$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: x4VtZzSEs0R9WhEQvQq757/eKlpFI+L+irVDvZO8+PE= Subject key identifier: 28:BD:63:1A:D5:AC:4A:62:CE:C3:39:F2:71:A4:FD:A8:88:37:7C:FA Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 062F Signing time: Thu 16 Apr 2026 22:44:09 +0000 Manifest this update: Thu 16 Apr 2026 22:44:08 +0000 Manifest next update: Thu 23 Apr 2026 22:44:08 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: W32eymmscQYo2o2LHC9ODRgJ3c8wVdNV7mRsjVYqz4M=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Apr 16 22:44:08 2026 GMT Not After : Apr 23 22:44:08 2026 GMT Subject: CN=69e16639-a6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:0e:93:6f:30:13:05:bf:42:cb:17:9d:bb: 69:37:ce:40:cd:c0:3b:f8:a6:74:5d:40:79:60:5d: 9f:37:35:1c:3e:46:35:2c:e8:ba:75:4c:cf:bf:b9: 2c:b4:a4:1b:c5:af:a9:ce:e4:5f:52:03:26:a4:bb: aa:c7:cb:74:24:04:57:b0:7e:aa:6b:27:c7:c1:6e: 8e:f0:69:c0:bd:7f:f3:c0:5e:68:fc:1d:bb:7a:01: 20:db:70:a8:d0:a0:fe:50:bc:38:f9:3b:45:eb:86: 40:1b:e3:8a:3c:03:0e:fb:cb:b0:49:95:54:10:fa: 6e:ee:ab:7d:37:e7:eb:81:fe:1f:0d:51:6d:16:25: b7:84:38:d6:0c:03:6c:6e:a3:f6:db:a1:7f:17:65: f0:18:2e:dc:58:c8:a8:45:74:72:ae:4f:25:f2:fe: 1f:a6:b9:71:8b:3c:ea:be:b5:75:79:57:21:38:92: 57:ab:bd:c9:b3:8e:49:1b:76:09:56:87:eb:3a:1d: 5b:08:c3:b2:09:e1:b3:99:68:5b:d2:e3:38:60:b5: 5c:b5:af:03:ac:5f:94:88:69:01:d2:13:9c:9d:36: 34:7d:80:39:ae:0e:0c:49:08:6e:71:3e:25:8d:9b: 8d:ef:f2:ba:f8:33:6b:75:f8:1d:33:34:77:65:c6: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BD:63:1A:D5:AC:4A:62:CE:C3:39:F2:71:A4:FD:A8:88:37:7C:FA X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:04:27:ba:d6:1c:34:26:3a:25:c9:d9:41:a4:e0:f4:ab:23: 8a:ee:62:40:08:2b:b0:16:ca:65:e5:f7:2d:69:cb:dd:18:af: ac:bd:6c:ac:11:a2:bc:ab:c1:5e:c9:7d:3c:d2:fa:13:44:9f: c2:ed:a5:2d:0c:13:06:77:4c:26:bb:0a:4d:61:3c:58:9c:f4: ef:9a:fa:21:63:48:cc:b0:13:d5:50:c8:fc:3e:cb:81:03:b9: 9c:e3:80:a0:50:f5:28:8c:5f:c1:64:42:9b:de:95:92:81:d3: 71:fe:fe:cf:6a:3e:c9:d5:e5:4a:1b:ed:82:25:87:a3:9b:28: 6e:88:03:39:87:f3:30:67:0c:2a:a2:14:0c:64:7c:f8:80:ab: 67:fb:35:6f:4c:e1:24:f5:b9:08:b9:3e:03:3a:fb:20:2a:6f: 0e:82:50:2e:2a:dc:52:58:79:56:88:3a:b8:43:fe:c0:f0:4f: f9:ab:5e:35:29:95:d3:d5:d7:57:f0:06:bd:c4:26:34:4b:99: a0:88:72:f0:f3:e7:8f:88:3e:55:38:23:71:b5:ba:76:00:bb: 86:d9:97:9f:e7:66:fd:70:51:80:0b:92:14:4f:23:1e:8a:cf: 2c:31:44:4f:c7:3c:45:d1:31:8c:3a:a2:e4:d5:83:34:e2:fd: 53:85:5d:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjYwNDE2MjI0NDA4WhcNMjYwNDIzMjI0NDA4WjAYMRYwFAYD VQQDEw02OWUxNjYzOS1hNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutEOk28wEwW/QssXnbtpN85AzcA7+KZ0XUB5YF2fNzUcPkY1LOi6dUzPv7ks tKQbxa+pzuRfUgMmpLuqx8t0JARXsH6qayfHwW6O8GnAvX/zwF5o/B27egEg23Co 0KD+ULw4+TtF64ZAG+OKPAMO+8uwSZVUEPpu7qt9N+frgf4fDVFtFiW3hDjWDANs bqP226F/F2XwGC7cWMioRXRyrk8l8v4fprlxizzqvrV1eVchOJJXq73Js45JG3YJ VofrOh1bCMOyCeGzmWhb0uM4YLVcta8DrF+UiGkB0hOcnTY0fYA5rg4MSQhucT4l jZuN7/K6+DNrdfgdMzR3ZcbQnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCi9YxrV rEpizsM58nGk/aiIN3z6MB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmAQnutYcNCY6JcnZQaTg9Ksjiu5iQAgrsBbKZeX3LWnL3RivrL1srBGivKvB Xsl9PNL6E0Sfwu2lLQwTBndMJrsKTWE8WJz075r6IWNIzLAT1VDI/D7LgQO5nOOA oFD1KIxfwWRCm96VkoHTcf7+z2o+ydXlShvtgiWHo5sobogDOYfzMGcMKqIUDGR8 +ICrZ/s1b0zhJPW5CLk+Azr7ICpvDoJQLircUlh5Vog6uEP+wPBP+ateNSmV09XX V/AGvcQmNEuZoIhy8PPnj4g+VTgjcbW6dgC7htmXn+dm/XBRgAuSFE8jHorPLDFE T8c8RdExjDqi5NWDNOL9U4Vdbw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:08:12 2026 by rpki-client