$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: ngRVKW8hlMrxXhVWdiECyMO4zrYjMkp2Jhagj5hZG1c= Subject key identifier: 85:75:50:59:3F:92:9F:5B:B4:8F:ED:26:0D:DF:11:8D:9F:AE:6F:9D Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0D01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0CF6 Signing time: Thu 16 Apr 2026 18:08:36 +0000 Manifest this update: Thu 16 Apr 2026 18:08:35 +0000 Manifest next update: Thu 23 Apr 2026 18:08:35 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: jibLj+l6V/U7pDWMfss9Jf1wBYRdwb+TVYSu0KcU40Y=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: h96ygBqP1HseQXwwUH62n5eNi2bKC3tu8QpUrxfOlvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3329 (0xd01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Apr 16 18:08:35 2026 GMT Not After : Apr 23 18:08:35 2026 GMT Subject: CN=69e125a4-f714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:dc:01:3a:0f:fd:0d:36:09:bb:e6:b6:6c: 04:81:14:d3:34:10:bf:42:58:bc:97:81:01:e1:94: c2:ea:6f:58:9c:a4:f0:1a:21:c7:f0:22:32:20:0c: 06:93:9b:f1:be:e7:ab:8e:47:2d:af:a5:03:0e:09: ae:8d:da:3e:61:c2:b5:66:d6:99:6d:8a:66:92:e6: 8f:9a:bb:aa:21:61:45:dd:fd:52:ff:04:fc:f1:f0: d6:7d:8f:2e:ac:97:e7:c4:55:f6:e4:67:3d:6d:cf: a4:d4:58:1f:4a:c8:75:d6:cf:7a:da:43:3f:c5:53: 0d:bd:22:9e:0f:7a:72:45:70:96:d6:dc:7a:5e:43: a7:77:99:83:c3:9e:a7:50:ea:ca:64:bd:82:77:53: f4:a0:37:94:a7:5c:7c:32:d1:a4:85:91:ba:0c:ce: bc:2c:40:a4:fd:56:6c:ae:3e:d3:4b:fa:1d:57:6a: 64:1e:1c:a8:af:11:e9:34:a1:f0:c0:30:e8:58:80: 04:82:a5:8c:fc:24:1f:3a:2f:a9:4f:16:6d:06:49: 4d:c5:a5:e4:fd:94:7b:de:50:8c:13:50:3a:6a:a0: 4f:36:97:ca:e0:89:86:e2:ba:cd:b8:28:69:06:7a: c4:e8:ef:20:3d:63:99:99:47:2a:ef:3c:d0:59:77: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:75:50:59:3F:92:9F:5B:B4:8F:ED:26:0D:DF:11:8D:9F:AE:6F:9D X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f3:90:8d:01:c3:04:08:4c:4f:05:2f:21:b7:d3:52:d0:61: c5:7d:a1:72:e2:c5:39:e7:fe:71:a9:06:aa:e0:57:9b:cc:ba: 2e:d7:7e:1c:94:77:b3:b4:9f:ec:02:fc:4b:e1:cc:b8:2b:a4: 1e:a5:82:23:c3:fa:19:60:d6:70:ea:88:6c:f0:21:c9:09:8a: a9:ea:08:38:dd:39:ef:a8:3d:e3:a1:25:3b:9f:02:db:75:7c: 62:6a:ec:1f:f1:a7:f6:a7:22:40:74:4d:8a:cd:10:71:1a:37: 48:c3:57:ef:b1:12:13:32:d8:7e:67:49:16:0d:f3:26:2a:70: 7e:79:72:9a:99:4f:80:81:2e:0f:ab:b8:7c:da:c0:a5:e4:31: 3a:e3:e4:c2:24:cf:0c:c7:a4:65:06:35:87:74:bb:39:bc:dd: b8:67:59:ce:05:98:ec:81:e7:1b:1f:d0:ab:74:4e:7d:0e:c0: ed:af:9e:17:30:ca:9c:ae:5d:b1:d1:28:72:8c:b5:e2:b3:ed: 5b:2d:6e:c4:69:8f:1a:d8:c2:ce:db:73:c9:cd:d2:04:49:5f: ec:2b:b7:3d:8e:aa:c7:14:5b:b8:54:31:3c:62:e4:0b:eb:43: c8:36:4a:86:c6:ef:98:f3:e3:98:a4:e7:e6:e9:c9:9d:79:b3: 44:33:94:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjYwNDE2MTgwODM1WhcNMjYwNDIzMTgwODM1WjAYMRYwFAYD VQQDEw02OWUxMjVhNC1mNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaTcAToP/Q02CbvmtmwEgRTTNBC/Qli8l4EB4ZTC6m9YnKTwGiHH8CIyIAwG k5vxvuerjkctr6UDDgmujdo+YcK1ZtaZbYpmkuaPmruqIWFF3f1S/wT88fDWfY8u rJfnxFX25Gc9bc+k1FgfSsh11s962kM/xVMNvSKeD3pyRXCW1tx6XkOnd5mDw56n UOrKZL2Cd1P0oDeUp1x8MtGkhZG6DM68LECk/VZsrj7TS/odV2pkHhyorxHpNKHw wDDoWIAEgqWM/CQfOi+pTxZtBklNxaXk/ZR73lCME1A6aqBPNpfK4ImG4rrNuChp BnrE6O8gPWOZmUcq7zzQWXeUVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIV1UFk/ kp9btI/tJg3fEY2frm+dMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX/OQjQHDBAhMTwUvIbfTUtBhxX2hcuLFOef+cakGquBXm8y6Ltd+HJR3s7Sf 7AL8S+HMuCukHqWCI8P6GWDWcOqIbPAhyQmKqeoION0576g946ElO58C23V8Ymrs H/Gn9qciQHRNis0QcRo3SMNX77ESEzLYfmdJFg3zJipwfnlymplPgIEuD6u4fNrA peQxOuPkwiTPDMekZQY1h3S7ObzduGdZzgWY7IHnGx/Qq3ROfQ7A7a+eFzDKnK5d sdEocoy14rPtWy1uxGmPGtjCzttzyc3SBElf7Cu3PY6qxxRbuFQxPGLkC+tDyDZK hsbvmPPjmKTn5unJnXmzRDOU2g== -----END CERTIFICATE-----Generated at Fri Apr 17 13:57:18 2026 by rpki-client