$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: ga8WDESHzfqwCmqAw/Mw9+LtE9fpVUeqiFSOre4buP0= Subject key identifier: DC:71:64:81:62:24:B9:73:E5:7D:99:F9:0F:0D:48:05:85:80:BF:7C Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 0183 Signing time: Fri 17 Apr 2026 04:19:15 +0000 Manifest this update: Fri 17 Apr 2026 04:19:15 +0000 Manifest next update: Fri 24 Apr 2026 04:19:15 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: 5gEEYe3IiMaoZL0lpCxPNvVXe26ZnHX0qfCOYcZeB5g=) 2: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: DaoSAYQzNYlo5aTx4tWzNSKO65Q1HEqqGcmdWjX5IjY=) 3: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: l7uSrpCfZ0OOoSoqkK8vV5IpNq6WjKn5Tf70ZTBi1NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Apr 17 04:19:15 2026 GMT Not After : Apr 24 04:19:15 2026 GMT Subject: CN=69e1b4c3-952d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:4a:8b:2d:69:1d:92:97:f5:60:50:8e:a0: 18:3f:37:1a:77:50:d8:09:ef:c7:74:41:64:ea:74: 6b:8c:6c:c5:de:76:28:0d:3c:de:ae:f3:2e:3b:67: 8c:b8:d8:c9:ca:aa:47:6f:d2:2d:f8:16:d5:34:a2: 32:26:5a:23:36:f7:9f:9e:a7:23:8c:a5:a2:ff:9e: 30:85:6d:f6:b3:02:2c:79:86:79:5c:e4:4f:c5:26: c3:08:76:36:fc:a2:80:4b:0f:d3:b7:04:c1:ed:f0: 56:b6:68:1b:9e:89:bf:01:b8:c6:ff:10:a9:28:dd: 73:91:1b:0f:3e:7c:30:fc:37:c1:b2:ad:21:3f:5f: 32:89:e2:0a:c7:e0:be:1b:d1:38:64:13:79:a2:70: 09:60:19:d7:67:51:60:5a:80:fc:1f:6c:cb:96:a2: ba:c7:6d:35:5a:71:2b:a2:f2:70:0c:49:b8:f3:58: db:21:3a:69:69:a0:79:f5:29:03:2a:04:5e:71:88: 5b:c0:79:75:26:40:2a:ae:36:a1:8d:44:83:ee:d1: 1d:5c:b5:f5:f8:75:9d:af:c6:20:c0:3b:10:b3:4e: 11:7c:c1:f9:af:b8:78:c4:e9:e9:7f:40:4b:1d:40: 57:f4:25:07:80:ef:97:9d:31:4d:f8:ad:52:e0:73: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:71:64:81:62:24:B9:73:E5:7D:99:F9:0F:0D:48:05:85:80:BF:7C X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:62:33:77:07:10:54:fe:db:17:24:37:62:af:26:b8:ff:fc: 4c:57:88:42:2c:35:41:44:8d:b9:9a:9e:e5:17:4b:41:00:b4: 28:d4:12:ff:4b:93:45:6f:af:47:f1:49:08:25:c5:8c:c9:af: 8b:be:38:50:77:5a:c9:2c:44:62:6a:05:f0:c4:2e:45:f6:ce: b6:76:b8:b2:4e:e7:b8:ce:b2:98:99:bf:2d:d0:a6:d1:35:b2: ec:1b:22:58:35:9d:f5:da:83:16:8f:af:dc:80:ed:c2:aa:65: da:de:7d:74:74:a5:d8:fd:10:bc:55:9e:a3:6a:87:f1:1d:b1: 41:1e:9a:16:ae:19:c4:b9:44:18:d5:47:ed:d0:5d:b5:52:c4: 5f:4c:2b:bf:54:0f:51:f7:31:71:e6:6f:d2:49:e8:0d:3a:9c: 75:f5:68:fd:37:d4:cc:a2:0a:93:3f:bf:80:0f:ad:41:26:5a: 55:44:5a:4c:43:bb:88:91:6c:bf:59:aa:83:6f:6d:37:a2:25: 18:ba:f6:05:bd:80:f1:af:96:a2:dd:d1:a4:d7:5c:28:a3:b0: 41:dd:56:a1:ce:4a:df:f8:33:68:b4:64:35:50:27:2d:55:9c: e4:e2:eb:01:f6:f5:97:3a:a7:e6:cb:02:9a:a4:6d:27:92:e3: 5d:4d:40:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjYwNDE3MDQxOTE1WhcNMjYwNDI0MDQxOTE1WjAYMRYwFAYD VQQDEw02OWUxYjRjMy05NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSZKiy1pHZKX9WBQjqAYPzcad1DYCe/HdEFk6nRrjGzF3nYoDTzervMuO2eM uNjJyqpHb9It+BbVNKIyJlojNvefnqcjjKWi/54whW32swIseYZ5XORPxSbDCHY2 /KKASw/TtwTB7fBWtmgbnom/AbjG/xCpKN1zkRsPPnww/DfBsq0hP18yieIKx+C+ G9E4ZBN5onAJYBnXZ1FgWoD8H2zLlqK6x201WnErovJwDEm481jbITppaaB59SkD KgRecYhbwHl1JkAqrjahjUSD7tEdXLX1+HWdr8YgwDsQs04RfMH5r7h4xOnpf0BL HUBX9CUHgO+XnTFN+K1S4HPUlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxxZIFi JLlz5X2Z+Q8NSAWFgL98MB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALWIzdwcQVP7bFyQ3Yq8muP/8TFeIQiw1QUSNuZqe5RdLQQC0KNQS/0uTRW+v R/FJCCXFjMmvi744UHdaySxEYmoF8MQuRfbOtna4sk7nuM6ymJm/LdCm0TWy7Bsi WDWd9dqDFo+v3IDtwqpl2t59dHSl2P0QvFWeo2qH8R2xQR6aFq4ZxLlEGNVH7dBd tVLEX0wrv1QPUfcxceZv0knoDTqcdfVo/TfUzKIKkz+/gA+tQSZaVURaTEO7iJFs v1mqg29tN6IlGLr2Bb2A8a+Wot3RpNdcKKOwQd1Woc5K3/gzaLRkNVAnLVWc5OLr Afb1lzqn5ssCmqRtJ5LjXU1A5A== -----END CERTIFICATE-----Generated at Fri Apr 17 08:08:56 2026 by rpki-client