$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json) Hash identifier: eqHne8WxN5gkdsGHIDScPk8TSAdrKRckE8PL4pKfmW4= Subject key identifier: AF:C1:32:D3:60:FE:DA:D4:47:30:64:3D:32:87:A5:EF:BA:CD:27:5E Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F Certificate issuer: /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft Manifest number: 2B Signing time: Wed 15 Apr 2026 08:19:06 +0000 Manifest this update: Wed 15 Apr 2026 08:19:05 +0000 Manifest next update: Wed 22 Apr 2026 08:19:05 +0000 Files and hashes: 1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: z9TetHutjKO9yX1xZNfMMi4vStvkH60TWBhZQ6hC6XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F Validity Not Before: Apr 15 08:19:05 2026 GMT Not After : Apr 22 08:19:05 2026 GMT Subject: CN=69df49fa-5d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0f:d1:f6:eb:06:33:6f:66:71:1a:3e:d7:be: af:88:36:7b:4f:49:0a:b8:81:be:62:6c:6c:9a:79: e3:8d:a5:aa:0a:1b:93:b5:9c:df:50:21:02:bb:e9: bd:a0:f4:9c:77:a9:d2:b7:a5:dc:c4:bd:99:34:63: 00:68:9e:5b:eb:94:f5:08:84:18:b5:00:e6:68:07: 86:d4:13:76:32:11:e8:81:df:e0:51:13:bf:6b:6b: 0f:15:e8:1e:90:45:91:ea:a0:2c:e5:34:89:00:a5: 7b:1c:e7:3b:00:ff:93:95:e2:ca:fc:af:70:7e:eb: 47:e6:ce:2f:f4:39:b3:db:46:cd:e5:a5:9f:a8:0b: 9f:ad:64:95:ce:1e:b5:95:c7:57:52:c8:5a:6f:f5: 69:5d:82:fc:35:2d:58:7c:aa:1a:13:92:31:6f:5f: d9:7a:e2:83:43:a1:6b:db:88:ab:6e:d0:be:61:7b: 60:d5:16:c4:08:e2:27:50:82:7f:f5:10:68:a2:e8: 54:74:1a:cf:25:7d:a0:8c:f7:27:c9:6d:6f:76:4b: df:09:48:0f:71:16:86:da:06:33:44:ad:e4:8d:50: aa:4d:a1:2f:63:60:0a:9a:49:78:5a:6f:72:93:03: d2:ea:d1:93:b3:17:bd:d2:b9:f3:ed:df:d1:fb:23: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C1:32:D3:60:FE:DA:D4:47:30:64:3D:32:87:A5:EF:BA:CD:27:5E X509v3 Authority Key Identifier: keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:22:c5:6a:dc:5a:6c:2f:4c:21:da:c2:8b:60:ba:44:a5:80: f3:e8:5d:3e:b2:d5:da:ff:b9:00:fb:fe:25:9d:00:0b:cc:df: 81:39:eb:97:30:00:5d:6a:de:44:ad:71:cb:dc:0a:6e:0a:d5: 75:ea:bb:35:40:f9:ef:5a:1e:3f:f7:dd:51:e5:bd:8e:3d:27: 47:f6:a3:ab:d6:2e:84:c9:35:e2:a5:81:04:db:15:69:77:17: 8d:1d:a1:5e:39:53:e0:b5:c3:b1:bd:24:6d:64:d9:82:b0:fb: 35:48:54:78:57:0d:ea:3e:e1:0b:db:90:0f:ba:22:31:0a:69: fa:a5:ac:31:75:b6:29:1b:c3:d9:d3:0d:5d:11:12:fd:56:16: ec:f6:59:82:f4:62:61:de:1d:36:37:4b:cd:bc:cc:f9:ed:09: 0d:7d:cd:94:3d:b6:00:97:ee:03:40:d3:a6:ea:25:2b:82:16: 71:53:ab:40:ef:43:f0:04:3c:21:79:fa:76:1b:2b:3f:4d:f5: 64:1d:19:24:cc:38:ec:6f:25:02:9d:bb:02:4e:18:a7:b5:2c: e7:28:0c:8b:4b:b1:de:90:95:c0:95:4c:8e:5c:a7:b3:58:fc: f7:fc:61:00:00:e3:0b:88:02:dd:8f:9c:44:d9:8a:6e:e7:1d: 4c:71:a0:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJDQjExMC8GA1UEBRMoRjIxNzA2MzBBMDE0RjgyMThGRjMwNzU2NDlGNDEyNDIw MDNENDQ2RjAeFw0yNjA0MTUwODE5MDVaFw0yNjA0MjIwODE5MDVaMBgxFjAUBgNV BAMTDTY5ZGY0OWZhLTVkMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdD9H26wYzb2ZxGj7Xvq+INntPSQq4gb5ibGyaeeONpaoKG5O1nN9QIQK76b2g 9Jx3qdK3pdzEvZk0YwBonlvrlPUIhBi1AOZoB4bUE3YyEeiB3+BRE79raw8V6B6Q RZHqoCzlNIkApXsc5zsA/5OV4sr8r3B+60fmzi/0ObPbRs3lpZ+oC5+tZJXOHrWV x1dSyFpv9Wldgvw1LVh8qhoTkjFvX9l64oNDoWvbiKtu0L5he2DVFsQI4idQgn/1 EGii6FR0Gs8lfaCM9yfJbW92S98JSA9xFobaBjNEreSNUKpNoS9jYAqaSXhab3KT A9Lq0ZOzF73SufPt39H7IzTpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUr8Ey02D+ 2tRHMGQ9Moel77rNJ14wHwYDVR0jBBgwFoAU8hcGMKAU+CGP8wdWSfQSQgA9RG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0IyREZGNjU2RkRC QzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNHUDh3ZFdTZlFTUWdBOVJH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGhjR01LQVUtQ0dQOHdkV1NmUVNRZ0E5Ukc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNH UDh3ZFdTZlFTUWdBOVJHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkIsVq3FpsL0wh2sKLYLpEpYDz6F0+stXa/7kA+/4lnQALzN+BOeuXMABdat5E rXHL3ApuCtV16rs1QPnvWh4/991R5b2OPSdH9qOr1i6EyTXipYEE2xVpdxeNHaFe OVPgtcOxvSRtZNmCsPs1SFR4Vw3qPuEL25APuiIxCmn6pawxdbYpG8PZ0w1dERL9 Vhbs9lmC9GJh3h02N0vNvMz57QkNfc2UPbYAl+4DQNOm6iUrghZxU6tA70PwBDwh efp2Gys/TfVkHRkkzDjsbyUCnbsCThintSznKAyLS7HekJXAlUyOXKezWPz3/GEA AOMLiALdj5xE2Ypu5x1McaDv -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:50 2026 by rpki-client