$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: WD5VnTuXi3+LNj6xnocfNAFTA5Uxb2zS6cztu63DjQA= Subject key identifier: AF:2B:5A:3C:A1:D4:54:C6:F9:57:9C:4E:24:5F:F7:85:66:44:72:BC Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0DC6 Signing time: Wed 20 May 2026 21:07:24 +0000 Manifest this update: Wed 20 May 2026 21:07:23 +0000 Manifest next update: Wed 27 May 2026 21:07:23 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: rhqPfnGuV46DDdjDW5xFpom9xbeN76IKuLfCB78Cc6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: May 20 21:07:23 2026 GMT Not After : May 27 21:07:23 2026 GMT Subject: CN=6a0e228c-c99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4d:b5:63:05:8e:4a:94:a9:d4:1f:94:77:0b: 92:bb:fb:3c:46:12:20:39:91:56:36:12:74:2d:10: 12:70:44:c6:7a:2d:b9:a3:50:52:1d:6c:fa:4e:65: 3f:41:67:a0:4d:a5:87:5d:11:ca:3a:91:cc:1f:c7: d3:b7:9b:df:f0:a7:df:d5:ee:af:1f:10:36:62:21: 99:1b:f1:f7:fb:a4:b8:27:75:29:83:00:91:d7:bc: 8e:4f:03:b7:ef:d5:f4:fe:91:31:9e:84:9e:58:21: c4:bd:76:57:fb:c0:28:6d:b1:3d:6d:3a:be:4f:6a: aa:3e:74:5b:25:19:58:73:99:18:1f:12:a9:dc:d3: 91:2f:7e:70:53:12:90:1f:2d:c3:2d:de:9c:08:bd: 7e:c7:97:15:a6:38:7f:94:f1:06:49:28:a1:55:55: c1:38:5e:52:f4:c9:14:06:08:ea:04:9e:9d:ff:06: d7:bd:06:05:96:38:88:0b:39:ae:9b:9e:99:d2:1b: c0:03:90:e9:ef:cb:07:d5:cb:5d:49:fc:f4:4d:96: e5:26:10:92:1a:51:3d:49:13:c8:39:52:07:cc:25: 00:ee:4e:c9:05:9a:5d:71:04:f5:16:04:bc:a7:0c: 6d:be:73:7f:c3:4a:1c:c2:9e:17:d7:8c:ed:99:ea: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:5A:3C:A1:D4:54:C6:F9:57:9C:4E:24:5F:F7:85:66:44:72:BC X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:7d:bf:a7:6d:cf:c6:b5:12:49:b1:7d:f2:8e:c4:9f:6f:7c: b9:10:9c:ae:54:da:db:7d:a1:cd:79:64:eb:c7:2c:90:36:01: ba:79:a5:d2:2f:c9:fe:f6:b0:cb:85:96:52:d1:35:a1:52:7d: 54:d5:5d:54:20:78:6c:df:c1:61:56:4e:0a:07:6e:86:77:4d: 77:b1:ce:b8:02:dd:97:72:63:ae:49:d9:41:b7:35:c5:4e:a3: e0:a8:f5:79:b8:8a:ea:4e:78:84:39:93:cd:c5:6b:18:ae:a2: f1:52:cb:29:19:95:6e:49:5c:7a:5e:68:97:25:58:c8:7b:27: f5:3e:94:cf:31:21:d5:22:7f:28:d2:68:81:c0:d7:c7:2f:d8: 4e:55:24:dd:4b:5b:c3:18:5a:55:5c:9e:62:38:55:aa:e1:cf: 4f:f4:c4:dd:eb:d3:85:1c:81:19:ce:10:79:e8:6e:36:5d:ad: 7f:da:d2:08:9a:4e:71:89:f6:95:3a:38:9f:05:66:97:e1:4c: b4:2c:b3:94:6c:1d:8a:44:7d:9f:74:97:fb:f5:66:f5:ee:c7: b2:ca:af:64:f5:cd:56:63:e1:08:4b:b8:8f:3d:99:ba:7e:25: 3e:f0:4b:6e:fa:4b:17:3b:f8:9a:09:ac:b0:7a:96:a5:79:e4: 0e:b7:fd:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjYwNTIwMjEwNzIzWhcNMjYwNTI3MjEwNzIzWjAYMRYwFAYD VQQDEw02YTBlMjI4Yy1jOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6k21YwWOSpSp1B+UdwuSu/s8RhIgOZFWNhJ0LRAScETGei25o1BSHWz6TmU/ QWegTaWHXRHKOpHMH8fTt5vf8Kff1e6vHxA2YiGZG/H3+6S4J3UpgwCR17yOTwO3 79X0/pExnoSeWCHEvXZX+8AobbE9bTq+T2qqPnRbJRlYc5kYHxKp3NORL35wUxKQ Hy3DLd6cCL1+x5cVpjh/lPEGSSihVVXBOF5S9MkUBgjqBJ6d/wbXvQYFljiICzmu m56Z0hvAA5Dp78sH1ctdSfz0TZblJhCSGlE9SRPIOVIHzCUA7k7JBZpdcQT1FgS8 pwxtvnN/w0ocwp4X14ztmeq3dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8rWjyh 1FTG+VecTiRf94VmRHK8MB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMX2/p23PxrUSSbF98o7En298uRCcrlTa232hzXlk68cskDYBunml0i/J/vaw y4WWUtE1oVJ9VNVdVCB4bN/BYVZOCgduhndNd7HOuALdl3JjrknZQbc1xU6j4Kj1 ebiK6k54hDmTzcVrGK6i8VLLKRmVbklcel5olyVYyHsn9T6UzzEh1SJ/KNJogcDX xy/YTlUk3UtbwxhaVVyeYjhVquHPT/TE3evThRyBGc4QeehuNl2tf9rSCJpOcYn2 lTo4nwVml+FMtCyzlGwdikR9n3SX+/Vm9e7HssqvZPXNVmPhCEu4jz2Zun4lPvBL bvpLFzv4mgmssHqWpXnkDrf9QA== -----END CERTIFICATE-----Generated at Thu May 21 10:19:30 2026 by rpki-client