$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: Yd6CROu9LZOynusvCyRb60emf6l++KboqlX+PWfjOLI= Subject key identifier: 7C:F2:91:9C:A0:E6:95:71:BC:AB:2F:0E:F8:5C:72:D4:0F:49:F0:3A Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 01ED Signing time: Fri 17 Apr 2026 03:06:39 +0000 Manifest this update: Fri 17 Apr 2026 03:06:39 +0000 Manifest next update: Fri 24 Apr 2026 03:06:39 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: iqee5JFVkXR+KYoYore0rhm7z2preBLp5USC2P6gSdI=) 2: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Apr 17 03:06:39 2026 GMT Not After : Apr 24 03:06:39 2026 GMT Subject: CN=69e1a3bf-b9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:74:a7:d9:b7:20:15:c1:bd:15:91:19:8f: 94:41:b4:ac:8e:5a:d3:24:99:6a:09:95:3d:66:10: 9e:9f:65:8a:45:b0:47:bd:52:41:9f:6b:df:35:a2: 1c:5e:4a:80:56:2a:47:7e:84:f9:75:4a:2b:21:c0: 8d:56:60:15:7c:af:a6:b7:6a:fd:8b:e1:de:35:4a: 1f:6b:5a:0f:54:3a:cd:76:fc:22:55:8d:3e:21:a3: 82:3b:87:34:dc:54:0a:98:e0:92:1d:7f:00:8f:e4: db:56:c4:0d:0b:27:bf:ea:39:02:48:a7:cc:cc:7f: 69:8a:6e:d3:d1:25:e9:b0:2f:cc:1e:94:c9:d7:51: c6:6e:a8:72:cc:08:8a:99:5f:8c:2c:e6:64:25:8f: aa:2f:74:52:a3:c0:f4:aa:06:c3:59:08:a9:d1:54: f6:aa:ed:42:f2:12:11:51:b7:46:7b:72:85:98:22: 1e:ae:9f:06:1d:17:6b:32:54:19:21:df:bf:04:3b: 6d:d3:f0:59:b2:92:53:99:6f:dd:2d:5b:42:9c:04: fa:94:bb:b2:0c:f4:c4:bd:37:9c:ab:6a:3d:59:ca: 24:fc:1a:b9:fc:35:52:67:db:c5:21:ec:2d:a3:27: 58:b3:8d:a3:c9:df:a2:1d:73:d4:56:65:6a:ef:c8: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F2:91:9C:A0:E6:95:71:BC:AB:2F:0E:F8:5C:72:D4:0F:49:F0:3A X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:69:5f:65:94:e3:09:1f:32:06:31:9d:e1:b3:68:7d:b7:7b: 67:92:6b:60:5f:69:41:cf:fc:e3:bb:5e:97:52:4e:03:c5:91: 64:a1:63:4a:91:a2:52:55:45:65:76:a4:e6:65:9a:c2:08:97: 6d:84:71:82:f5:bf:a8:fd:72:cc:48:94:8a:17:bc:e9:cd:6f: bd:3a:2e:e6:a0:86:a7:a9:6e:b1:11:7b:ed:b7:b2:b6:d2:7c: ff:fb:f2:26:24:11:9d:1d:6d:d3:6f:e3:14:ce:01:27:76:83: 4c:b7:ee:cd:fc:78:8b:f4:e1:c6:70:0a:79:60:e8:e5:58:d7: 35:df:9b:6d:1a:87:8c:ee:77:e7:33:40:c5:45:6a:a4:5a:15: aa:04:4b:f7:38:89:40:84:e7:a3:e4:74:7a:c2:b9:23:c1:43: da:f8:1a:06:2c:38:6b:7b:23:e1:93:58:a8:71:bc:b2:7b:5b: e0:3b:b2:fa:b1:cd:b2:70:44:1d:0b:3b:7b:1d:61:a7:5d:51: f8:e1:59:21:65:c3:04:f3:eb:15:3e:b9:35:fc:0f:83:93:33: 9a:2c:5d:b5:a8:1a:5c:34:2a:5d:17:83:f5:b3:f5:e1:73:92: b2:d6:dc:24:18:c3:c1:08:7f:10:34:01:cc:b6:ec:8e:2d:25: 61:84:51:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjYwNDE3MDMwNjM5WhcNMjYwNDI0MDMwNjM5WjAYMRYwFAYD VQQDEw02OWUxYTNiZi1iOWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr750p9m3IBXBvRWRGY+UQbSsjlrTJJlqCZU9ZhCen2WKRbBHvVJBn2vfNaIc XkqAVipHfoT5dUorIcCNVmAVfK+mt2r9i+HeNUofa1oPVDrNdvwiVY0+IaOCO4c0 3FQKmOCSHX8Aj+TbVsQNCye/6jkCSKfMzH9pim7T0SXpsC/MHpTJ11HGbqhyzAiK mV+MLOZkJY+qL3RSo8D0qgbDWQip0VT2qu1C8hIRUbdGe3KFmCIerp8GHRdrMlQZ Id+/BDtt0/BZspJTmW/dLVtCnAT6lLuyDPTEvTecq2o9Wcok/Bq5/DVSZ9vFIewt oydYs42jyd+iHXPUVmVq78hQHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzykZyg 5pVxvKsvDvhcctQPSfA6MB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKGlfZZTjCR8yBjGd4bNofbd7Z5JrYF9pQc/847tel1JOA8WRZKFjSpGiUlVF ZXak5mWawgiXbYRxgvW/qP1yzEiUihe86c1vvTou5qCGp6lusRF77beyttJ8//vy JiQRnR1t02/jFM4BJ3aDTLfuzfx4i/ThxnAKeWDo5VjXNd+bbRqHjO535zNAxUVq pFoVqgRL9ziJQITno+R0esK5I8FD2vgaBiw4a3sj4ZNYqHG8sntb4Duy+rHNsnBE HQs7ex1hp11R+OFZIWXDBPPrFT65NfwPg5MzmixdtagaXDQqXReD9bP14XOSstbc JBjDwQh/EDQBzLbsji0lYYRRgQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:27 2026 by rpki-client