$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: SPgSqT0vlrjN5Unv3TxvXPqsZXUyAPlaqPy+KwjHh1w= Subject key identifier: 34:B6:6C:62:FA:32:9A:9C:0F:05:1F:13:A7:C9:0B:30:07:F1:EA:B6 Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 083E Signing time: Thu 16 Apr 2026 20:50:00 +0000 Manifest this update: Thu 16 Apr 2026 20:49:59 +0000 Manifest next update: Thu 23 Apr 2026 20:49:59 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: oNZxRaWCptCYFpFYic68vBlOlrRtepiTWig/4Nu+8J0=) 2: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: VGnt6v4dXILkocn8GEwn5t+Gd/2jbgIZ2L5lp88nLxY=) 3: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: Gj36dWubgKABqlkFIW8O6/4ONoiv/qzcPv5+4kWBHuk=) 4: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: gt1Thn5b17IX5hac63qpkPqnhAnjtdM7GC00RfgXDCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Apr 16 20:49:59 2026 GMT Not After : Apr 23 20:49:59 2026 GMT Subject: CN=69e14b77-4d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:ff:ed:36:e4:55:fb:56:d2:06:a5:47:f1: bb:7a:86:1b:d7:88:a3:67:03:c7:ab:55:3f:83:14: ae:2f:24:6f:29:23:b7:bc:67:c8:c8:4c:03:97:d8: 7e:8e:72:dc:63:49:da:d2:b7:78:27:2f:75:14:36: c8:c3:67:6b:09:ed:35:08:41:04:a7:8d:b9:4d:d0: 86:b5:c8:39:cd:97:2b:aa:71:b6:cc:2f:47:57:4f: 6c:5b:66:a9:cf:04:fe:e0:02:ba:fc:bc:d2:2c:23: bd:5d:4f:a4:d8:1e:ae:8d:6c:27:17:37:43:1a:3d: 3f:52:ce:fb:ab:98:8a:a6:c1:fd:b2:cf:0a:51:e6: 05:f6:8f:e1:b2:13:82:6b:98:3e:27:85:10:d7:c1: 50:1f:f0:bd:55:6b:4b:82:42:ed:59:21:e5:20:c6: 25:7b:e1:98:51:5a:21:b6:0c:f0:7f:0d:70:0c:d7: 12:17:c4:a2:e9:40:ac:0d:c9:e0:8b:64:2a:dc:48: 60:7b:74:f0:3a:a3:a2:f1:72:d5:a0:67:1f:96:15: d2:57:a4:1e:29:70:73:02:d0:bd:90:cd:1c:dd:f4: fc:55:1b:3b:9b:4e:b5:3f:76:a6:68:e9:4e:dc:28: 56:85:87:ac:f6:e4:ac:8d:4a:c1:57:b4:3f:05:7d: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B6:6C:62:FA:32:9A:9C:0F:05:1F:13:A7:C9:0B:30:07:F1:EA:B6 X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:24:44:64:a4:30:68:93:a5:24:af:b0:50:02:f9:27:d4:e8: 83:6d:7d:10:c5:fd:c7:05:54:f7:69:76:1a:8a:ab:36:cc:86: c0:ad:d1:5d:bf:4b:41:50:2a:28:b9:c3:4c:36:98:9c:19:08: 7f:fd:1e:b9:08:9a:5f:8e:60:ce:fa:c0:52:12:e5:12:5c:d4: 71:80:4d:3c:f0:43:e1:4d:51:ca:8a:38:6d:84:8d:59:80:df: 9d:d7:49:b9:e9:e3:73:f5:c4:f1:c0:66:c3:e6:9d:86:8f:26: 8c:7b:1e:61:7a:41:90:60:95:12:4b:e0:93:b5:8a:52:fd:7d: e3:ef:82:9a:11:cd:1a:b1:78:ef:b6:d4:f8:aa:82:c8:10:7b: c5:7a:4f:16:76:93:41:12:b4:0d:2e:55:5a:76:61:40:05:83: 22:33:73:c4:06:7a:d0:f2:6c:22:f7:3e:d8:c2:4e:61:ec:fe: a9:4e:68:3b:f6:c5:98:57:15:08:e9:f7:f4:79:1e:67:c4:ee: 60:86:fa:8b:26:f3:3c:47:34:da:bb:6e:e9:86:c7:3e:32:0c: 03:c2:76:90:a0:d2:62:46:c1:d7:35:93:29:7d:c9:fd:29:3f: 8c:30:b9:38:66:47:a8:4b:fe:ec:38:ff:01:fa:e1:56:26:a4: 7b:05:48:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjYwNDE2MjA0OTU5WhcNMjYwNDIzMjA0OTU5WjAYMRYwFAYD VQQDEw02OWUxNGI3Ny00ZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznb/7TbkVftW0galR/G7eoYb14ijZwPHq1U/gxSuLyRvKSO3vGfIyEwDl9h+ jnLcY0na0rd4Jy91FDbIw2drCe01CEEEp425TdCGtcg5zZcrqnG2zC9HV09sW2ap zwT+4AK6/LzSLCO9XU+k2B6ujWwnFzdDGj0/Us77q5iKpsH9ss8KUeYF9o/hshOC a5g+J4UQ18FQH/C9VWtLgkLtWSHlIMYle+GYUVohtgzwfw1wDNcSF8Si6UCsDcng i2Qq3Ehge3TwOqOi8XLVoGcflhXSV6QeKXBzAtC9kM0c3fT8VRs7m061P3amaOlO 3ChWhYes9uSsjUrBV7Q/BX1p/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDS2bGL6 MpqcDwUfE6fJCzAH8eq2MB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjyREZKQwaJOlJK+wUAL5J9Tog219EMX9xwVU92l2GoqrNsyGwK3RXb9LQVAq KLnDTDaYnBkIf/0euQiaX45gzvrAUhLlElzUcYBNPPBD4U1Ryoo4bYSNWYDfnddJ uenjc/XE8cBmw+adho8mjHseYXpBkGCVEkvgk7WKUv194++CmhHNGrF477bU+KqC yBB7xXpPFnaTQRK0DS5VWnZhQAWDIjNzxAZ60PJsIvc+2MJOYez+qU5oO/bFmFcV COn39HkeZ8TuYIb6iybzPEc02rtu6YbHPjIMA8J2kKDSYkbB1zWTKX3J/Sk/jDC5 OGZHqEv+7Dj/AfrhViakewVIWA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:21:48 2026 by rpki-client