$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: 7giC+mFu/rusbIl+l/5gVR/qcarEPkff3bQOElPN3jI= Subject key identifier: 6E:3B:AD:EF:87:D7:49:AC:7A:33:A3:06:2C:0E:D8:8F:2A:F8:D8:A8 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 01C8 Signing time: Fri 17 Apr 2026 03:26:25 +0000 Manifest this update: Fri 17 Apr 2026 03:26:24 +0000 Manifest next update: Fri 24 Apr 2026 03:26:24 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: +jShT4A77i5s/8n3p8vki/gFabb5vZQLGIReyL3mbA8=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: ZIzmLDCvL9144wtn/f7cPEIGwIVNysAKaWM197wzKng=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: v31XiVYGJxKH7lnLyUBdZlEf6xpoQVchSdqRGdwSNGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Apr 17 03:26:24 2026 GMT Not After : Apr 24 03:26:24 2026 GMT Subject: CN=69e1a861-9f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:25:b9:59:cf:d3:cd:ad:83:79:22:f9:22: 9e:ef:38:a7:14:45:72:69:78:06:93:ff:bb:4d:a0: 7b:74:b2:45:43:dc:29:c2:26:1e:2f:52:9f:69:f9: 7d:15:f7:cf:de:4a:91:47:38:b4:c5:4f:84:f3:54: 12:f5:3d:a6:be:07:8d:fb:86:41:3a:85:a4:f0:50: 9d:7c:36:21:b2:25:25:5b:e0:e6:ba:06:41:3c:c9: ac:66:89:3b:ff:86:ea:4c:0e:95:e6:8c:b4:7e:f9: 00:31:66:8d:b1:a9:7e:31:e2:2d:68:94:82:6f:60: ff:2b:06:00:26:66:1a:8d:58:eb:07:38:61:42:14: e1:16:4b:d8:ad:21:c6:0c:e6:b5:45:0b:f2:6f:2d: e6:e1:50:51:19:f5:e6:17:ff:27:90:ad:e8:d3:62: 91:96:47:62:72:af:a5:5a:a4:c8:95:c1:82:c5:0e: 60:dc:29:71:19:f2:2a:38:2f:4d:6a:f4:da:8d:01: ff:c8:be:f3:fe:e8:63:f7:ae:18:08:08:9a:06:33: d9:ab:2d:7e:7f:2f:6e:d1:2a:c3:28:df:fc:53:15: d6:02:d4:ab:8a:6b:65:ed:8a:0d:f1:75:39:81:e3: e8:4b:0d:25:24:cd:d9:86:d5:54:9c:af:89:7a:fc: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3B:AD:EF:87:D7:49:AC:7A:33:A3:06:2C:0E:D8:8F:2A:F8:D8:A8 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:42:42:06:6c:be:d2:16:6f:a5:f6:45:94:ae:ce:b4:af:a4: af:8a:c7:9d:7a:b6:13:ff:f3:c1:34:54:0f:d8:37:5d:5c:18: 41:fd:7d:de:8e:a0:d8:fe:e4:55:4f:2b:7d:55:2e:6e:1b:48: b3:00:18:5d:d6:bc:fc:0c:78:3a:e2:e7:40:f8:2e:b8:d8:d9: 68:fb:6a:74:90:a5:61:a4:96:81:84:54:46:54:63:d5:cf:97: c0:9a:32:b6:cd:6b:07:d7:d3:f3:77:64:f9:4a:e6:d7:19:e2: c8:a3:33:97:d0:b7:d8:1b:32:0c:e0:a8:2c:47:66:0c:59:3d: d6:02:b9:99:eb:f9:e0:8c:ba:0f:2a:63:70:bb:0d:31:aa:2c: 65:6e:a8:3b:a8:31:89:b1:60:06:e2:b9:08:5b:b5:a4:5a:03: 68:e8:42:e6:14:fd:2b:59:bf:a8:c0:5e:46:6a:95:90:d7:fd: 1d:36:05:d7:1a:2b:b7:f2:cf:80:77:01:05:72:c4:f2:65:01: 1d:63:84:89:72:77:44:e0:cc:33:19:62:7a:66:11:ce:73:e0: 82:b9:22:ba:36:5e:61:33:b2:12:ef:86:65:5f:f0:bf:cc:ac: f2:70:16:8d:ab:78:3f:81:8b:ba:35:86:a2:38:7e:3c:8b:2b: bc:7d:d2:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwNDE3MDMyNjI0WhcNMjYwNDI0MDMyNjI0WjAYMRYwFAYD VQQDEw02OWUxYTg2MS05ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjIluVnP082tg3ki+SKe7zinFEVyaXgGk/+7TaB7dLJFQ9wpwiYeL1Kfafl9 FffP3kqRRzi0xU+E81QS9T2mvgeN+4ZBOoWk8FCdfDYhsiUlW+DmugZBPMmsZok7 /4bqTA6V5oy0fvkAMWaNsal+MeItaJSCb2D/KwYAJmYajVjrBzhhQhThFkvYrSHG DOa1RQvyby3m4VBRGfXmF/8nkK3o02KRlkdicq+lWqTIlcGCxQ5g3ClxGfIqOC9N avTajQH/yL7z/uhj964YCAiaBjPZqy1+fy9u0SrDKN/8UxXWAtSrimtl7YoN8XU5 gePoSw0lJM3ZhtVUnK+Jevz4DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG47re+H 10msejOjBiwO2I8q+NioMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPkJCBmy+0hZvpfZFlK7OtK+kr4rHnXq2E//zwTRUD9g3XVwYQf193o6g2P7k VU8rfVUubhtIswAYXda8/Ax4OuLnQPguuNjZaPtqdJClYaSWgYRURlRj1c+XwJoy ts1rB9fT83dk+Urm1xniyKMzl9C32BsyDOCoLEdmDFk91gK5mev54Iy6DypjcLsN MaosZW6oO6gxibFgBuK5CFu1pFoDaOhC5hT9K1m/qMBeRmqVkNf9HTYF1xort/LP gHcBBXLE8mUBHWOEiXJ3RODMMxliemYRznPggrkiujZeYTOyEu+GZV/wv8ys8nAW jat4P4GLujWGojh+PIsrvH3S8A== -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:46 2026 by rpki-client