$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: sREudEmZKpfBjhTY4OJnSNCrnD6C79BFSjV9YZr05+0= Subject key identifier: 7A:D6:56:63:4F:37:8F:AD:DD:B7:D0:B7:90:89:3B:85:1A:29:67:6B Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: 4A Signing time: Fri 17 Apr 2026 08:07:18 +0000 Manifest this update: Fri 17 Apr 2026 08:07:18 +0000 Manifest next update: Fri 24 Apr 2026 08:07:18 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: OG3JSsCch9qTfxMmwT0xPt0LQgjVfivxdWXRvfrZttc=) 2: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: hgGzaQ1cBrypk5ytpqpU7GEjdnOL4DAirIqjQZnghOs=) 3: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: 9RLAoZXHDep7ikUMuUeuOPjnOmGwHrIkt6BqprZz7KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Apr 17 08:07:18 2026 GMT Not After : Apr 24 08:07:18 2026 GMT Subject: CN=69e1ea36-a9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:b1:f7:6e:84:15:90:66:3d:c6:7d:ba:77: a2:5c:1c:d9:41:a6:a1:08:d5:1a:0e:7c:67:8d:ae: 79:69:c8:81:56:05:e7:fb:c6:55:15:af:4f:52:71: f5:5b:fa:36:54:85:6b:c4:46:cf:2d:fb:4e:c1:63: 14:88:1f:4b:db:48:e4:17:08:fb:ba:ba:16:64:1e: 40:52:ea:e9:50:28:73:88:f1:c9:2a:c3:33:0e:b3: d5:d6:b6:2e:93:4d:6b:3e:5e:8b:ff:05:0c:9b:01: 9c:af:89:73:ab:f1:ea:0c:52:d7:96:15:d2:ad:94: 89:31:12:70:9b:62:63:c5:23:9e:12:0e:e1:e9:77: 10:6e:49:67:7e:65:65:e0:94:3d:64:c3:83:b2:f4: 2a:c5:75:69:5c:b7:98:f8:c4:1b:a6:18:29:e3:11: 03:26:95:91:48:34:88:d5:44:84:2b:c3:17:25:8e: 10:0a:5c:8f:dc:a2:34:7d:8a:ae:bb:61:d1:00:e4: 01:87:33:60:77:2a:82:86:72:ec:6f:91:b0:db:39: 93:0f:3a:83:68:31:27:e1:90:c0:05:7a:dd:36:d5: ad:80:05:b6:5b:3a:e9:75:4c:a1:48:95:f7:4c:15: f8:5a:ae:69:0b:40:63:02:b2:9b:c5:f0:18:90:e0: b8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D6:56:63:4F:37:8F:AD:DD:B7:D0:B7:90:89:3B:85:1A:29:67:6B X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e4:ad:12:dd:94:b8:7c:38:30:7c:95:d9:84:83:24:00:44: ea:e1:5f:75:18:77:6a:c1:03:05:ab:86:be:96:73:24:6f:e8: a6:e9:16:23:5e:d5:d7:8e:48:4c:91:96:98:f6:6f:83:00:b9: b4:52:af:e3:44:58:60:b4:d9:50:3d:3f:89:26:65:f8:44:59: c2:6d:61:c1:57:51:b6:6b:0f:4a:30:03:58:43:11:e7:c9:2f: 1f:3e:a4:25:24:8c:6c:e0:f2:b8:26:d8:27:16:94:85:16:ac: a9:91:71:87:ba:cd:31:4e:70:9e:4a:b8:b6:32:23:a5:48:c8: 18:8f:64:26:e0:7c:0d:f5:66:d6:18:e7:ff:97:52:24:ad:55: 42:16:51:96:3b:be:a7:c9:9a:d2:47:d3:82:4f:0e:07:02:c4: d5:ae:61:41:92:c5:80:2b:e1:9d:f5:05:cb:cd:68:a3:b6:99: 96:d8:bd:33:67:40:80:a2:bd:f0:f6:41:36:70:e0:6b:57:eb: ed:c0:4a:08:10:34:3c:de:fb:1c:63:cb:0c:9a:7e:3b:2e:4e: bf:c4:54:64:d6:49:4d:4e:53:6d:c0:54:19:73:ad:48:1f:d8: b0:ee:3e:1b:0b:6d:1e:4f:36:b0:e3:c6:f1:88:d3:cd:b1:3f: 56:a4:5e:3d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NThGRjExMC8GA1UEBRMoRjI0RjE0NzE3MjNBNjRFNEQ1NzBEQkIwRDQ0QzgyNDMw NTQyNjI2NjAeFw0yNjA0MTcwODA3MThaFw0yNjA0MjQwODA3MThaMBgxFjAUBgNV BAMTDTY5ZTFlYTM2LWE5ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC40bH3boQVkGY9xn26d6JcHNlBpqEI1RoOfGeNrnlpyIFWBef7xlUVr09ScfVb +jZUhWvERs8t+07BYxSIH0vbSOQXCPu6uhZkHkBS6ulQKHOI8ckqwzMOs9XWti6T TWs+Xov/BQybAZyviXOr8eoMUteWFdKtlIkxEnCbYmPFI54SDuHpdxBuSWd+ZWXg lD1kw4Oy9CrFdWlct5j4xBumGCnjEQMmlZFINIjVRIQrwxcljhAKXI/cojR9iq67 YdEA5AGHM2B3KoKGcuxvkbDbOZMPOoNoMSfhkMAFet021a2ABbZbOul1TKFIlfdM FfharmkLQGMCspvF8BiQ4LgVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUetZWY083 j63dt9C3kIk7hRopZ2swHwYDVR0jBBgwFoAU8k8UcXI6ZOTVcNuw1EyCQwVCYmYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1OEZGLzRFM0NCNkMwRDcx QjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1lt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGs4VWNYSTZaT1RWY051dzFFeUNRd1ZDWW1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 OEZGLzRFM0NCNkMwRDcxQjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9U VmNOdXcxRXlDUXdWQ1ltWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCr5K0S3ZS4fDgwfJXZhIMkAETq4V91GHdqwQMFq4a+lnMkb+im6RYjXtXXjkhM kZaY9m+DALm0Uq/jRFhgtNlQPT+JJmX4RFnCbWHBV1G2aw9KMANYQxHnyS8fPqQl JIxs4PK4JtgnFpSFFqypkXGHus0xTnCeSri2MiOlSMgYj2Qm4HwN9WbWGOf/l1Ik rVVCFlGWO76nyZrSR9OCTw4HAsTVrmFBksWAK+Gd9QXLzWijtpmW2L0zZ0CAor3w 9kE2cOBrV+vtwEoIEDQ83vscY8sMmn47Lk6/xFRk1klNTlNtwFQZc61IH9iw7j4b C20eTzaw48bxiNPNsT9WpF49 -----END CERTIFICATE-----Generated at Fri Apr 17 20:50:35 2026 by rpki-client