$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json) Hash identifier: DYM5Gy8kNAMVG1ch4ZmC5hgXnHLZI8wfYxCFmFm3HmM= Subject key identifier: CD:AA:C9:91:02:A7:AB:E3:A5:6B:9B:D0:7E:EB:9D:5B:93:DD:41:16 Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft Manifest number: 35 Signing time: Fri 17 Apr 2026 08:23:30 +0000 Manifest this update: Fri 17 Apr 2026 08:23:29 +0000 Manifest next update: Fri 24 Apr 2026 08:23:29 +0000 Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: F1RzWg0d8PM3m4POTlRk6kMunjROWaL5htlXA1C0WjQ=) 2: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=) 3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Validity Not Before: Apr 17 08:23:29 2026 GMT Not After : Apr 24 08:23:29 2026 GMT Subject: CN=69e1ee02-b466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:d4:08:90:70:ee:6a:3e:b2:38:c8:aa:42: 0c:55:06:da:5f:ba:d5:0f:44:12:bf:17:b8:32:c9: 66:8c:3c:28:f1:9e:6f:0a:3d:4f:5c:85:ef:70:1a: 95:6d:85:6b:1a:95:3f:c5:4a:97:8c:db:aa:64:dd: 21:79:e9:f4:60:6d:06:f9:1e:ae:7e:e2:b4:a2:78: 78:1f:cf:2d:56:b6:b5:f0:62:b5:8b:f1:fa:cc:85: e9:b3:c4:43:e7:ed:e3:26:19:0b:b1:a5:72:88:88: 99:61:fa:76:73:5a:4a:6c:56:b3:1d:be:4c:ed:ab: 10:10:cf:ee:29:e4:59:34:da:af:15:d1:62:79:0b: 7a:af:81:b8:f1:69:f6:76:28:6a:10:6d:95:77:68: ed:e3:21:27:f7:29:fd:c4:61:bd:91:85:35:cf:a9: 71:8a:b8:38:6f:c7:df:d8:76:8a:f2:86:8d:5c:ba: 3f:71:58:04:0d:52:55:53:54:2e:f5:0a:59:6a:bd: 39:0b:7d:1e:f5:5f:e5:e0:64:91:02:c5:7e:ba:4d: 3a:e9:fb:cb:68:af:ea:45:85:0b:e2:3f:a4:09:20: f6:8a:fb:23:4b:34:4d:4d:95:8a:95:d6:f3:37:5b: cf:10:ea:68:98:a6:8f:9e:3a:00:49:45:64:ac:b6: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AA:C9:91:02:A7:AB:E3:A5:6B:9B:D0:7E:EB:9D:5B:93:DD:41:16 X509v3 Authority Key Identifier: keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b0:7b:54:53:70:c9:fb:8b:d7:66:40:3b:96:9b:15:15:8b: 2d:c8:ec:6c:35:f6:90:ee:50:34:79:a4:42:ad:16:05:39:36: 22:46:41:4b:ca:f6:de:54:44:e8:5c:85:75:14:6b:aa:c0:ba: e9:3e:c4:d9:2f:d1:5c:b3:b0:0a:90:09:e9:03:df:12:82:15: d1:b0:f8:06:ab:72:92:fd:3f:bc:fc:c5:77:da:94:f3:88:11: 91:58:23:41:85:5e:82:8e:83:d8:0b:30:c7:ef:ce:16:e5:42: 87:23:98:74:b1:b8:46:19:42:a1:a4:4a:ed:ce:29:17:62:3f: 1c:85:ee:8f:32:3b:7e:b4:eb:93:1d:b1:f7:f3:fb:78:58:72: 28:20:a3:9c:25:47:7b:a7:e3:16:97:75:2f:5b:e1:e5:70:88: 58:59:8a:6b:9d:89:5c:aa:33:fe:f8:21:53:fb:53:a8:c5:08: f5:0a:2b:11:87:3e:7d:5d:a0:45:5e:e1:5e:ab:1a:23:57:d0: 6b:b9:52:84:74:82:0e:91:31:d3:ab:30:98:2a:a4:db:a1:62: 55:bb:ba:01:f5:b6:f2:31:26:45:3e:ec:0d:8c:97:4f:2b:92: 2d:b9:b5:0d:ff:29:ac:f0:dc:91:5b:52:a2:d8:c5:22:a0:53: e0:25:66:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoRjBENzExMjBBOTJBODU4REI3Mjk0OTZGQ0NCRjE4MjVD OUYwM0M2MzAeFw0yNjA0MTcwODIzMjlaFw0yNjA0MjQwODIzMjlaMBgxFjAUBgNV BAMTDTY5ZTFlZTAyLWI0NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCKMNQIkHDuaj6yOMiqQgxVBtpfutUPRBK/F7gyyWaMPCjxnm8KPU9che9wGpVt hWsalT/FSpeM26pk3SF56fRgbQb5Hq5+4rSieHgfzy1WtrXwYrWL8frMhemzxEPn 7eMmGQuxpXKIiJlh+nZzWkpsVrMdvkztqxAQz+4p5Fk02q8V0WJ5C3qvgbjxafZ2 KGoQbZV3aO3jISf3Kf3EYb2RhTXPqXGKuDhvx9/Ydoryho1cuj9xWAQNUlVTVC71 CllqvTkLfR71X+XgZJECxX66TTrp+8tor+pFhQviP6QJIPaK+yNLNE1NlYqV1vM3 W88Q6miYpo+eOgBJRWSstnx3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzarJkQKn q+Ola5vQfuudW5PdQRYwHwYDVR0jBBgwFoAU8NcRIKkqhY23KUlvzL8YJcnwPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzQxRkREMzg4Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFkyM0tVbHZ6TDhZSmNud1BH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOE5jUklLa3FoWTIzS1VsdnpMOFlKY253UEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzQxRkREMzg4Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFky M0tVbHZ6TDhZSmNud1BHTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPsHtUU3DJ+4vXZkA7lpsVFYstyOxsNfaQ7lA0eaRCrRYFOTYiRkFLyvbeVETo XIV1FGuqwLrpPsTZL9Fcs7AKkAnpA98SghXRsPgGq3KS/T+8/MV32pTziBGRWCNB hV6CjoPYCzDH784W5UKHI5h0sbhGGUKhpErtzikXYj8che6PMjt+tOuTHbH38/t4 WHIoIKOcJUd7p+MWl3UvW+HlcIhYWYprnYlcqjP++CFT+1OoxQj1CisRhz59XaBF XuFeqxojV9BruVKEdIIOkTHTqzCYKqTboWJVu7oB9bbyMSZFPuwNjJdPK5ItubUN /yms8NyRW1Ki2MUioFPgJWbz -----END CERTIFICATE-----Generated at Fri Apr 17 11:30:55 2026 by rpki-client