$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: enMPCCkAeRYWFgBuR3vvtgrxISIPl1C9ko1B4/jIr6g= Subject key identifier: 0B:09:32:82:01:68:35:F4:60:04:44:D8:B6:E2:05:0B:BB:3B:7E:A8 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 01DB Signing time: Fri 17 Apr 2026 03:15:42 +0000 Manifest this update: Fri 17 Apr 2026 03:15:41 +0000 Manifest next update: Fri 24 Apr 2026 03:15:41 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: 2sFZCyAKEqAg6VvOb+7kMGho77zGdsziH5q8FS7JEaE=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: hUBkgyOeFfHyusrHl5Ul+wkZZtAL0ghWlOjjJyvQSKc=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: WjgNxbDbrb74XmE1Jk0QE3DXYeIptytiMEIutAQrgFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Apr 17 03:15:41 2026 GMT Not After : Apr 24 03:15:41 2026 GMT Subject: CN=69e1a5de-63b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:4e:4e:c9:a2:44:db:68:28:7b:a5:16:95: 5d:b0:81:8d:9e:dc:ff:da:87:a6:48:6c:67:20:ed: f9:09:2f:cf:a1:4e:3e:49:fe:a5:79:1f:ad:e3:a0: e6:42:63:3e:24:19:7a:89:a3:0d:d7:41:9d:cd:a7: 5e:4c:42:71:ee:12:f6:25:a0:a5:4c:55:8b:96:a4: 42:5e:86:7e:00:2c:32:ec:26:76:cd:f5:6e:e5:fa: 3e:a1:78:dc:ff:3f:6b:d5:a7:02:14:29:5b:fb:0d: 18:1b:46:f7:ab:88:c4:91:69:8c:dc:48:7d:75:83: f0:d9:6f:14:92:09:2f:5c:80:a5:9e:33:68:27:21: ac:13:34:b9:d3:a8:14:55:c7:9c:be:cd:12:0e:ce: 68:fe:ce:2f:0c:2a:6f:e4:e3:d2:a5:09:b5:21:4f: b6:65:0c:15:ec:52:5e:c2:7c:03:e8:fb:24:37:79: 15:16:36:8c:b6:92:9b:ad:bf:2a:31:a0:0b:b0:09: dd:20:30:57:f1:c0:43:be:52:cc:e5:3c:f6:69:f3: 7d:c5:27:09:7f:86:78:9b:9a:b8:af:56:6e:69:5e: 28:d2:d7:b2:de:5e:27:48:5e:e1:3f:fa:17:a0:16: c4:8f:ea:70:ef:9f:d2:a3:7a:3d:55:99:70:4c:83: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:09:32:82:01:68:35:F4:60:04:44:D8:B6:E2:05:0B:BB:3B:7E:A8 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ed:db:5a:8b:50:12:3f:7f:e8:33:59:2e:15:51:42:88:1c: 8d:8e:48:41:9d:ee:b9:c5:1a:17:47:8e:b5:14:f6:ac:e5:5d: 2a:c2:af:ca:2d:89:64:41:a1:d2:6f:93:ef:55:3b:df:98:7a: c8:4e:29:d6:5d:ea:bc:4b:57:58:ab:02:a2:80:3b:bc:a2:10: 3c:cf:9b:fb:be:41:bd:92:7c:2c:91:e4:b0:2a:04:80:bd:2e: 9b:75:a7:bc:03:9b:74:30:7d:34:3e:85:4d:ae:e9:c3:73:ed: 22:9f:5a:58:61:c6:89:19:a5:da:f3:71:d6:cb:7c:ab:26:7d: 6c:ea:0a:62:b7:0b:d0:08:d5:e9:46:88:da:5d:a7:ee:0c:72: 3c:da:6e:eb:e6:ad:32:86:c2:4d:02:18:5b:ec:1c:fb:28:cb: f2:70:53:21:ab:6f:6b:27:04:06:73:67:b9:bb:88:d6:71:37: 69:8d:37:7c:36:c4:d6:2b:bb:ea:b3:f0:ba:4f:a8:cb:89:d4: ef:38:f7:14:65:00:39:c4:d3:6f:0e:2a:d9:86:aa:c7:72:3c: eb:8b:23:6a:73:f0:6d:cd:17:12:a4:a9:5e:dd:5c:23:fd:61: ca:9a:28:b1:cb:86:94:c4:e4:f3:f3:52:1a:38:57:5e:b0:54: cf:f7:a0:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjYwNDE3MDMxNTQxWhcNMjYwNDI0MDMxNTQxWjAYMRYwFAYD VQQDEw02OWUxYTVkZS02M2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ5OTsmiRNtoKHulFpVdsIGNntz/2oemSGxnIO35CS/PoU4+Sf6leR+t46Dm QmM+JBl6iaMN10GdzadeTEJx7hL2JaClTFWLlqRCXoZ+ACwy7CZ2zfVu5fo+oXjc /z9r1acCFClb+w0YG0b3q4jEkWmM3Eh9dYPw2W8UkgkvXIClnjNoJyGsEzS506gU Vcecvs0SDs5o/s4vDCpv5OPSpQm1IU+2ZQwV7FJewnwD6PskN3kVFjaMtpKbrb8q MaALsAndIDBX8cBDvlLM5Tz2afN9xScJf4Z4m5q4r1ZuaV4o0tey3l4nSF7hP/oX oBbEj+pw75/So3o9VZlwTIO0qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsJMoIB aDX0YARE2LbiBQu7O36oMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAe3bWotQEj9/6DNZLhVRQogcjY5IQZ3uucUaF0eOtRT2rOVdKsKvyi2JZEGh 0m+T71U735h6yE4p1l3qvEtXWKsCooA7vKIQPM+b+75BvZJ8LJHksCoEgL0um3Wn vAObdDB9ND6FTa7pw3PtIp9aWGHGiRml2vNx1st8qyZ9bOoKYrcL0AjV6UaI2l2n 7gxyPNpu6+atMobCTQIYW+wc+yjL8nBTIatvaycEBnNnubuI1nE3aY03fDbE1iu7 6rPwuk+oy4nU7zj3FGUAOcTTbw4q2Yaqx3I864sjanPwbc0XEqSpXt1cI/1hypoo scuGlMTk8/NSGjhXXrBUz/eg7A== -----END CERTIFICATE-----Generated at Fri Apr 17 19:20:53 2026 by rpki-client