$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: BF2L1Rp0YUJuhyTp8ZRoqRAe6uqclio/1LsVvaIlO8Y= Subject key identifier: D9:B7:B7:41:46:75:BA:16:8D:F9:F0:A1:FD:E5:63:09:14:5B:A5:06 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 0349 Signing time: Sun 05 Apr 2026 00:44:49 +0000 Manifest this update: Sun 05 Apr 2026 00:44:49 +0000 Manifest next update: Sun 12 Apr 2026 00:44:49 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: kkbkx8i+QtNrsdSwPVRhC1uzFRm6Q30+WP+WoedaWSo=) 2: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: BahbEschYMgJrMF0BLS9CUwIvpM5/L/G8tn8FPtp9ik=) 3: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: 2bSuW/W2EAJDExuMn72UQi0Hj4wXVmW13H/TPfYijPA=) 4: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wgip0DQGeaZ0QNSC6Osjp3LdtBXVxXRo5X2o3r8AIKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Apr 5 00:44:49 2026 GMT Not After : Apr 12 00:44:49 2026 GMT Subject: CN=69d1b081-752a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:7e:b0:15:9b:07:e8:53:15:a9:20:6f:dd: 00:72:39:f2:cb:34:9f:ab:66:b9:c0:2a:e9:12:c6: 78:4d:d0:9c:da:c3:75:8d:66:01:34:cf:6f:2e:1e: 0d:72:9a:6a:ca:fa:c4:c2:04:11:8c:7c:5b:62:b3: cf:3b:ab:2e:bf:0f:a1:74:82:4e:72:4e:5a:dd:85: 47:ff:17:b1:08:4b:80:d7:03:9f:73:5e:b4:83:a5: fc:e5:77:06:4c:e3:31:73:7e:2b:04:1d:59:4a:4b: 6d:9e:7e:d4:1c:db:f2:21:5c:62:07:3f:80:5a:ad: 81:12:86:8c:22:25:9b:78:b4:a7:16:dc:2f:68:33: a4:a7:9b:26:bc:e2:dd:ac:85:08:e4:9d:b6:54:59: 0d:81:55:00:ad:06:12:5b:eb:27:1e:d7:41:d8:77: 6e:20:07:89:b3:d8:42:86:e4:5b:65:aa:99:23:58: f7:c6:c1:85:83:12:06:fc:3e:d1:62:7c:e7:9e:21: b5:a4:7c:9a:94:56:4e:41:3d:b1:01:17:ee:cf:3d: d7:9e:c3:b9:5c:61:4a:7d:34:5e:1a:bf:d1:35:8b: 7d:63:3c:db:42:42:8c:78:a6:d1:9e:54:fb:84:72: 28:26:44:16:4d:25:2d:3a:7a:04:4d:13:c4:47:c1: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B7:B7:41:46:75:BA:16:8D:F9:F0:A1:FD:E5:63:09:14:5B:A5:06 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:42:b3:21:e0:80:4b:26:33:97:4b:ed:c1:71:30:a5:40:4f: 7d:a0:4a:90:55:b8:c2:43:1d:4a:51:2c:85:dc:99:e6:0d:85: 34:68:06:a7:8d:f7:4e:ce:4d:d6:b0:b2:59:04:99:b5:fd:73: 6c:43:92:ef:2c:15:fa:26:7a:86:35:8d:c7:87:f5:1b:ea:d9: c7:0f:f0:6c:82:8a:04:1f:6a:b4:5a:b0:42:27:78:43:db:ce: 27:0e:8d:b5:61:62:09:d3:a5:4e:1b:ec:55:5a:55:25:76:46: 5f:f7:6e:ae:28:ec:5f:64:1b:f7:cb:68:28:67:ae:eb:d4:51: 7b:32:2c:2c:28:89:62:d5:3e:ff:bc:aa:6c:06:75:ef:bc:4b: e8:66:9a:e3:d3:4d:81:d4:6c:0a:5f:48:3a:43:9a:47:04:7f: 42:ae:76:eb:31:ab:18:ef:db:ef:3b:05:33:9e:d0:ea:86:93: 49:8e:d1:d9:14:55:e9:82:3e:12:01:e1:8a:54:01:cc:a5:d7: 5b:d8:3b:68:81:d6:47:28:63:ac:6a:0b:8e:ae:b6:e7:cf:dc: 30:c1:1e:90:f5:cb:aa:10:65:b4:c5:3f:4b:4a:7a:06:0e:fb: 50:22:0f:20:59:e8:13:ed:f9:c4:14:fe:54:34:f9:49:08:97: f5:9c:60:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjYwNDA1MDA0NDQ5WhcNMjYwNDEyMDA0NDQ5WjAYMRYwFAYD VQQDEw02OWQxYjA4MS03NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Sp+sBWbB+hTFakgb90AcjnyyzSfq2a5wCrpEsZ4TdCc2sN1jWYBNM9vLh4N cppqyvrEwgQRjHxbYrPPO6suvw+hdIJOck5a3YVH/xexCEuA1wOfc160g6X85XcG TOMxc34rBB1ZSkttnn7UHNvyIVxiBz+AWq2BEoaMIiWbeLSnFtwvaDOkp5smvOLd rIUI5J22VFkNgVUArQYSW+snHtdB2HduIAeJs9hChuRbZaqZI1j3xsGFgxIG/D7R YnznniG1pHyalFZOQT2xARfuzz3XnsO5XGFKfTReGr/RNYt9YzzbQkKMeKbRnlT7 hHIoJkQWTSUtOnoETRPER8FgOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNm3t0FG dboWjfnwof3lYwkUW6UGMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAskKzIeCASyYzl0vtwXEwpUBPfaBKkFW4wkMdSlEshdyZ5g2FNGgGp433Ts5N 1rCyWQSZtf1zbEOS7ywV+iZ6hjWNx4f1G+rZxw/wbIKKBB9qtFqwQid4Q9vOJw6N tWFiCdOlThvsVVpVJXZGX/durijsX2Qb98toKGeu69RRezIsLCiJYtU+/7yqbAZ1 77xL6Gaa49NNgdRsCl9IOkOaRwR/Qq526zGrGO/b7zsFM57Q6oaTSY7R2RRV6YI+ EgHhilQBzKXXW9g7aIHWRyhjrGoLjq6258/cMMEekPXLqhBltMU/S0p6Bg77UCIP IFnoE+35xBT+VDT5SQiX9Zxgrg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:29 2026 by rpki-client