$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft File: nID3XsZz_EiUE3dEZP47gW1LrsU.mft (raw, json) Hash identifier: umzFYLhm06vMo/jz2kbyZXlHn9Y3R5J/037CHnnuJkk= Subject key identifier: 17:B5:14:BA:D2:51:C2:43:27:CF:AB:A1:0B:AA:FA:C8:83:6D:4A:7D Authority key identifier: 9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5 Certificate issuer: /CN=A91FB5C6/serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft Manifest number: 08 Signing time: Sun 19 Apr 2026 08:44:57 +0000 Manifest this update: Sun 19 Apr 2026 08:44:57 +0000 Manifest next update: Sun 26 Apr 2026 08:44:57 +0000 Files and hashes: 1: nID3XsZz_EiUE3dEZP47gW1LrsU.crl (hash: WrdJLHGOCNHPKbcvnuotXOLJkpDpGnPY+MPTpVG33YU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5C6, serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5 Validity Not Before: Apr 19 08:44:57 2026 GMT Not After : Apr 26 08:44:57 2026 GMT Subject: CN=69e49609-693d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:ed:29:3d:c4:96:6b:80:bd:39:b9:44:e7: d8:1c:ef:3d:e9:49:25:1d:65:73:aa:17:36:75:a1: b5:db:f5:48:7e:2c:9a:a0:85:3e:62:25:cd:f6:b7: e4:5a:91:3c:4f:5c:70:01:53:62:af:73:03:53:f0: b5:7f:ab:15:81:53:07:0b:e7:28:58:2d:0f:b3:e4: 68:fe:69:6d:1d:99:09:e9:41:61:e7:28:d3:00:ac: 3b:c2:35:df:79:84:ed:d5:1f:f9:e5:db:f4:e6:bf: 5d:18:19:5a:af:b0:40:58:7c:ab:10:58:c8:6e:93: 4c:1b:b1:50:9a:ed:ba:59:29:f3:fe:e0:99:d9:5b: b6:01:58:0e:38:1c:b1:74:42:46:e1:af:37:cb:2f: 7b:d9:78:7c:96:3e:72:c4:d0:84:b9:c1:e6:f4:99: a6:39:b0:6c:43:45:97:7f:4d:1e:76:9d:96:0a:0d: bb:8d:6d:3f:c6:be:4e:ec:e0:c3:5e:fa:40:4b:76: f8:e2:c7:31:b6:61:2f:5a:e2:92:f4:2d:68:ea:9c: 30:ba:26:47:09:14:f2:9f:b7:8e:5f:6e:bf:29:d7: c7:f6:8a:df:5e:c2:78:11:f0:b6:94:55:1c:ec:da: cd:09:51:1e:24:55:18:e4:c9:28:69:0c:ad:a2:7e: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:14:BA:D2:51:C2:43:27:CF:AB:A1:0B:AA:FA:C8:83:6D:4A:7D X509v3 Authority Key Identifier: keyid:9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1b:e2:f2:55:d4:7a:02:a4:49:2b:ed:6f:91:68:87:a0:6e: 88:4f:5d:4d:59:57:9c:fb:90:ee:43:bb:b0:10:c2:d2:83:44: a7:b4:1d:35:e0:13:e6:1d:da:c0:42:4f:33:f3:af:d9:89:a1: 0b:3e:77:79:78:3a:ad:42:c2:01:d0:7b:8a:78:08:22:00:84: e3:63:d8:90:38:13:68:ac:cd:97:cb:c5:fe:3c:74:66:3a:d0: 6d:4f:70:b8:e8:d6:41:af:8c:47:67:a6:6b:07:a2:e7:f8:67: bb:ee:fa:a0:47:18:2d:ab:35:a4:9d:50:8f:ee:ba:e9:db:7f: 8c:2f:77:66:e0:ca:40:33:ef:61:f1:1a:66:ac:54:7e:32:0c: f6:97:64:c4:9f:e7:6c:3c:49:a1:84:3c:d9:b5:4c:f4:b1:30: 46:a7:b0:0b:a6:a4:29:6b:2c:44:3c:4e:66:f6:4e:01:3c:21: d0:e4:90:86:19:48:77:1a:69:76:05:0f:ae:ed:27:5d:7c:35: 80:91:10:cf:29:39:7b:7f:76:8d:10:26:12:16:67:97:59:28: 79:82:85:4e:f3:ad:be:35:74:bd:e0:d3:26:c3:55:07:a2:c5: 87:14:fd:d3:3a:af:3a:37:a0:5a:5c:fa:4b:f7:83:2f:e8:f5: 7c:ef:15:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjVDNjExMC8GA1UEBRMoOUM4MEY3NUVDNjczRkM0ODk0MTM3NzQ0NjRGRTNCODE2 RDRCQUVDNTAeFw0yNjA0MTkwODQ0NTdaFw0yNjA0MjYwODQ0NTdaMBgxFjAUBgNV BAMTDTY5ZTQ5NjA5LTY5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHMu0pPcSWa4C9OblE59gc7z3pSSUdZXOqFzZ1obXb9Uh+LJqghT5iJc32t+Ra kTxPXHABU2KvcwNT8LV/qxWBUwcL5yhYLQ+z5Gj+aW0dmQnpQWHnKNMArDvCNd95 hO3VH/nl2/Tmv10YGVqvsEBYfKsQWMhuk0wbsVCa7bpZKfP+4JnZW7YBWA44HLF0 QkbhrzfLL3vZeHyWPnLE0IS5web0maY5sGxDRZd/TR52nZYKDbuNbT/Gvk7s4MNe +kBLdvjixzG2YS9a4pL0LWjqnDC6JkcJFPKft45fbr8p18f2it9ewngR8LaUVRzs 2s0JUR4kVRjkyShpDK2ifl4ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF7UUutJR wkMnz6uhC6r6yINtSn0wHwYDVR0jBBgwFoAUnID3XsZz/EiUE3dEZP47gW1LrsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNUM2L0I2MzU5MURFMzI5 QzExRjE5NkQ3RUJDQ0NCODMzNzczL25JRDNYc1p6X0VpVUUzZEVaUDQ3Z1cxTHJz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbklEM1hzWnpfRWlVRTNkRVpQNDdnVzFMcnNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NUM2L0I2MzU5MURFMzI5QzExRjE5NkQ3RUJDQ0NCODMzNzczL25JRDNYc1p6X0Vp VUUzZEVaUDQ3Z1cxTHJzVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPG+LyVdR6AqRJK+1vkWiHoG6IT11NWVec+5DuQ7uwEMLSg0SntB014BPmHdrA Qk8z86/ZiaELPnd5eDqtQsIB0HuKeAgiAITjY9iQOBNorM2Xy8X+PHRmOtBtT3C4 6NZBr4xHZ6ZrB6Ln+Ge77vqgRxgtqzWknVCP7rrp23+ML3dm4MpAM+9h8RpmrFR+ Mgz2l2TEn+dsPEmhhDzZtUz0sTBGp7ALpqQpayxEPE5m9k4BPCHQ5JCGGUh3Gml2 BQ+u7SddfDWAkRDPKTl7f3aNECYSFmeXWSh5goVO862+NXS94NMmw1UHosWHFP3T Oq86N6BaXPpL94Mv6PV87xWR -----END CERTIFICATE-----Generated at Sun Apr 19 12:55:45 2026 by rpki-client