$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: HBTCNnwyi1+3/ZTs3EGrxtsh5egVEREqTmJLdPGPfpw= Subject key identifier: CD:7B:FF:63:BC:44:15:CA:4D:5C:6E:27:1D:C3:93:12:6D:37:C2:7F Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 328E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 328E Signing time: Sat 04 Apr 2026 15:22:43 +0000 Manifest this update: Sat 04 Apr 2026 15:22:43 +0000 Manifest next update: Sat 11 Apr 2026 15:22:43 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: LFS5+xFlCAaIaadXknhm1VXBLwMVNrSreLXMvKNg20I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12942 (0x328e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: Apr 4 15:22:43 2026 GMT Not After : Apr 11 15:22:43 2026 GMT Subject: CN=69d12cc3-555a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:d8:9c:5f:da:a7:bc:85:e2:cb:d7:53:8e: 1a:ef:00:12:63:ae:c0:61:50:e9:e2:fb:ad:f3:55: d2:d7:28:b1:d2:b8:d5:5a:63:7b:6b:cd:71:d4:d6: 49:b1:f8:8f:c3:2c:40:ed:bd:3c:4f:0e:74:c2:76: 1e:ae:70:4a:ef:1b:79:0d:d1:a3:c6:fe:5a:0d:6a: a6:26:ab:c4:a4:bc:f3:9f:14:a8:a9:ec:75:e3:ad: 83:78:89:e4:3a:cc:f2:da:b6:f2:f1:04:a6:a5:6e: 7c:c4:31:30:18:cb:01:b9:90:cd:9b:18:9c:bd:4c: 4a:12:be:8d:69:84:48:0f:57:e3:1d:67:f3:39:a9: 81:67:71:19:ae:9a:f1:6a:d2:6e:7d:4c:c9:91:9e: 6f:d7:5b:e7:bd:07:3b:d3:4f:8e:ad:8a:3b:aa:9c: e4:fd:2e:8b:71:47:82:b4:5a:6c:77:8c:7a:ac:0a: f5:3d:6a:4d:e4:24:14:b2:1b:3a:02:c8:05:fe:23: 15:8e:a5:27:7a:f1:bb:34:86:16:ac:b4:8f:f3:92: 49:44:d3:c0:c0:24:7f:7d:53:c3:40:59:88:44:d0: 32:9b:e9:df:af:2a:3a:0c:d4:2a:de:49:90:87:d0: f6:a5:69:ae:00:fb:fc:47:e4:3e:ff:c9:a0:8c:71: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7B:FF:63:BC:44:15:CA:4D:5C:6E:27:1D:C3:93:12:6D:37:C2:7F X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:dd:8d:fd:58:81:33:a4:32:16:8a:95:83:0a:cc:58:e8:bd: 41:54:c5:8f:23:d8:28:bc:ee:b4:cf:43:70:42:0b:64:7e:33: 80:c1:18:1f:82:26:42:0a:eb:43:17:4c:a9:2c:dd:86:a0:6c: c4:ae:55:37:8c:dc:84:7e:68:f9:78:16:28:9d:be:fc:02:90: cd:fc:06:39:8f:e9:ba:87:9e:2d:0f:4b:06:56:81:47:9b:0b: df:f9:70:7f:c5:8b:c9:81:c6:f9:65:5d:24:40:84:44:fc:5a: 46:e9:0d:af:d6:b0:4a:f8:71:e1:16:4b:3c:40:f5:43:de:68: 9c:d1:bc:49:97:a9:e9:0f:0c:61:19:17:bb:f6:8a:40:a9:34: 83:91:01:bc:af:aa:12:da:90:3c:e5:d2:0e:bc:41:d7:4c:d0: ab:96:57:06:0a:f0:4c:b6:0a:47:96:9c:9a:81:65:f6:fd:40: a6:23:b0:94:26:11:4c:14:2d:f7:65:18:af:93:6e:ee:81:69: 55:fb:f1:3f:f8:f8:3c:37:37:38:d3:a0:35:b1:d6:f4:d1:58: 6e:3e:a3:25:34:ef:a3:49:34:3b:6c:e7:b7:83:54:11:48:92: 7b:9d:93:44:e3:61:c3:64:3c:a1:40:e0:04:c3:b9:c5:02:8b: 2c:42:42:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjYwNDA0MTUyMjQzWhcNMjYwNDExMTUyMjQzWjAYMRYwFAYD VQQDEw02OWQxMmNjMy01NTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAbYnF/ap7yF4svXU44a7wASY67AYVDp4vut81XS1yix0rjVWmN7a81x1NZJ sfiPwyxA7b08Tw50wnYernBK7xt5DdGjxv5aDWqmJqvEpLzznxSoqex1462DeInk Oszy2rby8QSmpW58xDEwGMsBuZDNmxicvUxKEr6NaYRID1fjHWfzOamBZ3EZrprx atJufUzJkZ5v11vnvQc700+OrYo7qpzk/S6LcUeCtFpsd4x6rAr1PWpN5CQUshs6 AsgF/iMVjqUnevG7NIYWrLSP85JJRNPAwCR/fVPDQFmIRNAym+nfryo6DNQq3kmQ h9D2pWmuAPv8R+Q+/8mgjHEomwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM17/2O8 RBXKTVxuJx3DkxJtN8J/MB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm92N/ViBM6QyFoqVgwrMWOi9QVTFjyPYKLzutM9DcEILZH4zgMEYH4ImQgrr QxdMqSzdhqBsxK5VN4zchH5o+XgWKJ2+/AKQzfwGOY/puoeeLQ9LBlaBR5sL3/lw f8WLyYHG+WVdJECERPxaRukNr9awSvhx4RZLPED1Q95onNG8SZep6Q8MYRkXu/aK QKk0g5EBvK+qEtqQPOXSDrxB10zQq5ZXBgrwTLYKR5acmoFl9v1ApiOwlCYRTBQt 92UYr5Nu7oFpVfvxP/j4PDc3ONOgNbHW9NFYbj6jJTTvo0k0O2znt4NUEUiSe52T RONhw2Q8oUDgBMO5xQKLLEJCEA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:03 2026 by rpki-client