$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: h8KEIv68rG5kIwmffcN7GkbujHn4v94blncbDrFq/hM= Subject key identifier: B9:F2:C0:F6:EA:AE:F9:F1:B6:BE:FF:79:0D:6C:C4:6A:1E:B1:BB:57 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 07DC Signing time: Sat 04 Apr 2026 21:07:27 +0000 Manifest this update: Sat 04 Apr 2026 21:07:27 +0000 Manifest next update: Sat 11 Apr 2026 21:07:27 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: OtyB0Sq5mG2DLnP1+juy7B8+tTIYc8dJ9t34ODg9CUY=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: CCeYRNeMxbpOCPaIE3BqCoWORj/K4Cmf/wyUKaeIcyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Apr 4 21:07:27 2026 GMT Not After : Apr 11 21:07:27 2026 GMT Subject: CN=69d17d8f-859b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1e:6f:07:09:ed:64:41:93:14:5e:6e:1f:ac: cc:56:8b:53:fc:65:da:07:09:9a:33:dc:ba:a5:c5: da:15:67:ff:7b:26:d9:21:de:fd:68:85:fe:77:fe: ea:fe:56:ed:31:54:66:0f:45:fb:7d:7d:31:b4:5f: ed:65:e6:db:9a:31:2f:41:41:f5:26:62:2c:a1:dd: a8:b0:1f:86:13:0c:d1:23:59:fa:ea:1d:1e:78:90: d4:07:51:58:b4:8c:db:bd:1b:a6:be:c0:79:37:7b: 89:5a:91:43:e0:a9:f8:99:a8:65:83:eb:6e:a9:cb: f0:a0:49:97:b2:0e:0a:30:a7:f0:e5:8b:2f:2b:ad: f7:4d:27:00:a8:d5:ea:0b:06:fb:1a:ae:98:0e:21: da:31:5c:38:fe:bd:23:ce:7f:39:47:8e:3a:dc:6e: ca:f7:44:24:d1:be:1e:d4:7a:25:c2:67:c0:27:57: 6d:e3:d6:ae:d9:e4:b2:83:2c:4c:ed:02:98:2d:84: 09:f3:9d:89:c6:bb:69:ce:6c:b6:d6:f5:c1:46:fe: 33:69:b4:21:cf:34:0d:34:62:e4:03:9e:25:be:62: 48:d7:ed:ba:e7:78:db:18:7a:b7:b5:a2:eb:f9:25: 1d:e5:ec:b1:85:08:3a:54:5f:7e:d8:52:26:62:e3: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:C0:F6:EA:AE:F9:F1:B6:BE:FF:79:0D:6C:C4:6A:1E:B1:BB:57 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:25:f2:10:85:54:3e:e3:31:e4:dd:90:54:af:7a:40:5d:65: 98:83:5e:e8:95:fa:17:c1:89:8b:49:3a:97:67:4f:fe:da:d0: ae:c4:48:be:95:49:fb:15:5f:ff:5b:70:f7:d6:e9:11:7b:9f: e2:af:35:36:94:14:e6:c3:52:42:8f:c5:ab:91:73:3f:a7:04: 26:38:e6:0b:ca:7c:28:81:c5:98:d8:7a:d5:54:e0:ad:45:b8: 85:11:17:a3:09:0e:ba:ec:67:87:5c:9a:49:a7:b4:cd:d2:6f: e6:2d:5e:45:7b:76:fe:f0:61:e7:bb:88:03:35:64:89:02:a0: 5c:36:40:8d:e9:0d:fd:94:77:37:80:44:1d:d9:4b:d9:f1:eb: e8:bc:65:78:1e:ea:62:de:59:c4:84:f0:db:c7:6a:a6:be:72: 89:10:21:fe:e1:94:f1:a9:60:ce:33:c1:3b:93:e8:e2:1e:54: 6d:3b:34:c6:0c:aa:a2:f4:37:75:51:93:6f:35:61:9f:84:87: 33:bd:7d:24:c9:48:a2:38:0b:dc:84:ed:84:e2:47:48:1c:84: d4:b1:e3:64:49:79:10:36:55:10:74:51:29:4b:f9:68:56:1f: 16:ee:c2:4d:94:ed:8b:2a:89:99:12:03:7e:fb:dc:0f:7c:22: 3f:28:b3:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjYwNDA0MjEwNzI3WhcNMjYwNDExMjEwNzI3WjAYMRYwFAYD VQQDEw02OWQxN2Q4Zi04NTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6B5vBwntZEGTFF5uH6zMVotT/GXaBwmaM9y6pcXaFWf/eybZId79aIX+d/7q /lbtMVRmD0X7fX0xtF/tZebbmjEvQUH1JmIsod2osB+GEwzRI1n66h0eeJDUB1FY tIzbvRumvsB5N3uJWpFD4Kn4mahlg+tuqcvwoEmXsg4KMKfw5YsvK633TScAqNXq Cwb7Gq6YDiHaMVw4/r0jzn85R4463G7K90Qk0b4e1HolwmfAJ1dt49au2eSygyxM 7QKYLYQJ852Jxrtpzmy21vXBRv4zabQhzzQNNGLkA54lvmJI1+2653jbGHq3taLr +SUd5eyxhQg6VF9+2FImYuOtCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnywPbq rvnxtr7/eQ1sxGoesbtXMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoCXyEIVUPuMx5N2QVK96QF1lmINe6JX6F8GJi0k6l2dP/trQrsRIvpVJ+xVf /1tw99bpEXuf4q81NpQU5sNSQo/Fq5FzP6cEJjjmC8p8KIHFmNh61VTgrUW4hREX owkOuuxnh1yaSae0zdJv5i1eRXt2/vBh57uIAzVkiQKgXDZAjekN/ZR3N4BEHdlL 2fHr6LxleB7qYt5ZxITw28dqpr5yiRAh/uGU8algzjPBO5Po4h5UbTs0xgyqovQ3 dVGTbzVhn4SHM719JMlIojgL3ITthOJHSByE1LHjZEl5EDZVEHRRKUv5aFYfFu7C TZTtiyqJmRIDfvvcD3wiPyiz2Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:27:44 2026 by rpki-client