$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json) Hash identifier: S//fZUvX2//IsiE1YxP1NkcDF5CHJZnKwh3jOYEGD48= Subject key identifier: A5:FE:E5:74:04:E6:26:3E:99:2D:F9:9A:B5:DA:B3:B1:2A:FF:B9:C5 Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft Manifest number: 14 Signing time: Fri 17 Apr 2026 08:43:23 +0000 Manifest this update: Fri 17 Apr 2026 08:43:22 +0000 Manifest next update: Fri 24 Apr 2026 08:43:22 +0000 Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: CCoMiQcP5Ja6ejsB3LVdccVEY5hj1q28Qn57DpEx1vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Validity Not Before: Apr 17 08:43:22 2026 GMT Not After : Apr 24 08:43:22 2026 GMT Subject: CN=69e1f2ab-fdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:9f:6e:9c:61:d7:cc:44:ce:e7:04:b3:a5: aa:98:10:fe:0f:24:42:81:a6:7c:40:4a:ce:90:70: bf:ac:c0:3d:46:5e:cf:8c:67:a4:dd:96:e8:bb:fb: 37:5e:28:e6:39:b1:0b:fd:c2:27:5b:c9:3a:dd:fe: 1a:23:c9:bf:27:87:bf:e6:32:56:4f:51:ba:dd:ec: b5:f7:6c:fe:97:d9:2a:e6:4d:6c:fa:84:31:9e:80: ba:1c:17:cb:82:b1:62:58:6b:ce:0d:c0:32:61:52: 30:1e:68:df:73:b6:36:7a:d6:e2:22:37:37:51:47: 8b:45:5e:00:31:79:89:9e:d4:7f:5f:3d:59:be:6b: d0:82:9f:8d:33:fc:3d:24:e0:12:18:cc:40:cd:11: 5c:24:cc:95:16:23:49:7b:19:33:01:70:81:6d:29: db:1b:3e:00:9c:29:06:e0:f5:a7:f7:37:24:52:c7: a8:10:13:e3:e5:8b:eb:a2:83:b2:59:10:17:a2:2d: 1a:a2:9b:1e:dd:72:64:c7:f2:f2:b5:d0:a3:13:58: 7d:85:98:3b:23:60:41:ea:41:81:50:3f:3a:79:ee: 97:ff:62:e9:69:f3:4a:23:5e:ba:31:fc:4f:24:28: c9:4f:d6:76:d6:54:7b:33:4a:2b:d0:0d:c5:7e:fd: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FE:E5:74:04:E6:26:3E:99:2D:F9:9A:B5:DA:B3:B1:2A:FF:B9:C5 X509v3 Authority Key Identifier: keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:94:45:33:49:c7:a8:be:77:b0:67:8c:bf:0c:8f:b7:ad:c5: 02:24:40:41:bc:bc:0c:c6:d6:0e:6b:e8:51:d9:d6:c5:b2:3e: c0:c6:7b:99:15:f0:59:6c:61:4e:6b:72:3f:9d:ba:e8:21:fe: 5e:9f:11:3e:25:d6:20:ad:ee:27:08:2b:f2:d6:3f:cd:f5:78: 96:e1:36:aa:09:83:b3:b8:3e:a6:46:14:b4:6f:37:67:3d:67: a5:29:26:f4:2d:34:1c:aa:ea:da:e9:4a:8e:43:89:24:73:e0: 49:4f:00:b5:ae:62:ce:a7:4b:b3:b2:9e:9a:08:1e:21:e2:63: a4:35:7d:3c:5d:4f:37:95:89:5d:60:14:31:2b:30:63:df:4e: 6b:cd:7e:df:5e:23:95:8d:44:22:70:ea:e0:3e:03:e9:c0:be: 4d:18:5d:79:ea:34:07:03:be:d9:2d:2b:8f:ef:1f:d2:22:2e: 5f:53:7c:48:1a:b3:ce:e5:4e:dc:8b:10:40:c9:73:e1:02:a6: 45:e3:d2:52:db:01:98:87:d0:00:cc:05:31:6a:d5:8c:03:4c: 9f:fd:11:d3:b3:ef:57:dd:da:c8:ae:18:f8:c3:f1:e4:03:70: b4:18:0f:76:ca:be:ef:4d:62:c1:07:7c:1d:7a:85:1d:77:df: 85:27:39:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy MURFNDE0QjAeFw0yNjA0MTcwODQzMjJaFw0yNjA0MjQwODQzMjJaMBgxFjAUBgNV BAMTDTY5ZTFmMmFiLWZkZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSDJ9unGHXzETO5wSzpaqYEP4PJEKBpnxASs6QcL+swD1GXs+MZ6Tdlui7+zde KOY5sQv9widbyTrd/hojyb8nh7/mMlZPUbrd7LX3bP6X2SrmTWz6hDGegLocF8uC sWJYa84NwDJhUjAeaN9ztjZ61uIiNzdRR4tFXgAxeYme1H9fPVm+a9CCn40z/D0k 4BIYzEDNEVwkzJUWI0l7GTMBcIFtKdsbPgCcKQbg9af3NyRSx6gQE+Pli+uig7JZ EBeiLRqimx7dcmTH8vK10KMTWH2FmDsjYEHqQYFQPzp57pf/Yulp80ojXrox/E8k KMlP1nbWVHszSivQDcV+/agTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpf7ldATm Jj6ZLfmatdqzsSr/ucUwHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7lEUzSceovnewZ4y/DI+3rcUCJEBBvLwMxtYOa+hR2dbFsj7AxnuZFfBZbGFO a3I/nbroIf5enxE+JdYgre4nCCvy1j/N9XiW4TaqCYOzuD6mRhS0bzdnPWelKSb0 LTQcqura6UqOQ4kkc+BJTwC1rmLOp0uzsp6aCB4h4mOkNX08XU83lYldYBQxKzBj 305rzX7fXiOVjUQicOrgPgPpwL5NGF156jQHA77ZLSuP7x/SIi5fU3xIGrPO5U7c ixBAyXPhAqZF49JS2wGYh9AAzAUxatWMA0yf/RHTs+9X3drIrhj4w/HkA3C0GA92 yr7vTWLBB3wdeoUdd9+FJzl6 -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:02 2026 by rpki-client