$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: Zg0MQGvUjp5yC6/P05ZeIQf3zGQCKIj30/e+ObOR3h4= Subject key identifier: FD:FA:59:0E:80:8F:54:E2:EF:49:4F:B3:6C:C6:92:FE:56:04:50:39 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0DCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0DAD Signing time: Tue 12 May 2026 17:57:32 +0000 Manifest this update: Tue 12 May 2026 17:57:31 +0000 Manifest next update: Tue 19 May 2026 17:57:31 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: V11hC3WZ/EfqnXozrlwZdLv56XQAc/QiygXkKqeRwbc=) 2: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: p0qRh9uijUrBuvk2zDLygs2mx5whlrqDAoU+cadOU2w=) 3: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: OCSQyHL40HhtFPxjiZ0aie03NCu9qKwOOGRctAZUKss=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3531 (0xdcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: May 12 17:57:31 2026 GMT Not After : May 19 17:57:31 2026 GMT Subject: CN=6a036a0c-23f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:ed:34:04:c6:3e:83:14:4e:bd:35:2b:c0: b9:9d:ac:9a:54:e6:f0:93:30:ad:a9:41:12:9e:e8: e2:38:5c:d7:96:35:e4:48:e0:92:95:f8:61:d9:a0: 43:9d:fe:fd:8e:83:22:52:c7:e9:91:ab:18:f1:1c: d9:b7:54:23:e2:1c:43:c1:ab:ea:7c:6a:66:d8:ad: 78:b5:d8:4a:30:1f:94:8f:17:0a:31:95:e5:5b:f9: 77:a2:13:0f:ef:6b:69:8d:e2:2e:5a:5e:b5:74:ad: 65:75:73:24:50:c8:36:94:e0:34:9b:f9:7d:4e:64: d4:f5:19:60:b8:40:63:e8:9c:dc:53:1f:9c:92:83: 0a:6d:95:4b:ad:26:66:86:20:13:da:2c:bd:ec:e2: b2:96:39:31:90:06:1b:13:11:6f:81:33:e9:5f:0b: 9f:e6:d3:f6:7e:e2:f8:c5:c7:ef:23:f0:d6:59:da: d0:52:92:3b:06:ad:1e:14:c7:c0:77:2d:42:3f:a2: 27:6f:b3:1a:28:59:63:9f:8e:5b:c9:b4:a6:32:9c: 00:00:33:29:a1:b6:69:f5:41:d3:0d:07:e2:09:64: 1f:f7:5a:1a:bf:19:a6:60:0c:c7:e6:ae:c3:03:c7: 7e:4e:7d:7e:4b:24:2b:67:06:44:4a:1f:74:83:58: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FA:59:0E:80:8F:54:E2:EF:49:4F:B3:6C:C6:92:FE:56:04:50:39 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e0:33:0e:96:95:33:2a:21:5e:13:8b:7e:8f:7a:d0:cb:fe: 49:e6:f5:d9:a8:79:0a:12:20:36:0a:e2:dc:e3:17:b8:0a:c7: af:62:4e:f9:a3:a4:9c:a7:08:62:68:ff:a9:30:47:82:da:b4: c6:b1:ed:7c:a0:fa:45:f5:d0:ea:17:ff:f1:c0:bc:41:f8:df: 9a:db:60:a4:d6:7e:28:54:2d:b5:10:da:1a:3e:f4:53:b1:ef: a8:db:40:08:25:2d:e4:91:d8:ed:5f:a5:99:a3:ad:f1:1f:65: 70:a3:70:f3:0e:f8:0b:c4:f6:b3:cd:6b:c6:ba:11:fe:32:28: 4c:47:15:1b:5a:c6:08:bc:4b:73:66:23:42:e4:70:10:09:f7: 0f:1b:2c:89:d5:16:62:b6:5b:26:30:cc:d9:63:a6:30:32:fa: 4a:3d:ff:4a:46:6b:89:22:a7:1d:4d:73:d3:af:8b:37:ba:56: 0e:00:89:62:53:84:57:b7:e4:6d:f4:a0:11:12:b8:a9:df:a6: f4:92:1f:c6:35:8f:ba:af:2e:f2:41:1c:63:ba:3d:79:53:e0: e5:37:80:22:31:57:e5:b0:60:c7:43:29:2d:29:6b:41:b8:4a: ee:05:fd:ef:14:4a:57:97:33:23:f1:d4:3c:98:11:bd:57:bf: f3:d6:22:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwNTEyMTc1NzMxWhcNMjYwNTE5MTc1NzMxWjAYMRYwFAYD VQQDEw02YTAzNmEwYy0yM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7DtNATGPoMUTr01K8C5nayaVObwkzCtqUESnujiOFzXljXkSOCSlfhh2aBD nf79joMiUsfpkasY8RzZt1Qj4hxDwavqfGpm2K14tdhKMB+UjxcKMZXlW/l3ohMP 72tpjeIuWl61dK1ldXMkUMg2lOA0m/l9TmTU9RlguEBj6JzcUx+ckoMKbZVLrSZm hiAT2iy97OKyljkxkAYbExFvgTPpXwuf5tP2fuL4xcfvI/DWWdrQUpI7Bq0eFMfA dy1CP6Inb7MaKFljn45bybSmMpwAADMpobZp9UHTDQfiCWQf91oavxmmYAzH5q7D A8d+Tn1+SyQrZwZESh90g1j3xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP36WQ6A j1Ti70lPs2zGkv5WBFA5MB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhuAzDpaVMyohXhOLfo960Mv+Seb12ah5ChIgNgri3OMXuArHr2JO+aOknKcI Ymj/qTBHgtq0xrHtfKD6RfXQ6hf/8cC8QfjfmttgpNZ+KFQttRDaGj70U7HvqNtA CCUt5JHY7V+lmaOt8R9lcKNw8w74C8T2s81rxroR/jIoTEcVG1rGCLxLc2YjQuRw EAn3DxssidUWYrZbJjDM2WOmMDL6Sj3/SkZriSKnHU1z06+LN7pWDgCJYlOEV7fk bfSgERK4qd+m9JIfxjWPuq8u8kEcY7o9eVPg5TeAIjFX5bBgx0MpLSlrQbhK7gX9 7xRKV5czI/HUPJgRvVe/89YiNg== -----END CERTIFICATE-----Generated at Wed May 13 06:45:13 2026 by rpki-client