$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft File: 8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json) Hash identifier: t44KLsdqDkKFe/rzu6mdDlwYJLJPej5O9jLsyLOLoyg= Subject key identifier: 23:79:7F:D1:A6:BA:3F:32:2C:E3:1F:C6:5E:9B:98:92:27:F0:AB:F9 Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB Certificate issuer: /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft Manifest number: 23 Signing time: Tue 21 Apr 2026 08:40:01 +0000 Manifest this update: Tue 21 Apr 2026 08:40:01 +0000 Manifest next update: Tue 28 Apr 2026 08:40:01 +0000 Files and hashes: 1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: IMHgVI/2OGO5ajf6i8SAnO3/nrV/GwxPlM++XcYwDJo=) 2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB Validity Not Before: Apr 21 08:40:01 2026 GMT Not After : Apr 28 08:40:01 2026 GMT Subject: CN=69e737e1-ae61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a9:68:1d:ef:d9:39:8a:3c:e6:29:f0:e2:a4: 3b:35:06:be:ae:7d:c3:c4:8a:0a:3b:48:00:83:ca: ba:5e:38:be:2c:1d:4a:de:83:e0:e0:2a:d4:9d:4b: 3b:ec:0c:4b:b7:92:a9:f8:09:3a:80:c6:8f:ed:9f: 10:59:b9:10:fe:1d:79:52:d2:d6:88:6a:83:2b:a1: c3:a8:86:09:39:ef:be:f9:7a:fd:77:1f:72:c0:85: ef:da:2d:4b:d1:a9:16:77:43:a9:7b:72:cf:9c:1c: de:ff:da:53:8d:55:d3:0c:ed:df:b8:45:2b:f5:9d: 5e:88:27:ee:4b:8a:6d:c4:4c:17:55:0e:af:ae:bb: c3:b2:46:b3:0e:6d:6d:8f:6d:ef:81:a6:1a:00:aa: 2c:d3:d4:3b:98:c7:37:76:12:b2:0f:94:6c:08:4f: dc:cd:1a:7d:e1:9c:13:a2:9c:9c:1f:d0:e2:d5:5d: cb:86:19:73:b9:2e:8e:01:8e:f4:e6:f5:be:0f:0d: cf:c5:03:70:b8:74:11:b6:c7:32:d3:ab:76:04:35: b2:b1:22:ea:71:c4:95:8d:f6:db:3b:0d:6d:89:75: dd:f2:aa:8b:b8:8b:11:e4:01:e8:a5:d7:dd:a4:16: 86:c0:b7:12:a1:17:25:2b:d7:67:48:55:a1:e1:82: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:79:7F:D1:A6:BA:3F:32:2C:E3:1F:C6:5E:9B:98:92:27:F0:AB:F9 X509v3 Authority Key Identifier: keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:36:60:39:43:ac:43:76:db:7e:b9:4a:1c:26:a3:8d:e0:65: 50:2d:38:9d:1a:93:21:7e:69:da:2c:54:8f:43:36:12:0d:f3: c9:fa:40:fc:1e:a8:6b:98:95:31:7b:71:d6:7b:65:04:31:4e: f2:83:17:23:0c:59:77:14:c9:f2:6a:fd:44:e1:0c:74:06:64: b6:54:53:5f:12:3e:75:1a:dd:2f:74:8f:99:56:fb:f7:9a:0a: 8b:e3:c7:ca:1c:09:d0:8c:1e:0f:b3:0c:66:42:43:9d:bd:0c: 76:8b:ed:c5:e0:9f:f2:66:ad:a5:d6:d0:6f:96:33:87:21:f3: ad:b1:ae:64:94:23:cf:74:ad:89:06:b9:28:f0:d8:b5:ed:7a: 03:d0:78:c9:58:52:3c:57:fc:9f:f4:17:bf:76:07:13:b4:61: b9:5e:0d:58:22:e2:c3:b7:ca:b2:d1:7f:28:b1:a9:56:4c:1e: 82:62:f6:ad:a3:04:29:bb:64:b1:8f:9e:33:9c:e1:57:3f:5f: ae:9b:52:31:98:c8:77:3f:46:02:b1:a8:22:43:69:34:d8:0c: b4:8a:12:67:63:6e:8b:4c:ff:48:d2:9b:a9:3a:9c:6a:2b:3b: ab:f6:12:f4:e3:e9:37:8e:c1:5c:26:b0:34:82:8e:b7:87:5a: 4f:e0:7f:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTcwNjExMC8GA1UEBRMoRjFFMEZEN0JEQUYxNzE5ODkwRjZCMjQ5QjNCQzQxODIx NEJBOEFDQjAeFw0yNjA0MjEwODQwMDFaFw0yNjA0MjgwODQwMDFaMBgxFjAUBgNV BAMTDTY5ZTczN2UxLWFlNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoqWgd79k5ijzmKfDipDs1Br6ufcPEigo7SACDyrpeOL4sHUreg+DgKtSdSzvs DEu3kqn4CTqAxo/tnxBZuRD+HXlS0taIaoMrocOohgk57775ev13H3LAhe/aLUvR qRZ3Q6l7cs+cHN7/2lONVdMM7d+4RSv1nV6IJ+5Lim3ETBdVDq+uu8OyRrMObW2P be+BphoAqizT1DuYxzd2ErIPlGwIT9zNGn3hnBOinJwf0OLVXcuGGXO5Lo4BjvTm 9b4PDc/FA3C4dBG2xzLTq3YENbKxIupxxJWN9ts7DW2Jdd3yqou4ixHkAeil192k FobAtxKhFyUr12dIVaHhgnQJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI3l/0aa6 PzIs4x/GXpuYkifwq/kwHwYDVR0jBBgwFoAU8eD9e9rxcZiQ9rJJs7xBghS6issw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0Y4ODg0NDNBMTE0 NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1ppUTlySkpzN3hCZ2hTNmlz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOGVEOWU5cnhjWmlROXJKSnM3eEJnaFM2aXNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 NzA2L0Y4ODg0NDNBMTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1pp UTlySkpzN3hCZ2hTNmlzcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBANmA5Q6xDdtt+uUocJqON4GVQLTidGpMhfmnaLFSPQzYSDfPJ+kD8HqhrmJUx e3HWe2UEMU7ygxcjDFl3FMnyav1E4Qx0BmS2VFNfEj51Gt0vdI+ZVvv3mgqL48fK HAnQjB4PswxmQkOdvQx2i+3F4J/yZq2l1tBvljOHIfOtsa5klCPPdK2JBrko8Ni1 7XoD0HjJWFI8V/yf9Be/dgcTtGG5Xg1YIuLDt8qy0X8osalWTB6CYvatowQpu2Sx j54znOFXP1+um1IxmMh3P0YCsagiQ2k02Ay0ihJnY26LTP9I0pupOpxqKzur9hL0 4+k3jsFcJrA0go63h1pP4H+v -----END CERTIFICATE-----Generated at Tue Apr 21 23:06:58 2026 by rpki-client