$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json) Hash identifier: AtawW6hPncqUPdqNVsOnerqhD8TcOAbn1zGKsUIHgf4= Subject key identifier: 96:23:E5:CD:FA:0B:51:6F:B4:A0:D9:33:3E:CC:DA:A0:27:D5:0C:97 Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F Certificate issuer: /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft Manifest number: 49 Signing time: Thu 11 Jun 2026 10:43:15 +0000 Manifest this update: Thu 11 Jun 2026 10:43:14 +0000 Manifest next update: Thu 18 Jun 2026 10:43:14 +0000 Files and hashes: 1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: HRAMgAJE86FNPpnZ86HV3a31iipvrI/5pqV5xH8MQ7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 10:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F Validity Not Before: Jun 11 10:43:14 2026 GMT Not After : Jun 18 10:43:14 2026 GMT Subject: CN=6a2a9143-4337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:aa:44:07:9e:5a:fc:1a:b7:2f:72:d9:0f: 1e:cb:18:70:3d:cf:49:02:b0:9b:2c:1f:6c:4c:10: 75:b7:b3:b4:c2:a7:ae:58:91:c9:2b:d3:0e:f8:48: 73:fd:93:51:3c:6a:c2:c5:b5:a3:4a:ad:22:92:51: d4:ec:f7:89:55:99:34:f6:73:85:86:b6:79:23:4e: e4:50:df:08:e2:cb:8b:4d:2a:0d:90:e7:65:cc:c0: 08:65:de:ea:fd:99:b8:5b:ea:10:ec:cb:ca:d5:dd: 02:53:64:a0:20:83:94:20:78:bb:7f:9b:01:d6:15: 95:93:94:1e:25:79:a7:c2:9f:d9:30:f4:3c:39:f5: 07:5d:b9:a0:e9:45:ea:84:98:55:12:74:e5:b7:b4: f5:f0:fb:e7:d2:99:f6:ef:08:21:31:0a:e9:fa:a1: cd:ae:9e:fc:57:39:4f:2d:5f:e3:6b:71:3d:a1:12: a7:ef:b3:a4:13:29:5e:83:d7:1f:a3:7e:45:d8:a8: 26:d4:0c:16:cc:16:74:72:6a:eb:f6:2c:d5:54:a8: 19:be:21:2e:1a:a6:3d:5b:0e:d9:6e:a6:32:d2:75: bd:d9:94:d0:d1:c8:ed:fd:23:d7:76:7e:b0:c0:07: e2:49:97:67:e0:ff:b8:a1:8f:f3:ae:71:91:67:bc: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:23:E5:CD:FA:0B:51:6F:B4:A0:D9:33:3E:CC:DA:A0:27:D5:0C:97 X509v3 Authority Key Identifier: keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:92:8f:bb:99:ed:19:ed:0d:fd:c9:d3:af:a3:7f:3d:b6:7d: 27:b4:73:8e:25:81:0e:85:5a:d3:ba:21:52:f8:17:7f:5e:76: 72:4e:20:38:86:5a:29:26:17:16:27:77:70:13:18:0d:f1:5e: 88:20:98:59:69:aa:b0:50:b2:dd:8d:2d:91:0b:b0:b4:d1:f4: 1e:8e:e4:14:5a:66:62:78:17:ab:0a:2d:fc:98:c0:cb:4b:ff: 7d:c3:71:89:65:7d:7f:b2:66:a7:76:65:e9:f3:78:64:ae:6b: 47:5d:f4:6c:1b:b2:68:bf:76:31:4f:50:41:c0:bd:d1:7e:0d: 74:98:88:7f:cd:38:fb:f9:c6:40:25:a7:47:31:2c:ea:75:8d: da:91:df:01:85:0e:cf:a5:5c:88:7c:bd:c1:19:21:a8:e6:41: 32:78:21:5c:85:4e:fe:09:62:e1:1d:60:43:ef:07:ac:22:11: d2:68:1a:e3:c5:3a:2c:01:37:33:2e:ae:0b:86:07:a9:0d:1e: 2e:c0:f3:9d:9c:f4:96:da:78:0c:6b:69:fa:e3:1d:4d:66:45: d4:f3:0a:94:36:ea:18:60:3b:b8:f9:cc:02:04:6c:76:8f:69: 1c:20:e1:2a:0e:97:e0:b6:9c:93:5a:9b:3d:04:77:88:35:fe: 8d:37:80:fd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJDQjExMC8GA1UEBRMoRjIxNzA2MzBBMDE0RjgyMThGRjMwNzU2NDlGNDEyNDIw MDNENDQ2RjAeFw0yNjA2MTExMDQzMTRaFw0yNjA2MTgxMDQzMTRaMBgxFjAUBgNV BAMTDTZhMmE5MTQzLTQzMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdnqpEB55a/Bq3L3LZDx7LGHA9z0kCsJssH2xMEHW3s7TCp65Ykckr0w74SHP9 k1E8asLFtaNKrSKSUdTs94lVmTT2c4WGtnkjTuRQ3wjiy4tNKg2Q52XMwAhl3ur9 mbhb6hDsy8rV3QJTZKAgg5QgeLt/mwHWFZWTlB4leafCn9kw9Dw59QdduaDpReqE mFUSdOW3tPXw++fSmfbvCCExCun6oc2unvxXOU8tX+NrcT2hEqfvs6QTKV6D1x+j fkXYqCbUDBbMFnRyauv2LNVUqBm+IS4apj1bDtlupjLSdb3ZlNDRyO39I9d2frDA B+JJl2fg/7ihj/OucZFnvH3dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUliPlzfoL UW+0oNkzPszaoCfVDJcwHwYDVR0jBBgwFoAU8hcGMKAU+CGP8wdWSfQSQgA9RG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0IyREZGNjU2RkRC QzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNHUDh3ZFdTZlFTUWdBOVJH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGhjR01LQVUtQ0dQOHdkV1NmUVNRZ0E5Ukc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNH UDh3ZFdTZlFTUWdBOVJHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBuko+7me0Z7Q39ydOvo389tn0ntHOOJYEOhVrTuiFS+Bd/XnZyTiA4hlopJhcW J3dwExgN8V6IIJhZaaqwULLdjS2RC7C00fQejuQUWmZieBerCi38mMDLS/99w3GJ ZX1/smandmXp83hkrmtHXfRsG7Jov3YxT1BBwL3Rfg10mIh/zTj7+cZAJadHMSzq dY3akd8BhQ7PpVyIfL3BGSGo5kEyeCFchU7+CWLhHWBD7wesIhHSaBrjxTosATcz Lq4LhgepDR4uwPOdnPSW2ngMa2n64x1NZkXU8wqUNuoYYDu4+cwCBGx2j2kcIOEq DpfgtpyTWps9BHeINf6NN4D9 -----END CERTIFICATE-----Generated at Sat Jun 13 09:32:13 2026 by rpki-client