$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: x00lv6namqyn3iRD3/uvBkf6tdlZ/Yag+Fbn46rCIvE= Subject key identifier: E0:F0:A2:01:41:5E:C8:C0:4D:ED:13:90:AB:21:EB:C4:85:88:4C:85 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 0634 Signing time: Sun 26 Apr 2026 22:44:45 +0000 Manifest this update: Sun 26 Apr 2026 22:44:45 +0000 Manifest next update: Sun 03 May 2026 22:44:45 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: NlsViSpe9rxVh1SVBS0mAPUXsYc+Zf4XxkERCFcvjzI=) 2: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=) 3: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=) 4: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 22:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Apr 26 22:44:45 2026 GMT Not After : May 3 22:44:45 2026 GMT Subject: CN=69ee955d-9051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:e1:25:ed:d6:74:70:1a:a4:a0:2e:0b:0e: 29:d4:0c:80:f6:2e:49:b4:05:6d:37:e8:91:39:a0: eb:07:a8:1d:62:c2:ff:e0:20:58:06:bc:e5:22:41: 63:fd:be:7b:9e:f2:cf:43:59:14:36:4d:77:67:cb: e7:5c:82:66:a2:78:cf:c2:aa:d5:4f:2e:f7:77:7b: c3:33:f9:40:66:db:e4:cf:bb:28:de:60:39:00:52: f8:0e:ef:a5:c9:a8:e5:cf:57:28:6c:55:9b:ac:0d: c1:a3:54:13:a0:ee:9a:57:2d:e1:e1:97:10:cd:a0: e9:87:fb:7f:a1:89:a4:e3:b5:8c:f3:26:1d:a3:b1: 7f:a5:a0:b1:22:11:e3:41:88:e3:03:82:f7:6f:84: 86:73:44:e4:17:fe:77:e4:da:18:c0:44:75:ec:c4: b4:59:7c:68:50:a7:0d:33:8b:64:3d:b7:7e:3c:39: 91:23:51:2d:b1:9f:af:75:ea:5a:8b:25:8b:3b:e1: 08:19:b1:6b:a0:f5:5a:41:65:e1:bc:19:c9:08:03: 05:98:18:33:18:88:40:51:69:e0:61:9f:35:50:46: 88:6b:7e:4c:03:4a:e1:b1:fd:99:7b:bf:43:f8:c0: 09:57:92:d5:cb:1d:c2:9f:3e:18:1c:49:46:80:f0: b5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F0:A2:01:41:5E:C8:C0:4D:ED:13:90:AB:21:EB:C4:85:88:4C:85 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:60:5b:4d:09:4f:f8:8d:95:19:53:08:fa:49:6c:f9:44:e7: ad:9e:2b:3b:5b:0d:77:53:8f:d1:7b:26:67:2c:e4:df:97:b0: a0:5b:60:fa:d9:64:d4:35:b6:6c:6c:74:ab:31:3d:be:43:f9: 1d:98:0f:d2:25:6d:78:9f:22:73:51:31:b6:04:b7:96:03:e2: 39:94:70:13:ba:0e:17:b6:2f:4b:43:0b:a1:c1:a1:dd:ce:1e: fd:71:90:79:43:2a:73:27:05:96:fb:84:ab:5e:b3:90:a9:7e: 4b:18:59:ee:f7:eb:d4:9d:1e:d4:85:86:79:9a:19:ed:68:a9: f3:36:32:b6:4a:d0:cf:86:2b:a4:07:2a:5d:9f:91:1e:8b:86: e0:de:7e:4a:f4:c6:24:0d:10:c9:67:91:49:76:bd:33:31:fa: a5:90:30:88:3a:bd:02:d4:49:dd:18:4c:91:ff:22:8b:d7:e7: c9:70:ae:2d:a8:44:98:30:60:ab:6e:d6:21:66:52:55:dd:bd: 72:99:af:f0:90:1c:03:ca:63:19:1a:f8:4e:0c:3f:80:78:24: 00:5c:d1:56:fa:a1:78:48:d5:e1:a1:20:17:54:db:9b:be:72: 0b:d5:c7:50:87:43:15:01:55:4c:b4:52:30:40:c9:25:58:5c: d3:b7:b0:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYwNDI2MjI0NDQ1WhcNMjYwNTAzMjI0NDQ1WjAYMRYwFAYD VQQDEw02OWVlOTU1ZC05MDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOHhJe3WdHAapKAuCw4p1AyA9i5JtAVtN+iROaDrB6gdYsL/4CBYBrzlIkFj /b57nvLPQ1kUNk13Z8vnXIJmonjPwqrVTy73d3vDM/lAZtvkz7so3mA5AFL4Du+l yajlz1cobFWbrA3Bo1QToO6aVy3h4ZcQzaDph/t/oYmk47WM8yYdo7F/paCxIhHj QYjjA4L3b4SGc0TkF/535NoYwER17MS0WXxoUKcNM4tkPbd+PDmRI1EtsZ+vdepa iyWLO+EIGbFroPVaQWXhvBnJCAMFmBgzGIhAUWngYZ81UEaIa35MA0rhsf2Ze79D +MAJV5LVyx3Cnz4YHElGgPC1XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODwogFB XsjATe0TkKsh68SFiEyFMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPGBbTQlP+I2VGVMI+kls+UTnrZ4rO1sNd1OP0XsmZyzk35ewoFtg+tlk1DW2 bGx0qzE9vkP5HZgP0iVteJ8ic1ExtgS3lgPiOZRwE7oOF7YvS0MLocGh3c4e/XGQ eUMqcycFlvuEq16zkKl+SxhZ7vfr1J0e1IWGeZoZ7Wip8zYytkrQz4YrpAcqXZ+R HouG4N5+SvTGJA0QyWeRSXa9MzH6pZAwiDq9AtRJ3RhMkf8ii9fnyXCuLahEmDBg q27WIWZSVd29cpmv8JAcA8pjGRr4Tgw/gHgkAFzRVvqheEjV4aEgF1Tbm75yC9XH UIdDFQFVTLRSMEDJJVhc07ewWA== -----END CERTIFICATE-----Generated at Mon Apr 27 17:41:49 2026 by rpki-client