$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json) Hash identifier: VqgkLgk8c1czrFYzWTLh4Pd7cWLI9QV0Pgu4LuoGNmQ= Subject key identifier: 28:39:65:84:5A:05:69:46:73:1E:30:45:39:16:D7:19:45:B2:78:83 Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70 Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470 Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft Manifest number: 070E Signing time: Wed 20 May 2026 22:01:14 +0000 Manifest this update: Wed 20 May 2026 22:01:14 +0000 Manifest next update: Wed 27 May 2026 22:01:14 +0000 Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: zEeeObnXISOFlyS5/KKNdaBMm2mM2SPrjqpXxzmJV70=) 2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: ette4LAwg26M5pj2ePPXPSItzIGGrF3PbLrnLGwJk9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470 Validity Not Before: May 20 22:01:14 2026 GMT Not After : May 27 22:01:14 2026 GMT Subject: CN=6a0e2f2a-a3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:a7:2c:d9:e3:26:c7:68:e9:22:2d:84:50: e2:4d:aa:96:fc:fe:80:9f:33:77:2a:dd:6e:48:51: 4b:03:c2:67:5f:aa:af:ad:1c:a3:41:db:d4:fd:df: e4:19:db:f0:ee:8d:73:c8:8a:5d:8a:d9:25:08:92: 85:81:80:7b:af:09:ca:4c:a4:49:4f:12:90:b1:22: a3:3c:2f:c2:f4:7b:9e:10:96:ab:a8:84:00:b9:69: 4f:0d:15:60:34:30:2e:1b:18:ff:cc:a0:aa:b7:a7: e5:74:90:b1:3a:85:d1:68:20:ff:21:0b:7d:4f:d9: af:5a:36:57:ab:99:07:bc:7c:e6:a8:0f:76:79:54: 66:ca:dd:22:7c:03:1a:ff:7e:9c:da:e2:dc:91:28: c2:70:af:71:3b:9e:a9:91:4a:68:78:aa:d7:bb:c9: 14:12:0b:7b:40:16:06:e9:8d:e6:f0:8a:7f:a0:02: 43:8e:c9:88:51:3d:da:d6:4f:91:12:67:06:31:20: 2b:ff:b1:76:eb:35:07:3d:e2:42:8b:40:87:01:46: 93:17:5d:c2:da:ca:58:40:fb:47:fe:ea:57:1f:5e: f5:a6:4f:8b:d3:6a:67:7a:5d:ed:09:06:54:24:12: 47:cb:f4:8e:56:76:d0:a6:b2:69:b9:0c:d6:6c:3b: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:39:65:84:5A:05:69:46:73:1E:30:45:39:16:D7:19:45:B2:78:83 X509v3 Authority Key Identifier: keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:94:a0:a9:61:36:bb:2d:12:3d:a1:29:38:97:d8:4d:e2:14: 41:d4:91:36:8c:b9:cb:f7:a3:20:be:8f:9d:f9:d7:8c:21:53: eb:0b:8f:9f:4a:73:77:45:f4:b0:8f:a0:5c:70:47:41:e0:af: f7:b7:eb:15:c1:74:fb:1f:63:b2:c1:33:5b:8c:af:60:93:2c: d0:aa:af:b3:39:f1:29:ff:79:7d:f8:15:0f:26:3b:fd:36:8b: 29:a6:dd:dd:e8:3b:37:67:79:41:a9:16:91:25:86:d3:ba:5e: 47:06:c3:ec:59:18:4d:b3:a0:ac:59:fc:89:0e:e7:f1:f4:b7: 56:27:e5:0d:9c:5e:e2:97:dd:f1:42:61:46:a9:3e:e9:89:27: 7c:2b:1f:f8:bd:36:27:62:8d:23:bc:2e:ea:1e:b4:39:fd:e5: 2a:ed:1e:19:46:b1:85:91:54:e9:74:84:7c:da:18:64:96:d4: da:4d:76:a9:fa:25:d2:ad:ac:82:ea:45:c8:6a:07:13:3f:be: 95:5b:e5:c3:8b:58:c0:8b:df:70:79:16:d4:90:5f:0e:4f:33: 4e:3e:61:2c:3f:80:64:21:f9:a2:7a:65:96:1d:1e:87:98:d2: 0d:07:71:29:c2:c1:51:b3:6a:f6:03:81:20:d5:c5:be:c1:57: 7e:7f:60:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE0RUYxMTAvBgNVBAUTKEYxQjY1Qjc5NzYxNjM5NzM1MkVDQkQ0QTJDNzc0RkNG N0VDNkQ0NzAwHhcNMjYwNTIwMjIwMTE0WhcNMjYwNTI3MjIwMTE0WjAYMRYwFAYD VQQDEw02YTBlMmYyYS1hM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGinLNnjJsdo6SIthFDiTaqW/P6AnzN3Kt1uSFFLA8JnX6qvrRyjQdvU/d/k Gdvw7o1zyIpditklCJKFgYB7rwnKTKRJTxKQsSKjPC/C9HueEJarqIQAuWlPDRVg NDAuGxj/zKCqt6fldJCxOoXRaCD/IQt9T9mvWjZXq5kHvHzmqA92eVRmyt0ifAMa /36c2uLckSjCcK9xO56pkUpoeKrXu8kUEgt7QBYG6Y3m8Ip/oAJDjsmIUT3a1k+R EmcGMSAr/7F26zUHPeJCi0CHAUaTF13C2spYQPtH/upXH171pk+L02pnel3tCQZU JBJHy/SOVnbQprJpuQzWbDv5gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCg5ZYRa BWlGcx4wRTkW1xlFsniDMB8GA1UdIwQYMBaAFPG2W3l2FjlzUuy9Six3T89+xtRw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTRFRi8yNjQwMTAwNjg2 MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09YTlM3TDFLTEhkUHozN0cx SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiWmJlWFlXT1hOUzdMMUtMSGRQejM3RzFIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTRFRi8yNjQwMTAwNjg2MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09Y TlM3TDFLTEhkUHozN0cxSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATpSgqWE2uy0SPaEpOJfYTeIUQdSRNoy5y/ejIL6PnfnXjCFT6wuPn0pzd0X0 sI+gXHBHQeCv97frFcF0+x9jssEzW4yvYJMs0KqvsznxKf95ffgVDyY7/TaLKabd 3eg7N2d5QakWkSWG07peRwbD7FkYTbOgrFn8iQ7n8fS3ViflDZxe4pfd8UJhRqk+ 6YknfCsf+L02J2KNI7wu6h60Of3lKu0eGUaxhZFU6XSEfNoYZJbU2k12qfol0q2s gupFyGoHEz++lVvlw4tYwIvfcHkW1JBfDk8zTj5hLD+AZCH5onpllh0eh5jSDQdx KcLBUbNq9gOBINXFvsFXfn9g0g== -----END CERTIFICATE-----Generated at Thu May 21 10:15:13 2026 by rpki-client