$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: iI5mS8D1n72H3GOBovwem9LS3gDSjuaiyIgrzrwFxBU= Subject key identifier: 28:58:39:1D:07:3C:B9:2B:BF:04:26:2D:F9:BA:DB:58:BC:D0:17:8E Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 0215 Signing time: Fri 17 Apr 2026 02:38:37 +0000 Manifest this update: Fri 17 Apr 2026 02:38:37 +0000 Manifest next update: Fri 24 Apr 2026 02:38:37 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: IZZv06KskKf03LlTyA03ggxIZexWWyXQM03sD99276Y=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /W0g7wRAuyXEotKxsKGa14VaFaP0rEyXWp6ttAdlMsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Apr 17 02:38:37 2026 GMT Not After : Apr 24 02:38:37 2026 GMT Subject: CN=69e19d2d-1845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:4d:94:27:3e:d4:ed:6a:44:87:70:0b:37: 35:25:c4:f9:32:8a:6a:7a:8a:15:eb:2a:b9:55:d1: 5b:1b:d0:75:a7:fd:9f:2c:9f:18:d4:1c:69:cc:a5: 2d:e9:cb:49:2d:fc:31:b0:ba:34:a9:d6:41:db:01: cf:3a:35:d0:33:ba:97:e6:19:94:53:12:dc:a1:44: 74:0f:0f:ab:c7:a0:99:a3:af:3d:d9:ad:2f:e5:62: 28:82:27:18:aa:25:2e:9d:b5:cb:80:ba:45:b4:72: e7:11:0f:a1:b6:df:3d:5e:a3:a8:c6:42:1f:53:79: ef:7b:28:fe:76:ce:dc:62:84:ff:02:a8:01:c2:73: 04:11:d6:6d:3a:ed:fa:3a:6c:62:ba:22:cd:c9:9d: a7:ac:66:f9:bc:61:03:cf:9f:fe:90:46:45:a8:10: 77:0b:59:96:53:3c:9a:01:63:3a:4e:ec:c5:6c:bb: 7c:b2:c3:e4:bc:00:df:69:b1:e9:5b:5b:12:b8:6b: 3f:14:82:a2:90:69:64:6e:ab:61:c1:b9:03:75:24: 26:10:60:a9:1f:6f:9b:7a:46:88:b8:72:2a:d3:14: 66:d6:82:30:cb:07:fa:9d:9a:19:46:55:1f:2e:3c: 01:2f:c3:df:12:b9:9b:47:8a:e3:88:02:20:50:55: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:58:39:1D:07:3C:B9:2B:BF:04:26:2D:F9:BA:DB:58:BC:D0:17:8E X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3a:ab:5f:4c:ae:02:00:c1:91:05:f3:5d:34:f4:7c:b3:31: 5b:c9:d4:1e:24:56:59:80:b3:65:b8:06:e6:ee:f0:11:40:b5: 67:d6:a7:bc:5e:83:28:70:26:de:79:d8:96:10:d3:1f:a2:4c: 72:d9:12:08:44:e5:32:d6:13:dc:cf:21:b1:ff:9e:a6:fe:a1: 1b:db:98:a2:80:70:d9:38:91:71:bc:56:f9:e8:d6:c8:76:f1: 27:2b:d6:ad:98:07:c1:8f:d9:e1:c4:56:ce:45:6b:3d:ff:3e: 1e:d3:9b:5c:0c:74:2f:ad:bb:71:f0:36:6f:4b:ca:84:28:7c: 54:d0:0f:3f:2e:3c:26:a1:27:42:5d:7c:7b:bb:6a:6f:93:05: 67:d5:48:42:69:42:eb:75:cf:c2:b7:1a:4e:a6:69:98:7b:98: 50:d7:bc:49:66:9b:3e:0a:30:f6:e6:e7:ea:19:0f:47:4f:6d: 9f:91:0c:0c:6b:61:a7:95:b2:8a:8d:e8:ce:af:19:c1:e1:31: 37:33:7b:89:0b:77:85:99:18:28:20:af:0f:57:31:28:71:56: 70:77:1b:9b:ad:f6:8f:c1:9e:a8:98:f0:76:5c:3b:7e:f7:49: ad:72:1b:1d:73:a1:3e:af:5f:71:c5:b3:bf:69:3a:03:ef:10: f0:17:19:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjYwNDE3MDIzODM3WhcNMjYwNDI0MDIzODM3WjAYMRYwFAYD VQQDEw02OWUxOWQyZC0xODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mtNlCc+1O1qRIdwCzc1JcT5MopqeooV6yq5VdFbG9B1p/2fLJ8Y1BxpzKUt 6ctJLfwxsLo0qdZB2wHPOjXQM7qX5hmUUxLcoUR0Dw+rx6CZo6892a0v5WIogicY qiUunbXLgLpFtHLnEQ+htt89XqOoxkIfU3nveyj+ds7cYoT/AqgBwnMEEdZtOu36 OmxiuiLNyZ2nrGb5vGEDz5/+kEZFqBB3C1mWUzyaAWM6TuzFbLt8ssPkvADfabHp W1sSuGs/FIKikGlkbqthwbkDdSQmEGCpH2+bekaIuHIq0xRm1oIwywf6nZoZRlUf LjwBL8PfErmbR4rjiAIgUFUoKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChYOR0H PLkrvwQmLfm621i80BeOMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbjqrX0yuAgDBkQXzXTT0fLMxW8nUHiRWWYCzZbgG5u7wEUC1Z9anvF6DKHAm 3nnYlhDTH6JMctkSCETlMtYT3M8hsf+epv6hG9uYooBw2TiRcbxW+ejWyHbxJyvW rZgHwY/Z4cRWzkVrPf8+HtObXAx0L627cfA2b0vKhCh8VNAPPy48JqEnQl18e7tq b5MFZ9VIQmlC63XPwrcaTqZpmHuYUNe8SWabPgow9ubn6hkPR09tn5EMDGthp5Wy io3ozq8ZweExNzN7iQt3hZkYKCCvD1cxKHFWcHcbm632j8GeqJjwdlw7fvdJrXIb HXOhPq9fccWzv2k6A+8Q8BcZgw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:24:19 2026 by rpki-client