$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft File: s8j34GTam1qm6nlgF-xg0okDeCo.mft (raw, json) Hash identifier: JGgaHXBWbmsVf8Yb1ckoRW95kqlZ7e158vTa2o9Dwzo= Subject key identifier: 3B:E9:64:F6:FE:EC:6E:FD:93:59:01:65:FA:41:12:24:EC:38:2A:75 Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A Certificate issuer: /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Certificate serial: 16C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft Manifest number: 16AE Signing time: Sat 04 Apr 2026 16:34:59 +0000 Manifest this update: Sat 04 Apr 2026 16:34:59 +0000 Manifest next update: Sat 11 Apr 2026 16:34:59 +0000 Files and hashes: 1: s8j34GTam1qm6nlgF-xg0okDeCo.crl (hash: 6fLAj1wmL37krMg1O+mImFp/DRbG7WWpGC0Zu9n9qC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5827 (0x16c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D671F, serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Validity Not Before: Apr 4 16:34:59 2026 GMT Not After : Apr 11 16:34:59 2026 GMT Subject: CN=69d13db3-ca0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:d2:b9:90:f9:3a:4f:01:57:88:56:ed:2b: d6:c0:ff:6a:40:55:f5:30:42:8c:7a:47:f6:c9:26: 7b:ff:dc:cc:4c:b0:03:3e:8a:6d:e5:06:05:bd:a9: 8a:9b:c0:9c:e3:f9:b4:c1:d9:51:1c:19:4d:12:df: 30:9b:cc:73:80:21:e0:93:f4:d5:c7:1b:8e:79:fc: d4:c0:28:f3:45:44:60:df:ae:00:f9:47:df:52:69: 4d:c2:6f:68:91:32:81:de:5d:1e:7e:ab:6a:96:a0: 0e:4f:f0:65:30:58:ae:4d:3e:80:27:a4:08:0a:6d: 59:2d:2d:81:80:d6:db:87:ac:2b:8f:11:c4:2f:31: 1d:2b:01:ac:1f:c6:48:47:e9:cb:bd:af:46:ad:f5: aa:ed:e0:b5:79:a1:d1:8f:c1:20:d0:7a:ae:b5:08: 24:03:24:ac:09:ec:99:8d:c3:d1:2a:a8:d7:1f:cc: be:53:f2:d4:5c:6c:50:5b:14:d9:91:f2:cf:91:1f: 3e:95:0e:5c:5b:9d:6e:10:0d:d3:73:10:70:bf:56: eb:0a:73:0f:ea:d6:8d:e8:66:c2:25:54:56:6b:b9: 0b:d9:3b:35:e9:5b:80:4a:45:d1:9b:1b:6c:d3:0e: 44:57:e9:aa:d9:a8:10:82:45:58:24:1f:b3:79:30: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E9:64:F6:FE:EC:6E:FD:93:59:01:65:FA:41:12:24:EC:38:2A:75 X509v3 Authority Key Identifier: keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:34:ee:ca:4f:6b:53:0e:37:7d:be:99:d9:04:ab:c8:2e:05: 68:c2:ee:4d:e5:31:45:c1:36:b6:0b:55:c9:52:d9:17:b3:66: eb:f9:80:77:6e:0d:ec:01:af:21:c8:ca:ab:90:84:a2:3b:9a: 4e:69:81:f2:ca:09:f8:b9:68:90:fd:93:f6:ab:ed:28:4d:aa: 77:c7:5c:1a:f7:a4:bc:bf:df:0f:71:78:18:6b:d5:9f:4f:8e: 65:ed:f2:5d:4c:08:ce:47:09:fc:ec:67:12:53:aa:2f:61:3e: ed:1f:a8:f3:39:46:55:19:c7:fa:bd:96:b3:88:5e:1b:1a:5e: 78:2e:bf:b8:36:9b:e7:c5:b3:17:e2:dd:70:fb:69:f1:d9:57: 14:a8:ac:d8:2e:9b:41:b5:c3:e7:4a:61:d4:3d:4f:ac:c2:c1: d2:c0:e5:86:e1:44:6a:80:62:75:11:08:a5:ce:d3:57:f6:f1: 46:af:14:9e:ce:fb:b3:8a:d9:ba:7f:60:f5:1c:0a:06:64:a3: d5:8e:ba:2d:06:65:64:e3:ff:5d:36:80:63:84:fd:15:da:a1: 67:44:cb:a0:45:28:d3:ac:98:cf:63:af:a0:6c:fc:c4:9d:68: c6:07:be:27:5f:0f:2c:7b:c8:5e:e5:af:d5:a8:d5:73:46:54: 7c:80:64:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MUYxMTAvBgNVBAUTKEIzQzhGN0UwNjREQTlCNUFBNkVBNzk2MDE3RUM2MEQy ODkwMzc4MkEwHhcNMjYwNDA0MTYzNDU5WhcNMjYwNDExMTYzNDU5WjAYMRYwFAYD VQQDEw02OWQxM2RiMy1jYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcHSuZD5Ok8BV4hW7SvWwP9qQFX1MEKMekf2ySZ7/9zMTLADPopt5QYFvamK m8Cc4/m0wdlRHBlNEt8wm8xzgCHgk/TVxxuOefzUwCjzRURg364A+UffUmlNwm9o kTKB3l0efqtqlqAOT/BlMFiuTT6AJ6QICm1ZLS2BgNbbh6wrjxHELzEdKwGsH8ZI R+nLva9GrfWq7eC1eaHRj8Eg0HqutQgkAySsCeyZjcPRKqjXH8y+U/LUXGxQWxTZ kfLPkR8+lQ5cW51uEA3TcxBwv1brCnMP6taN6GbCJVRWa7kL2Ts16VuASkXRmxts 0w5EV+mq2agQgkVYJB+zeTC5MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvpZPb+ 7G79k1kBZfpBEiTsOCp1MB8GA1UdIwQYMBaAFLPI9+Bk2ptapup5YBfsYNKJA3gq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcxRi8xRURDMTBCQzE3 MUUxMUU4ODU2QkM0NDNDNEY5QUUwMi9zOGozNEdUYW0xcW02bmxnRi14ZzBva0Rl Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4ajM0R1RhbTFxbTZubGdGLXhnMG9rRGVDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcxRi8xRURDMTBCQzE3MUUxMUU4ODU2QkM0NDNDNEY5QUUwMi9zOGozNEdUYW0x cW02bmxnRi14ZzBva0RlQ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACjTuyk9rUw43fb6Z2QSryC4FaMLuTeUxRcE2tgtVyVLZF7Nm6/mAd24N7AGv IcjKq5CEojuaTmmB8soJ+LlokP2T9qvtKE2qd8dcGvekvL/fD3F4GGvVn0+OZe3y XUwIzkcJ/OxnElOqL2E+7R+o8zlGVRnH+r2Ws4heGxpeeC6/uDab58WzF+LdcPtp 8dlXFKis2C6bQbXD50ph1D1PrMLB0sDlhuFEaoBidREIpc7TV/bxRq8Uns77s4rZ un9g9RwKBmSj1Y66LQZlZOP/XTaAY4T9FdqhZ0TLoEUo06yYz2OvoGz8xJ1oxge+ J18PLHvIXuWv1ajVc0ZUfIBkvg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:41:07 2026 by rpki-client