$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: Bex0Dv7pxbwhUkFYVWIYv2HAR9ZSrxeCOEirbfuYspI= Subject key identifier: C3:C6:38:5D:24:A9:1B:ED:A7:25:56:4C:01:1F:BE:46:17:8F:0A:9E Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0E83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0E7C Signing time: Sat 04 Apr 2026 17:37:27 +0000 Manifest this update: Sat 04 Apr 2026 17:37:26 +0000 Manifest next update: Sat 11 Apr 2026 17:37:26 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: sC2QxzWSwDPbthhr+p5zvAYsePTkH5ISCyHpUteGQ4s=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: S1LxRGAyN75MGVrx7zsjehrxoECJoknKKiFKcBA+GMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3715 (0xe83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: Apr 4 17:37:26 2026 GMT Not After : Apr 11 17:37:26 2026 GMT Subject: CN=69d14c56-1112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e6:b9:7f:15:92:d4:ae:86:3b:6d:14:79:92: ef:c4:b0:23:6d:23:57:86:4f:1d:85:d4:b5:f2:70: 91:d3:41:91:37:55:58:3f:b7:c8:45:a8:c7:0c:ff: d9:f6:30:99:55:82:60:e3:ab:dd:6d:59:f4:5e:24: 55:18:57:60:6d:c2:91:fb:f8:b6:bb:38:df:01:85: cf:4b:a1:67:03:bf:58:9f:0a:cd:2c:b1:f8:a1:87: 21:23:4d:02:7c:f1:ed:3b:ee:ab:51:ee:fa:fc:6c: b3:8b:56:5a:b5:b1:59:c8:b1:e6:49:1c:7d:9d:41: f4:c0:f5:ba:be:43:b9:c8:78:92:14:47:f0:2e:3f: 60:87:94:9e:06:ac:df:75:0a:86:32:a9:46:56:1a: 2d:5a:1d:bd:ca:fc:4a:d3:f6:a3:bc:ef:7c:a2:1a: 4b:e7:e3:71:e7:40:ec:70:c7:27:f7:c1:be:d9:a0: f3:7e:32:ef:fc:3d:74:be:69:3c:5b:ab:8d:e2:c1: fd:61:1d:1e:2b:30:f2:f2:a0:82:74:aa:61:af:11: 02:20:07:5d:73:37:bd:cd:67:0e:53:b2:00:ec:d5: e1:56:ab:a6:73:c6:32:6a:99:32:24:4e:54:2a:36: 4e:a1:04:ba:c5:b0:11:47:be:c1:27:ca:8b:64:ec: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:38:5D:24:A9:1B:ED:A7:25:56:4C:01:1F:BE:46:17:8F:0A:9E X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:df:5e:eb:bf:3b:27:31:07:f6:f2:be:fa:0b:a7:ed:73:a2: 41:02:78:9b:61:fb:3f:af:1e:f0:0c:25:76:be:cc:4f:fc:1c: ad:e8:91:0b:ce:fc:af:b1:b8:1a:6e:6a:02:3b:89:8f:c8:96: a3:9c:25:57:d0:9f:19:6a:43:4f:a8:c7:5a:d1:63:0d:fb:ae: 86:87:84:65:f1:a9:e9:2c:af:7f:d8:0c:7f:fe:ab:f1:eb:9e: e3:ab:56:d0:36:c9:87:d0:e2:c8:ad:b5:6b:9e:46:d2:88:87: 64:7f:a4:66:2e:a5:50:f5:d0:9e:e9:8a:71:45:fd:3c:89:7f: 38:da:c3:2f:da:35:1e:df:e0:6d:b0:81:a7:5b:54:14:4d:29: 37:28:e4:1b:ee:05:55:08:74:70:a3:ca:52:e1:3e:39:db:bb: eb:75:bd:0b:cf:7e:df:87:27:ab:f0:cd:bd:27:b9:4e:96:b9: ce:12:f0:ff:20:57:6d:5e:71:2c:3e:6f:d7:c4:34:d3:6a:26: 68:95:25:7a:64:c7:e2:de:c2:35:e2:12:eb:41:30:3d:a8:be: 36:02:02:fb:15:f3:5c:56:c1:3d:6e:19:90:12:f5:29:cf:ee: 6e:de:9d:f4:c4:8a:02:99:99:e0:a8:2b:f3:e9:72:0f:17:8d: ef:83:a9:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjYwNDA0MTczNzI2WhcNMjYwNDExMTczNzI2WjAYMRYwFAYD VQQDEw02OWQxNGM1Ni0xMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjea5fxWS1K6GO20UeZLvxLAjbSNXhk8dhdS18nCR00GRN1VYP7fIRajHDP/Z 9jCZVYJg46vdbVn0XiRVGFdgbcKR+/i2uzjfAYXPS6FnA79YnwrNLLH4oYchI00C fPHtO+6rUe76/Gyzi1ZatbFZyLHmSRx9nUH0wPW6vkO5yHiSFEfwLj9gh5SeBqzf dQqGMqlGVhotWh29yvxK0/ajvO98ohpL5+Nx50DscMcn98G+2aDzfjLv/D10vmk8 W6uN4sH9YR0eKzDy8qCCdKphrxECIAddcze9zWcOU7IA7NXhVqumc8YyapkyJE5U KjZOoQS6xbARR77BJ8qLZOwaAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPGOF0k qRvtpyVWTAEfvkYXjwqeMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQt9e6787JzEH9vK++gun7XOiQQJ4m2H7P68e8Awldr7MT/wcreiRC878r7G4 Gm5qAjuJj8iWo5wlV9CfGWpDT6jHWtFjDfuuhoeEZfGp6Syvf9gMf/6r8eue46tW 0DbJh9DiyK21a55G0oiHZH+kZi6lUPXQnumKcUX9PIl/ONrDL9o1Ht/gbbCBp1tU FE0pNyjkG+4FVQh0cKPKUuE+Odu763W9C89+34cnq/DNvSe5Tpa5zhLw/yBXbV5x LD5v18Q002omaJUlemTH4t7CNeIS60EwPai+NgIC+xXzXFbBPW4ZkBL1Kc/ubt6d 9MSKApmZ4Kgr8+lyDxeN74Op2w== -----END CERTIFICATE-----Generated at Mon Apr 6 10:32:25 2026 by rpki-client