$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: AlS7ATpciMUw71MKj+KNHfbUybNEmKxGelQ6K+wpDtQ= Subject key identifier: 82:47:A4:AC:ED:99:B9:9F:AC:34:E5:F4:D2:1F:83:7A:78:45:2C:7E Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 0408 Signing time: Fri 17 Apr 2026 00:25:06 +0000 Manifest this update: Fri 17 Apr 2026 00:25:06 +0000 Manifest next update: Fri 24 Apr 2026 00:25:06 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: yT75jeCKYKCMllivy5/v5/nIr2aFF6Jiw4Yg/TxoZUQ=) 2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: Z03RugePbg56cpD4tmLticyJWdpNtFUntyNpe/qgjRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: Apr 17 00:25:06 2026 GMT Not After : Apr 24 00:25:06 2026 GMT Subject: CN=69e17de2-70c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:55:2f:0c:5b:e1:27:98:ea:0e:6a:ad:e6: d9:e4:a6:5e:28:5a:fc:49:6a:f2:46:21:53:d0:a2: 98:f6:6f:6d:55:94:51:c1:d2:fd:70:e7:d3:52:61: c4:b2:a3:84:b8:30:33:6a:12:7d:f8:b9:9e:f5:53: 55:6a:37:8d:19:5b:e1:26:17:fa:28:c3:bc:f2:65: 4e:52:e7:bf:d4:7f:fc:a5:55:97:2c:00:4d:76:16: f7:21:1c:ae:95:fb:e5:4a:68:a9:85:ab:d7:ee:6b: 33:c6:83:07:51:f2:d2:6b:bc:16:c9:48:e5:e0:86: 97:66:97:9d:2b:a9:aa:f7:9e:8e:aa:ae:e6:0b:41: 60:42:a2:b7:f0:76:84:c9:2c:2e:96:10:d5:8a:a6: 0e:20:bc:4c:87:8c:fa:65:31:18:fb:d7:c9:e7:91: 91:47:fa:f8:97:a0:c2:50:b3:cf:7c:a2:cb:5d:d8: 43:fa:99:db:17:4c:27:4b:7c:b7:b2:35:5c:4b:59: dc:b6:7f:c9:6d:77:22:ee:93:c4:a9:fb:a6:ae:ac: a1:0e:85:f3:11:ec:c2:9a:4f:65:c9:e7:62:b7:b4: af:95:74:f9:8d:66:2b:6e:56:ca:57:c6:31:dd:e8: be:82:ba:38:ed:63:61:54:56:7e:f0:c5:61:5c:4e: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:47:A4:AC:ED:99:B9:9F:AC:34:E5:F4:D2:1F:83:7A:78:45:2C:7E X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:68:75:34:b8:63:05:8d:09:21:83:a6:b9:ca:74:aa:7e:5e: 0c:6d:80:c0:a0:54:19:ff:45:36:6b:4e:ff:b0:74:29:d6:c8: 2b:5f:fc:0c:35:9b:ea:ad:09:71:27:b4:0b:aa:88:c5:53:39: 86:e7:95:e6:c0:3d:2f:ec:dc:a3:a0:1f:8f:d5:91:41:95:69: ce:f0:7a:c3:75:f3:82:78:ce:33:b8:be:b2:79:10:7c:83:e1: 9f:63:4b:77:1b:9d:27:f8:7d:2f:3f:78:ad:6b:24:70:0f:d1: 67:cc:3e:ba:c8:df:e9:83:7a:c4:b6:0c:e9:59:7d:70:d9:af: 88:97:12:89:d6:bc:98:bb:a4:54:34:d7:83:92:45:a8:2a:3f: 51:20:91:1a:8c:e1:17:31:f6:f8:96:9e:e6:ff:30:6b:d0:a9: e0:90:7a:80:f9:76:ca:0b:57:b4:da:4b:54:be:e5:24:9f:35: 97:7c:2d:75:c1:be:a1:79:eb:3a:13:d2:ef:a5:7a:64:65:04: cc:ed:01:8d:36:8b:4c:f7:07:69:3c:e0:69:6a:02:0e:5b:d6: 67:af:61:0a:d3:e4:43:03:78:ea:5e:8d:e3:09:02:22:43:22: 81:4a:fa:f2:33:00:d3:a9:00:72:6f:9e:d6:f3:d5:d3:40:5a: 48:a5:d9:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjYwNDE3MDAyNTA2WhcNMjYwNDI0MDAyNTA2WjAYMRYwFAYD VQQDEw02OWUxN2RlMi03MGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pFVLwxb4SeY6g5qrebZ5KZeKFr8SWryRiFT0KKY9m9tVZRRwdL9cOfTUmHE sqOEuDAzahJ9+Lme9VNVajeNGVvhJhf6KMO88mVOUue/1H/8pVWXLABNdhb3IRyu lfvlSmiphavX7mszxoMHUfLSa7wWyUjl4IaXZpedK6mq956Oqq7mC0FgQqK38HaE ySwulhDViqYOILxMh4z6ZTEY+9fJ55GRR/r4l6DCULPPfKLLXdhD+pnbF0wnS3y3 sjVcS1nctn/JbXci7pPEqfumrqyhDoXzEezCmk9lyedit7SvlXT5jWYrblbKV8Yx 3ei+gro47WNhVFZ+8MVhXE62owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJHpKzt mbmfrDTl9NIfg3p4RSx+MB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl2h1NLhjBY0JIYOmucp0qn5eDG2AwKBUGf9FNmtO/7B0KdbIK1/8DDWb6q0J cSe0C6qIxVM5hueV5sA9L+zco6Afj9WRQZVpzvB6w3XzgnjOM7i+snkQfIPhn2NL dxudJ/h9Lz94rWskcA/RZ8w+usjf6YN6xLYM6Vl9cNmviJcSida8mLukVDTXg5JF qCo/USCRGozhFzH2+Jae5v8wa9Cp4JB6gPl2ygtXtNpLVL7lJJ81l3wtdcG+oXnr OhPS76V6ZGUEzO0BjTaLTPcHaTzgaWoCDlvWZ69hCtPkQwN46l6N4wkCIkMigUr6 8jMA06kAcm+e1vPV00BaSKXZ2A== -----END CERTIFICATE-----Generated at Fri Apr 17 16:34:17 2026 by rpki-client