$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: K0psZv2R9h68JpgYc+ZpkN/F5s93iKjBzTiWTJuGz6Y= Subject key identifier: DE:C4:72:B3:68:74:65:25:20:C4:28:4B:70:C6:56:78:E4:8D:3A:F1 Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 0416 Signing time: Fri 17 Apr 2026 00:18:35 +0000 Manifest this update: Fri 17 Apr 2026 00:18:34 +0000 Manifest next update: Fri 24 Apr 2026 00:18:34 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: aMJfPCFxzAhNsKXlvXpAcSQeOOt0ireoMWws5i/i9Vo=) 2: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: uIe065ouSrK1ZyYaAyKs/pdPmvRv0EpPK089oDcTECA=) 3: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: M48TTuq9ADhSv++/MbWv3dwOfaMFDhRB8S7kdUoR+jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Apr 17 00:18:34 2026 GMT Not After : Apr 24 00:18:34 2026 GMT Subject: CN=69e17c5b-05c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:a1:98:80:ab:a9:7c:c0:22:b1:a5:ec:8e: 02:1c:79:13:14:e6:85:33:f1:2e:84:d6:69:ed:99: a6:00:db:cf:6d:18:14:8b:38:ec:c2:d1:54:de:73: 0a:ea:f7:3b:63:03:08:2b:87:c7:d9:be:8e:c0:4f: 66:f4:00:56:26:bc:eb:e2:d7:d9:d4:9c:3a:fc:71: 2d:c1:cf:a0:ca:7c:11:38:01:1d:68:11:10:9e:20: 1e:2f:6c:1f:ef:e3:83:74:29:5b:4f:25:ba:2a:80: 7b:78:3b:4c:b8:69:18:fc:eb:7b:d4:46:0c:57:86: 4e:36:20:ec:a1:5d:8b:50:85:a2:a5:0a:0d:7a:91: 33:e5:b3:8c:a3:8e:27:8a:8c:d8:db:13:0e:63:4a: de:86:10:ab:e5:63:8a:2f:8b:fd:e9:89:bc:a9:96: 13:8e:59:55:e1:5b:cd:b2:8f:e2:2f:7c:56:51:33: 9e:4c:91:6f:e9:67:25:0b:73:c4:81:48:4a:73:cc: 24:ed:9e:a3:39:47:5f:a7:f7:07:21:89:f0:03:b7: 6b:77:ad:26:f4:ce:47:5d:d8:81:d1:ad:e7:0e:ae: 29:66:14:33:9c:dd:92:6d:2e:6f:9f:a6:0c:05:bf: 93:ed:66:7f:b7:37:49:cf:4a:f9:05:29:fb:ad:1a: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C4:72:B3:68:74:65:25:20:C4:28:4B:70:C6:56:78:E4:8D:3A:F1 X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:47:95:45:91:df:cc:13:2a:70:52:9d:69:42:06:0c:ea:cd: b5:43:fe:22:7a:14:26:fa:3f:72:be:9d:05:4f:fd:2b:de:e0: b2:8c:7e:ae:5e:21:7d:fb:4a:2a:ef:38:1b:88:ce:b1:bd:9a: 25:9e:08:52:78:f6:86:8c:a8:af:05:b3:2f:8e:71:c7:4f:9c: 3f:3a:22:af:20:dc:db:dc:09:52:52:6e:2b:c1:21:59:e4:e2: e9:0e:ff:70:82:8f:04:92:b1:77:ce:9c:2a:7c:a8:65:b2:45: 4f:38:18:46:c0:1a:6d:9f:f9:2b:71:93:ea:a6:7e:d3:d4:bb: da:01:9c:39:f5:25:65:8f:d8:74:cd:6b:5d:b1:01:7f:d8:02: e3:44:29:27:46:b3:1c:25:48:b1:66:5f:60:79:ac:d0:55:3a: e0:06:ec:3c:4b:17:57:64:c9:5c:78:94:34:28:b7:bf:7a:08: 23:f6:07:86:0e:5f:f3:23:03:29:20:e6:4b:d7:c3:64:c2:2a: cc:ca:ce:84:6e:f7:f3:57:64:23:4d:c7:9d:f3:8d:bc:68:da: 92:e9:1c:d1:7f:37:dc:2b:c1:f4:ff:c4:75:32:cf:97:f4:d3: fb:04:1c:09:fd:58:a1:2d:70:f3:77:70:f5:ee:94:6a:4c:98: 80:18:68:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjYwNDE3MDAxODM0WhcNMjYwNDI0MDAxODM0WjAYMRYwFAYD VQQDEw02OWUxN2M1Yi0wNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGmhmICrqXzAIrGl7I4CHHkTFOaFM/EuhNZp7ZmmANvPbRgUizjswtFU3nMK 6vc7YwMIK4fH2b6OwE9m9ABWJrzr4tfZ1Jw6/HEtwc+gynwROAEdaBEQniAeL2wf 7+ODdClbTyW6KoB7eDtMuGkY/Ot71EYMV4ZONiDsoV2LUIWipQoNepEz5bOMo44n iozY2xMOY0rehhCr5WOKL4v96Ym8qZYTjllV4VvNso/iL3xWUTOeTJFv6WclC3PE gUhKc8wk7Z6jOUdfp/cHIYnwA7drd60m9M5HXdiB0a3nDq4pZhQznN2SbS5vn6YM Bb+T7WZ/tzdJz0r5BSn7rRqP8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7EcrNo dGUlIMQoS3DGVnjkjTrxMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVEeVRZHfzBMqcFKdaUIGDOrNtUP+InoUJvo/cr6dBU/9K97gsox+rl4hfftK Ku84G4jOsb2aJZ4IUnj2hoyorwWzL45xx0+cPzoiryDc29wJUlJuK8EhWeTi6Q7/ cIKPBJKxd86cKnyoZbJFTzgYRsAabZ/5K3GT6qZ+09S72gGcOfUlZY/YdM1rXbEB f9gC40QpJ0azHCVIsWZfYHms0FU64AbsPEsXV2TJXHiUNCi3v3oII/YHhg5f8yMD KSDmS9fDZMIqzMrOhG7381dkI03HnfONvGjakukc0X833CvB9P/EdTLPl/TT+wQc Cf1YoS1w83dw9e6UakyYgBho6A== -----END CERTIFICATE-----Generated at Fri Apr 17 14:04:25 2026 by rpki-client