$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: 5+SOyxTgaduwmabKlC0pBYB8hJ31kd4fVO+c+HYAZAs= Subject key identifier: 5D:50:5F:E2:E1:17:83:72:8C:47:D0:CE:48:37:4B:D4:00:5C:B4:36 Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 3294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 3294 Signing time: Thu 16 Apr 2026 15:23:49 +0000 Manifest this update: Thu 16 Apr 2026 15:23:48 +0000 Manifest next update: Thu 23 Apr 2026 15:23:48 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: l1kKbxLR9tk2eY6VufQ2Gp8L/0TqX5fptPqkNOg7JEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12948 (0x3294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: Apr 16 15:23:48 2026 GMT Not After : Apr 23 15:23:48 2026 GMT Subject: CN=69e0ff05-a2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:2f:0e:a8:3e:43:16:13:f9:c6:72:3a:14: be:04:7c:7c:6c:09:16:31:48:b8:11:c5:ce:2c:26: 15:d2:31:3a:e4:18:ed:e1:59:3d:b4:2b:0d:72:79: 9e:c4:07:40:b2:98:36:29:d6:b3:5c:05:7e:48:60: c8:0c:21:b7:e2:0c:ad:b6:01:76:12:18:81:9d:7d: d5:17:a8:85:c8:c9:63:9b:08:ff:93:4f:10:b3:6a: 8a:c4:59:c9:07:54:59:9e:f7:2a:9d:9f:2a:bf:55: b1:75:c3:32:0d:c4:e4:a6:a1:04:9e:e6:6a:66:d2: 7f:4b:e9:fc:6b:4c:e7:bf:6e:cf:ff:72:e8:a3:a2: 05:a9:b1:14:4c:f2:36:04:60:dd:8b:3e:3e:63:51: 26:0e:9c:46:69:bb:01:b0:69:44:6a:84:4b:e3:6a: ae:c6:4a:b0:10:f8:1c:b0:7d:99:27:30:56:d0:1a: eb:0e:d5:95:a4:eb:6b:41:d1:21:c4:d1:69:44:49: bc:16:f9:04:1f:0c:8c:24:c0:42:56:42:4c:ef:9b: f5:e0:f3:f3:a6:93:64:34:17:6e:f6:03:70:2d:2a: f8:ab:27:43:45:44:b0:37:b5:3d:00:85:92:67:42: bd:c7:6d:bd:1a:68:1c:77:c2:76:47:97:64:c4:d1: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:50:5F:E2:E1:17:83:72:8C:47:D0:CE:48:37:4B:D4:00:5C:B4:36 X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:92:71:60:6c:c1:4c:6e:12:dd:71:94:1a:23:e9:b6:a7:b6: 3a:b6:ca:63:8e:16:d4:f8:1f:f6:04:9a:51:76:47:65:ba:de: c9:b5:38:4a:43:46:86:76:0c:24:4a:50:54:43:41:91:58:cc: 2f:59:37:56:69:f7:08:6f:6f:a0:e8:65:e5:0f:bb:40:ad:a3: ed:cf:b2:90:21:d1:f5:b2:5e:77:13:17:54:ea:14:88:82:8c: fd:aa:7b:3a:81:68:e6:fe:f5:ec:ba:b9:87:a2:6a:ce:72:bd: d7:fe:fa:00:6c:48:d3:33:2e:f9:fd:2a:2a:f8:5e:27:43:1d: 2a:00:39:d9:73:91:5d:88:58:e1:7a:de:31:78:29:20:ec:a1: 4b:e9:ae:af:db:cb:f5:e4:e0:09:3a:c4:31:2e:3b:2f:0e:86: e1:0b:bb:7e:17:8b:4c:63:49:d6:8f:9c:82:e7:d9:cf:a4:4a: 1f:61:be:8f:0a:1e:0c:e5:ff:b3:46:6a:b9:64:8d:97:60:5a: 6f:06:0c:a0:d7:ae:bb:e7:05:53:c0:28:01:c5:f8:b8:2a:18: 6f:52:d1:29:00:d9:7b:f0:44:c3:cf:39:09:a5:e8:50:f6:da: 18:6d:53:07:4b:4b:d6:b6:2b:c6:d1:4e:a7:60:ea:67:89:89: b3:e5:b7:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjYwNDE2MTUyMzQ4WhcNMjYwNDIzMTUyMzQ4WjAYMRYwFAYD VQQDEw02OWUwZmYwNS1hMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7cvDqg+QxYT+cZyOhS+BHx8bAkWMUi4EcXOLCYV0jE65Bjt4Vk9tCsNcnme xAdAspg2KdazXAV+SGDIDCG34gyttgF2EhiBnX3VF6iFyMljmwj/k08Qs2qKxFnJ B1RZnvcqnZ8qv1WxdcMyDcTkpqEEnuZqZtJ/S+n8a0znv27P/3Loo6IFqbEUTPI2 BGDdiz4+Y1EmDpxGabsBsGlEaoRL42quxkqwEPgcsH2ZJzBW0BrrDtWVpOtrQdEh xNFpREm8FvkEHwyMJMBCVkJM75v14PPzppNkNBdu9gNwLSr4qydDRUSwN7U9AIWS Z0K9x229Gmgcd8J2R5dkxNH+UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1QX+Lh F4NyjEfQzkg3S9QAXLQ2MB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5JxYGzBTG4S3XGUGiPptqe2OrbKY44W1Pgf9gSaUXZHZbreybU4SkNGhnYM JEpQVENBkVjML1k3Vmn3CG9voOhl5Q+7QK2j7c+ykCHR9bJedxMXVOoUiIKM/ap7 OoFo5v717Lq5h6JqznK91/76AGxI0zMu+f0qKvheJ0MdKgA52XORXYhY4XreMXgp IOyhS+mur9vL9eTgCTrEMS47Lw6G4Qu7fheLTGNJ1o+cgufZz6RKH2G+jwoeDOX/ s0ZquWSNl2BabwYMoNeuu+cFU8AoAcX4uCoYb1LRKQDZe/BEw885CaXoUPbaGG1T B0tL1rYrxtFOp2DqZ4mJs+W3qA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:04:51 2026 by rpki-client