$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: MGQcWChWqYjOlljNwY0hkpJr1h2bczWfhKGpEPF0ZUw= Subject key identifier: 28:41:A2:69:FC:CD:DF:0A:24:7F:B4:BD:6B:5F:A2:F8:90:7E:72:73 Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 0532 Signing time: Sat 04 Apr 2026 23:16:50 +0000 Manifest this update: Sat 04 Apr 2026 23:16:50 +0000 Manifest next update: Sat 11 Apr 2026 23:16:50 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: oIBUs2QSyNTaj0eWuJpwpYAt72aeU2ejHCmi0UeYfBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Apr 4 23:16:50 2026 GMT Not After : Apr 11 23:16:50 2026 GMT Subject: CN=69d19be2-13c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:be:28:55:67:ac:bc:33:b4:5b:20:55:d0: a1:7c:b4:2b:61:bd:a6:6d:23:f2:b0:13:0e:7d:0f: d2:00:17:45:53:04:01:f9:fc:32:77:8f:ae:d7:5e: 83:71:3f:13:29:b3:c7:19:4c:e0:77:42:e2:1e:5d: 4e:45:b5:14:44:0c:9b:32:39:e2:ae:06:16:29:68: d0:a3:40:ef:21:02:d5:3f:f8:ea:c8:67:3c:b2:cc: ef:2e:2f:3e:02:fc:f3:6b:20:62:52:f0:b0:3e:92: 0e:a4:49:26:4d:ba:20:bc:19:ba:29:09:fc:09:a4: 44:40:26:f0:04:ea:f2:a1:9c:6b:d1:53:ce:6b:2b: 93:6e:73:a2:c2:fe:3b:c7:ab:f4:5e:e3:ab:1e:f6: 0f:4a:a6:2d:7e:71:35:d0:51:46:bc:29:47:7f:ae: 66:6f:17:f5:68:b3:10:eb:11:14:5e:8c:92:e0:ea: f0:0d:f8:c6:b4:e5:f3:35:f9:0e:ae:19:f3:0a:ed: fe:6d:15:1d:bd:a4:33:93:06:eb:39:69:b7:3a:c8: a3:3a:22:1b:8a:61:c6:5b:35:76:54:6d:01:f3:3c: 42:96:72:d1:cf:71:f6:56:8e:f3:44:40:24:08:f0: 1a:64:30:94:8b:70:1c:ca:73:e9:b2:bb:45:9c:6f: 6f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:41:A2:69:FC:CD:DF:0A:24:7F:B4:BD:6B:5F:A2:F8:90:7E:72:73 X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:45:f5:8f:33:5b:91:43:02:a3:0c:83:17:e1:2a:51:eb:e4: 42:07:56:8b:2f:48:ae:b3:6b:b4:aa:32:2b:2a:76:9b:79:ad: 68:91:fc:1c:5e:40:7c:a7:99:d0:13:66:21:5c:54:92:3e:07: 63:d3:52:fc:52:51:88:d1:f5:8b:13:82:7c:a2:dd:6e:a9:fb: 5f:a1:72:88:8c:b7:c5:39:bf:7b:58:43:fc:07:8e:f3:c1:d5: 88:61:ff:b2:2e:e8:c0:01:55:2b:dc:4e:fa:4d:70:fc:c3:20: 4e:84:d9:f5:6e:f8:39:7f:ac:be:5d:87:2a:e8:74:1c:38:64: a0:48:9d:97:a5:23:58:05:8b:8e:d0:b0:51:90:61:77:5c:96: a8:25:b8:07:8e:3f:1c:02:77:d3:08:2a:80:ca:7a:5f:9a:05: 8f:1d:58:fa:a5:c6:0c:c4:b2:fa:4c:42:30:48:97:27:63:f9: cb:79:d9:2e:0c:59:8f:fe:4a:be:6a:93:29:1a:b6:00:5c:6c: b8:ac:94:a9:cf:f4:a9:fe:80:f9:bd:2c:5b:f3:5e:f9:90:bf: 95:b9:8d:2b:69:d0:87:0a:17:c3:02:69:ce:9f:75:95:33:f1: dc:ec:1d:f2:82:33:0d:60:d3:e6:de:04:88:c5:79:8a:34:dd: 9f:bb:41:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjYwNDA0MjMxNjUwWhcNMjYwNDExMjMxNjUwWjAYMRYwFAYD VQQDEw02OWQxOWJlMi0xM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwG+KFVnrLwztFsgVdChfLQrYb2mbSPysBMOfQ/SABdFUwQB+fwyd4+u116D cT8TKbPHGUzgd0LiHl1ORbUURAybMjnirgYWKWjQo0DvIQLVP/jqyGc8sszvLi8+ AvzzayBiUvCwPpIOpEkmTbogvBm6KQn8CaREQCbwBOryoZxr0VPOayuTbnOiwv47 x6v0XuOrHvYPSqYtfnE10FFGvClHf65mbxf1aLMQ6xEUXoyS4OrwDfjGtOXzNfkO rhnzCu3+bRUdvaQzkwbrOWm3OsijOiIbimHGWzV2VG0B8zxClnLRz3H2Vo7zREAk CPAaZDCUi3AcynPpsrtFnG9vpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChBomn8 zd8KJH+0vWtfoviQfnJzMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX0X1jzNbkUMCowyDF+EqUevkQgdWiy9IrrNrtKoyKyp2m3mtaJH8HF5AfKeZ 0BNmIVxUkj4HY9NS/FJRiNH1ixOCfKLdbqn7X6FyiIy3xTm/e1hD/AeO88HViGH/ si7owAFVK9xO+k1w/MMgToTZ9W74OX+svl2HKuh0HDhkoEidl6UjWAWLjtCwUZBh d1yWqCW4B44/HAJ30wgqgMp6X5oFjx1Y+qXGDMSy+kxCMEiXJ2P5y3nZLgxZj/5K vmqTKRq2AFxsuKyUqc/0qf6A+b0sW/Ne+ZC/lbmNK2nQhwoXwwJpzp91lTPx3Owd 8oIzDWDT5t4EiMV5ijTdn7tBTw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:30 2026 by rpki-client