$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json) Hash identifier: p6KfhyqquUBJxsvQnXYZ9KMOdEcGSUzydi6In2vrTTw= Subject key identifier: 2E:8B:D9:7F:C3:4E:10:6E:AD:65:55:39:26:19:4C:90:64:8B:EA:A3 Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft Manifest number: 3A Signing time: Mon 27 Apr 2026 08:30:36 +0000 Manifest this update: Mon 27 Apr 2026 08:30:36 +0000 Manifest next update: Mon 04 May 2026 08:30:36 +0000 Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: TrhdRQ6VTgsZiZPW8JBtC9oDdDiadkqFKpoA7rYkz0U=) 2: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=) 3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 08:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Validity Not Before: Apr 27 08:30:36 2026 GMT Not After : May 4 08:30:36 2026 GMT Subject: CN=69ef1eac-92fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:02:05:0c:a5:a9:7f:6a:9b:ec:f0:21:e3: 05:4d:f4:5e:0d:95:ca:de:9d:43:89:6e:ac:e5:8a: 2e:ff:fb:88:98:3f:10:9d:a2:8e:59:0f:b8:60:70: ce:1a:4f:f0:b5:6d:88:55:e1:38:4d:99:10:3e:77: 2b:26:c9:a7:4f:21:9e:d6:34:1a:74:a3:10:5b:e9: a9:ff:fc:f4:55:b4:f6:18:9f:c7:a8:19:ae:f3:a9: b9:c1:52:fd:dc:a2:dc:03:bd:af:10:38:17:ff:db: 72:df:58:98:14:93:e3:53:ac:69:08:f5:46:6f:e5: 21:74:c0:43:30:ca:d9:0e:ca:69:f9:a7:77:6f:5d: 3a:bf:f4:c5:79:3f:fa:50:57:ab:6a:62:64:3d:69: 5c:1f:13:6d:12:80:83:c0:7c:ec:16:97:a4:64:d3: 18:69:2a:89:87:c7:72:98:84:7f:97:e2:e8:0f:92: d6:df:de:27:14:df:92:3b:a2:ba:5a:25:05:33:d1: 71:6f:05:8c:eb:3f:b6:e5:c4:b8:2c:dc:50:5a:66: 4c:8c:ac:75:2c:8d:1f:85:c4:fa:ec:14:cb:26:1c: cf:04:f1:06:50:0f:8b:ed:a5:48:21:87:18:e6:89: e3:9f:9c:de:54:91:a2:53:2f:c3:61:d8:96:ff:e5: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8B:D9:7F:C3:4E:10:6E:AD:65:55:39:26:19:4C:90:64:8B:EA:A3 X509v3 Authority Key Identifier: keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5a:d0:78:fe:81:f9:c6:4f:c4:60:bd:bd:7d:e6:3c:d0:ea: 4a:3f:e0:1d:ba:0f:d0:26:c5:ee:8a:6f:97:75:cc:dc:c3:09: d4:47:54:bc:12:2b:df:6b:7f:5c:4d:c7:32:f0:f0:b8:94:4c: 6a:1a:5f:13:79:66:79:5a:ad:95:c2:b2:56:25:43:9a:37:ba: 88:f2:32:7e:5f:a3:29:64:4e:32:c4:91:ba:ee:6c:36:77:34: 2b:7a:e1:66:10:ff:6f:7c:14:2d:75:a4:93:58:69:bc:01:be: 3f:88:7e:c0:5a:73:70:c0:c2:fa:98:70:ae:79:b1:f3:95:1d: 9b:71:87:cc:03:f5:81:09:4c:cd:be:fd:4f:75:33:d2:4b:17: b1:b1:47:0d:8f:a0:3d:af:d8:06:21:bc:5d:23:a0:e0:6f:68: 50:4e:99:05:61:db:8f:f8:a8:04:be:85:93:53:23:df:0f:1d: 54:28:c3:82:08:b1:77:07:f1:75:bb:8f:97:c4:73:30:21:5f: e7:b9:fd:9b:c2:cf:0f:3e:ff:37:d2:d4:a6:d4:79:fb:12:e1: 60:29:2b:69:d9:3e:3a:12:03:d0:bc:67:8c:a7:e5:9b:d0:e8: 0d:32:b0:c1:77:68:a8:e8:e9:95:b3:bd:22:80:2f:49:99:dd: 1f:1e:b6:64 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoRjBENzExMjBBOTJBODU4REI3Mjk0OTZGQ0NCRjE4MjVD OUYwM0M2MzAeFw0yNjA0MjcwODMwMzZaFw0yNjA1MDQwODMwMzZaMBgxFjAUBgNV BAMTDTY5ZWYxZWFjLTkyZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeXQIFDKWpf2qb7PAh4wVN9F4NlcrenUOJbqzlii7/+4iYPxCdoo5ZD7hgcM4a T/C1bYhV4ThNmRA+dysmyadPIZ7WNBp0oxBb6an//PRVtPYYn8eoGa7zqbnBUv3c otwDva8QOBf/23LfWJgUk+NTrGkI9UZv5SF0wEMwytkOymn5p3dvXTq/9MV5P/pQ V6tqYmQ9aVwfE20SgIPAfOwWl6Rk0xhpKomHx3KYhH+X4ugPktbf3icU35I7orpa JQUz0XFvBYzrP7blxLgs3FBaZkyMrHUsjR+FxPrsFMsmHM8E8QZQD4vtpUghhxjm ieOfnN5UkaJTL8Nh2Jb/5QAlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULovZf8NO EG6tZVU5JhlMkGSL6qMwHwYDVR0jBBgwFoAU8NcRIKkqhY23KUlvzL8YJcnwPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzQxRkREMzg4Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFkyM0tVbHZ6TDhZSmNud1BH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOE5jUklLa3FoWTIzS1VsdnpMOFlKY253UEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzQxRkREMzg4Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFky M0tVbHZ6TDhZSmNud1BHTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdWtB4/oH5xk/EYL29feY80OpKP+Adug/QJsXuim+XdczcwwnUR1S8Eivfa39c Tccy8PC4lExqGl8TeWZ5Wq2VwrJWJUOaN7qI8jJ+X6MpZE4yxJG67mw2dzQreuFm EP9vfBQtdaSTWGm8Ab4/iH7AWnNwwML6mHCuebHzlR2bcYfMA/WBCUzNvv1PdTPS SxexsUcNj6A9r9gGIbxdI6Dgb2hQTpkFYduP+KgEvoWTUyPfDx1UKMOCCLF3B/F1 u4+XxHMwIV/nuf2bws8PPv830tSm1Hn7EuFgKStp2T46EgPQvGeMp+Wb0OgNMrDB d2io6OmVs70igC9Jmd0fHrZk -----END CERTIFICATE-----Generated at Tue Apr 28 13:13:41 2026 by rpki-client