$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: 4obzRa/9Q175fI9oZayRO9EvAfyLunBbBwhgsef2T/M= Subject key identifier: 89:0F:73:AB:21:2A:DD:36:1A:C9:AC:AF:F5:2C:16:6F:87:85:27:96 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0DA1 Signing time: Sat 18 Apr 2026 18:22:25 +0000 Manifest this update: Sat 18 Apr 2026 18:22:25 +0000 Manifest next update: Sat 25 Apr 2026 18:22:25 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: p3TzkD6g5Y0ppXb3A7JvjWeqfeqHPdkjVdKhi/93oZU=) 2: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=) 3: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: OCSQyHL40HhtFPxjiZ0aie03NCu9qKwOOGRctAZUKss=) 4: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: p0qRh9uijUrBuvk2zDLygs2mx5whlrqDAoU+cadOU2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3519 (0xdbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Apr 18 18:22:25 2026 GMT Not After : Apr 25 18:22:25 2026 GMT Subject: CN=69e3cbe1-f6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cd:a9:a0:4f:ef:e1:e4:a9:09:a0:7d:f3:82: c9:6f:36:c0:8f:6b:b5:5e:ae:9b:68:91:77:3f:3f: 96:3f:8b:ee:7e:bf:4e:ed:b2:f6:4f:ab:bf:3d:1c: 4c:a9:4d:6f:a2:dd:e9:e9:08:67:23:38:68:2f:f6: ed:e7:8e:01:88:82:e3:db:43:0c:e7:1e:4b:8b:71: aa:c3:bf:19:26:ae:d9:a1:94:dd:ea:f0:ae:2e:2e: 4c:ec:26:73:8a:72:af:97:59:de:42:63:a7:fd:5d: 29:c3:8b:7b:62:a9:d3:27:e6:5d:9e:6a:62:6e:cd: ca:d2:07:3e:4b:89:f8:b4:d3:a5:7e:33:44:31:9e: 15:01:65:76:12:36:d6:c5:da:4a:2c:00:59:ba:ad: cd:cb:09:98:9b:cb:44:cd:aa:d0:75:bc:7c:cd:ed: 67:bc:42:d3:08:45:bc:d0:60:23:4a:62:4e:68:cb: 0a:9a:85:09:5b:fb:f1:9d:92:a5:21:8f:7e:5a:db: d3:45:33:38:41:c7:0d:db:29:23:dd:26:aa:ae:17: c3:9e:98:2f:52:e5:af:72:58:1f:45:64:5a:72:64: a5:9c:c8:d8:2f:85:52:af:ce:20:7f:df:c9:aa:60: eb:ae:96:17:7d:72:a0:57:24:14:ae:85:b8:73:c5: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0F:73:AB:21:2A:DD:36:1A:C9:AC:AF:F5:2C:16:6F:87:85:27:96 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:43:3f:6d:38:c0:d6:c4:f9:d8:d5:bb:50:8a:74:8d:f0:ff: e6:f1:3d:1f:99:59:bc:08:9c:51:fe:85:61:8a:78:70:2e:35: 1b:3c:8f:79:21:22:11:6c:ae:e5:e9:78:6e:1c:c9:b7:a0:bb: 9f:46:d2:83:b1:e0:bb:3c:dd:7c:7f:42:69:b5:38:d3:19:73: 3d:f0:84:63:7d:d9:e7:0b:a6:c6:46:d8:f5:72:56:78:71:f3: 70:98:8f:2a:83:1e:31:99:46:d4:4a:a9:61:09:26:fb:ff:39: 39:6f:88:0b:5b:e7:09:63:f3:58:64:1e:7a:b9:5e:78:67:33: cd:38:79:cc:1c:70:f6:bd:31:27:58:27:fe:7b:a0:c1:28:69: 68:22:e0:9e:6d:e0:84:60:ff:4e:23:f1:99:0e:92:b9:c3:ce: 36:46:66:f6:68:4c:cf:90:2e:ff:fb:d6:13:57:cf:47:2c:73: 7d:7b:c2:f2:73:b3:b7:bf:68:e6:3b:1b:f5:40:ef:55:0f:7d: e0:09:39:2b:1a:6b:e4:af:5d:49:c6:63:e3:a0:17:08:ea:ef: 00:9b:da:4e:9a:91:a7:1d:69:16:0b:0b:1c:b7:cb:87:21:5c: b2:9a:1d:c1:2a:a8:8b:7e:cf:c4:53:c1:65:8d:83:5e:56:99: 83:5f:8d:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwNDE4MTgyMjI1WhcNMjYwNDI1MTgyMjI1WjAYMRYwFAYD VQQDEw02OWUzY2JlMS1mNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmc2poE/v4eSpCaB984LJbzbAj2u1Xq6baJF3Pz+WP4vufr9O7bL2T6u/PRxM qU1vot3p6QhnIzhoL/bt544BiILj20MM5x5Li3Gqw78ZJq7ZoZTd6vCuLi5M7CZz inKvl1neQmOn/V0pw4t7YqnTJ+Zdnmpibs3K0gc+S4n4tNOlfjNEMZ4VAWV2EjbW xdpKLABZuq3NywmYm8tEzarQdbx8ze1nvELTCEW80GAjSmJOaMsKmoUJW/vxnZKl IY9+WtvTRTM4QccN2ykj3SaqrhfDnpgvUuWvclgfRWRacmSlnMjYL4VSr84gf9/J qmDrrpYXfXKgVyQUroW4c8XApwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkPc6sh Kt02Gsmsr/UsFm+HhSeWMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvUM/bTjA1sT52NW7UIp0jfD/5vE9H5lZvAicUf6FYYp4cC41GzyPeSEiEWyu 5el4bhzJt6C7n0bSg7HguzzdfH9CabU40xlzPfCEY33Z5wumxkbY9XJWeHHzcJiP KoMeMZlG1EqpYQkm+/85OW+IC1vnCWPzWGQeerleeGczzTh5zBxw9r0xJ1gn/nug wShpaCLgnm3ghGD/TiPxmQ6SucPONkZm9mhMz5Au//vWE1fPRyxzfXvC8nOzt79o 5jsb9UDvVQ994Ak5Kxpr5K9dScZj46AXCOrvAJvaTpqRpx1pFgsLHLfLhyFcspod wSqoi37PxFPBZY2DXlaZg1+Neg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:27 2026 by rpki-client