:b4:16:0c:41:1f:1b:ae:47:d9:a4: 33:9c:06:22:d8:55:94:ad:8d:a1:86:0c:f4:74:b5: 98:2a:ed:ce:29:69:77:76:4b:ef:6e:5f:5d:46:df: 91:8d:99:2a:54:9f:13:c2:e3:0f:ba:6f:1b:74:59: af:7d:9d:6f:56:4a:3e:93:a1:ff:1c:db:ea:60:d0: 80:9e:de:cf:06:07:4e:4e:6e:80:2f:a7:11:12:2b: f3:7a:32:3b:5e:63:f1:b6:3d:4d:18:cb:fa:29:76: 91:fb:ca:52:bb:04:f0:e2:21:44:d0:b1:41:86:d7: 93:6a:c2:6e:73:3f:62:1a:72:0a:a0:db:d5:95:0b: e7:96:f9:4a:21:bf:33:fd:45:bf:ce:c6:2e:7d:d5: 4c:3b:42:62:b3:49:f7:af:dd:f5:01:f2:a9:84:1f: 74:4d:0e:cb:d7:ee:7f:c7:94:22:eb:89:7d:0f:01: 41:e6:f0:d0:a9:4f:c6:9b:4e:5a:5a:75:ce:61:ce: cc:6c:4f:17:6c:3b:58:81:4e:80:e3:6c:58:08:a1: 12:47:66:66:4e:19:3e:ba:d8:e9:4d:04:39:da:a7: 5f:86:c2:67:c9:04:b9:f4:59:09:51:25:cc:d7:d3: 7f:52:7e:0e:ee:21:14:eb:4d:45:d4:a5:b4:13:6e: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:52:E7:B9:01:E5:D8:B8:72:65:08:26:5E:93:3E:EE:B4:DE:32:9F X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:59:5b:be:c2:87:db:0b:a0:e7:e4:86:4c:34:8a:76:e7:92: 90:02:14:e1:90:77:17:9f:ad:26:33:75:0e:2d:54:34:2f:bd: 94:c0:7f:50:19:b3:fa:dd:ff:2f:49:d9:d0:2b:5b:dc:65:4d: 6b:55:45:58:da:d4:99:43:f7:54:74:3b:d8:e3:18:5e:64:75: fa:c3:9f:19:f9:1e:af:78:42:a0:eb:f7:3a:66:18:8d:09:c0: 12:67:24:b2:b5:91:53:fe:b9:3c:59:51:76:7a:c3:e5:59:82: 58:86:78:63:a6:cc:86:6c:8d:6e:5d:b0:13:fe:70:34:b9:4c: fa:e2:ca:74:21:30:c1:3b:bf:8c:bd:8e:7b:42:f9:78:76:98: dd:3c:b5:d8:84:fd:2b:cf:bb:1e:34:f5:5c:ee:56:8e:e7:06: bc:e6:b2:82:4c:88:43:d1:bd:09:a7:f5:bc:3a:31:c9:7e:23: 36:0d:d5:fd:10:9e:cb:09:00:f1:00:13:9a:d8:2d:04:97:2c: 4d:6b:9e:54:d3:07:60:15:43:f1:18:3a:65:95:ea:f5:f0:38: 12:c2:5f:8c:26:50:f3:b3:64:db:e7:ca:07:cf:ba:c0:b5:e6: 3f:4f:80:ba:72:7d:e0:ec:96:07:5a:f1:53:ff:e8:9e:42:e6: 02:3e:75:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjYwNDA1MDEzMDI1WhcNMjYwNDEyMDEzMDI1WjAYMRYwFAYD VQQDEw02OWQxYmIzMS1jNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxSKxrQWDEEfG65H2aQznAYi2FWUrY2hhgz0dLWYKu3OKWl3dkvvbl9dRt+R jZkqVJ8TwuMPum8bdFmvfZ1vVko+k6H/HNvqYNCAnt7PBgdOTm6AL6cREivzejI7 XmPxtj1NGMv6KXaR+8pSuwTw4iFE0LFBhteTasJucz9iGnIKoNvVlQvnlvlKIb8z /UW/zsYufdVMO0Jis0n3r931AfKphB90TQ7L1+5/x5Qi64l9DwFB5vDQqU/Gm05a WnXOYc7MbE8XbDtYgU6A42xYCKESR2ZmThk+utjpTQQ52qdfhsJnyQS59FkJUSXM 19N/Un4O7iEU601F1KW0E27rtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVS57kB 5di4cmUIJl6TPu603jKfMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkFlbvsKH2wug5+SGTDSKdueSkAIU4ZB3F5+tJjN1Di1UNC+9lMB/UBmz+t3/ L0nZ0Ctb3GVNa1VFWNrUmUP3VHQ72OMYXmR1+sOfGfker3hCoOv3OmYYjQnAEmck srWRU/65PFlRdnrD5VmCWIZ4Y6bMhmyNbl2wE/5wNLlM+uLKdCEwwTu/jL2Oe0L5 eHaY3Ty12IT9K8+7HjT1XO5WjucGvOaygkyIQ9G9Caf1vDoxyX4jNg3V/RCeywkA 8QATmtgtBJcsTWueVNMHYBVD8Rg6ZZXq9fA4EsJfjCZQ87Nk2+fKB8+6wLXmP0+A unJ94OyWB1rxU//onkLmAj51rw== -----END CERTIFICATE-----Generated at Mon Apr 6 10:10:07 2026 by rpki-client