$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: LllR3XhoV5GcZh7NJD0hGXqtOMUOBGREJh7y2sZXod4= Subject key identifier: 16:C6:99:CB:5A:E6:EF:F7:B5:6F:B4:59:DD:CB:B4:DC:C0:66:FF:35 Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: 53 Signing time: Fri 17 Apr 2026 07:55:11 +0000 Manifest this update: Fri 17 Apr 2026 07:55:11 +0000 Manifest next update: Fri 24 Apr 2026 07:55:11 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: lLLKe7Yx0sCM76DgR3I0SDthOojrbAuTMrBm9HCdea0=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Apr 17 07:55:11 2026 GMT Not After : Apr 24 07:55:11 2026 GMT Subject: CN=69e1e75f-fdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:d3:ce:62:fb:7f:3f:9f:7a:a9:7e:99:38: df:5a:cf:4b:e9:76:f4:a8:cf:c4:ae:ae:35:8d:4d: 9a:dd:ee:2d:73:43:f6:d5:de:75:c1:53:cb:5f:34: 40:e3:4a:90:45:ba:2e:f7:7a:23:1e:15:e8:14:08: 19:6f:33:2f:4d:0c:b6:82:e1:58:a4:b5:94:27:a4: 81:5f:12:cc:fa:67:e5:d6:4c:87:be:0e:37:68:11: d0:6e:38:89:8f:34:ce:46:ec:7c:95:a4:48:6d:65: 1e:62:ba:22:15:d9:04:e9:b8:e4:55:c1:34:fa:01: 92:e2:93:77:d0:57:e0:8c:f9:a7:8a:8b:99:7c:d1: fd:45:59:cc:7c:7e:f0:a1:41:55:6d:bf:45:63:d0: aa:aa:28:52:4c:4d:8e:a3:d0:ea:4d:39:8e:6f:65: 76:2d:ff:51:87:b5:69:63:3d:3b:93:3c:8d:e9:5c: 9e:b0:ce:71:e7:d0:cf:53:d1:ac:dd:9a:17:fe:ac: 8b:dc:e5:f0:8d:ef:08:95:7e:a5:c6:34:ae:b2:c6: 54:fd:3d:3d:19:26:12:c7:fc:27:f8:cf:2e:68:ce: 74:cf:9f:5a:ef:a8:9d:c8:06:31:8f:71:50:8f:e8: ed:cc:80:61:4b:67:99:8d:35:04:02:af:77:79:68: c2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C6:99:CB:5A:E6:EF:F7:B5:6F:B4:59:DD:CB:B4:DC:C0:66:FF:35 X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:52:6b:6d:b8:d1:5e:09:44:e7:af:d3:c6:90:45:a9:5b:c2: f6:50:0c:33:dc:ab:c9:90:ce:bb:34:a1:39:c8:d7:86:86:f0: 50:a4:b6:97:74:c7:b6:d5:51:d2:e8:89:23:87:a2:73:59:c5: 70:00:e0:01:62:7f:00:c5:83:d1:af:ca:ea:6a:bd:67:c5:f6: e3:7e:ed:c9:97:88:34:f8:a5:e4:09:97:29:de:6b:69:eb:41: 85:19:aa:11:92:3a:6e:44:43:f6:86:05:d9:85:cf:5a:11:ca: a8:57:55:c1:32:c7:ca:ea:c6:d2:7f:5d:68:e6:a9:ad:0f:86: 9c:e5:05:1f:d2:04:39:21:1c:9a:9e:7e:cf:a7:bf:fb:bc:ff: f2:33:64:16:f4:a4:78:71:9c:65:ec:e1:3c:fd:fe:35:ad:19: 2b:2f:7a:54:1b:eb:85:a9:91:e0:5c:bc:85:c9:86:e4:d7:78: 58:29:83:f0:75:17:f0:ee:9b:8e:46:c2:c4:38:6a:bf:64:3e: ba:fa:0a:5b:9b:25:49:b3:a4:db:e3:33:ea:83:53:03:dc:ad: 24:b9:6c:b8:81:43:99:46:91:b6:f0:29:0b:e8:2a:2d:50:af: b7:a3:1a:b0:52:4f:5d:8e:58:b0:50:3e:cc:04:67:e9:09:42: 57:dd:d5:1a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG REQ3NDA1RjAeFw0yNjA0MTcwNzU1MTFaFw0yNjA0MjQwNzU1MTFaMBgxFjAUBgNV BAMTDTY5ZTFlNzVmLWZkYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5GtPOYvt/P596qX6ZON9az0vpdvSoz8SurjWNTZrd7i1zQ/bV3nXBU8tfNEDj SpBFui73eiMeFegUCBlvMy9NDLaC4ViktZQnpIFfEsz6Z+XWTIe+DjdoEdBuOImP NM5G7HyVpEhtZR5iuiIV2QTpuORVwTT6AZLik3fQV+CM+aeKi5l80f1FWcx8fvCh QVVtv0Vj0KqqKFJMTY6j0OpNOY5vZXYt/1GHtWljPTuTPI3pXJ6wznHn0M9T0azd mhf+rIvc5fCN7wiVfqXGNK6yxlT9PT0ZJhLH/Cf4zy5oznTPn1rvqJ3IBjGPcVCP 6O3MgGFLZ5mNNQQCr3d5aMI5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFsaZy1rm 7/e1b7RZ3cu03MBm/zUwHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0RGQjQ5QzQ4QzUxMDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpx STRCRV9KUFZocHYzWFFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeUmttuNFeCUTnr9PGkEWpW8L2UAwz3KvJkM67NKE5yNeGhvBQpLaXdMe21VHS 6Ikjh6JzWcVwAOABYn8AxYPRr8rqar1nxfbjfu3Jl4g0+KXkCZcp3mtp60GFGaoR kjpuREP2hgXZhc9aEcqoV1XBMsfK6sbSf11o5qmtD4ac5QUf0gQ5IRyann7Pp7/7 vP/yM2QW9KR4cZxl7OE8/f41rRkrL3pUG+uFqZHgXLyFyYbk13hYKYPwdRfw7puO RsLEOGq/ZD66+gpbmyVJs6Tb4zPqg1MD3K0kuWy4gUOZRpG28CkL6CotUK+3oxqw Uk9djliwUD7MBGfpCUJX3dUa -----END CERTIFICATE-----Generated at Sun Apr 19 08:26:30 2026 by rpki-client