$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: FNjnhHjOfnZP4/ldzzK/o4JlIOLhCD7r13sqd/jpRsY= Subject key identifier: F7:71:57:18:81:3B:1B:E6:CA:B2:4D:6E:DF:2C:F8:59:F3:AE:82:B8 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 0288 Signing time: Fri 17 Apr 2026 01:39:33 +0000 Manifest this update: Fri 17 Apr 2026 01:39:32 +0000 Manifest next update: Fri 24 Apr 2026 01:39:32 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: m1Z6Knt+J0LUGtw5Dk9Es3DWHwdMguTr9VHC8I5sHic=) 2: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=) 3: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=) 4: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Apr 17 01:39:32 2026 GMT Not After : Apr 24 01:39:32 2026 GMT Subject: CN=69e18f55-0ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:16:85:d4:cf:a5:95:b1:7c:1c:e6:8d:3e: 3f:17:59:e9:da:af:1f:1c:6d:64:b2:28:9f:8c:af: 83:6d:35:e4:c7:1c:50:5e:67:b8:b9:cf:af:63:b0: 7b:a0:de:6e:9a:ab:fe:3b:6a:c0:7f:e0:88:92:76: c5:1c:90:64:15:ed:6b:bb:2e:01:42:05:c0:f0:ba: 72:08:86:c2:fb:91:cd:e5:6e:df:b4:87:27:89:2c: 86:38:07:d1:83:cd:5a:7f:da:74:4a:8d:76:0e:92: 66:d7:dc:93:78:c4:1a:66:e8:27:7e:8e:40:46:b2: c0:24:04:1c:89:23:69:e7:56:77:7f:22:bf:95:15: 81:16:31:98:31:c6:03:88:68:fa:1a:3e:d3:d6:fd: 3e:6c:d4:e1:4e:7e:b4:e0:19:3a:64:1b:20:b7:e9: f8:10:e2:5f:3c:52:1c:52:42:88:1f:81:3e:5b:9a: af:c2:d2:05:db:2e:73:3f:3a:37:5a:2c:84:e6:c0: 5d:b2:1f:82:26:60:d1:11:51:43:3b:64:40:76:49: ae:8a:39:e4:ec:67:b1:c8:a0:9f:e6:94:f2:78:c6: a9:9d:71:de:82:c7:a0:b8:1e:ab:fc:f6:a9:9a:9a: e6:48:b7:95:85:43:db:b7:dc:51:ae:ef:1c:5c:aa: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:71:57:18:81:3B:1B:E6:CA:B2:4D:6E:DF:2C:F8:59:F3:AE:82:B8 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:35:31:7d:8c:60:96:ca:98:16:43:b2:d3:4e:4b:7c:a9:ce: 8b:21:fc:96:98:5d:36:02:f6:28:d5:cd:7b:21:e2:77:c4:00: 42:cc:49:0a:3f:06:3c:c4:8e:ab:a4:22:f6:3f:bc:48:39:8c: 70:d0:02:a5:2b:87:ef:a1:2d:9f:f7:2a:71:14:06:c8:67:5b: 41:14:0d:33:d3:d9:d9:d9:ff:11:6e:45:db:b7:3d:74:46:42: 3f:c6:a6:7a:d0:85:78:34:fc:6e:c9:fe:d8:8c:f2:33:2c:d2: 92:46:7d:2a:cd:2d:9b:5e:4f:6a:3f:6c:35:87:68:b7:56:28: 95:13:cc:2c:8e:4d:9a:63:02:dd:dd:9e:1c:39:f4:da:dc:aa: 74:b5:f7:64:7b:bd:83:d6:d5:d0:ec:98:9a:87:d7:69:a0:3d: 46:20:13:b7:5c:86:1e:94:c9:d3:9a:9b:30:0f:fe:c3:8b:ba: 24:83:5c:8c:c6:10:e0:36:e1:64:cd:fd:40:c4:ba:9b:a9:47: 9c:75:a4:35:54:9a:35:bc:a0:44:41:2d:6b:00:d6:f5:cc:80: 68:34:8b:17:60:09:f9:6c:76:11:49:6a:47:20:d5:c9:07:7d: 4e:50:c4:41:36:93:78:8b:d8:eb:3b:6f:b9:34:b8:b9:df:86: a6:e1:28:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjYwNDE3MDEzOTMyWhcNMjYwNDI0MDEzOTMyWjAYMRYwFAYD VQQDEw02OWUxOGY1NS0wY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvY8WhdTPpZWxfBzmjT4/F1np2q8fHG1ksiifjK+DbTXkxxxQXme4uc+vY7B7 oN5umqv+O2rAf+CIknbFHJBkFe1ruy4BQgXA8LpyCIbC+5HN5W7ftIcniSyGOAfR g81af9p0So12DpJm19yTeMQaZugnfo5ARrLAJAQciSNp51Z3fyK/lRWBFjGYMcYD iGj6Gj7T1v0+bNThTn604Bk6ZBsgt+n4EOJfPFIcUkKIH4E+W5qvwtIF2y5zPzo3 WiyE5sBdsh+CJmDREVFDO2RAdkmuijnk7GexyKCf5pTyeMapnXHegseguB6r/Pap mprmSLeVhUPbt9xRru8cXKr3JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdxVxiB OxvmyrJNbt8s+FnzroK4MB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmzUxfYxglsqYFkOy005LfKnOiyH8lphdNgL2KNXNeyHid8QAQsxJCj8GPMSO q6Qi9j+8SDmMcNACpSuH76Etn/cqcRQGyGdbQRQNM9PZ2dn/EW5F27c9dEZCP8am etCFeDT8bsn+2IzyMyzSkkZ9Ks0tm15Paj9sNYdot1YolRPMLI5NmmMC3d2eHDn0 2tyqdLX3ZHu9g9bV0OyYmofXaaA9RiATt1yGHpTJ05qbMA/+w4u6JINcjMYQ4Dbh ZM39QMS6m6lHnHWkNVSaNbygREEtawDW9cyAaDSLF2AJ+Wx2EUlqRyDVyQd9TlDE QTaTeIvY6ztvuTS4ud+GpuEoZg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:03:29 2026 by rpki-client