$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json) Hash identifier: AVwK/Z8BgehUPe781FU9vZh3nOHbGlIYuas1E22hp3Q= Subject key identifier: 40:63:9C:3B:CE:2A:38:25:0A:46:7A:F7:EC:2B:7E:D8:5B:09:12:B6 Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Certificate serial: 15BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft Manifest number: 15AC Signing time: Thu 16 Apr 2026 16:41:44 +0000 Manifest this update: Thu 16 Apr 2026 16:41:44 +0000 Manifest next update: Thu 23 Apr 2026 16:41:44 +0000 Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: HUOI5Mt5OLG1JDCoezh/fUdNS1XT+5BHbdodKI325UU=) 2: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: mjER69CRCpsMBjGIx0Q4yyRPRuK30idnlQajAiMsy6s=) 3: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: szL4BZSbgcQY4LfE/szjKTFQSSHTkoZGzk2quRmWzfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5567 (0x15bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Validity Not Before: Apr 16 16:41:44 2026 GMT Not After : Apr 23 16:41:44 2026 GMT Subject: CN=69e11148-fb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:f1:7a:42:08:f0:51:4c:fa:7b:09:0f:08: d4:02:b9:dc:da:ef:71:51:cb:ad:08:52:a4:a8:84: a1:a9:49:53:09:4f:9c:15:86:4c:dc:69:9a:9a:9f: 51:e5:f0:e6:29:a2:01:09:c4:ea:b5:c3:85:b1:90: 15:00:e0:94:5e:af:74:39:39:5b:91:85:b2:59:5e: e8:f9:db:69:0e:68:9d:cc:d5:5b:c1:1d:45:60:8c: 22:8a:48:43:54:b3:37:35:48:48:45:dd:8c:1a:41: 18:d8:fb:d5:bd:8d:79:12:1d:53:9b:68:70:cb:f2: ae:37:3e:42:91:29:ff:73:07:a0:cd:24:95:8a:c4: 08:27:4b:60:31:ea:7e:bd:da:5f:43:71:b7:77:20: e2:a9:7f:ef:d3:a1:80:0e:5e:f0:74:3c:ac:18:4f: db:a3:b5:35:38:15:ec:ba:6b:b3:1e:47:b8:6c:38: be:b5:a3:0a:1d:15:de:d0:98:28:03:bd:75:65:ae: e2:a2:ce:46:99:6c:66:04:31:32:5e:07:ba:15:6f: bd:ac:82:2f:8a:52:18:ae:25:84:63:de:e0:2c:41: 9d:3d:c3:68:1c:50:26:58:65:37:75:dc:4c:99:0e: f1:47:35:de:c5:a6:96:bd:6a:84:01:50:fe:45:42: 65:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:63:9C:3B:CE:2A:38:25:0A:46:7A:F7:EC:2B:7E:D8:5B:09:12:B6 X509v3 Authority Key Identifier: keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:dc:8c:3e:f7:35:18:91:84:b8:2a:6d:15:8a:8e:44:7d:92: 00:7b:86:e7:7d:33:4e:50:a0:69:66:8b:39:5d:b2:8b:02:50: 48:6f:81:a6:4e:5e:9a:cd:59:af:e5:48:b7:65:20:dd:3a:73: 69:f5:12:e7:b1:39:45:a9:e3:c2:46:bc:73:0d:f9:88:b9:c9: 0d:f1:8b:d8:65:6b:fb:3d:a0:18:dd:c9:ae:bb:81:db:21:ce: 76:9d:84:a4:b3:90:36:44:22:23:aa:0a:e7:3a:74:a7:66:18: 07:8a:ac:d0:d3:e6:cf:72:6c:23:64:07:3c:a7:e5:7b:d8:0d: 1e:c8:dd:6e:df:25:d7:4d:4c:ed:00:36:05:46:4f:8a:14:14: 7f:4f:fe:a5:e0:6a:8c:d8:6e:d0:13:cb:71:a7:22:7a:be:29: 62:3f:b9:3f:93:7f:7a:63:df:d5:73:b5:b4:78:3f:bc:7e:bc: 83:79:7c:d0:51:f3:17:f2:93:10:fc:4f:ce:fb:ca:8a:c3:78: 3b:f9:11:40:c2:ab:05:41:62:2a:6a:43:be:61:f1:b8:24:cd: 16:39:30:04:a3:2f:df:53:24:fd:19:32:37:b6:09:24:b3:92: d8:35:76:cf:e9:fb:78:ac:e4:3a:c1:d9:e5:a8:ed:ea:4f:d2: 55:52:c1:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RTQxMTAvBgNVBAUTKDg3Q0EzOTQ4Q0UxQ0NCRTFBMjA0QzVGODBEQjQzMDQx MDlBODMxN0MwHhcNMjYwNDE2MTY0MTQ0WhcNMjYwNDIzMTY0MTQ0WjAYMRYwFAYD VQQDEw02OWUxMTE0OC1mYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmc/xekII8FFM+nsJDwjUArnc2u9xUcutCFKkqIShqUlTCU+cFYZM3Gmamp9R 5fDmKaIBCcTqtcOFsZAVAOCUXq90OTlbkYWyWV7o+dtpDmidzNVbwR1FYIwiikhD VLM3NUhIRd2MGkEY2PvVvY15Eh1Tm2hwy/KuNz5CkSn/cwegzSSVisQIJ0tgMep+ vdpfQ3G3dyDiqX/v06GADl7wdDysGE/bo7U1OBXsumuzHke4bDi+taMKHRXe0Jgo A711Za7ios5GmWxmBDEyXge6FW+9rIIvilIYriWEY97gLEGdPcNoHFAmWGU3ddxM mQ7xRzXexaaWvWqEAVD+RUJlOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBjnDvO KjglCkZ69+wrfthbCRK2MB8GA1UdIwQYMBaAFIfKOUjOHMvhogTF+A20MEEJqDF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVFNC83OTM5NzMyMDRE MDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3ktR2lCTVg0RGJRd1FRbW9N WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4bzVTTTRjeS1HaUJNWDREYlF3UVFtb01Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVFNC83OTM5NzMyMDREMDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3kt R2lCTVg0RGJRd1FRbW9NWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH9yMPvc1GJGEuCptFYqORH2SAHuG530zTlCgaWaLOV2yiwJQSG+Bpk5ems1Z r+VIt2Ug3TpzafUS57E5Ranjwka8cw35iLnJDfGL2GVr+z2gGN3JrruB2yHOdp2E pLOQNkQiI6oK5zp0p2YYB4qs0NPmz3JsI2QHPKfle9gNHsjdbt8l101M7QA2BUZP ihQUf0/+peBqjNhu0BPLcacier4pYj+5P5N/emPf1XO1tHg/vH68g3l80FHzF/KT EPxPzvvKisN4O/kRQMKrBUFiKmpDvmHxuCTNFjkwBKMv31Mk/RkyN7YJJLOS2DV2 z+n7eKzkOsHZ5ajt6k/SVVLBDg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:30 2026 by rpki-client