$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: GDIYaPW7MoY198dpxWGQVNXwANPFXWFwNizEG4pXU1E= Subject key identifier: A1:AF:E0:E1:15:75:92:83:AD:11:80:86:70:99:A2:22:BE:B2:E6:51 Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: E4 Signing time: Fri 17 Apr 2026 06:12:43 +0000 Manifest this update: Fri 17 Apr 2026 06:12:42 +0000 Manifest next update: Fri 24 Apr 2026 06:12:42 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: KYtagoHL61jIHG4NMoj9NcjtVWoNlyNZPmVJPuPLJl4=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: OFV7TAeYTwMYk3v0VLj9doRdmglLiVsQ3XZ6eBJ4Cug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Apr 17 06:12:42 2026 GMT Not After : Apr 24 06:12:42 2026 GMT Subject: CN=69e1cf5a-1c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:b2:9d:84:e5:6d:39:3b:bb:c7:fe:e7:0e: 4d:0b:cb:aa:1d:b1:66:56:7c:f4:e6:92:59:98:d7: 65:74:ef:bf:30:7c:19:db:a3:c0:c8:42:d7:02:07: fb:c8:2f:f5:b6:ea:1a:01:8f:87:de:2c:fb:eb:1a: 09:fd:b4:9c:be:6a:00:c8:50:57:89:3d:6d:6b:00: 2e:da:d6:ca:b1:4f:51:d7:1c:5a:6f:06:61:30:ba: b5:df:36:5a:d0:e2:a8:b1:a4:02:3c:71:ad:36:1c: cc:18:ce:cb:a1:af:20:df:4e:30:ed:59:42:ce:e4: 40:85:d0:2b:bd:8f:d7:75:02:b4:d4:db:73:bc:50: 16:10:61:3c:ee:8f:b4:a5:b4:fe:c8:21:9b:7f:10: 5c:54:a5:45:04:c9:5e:a8:ee:f3:57:fe:8f:69:51: c7:21:53:72:b5:94:58:f8:76:36:81:e7:12:7f:b1: 3b:3b:93:87:89:9c:b5:4f:24:4b:2c:74:9b:e1:50: 05:3c:86:43:e6:f4:8a:7d:0c:d1:d1:09:3a:a4:8d: fe:b6:90:d0:04:17:d2:80:6f:26:5c:15:70:2c:cb: e7:f2:17:74:9a:0f:c6:6b:2e:00:45:6f:a0:b6:a0: 0f:23:40:46:f1:cb:dd:00:ab:de:d1:92:24:92:3c: f1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AF:E0:E1:15:75:92:83:AD:11:80:86:70:99:A2:22:BE:B2:E6:51 X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:04:a6:72:1b:88:20:d1:4e:48:2b:87:45:34:20:18:9b:4a: fd:94:0b:15:4c:dc:05:ff:72:e9:57:cd:1c:42:a9:d9:14:63: a5:73:97:da:aa:da:a8:4b:c7:2b:e3:f2:c3:e1:04:ca:d5:52: 59:f9:66:2b:46:b9:e1:fb:c3:79:b8:a9:dd:1e:55:5e:69:bc: 13:dc:83:2e:35:c6:88:47:c3:fd:2f:eb:e5:fe:f7:ee:e1:db: e2:9c:52:22:34:ae:6d:6f:82:7a:3b:02:d0:0e:b8:65:ea:a1: 08:40:44:e3:7b:2c:19:0d:23:c6:59:84:e0:59:49:85:b5:b3: 80:ab:43:9a:02:31:74:1b:f8:d5:75:eb:0e:fe:ce:6a:c8:97: 43:fd:0b:d8:31:c0:65:3b:7e:ee:1f:ba:86:ca:e3:4b:d2:06: e4:3d:24:1e:b0:06:b1:3e:57:9b:f8:78:80:ce:66:da:e1:b4: 25:24:dd:f7:97:d7:4a:b8:63:59:6d:a8:d0:ac:cd:88:82:cf: 4d:20:96:b4:eb:a7:67:7d:4a:7f:84:9d:c0:f7:a5:db:2c:64: 9c:77:63:f4:d5:2f:54:19:d0:54:0b:3b:ee:9a:e4:35:f3:9d: f1:e1:45:7c:d8:0c:c7:4d:57:9d:f6:11:6f:e1:eb:d6:9c:cb: b5:cd:24:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjYwNDE3MDYxMjQyWhcNMjYwNDI0MDYxMjQyWjAYMRYwFAYD VQQDEw02OWUxY2Y1YS0xYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnKynYTlbTk7u8f+5w5NC8uqHbFmVnz05pJZmNdldO+/MHwZ26PAyELXAgf7 yC/1tuoaAY+H3iz76xoJ/bScvmoAyFBXiT1tawAu2tbKsU9R1xxabwZhMLq13zZa 0OKosaQCPHGtNhzMGM7Loa8g304w7VlCzuRAhdArvY/XdQK01NtzvFAWEGE87o+0 pbT+yCGbfxBcVKVFBMleqO7zV/6PaVHHIVNytZRY+HY2gecSf7E7O5OHiZy1TyRL LHSb4VAFPIZD5vSKfQzR0Qk6pI3+tpDQBBfSgG8mXBVwLMvn8hd0mg/Gay4ARW+g tqAPI0BG8cvdAKve0ZIkkjzxXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGv4OEV dZKDrRGAhnCZoiK+suZRMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWgSmchuIINFOSCuHRTQgGJtK/ZQLFUzcBf9y6VfNHEKp2RRjpXOX2qraqEvH K+Pyw+EEytVSWflmK0a54fvDebip3R5VXmm8E9yDLjXGiEfD/S/r5f737uHb4pxS IjSubW+CejsC0A64ZeqhCEBE43ssGQ0jxlmE4FlJhbWzgKtDmgIxdBv41XXrDv7O asiXQ/0L2DHAZTt+7h+6hsrjS9IG5D0kHrAGsT5Xm/h4gM5m2uG0JSTd95fXSrhj WW2o0KzNiILPTSCWtOunZ31Kf4SdwPel2yxknHdj9NUvVBnQVAs77prkNfOd8eFF fNgMx01XnfYRb+Hr1pzLtc0kAA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:34 2026 by rpki-client