$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft File: g8K1S2QeP_BuMaK0RQwVetrVm2g.mft (raw, json) Hash identifier: 0CwrIuCtowNKQpalX3iliY/eLzoFEqdhuUay0FrAbqU= Subject key identifier: C1:6A:5D:64:30:83:E6:6F:D1:35:E8:82:E9:7E:54:1F:29:B8:E2:D5 Authority key identifier: 83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68 Certificate issuer: /CN=A9137E5F/serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft Manifest number: 0135 Signing time: Fri 17 Apr 2026 05:10:52 +0000 Manifest this update: Fri 17 Apr 2026 05:10:52 +0000 Manifest next update: Fri 24 Apr 2026 05:10:52 +0000 Files and hashes: 1: g8K1S2QeP_BuMaK0RQwVetrVm2g.crl (hash: 6iXONkxPm89K9Q2nulphWNn5MskCzqR+/Mfm1JZMLRo=) 2: 7114716A653911EFB61F430DC4F9AE02.roa (hash: xSWO0CTcQGpa06Eh3Wh+x2FwEZv1Nax7hDU1hAzLKjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E5F, serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68 Validity Not Before: Apr 17 05:10:52 2026 GMT Not After : Apr 24 05:10:52 2026 GMT Subject: CN=69e1c0dc-ea8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:da:74:bf:fb:98:c5:b2:43:83:2f:30:93: 92:15:29:22:b3:36:a7:80:fe:87:ad:1d:d8:92:5b: aa:66:f8:fb:cb:c1:e5:a2:f7:9f:50:58:4c:87:5c: bf:75:c5:98:45:44:08:c6:5e:1e:69:89:14:49:c2: a1:d3:09:1e:af:f7:48:33:5c:84:35:b5:46:42:8a: cf:5a:05:ea:b8:c7:4c:e1:b7:e1:4d:6a:59:11:c1: ad:4c:ae:c9:9c:fd:0d:04:10:4e:d5:3d:91:fa:eb: fa:11:c9:f1:b8:85:e2:3a:97:ac:e0:11:12:44:98: 00:25:a4:18:c7:67:71:57:b5:85:25:f8:16:74:0b: a6:59:cf:79:41:8f:4a:18:c4:73:95:4c:37:99:ee: 4f:c6:a8:ae:5a:b8:17:37:4c:65:39:da:98:92:fd: 4c:73:d5:00:9b:41:03:b8:37:f1:bf:13:e5:91:e7: 7d:43:aa:36:9c:ad:18:ab:f3:fe:db:f0:6d:40:1b: 03:55:f0:5b:6d:a5:02:aa:51:61:94:16:a2:23:9d: 52:1d:44:b0:2c:e8:cf:6c:9a:4c:c0:82:3c:1b:e4: af:bb:6f:70:cc:d7:32:95:b9:2b:ff:64:ff:51:77: ed:f7:95:a7:3c:a1:67:59:d6:a6:bd:dc:3c:4b:6a: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6A:5D:64:30:83:E6:6F:D1:35:E8:82:E9:7E:54:1F:29:B8:E2:D5 X509v3 Authority Key Identifier: keyid:83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:4a:f7:41:1c:58:6f:00:53:f2:b3:9a:fa:f3:8a:1d:c1:9a: 46:d2:a2:08:3b:3d:63:ef:3a:ac:4e:04:1d:88:ad:93:e3:67: d3:93:4f:c0:7a:54:2c:d1:39:93:4f:da:26:b4:6e:d4:9d:e6: 53:d5:61:ff:7c:22:7f:4b:a9:f7:09:58:6d:b1:db:f0:63:1e: 8f:1a:98:e4:f7:94:22:f3:82:47:82:c9:40:b1:74:a8:6c:40: 5e:e8:ba:db:d0:b6:03:04:3b:c7:33:9f:a0:15:fc:28:46:28: ef:39:b7:0f:05:f7:f3:6f:2e:e1:62:9a:7b:e4:c7:80:da:b5: b7:42:56:c9:8e:b4:e2:73:94:df:74:59:d8:96:1f:51:b6:f5: 64:11:57:06:e7:d2:4c:d1:3d:1c:3a:99:bf:91:ae:41:3c:3a: 4b:98:50:85:39:09:14:b6:ab:9a:39:6d:0a:36:5c:5e:99:40: 95:ae:d9:73:ab:f2:0f:ec:e8:23:0d:f0:35:76:7c:ae:6f:54: c9:82:65:b9:ec:20:59:4e:65:7c:7a:d2:5f:14:40:49:da:fa: 23:ee:73:4f:b1:55:e4:75:a7:1d:9c:de:a4:9a:32:65:ba:0e: 5d:ba:86:63:6d:fc:7a:a9:a2:e3:35:7d:f1:c6:0d:c0:dd:38: 8c:42:cd:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFNUYxMTAvBgNVBAUTKDgzQzJCNTRCNjQxRTNGRjA2RTMxQTJCNDQ1MEMxNTdB REFENTlCNjgwHhcNMjYwNDE3MDUxMDUyWhcNMjYwNDI0MDUxMDUyWjAYMRYwFAYD VQQDEw02OWUxYzBkYy1lYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAor7adL/7mMWyQ4MvMJOSFSkiszangP6HrR3YkluqZvj7y8HlovefUFhMh1y/ dcWYRUQIxl4eaYkUScKh0wker/dIM1yENbVGQorPWgXquMdM4bfhTWpZEcGtTK7J nP0NBBBO1T2R+uv6EcnxuIXiOpes4BESRJgAJaQYx2dxV7WFJfgWdAumWc95QY9K GMRzlUw3me5PxqiuWrgXN0xlOdqYkv1Mc9UAm0EDuDfxvxPlked9Q6o2nK0Yq/P+ 2/BtQBsDVfBbbaUCqlFhlBaiI51SHUSwLOjPbJpMwII8G+Svu29wzNcylbkr/2T/ UXft95WnPKFnWdamvdw8S2oqwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFqXWQw g+Zv0TXogul+VB8puOLVMB8GA1UdIwQYMBaAFIPCtUtkHj/wbjGitEUMFXra1Zto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U1Ri84MEM0QjMwMDY1 MzgxMUVGOEI0Njg5NkVDNEY5QUUwMi9nOEsxUzJRZVBfQnVNYUswUlF3VmV0clZt MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4SzFTMlFlUF9CdU1hSzBSUXdWZXRyVm0yZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0U1Ri84MEM0QjMwMDY1MzgxMUVGOEI0Njg5NkVDNEY5QUUwMi9nOEsxUzJRZVBf QnVNYUswUlF3VmV0clZtMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlUr3QRxYbwBT8rOa+vOKHcGaRtKiCDs9Y+86rE4EHYitk+Nn05NPwHpULNE5 k0/aJrRu1J3mU9Vh/3wif0up9wlYbbHb8GMejxqY5PeUIvOCR4LJQLF0qGxAXui6 29C2AwQ7xzOfoBX8KEYo7zm3DwX3828u4WKae+THgNq1t0JWyY604nOU33RZ2JYf Ubb1ZBFXBufSTNE9HDqZv5GuQTw6S5hQhTkJFLarmjltCjZcXplAla7Zc6vyD+zo Iw3wNXZ8rm9UyYJluewgWU5lfHrSXxRASdr6I+5zT7FV5HWnHZzepJoyZboOXbqG Y238eqmi4zV98cYNwN04jELNrw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:49:04 2026 by rpki-client