$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: cwoL3rDl4upI53kx/P1YKf0uk2pqZb0e0vD8U/8eQjU= Subject key identifier: 8D:54:17:BE:60:A5:43:AA:B3:40:EE:FB:BC:76:7F:10:E1:99:D3:00 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 0295 Signing time: Wed 13 May 2026 01:50:18 +0000 Manifest this update: Wed 13 May 2026 01:50:17 +0000 Manifest next update: Wed 20 May 2026 01:50:17 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: R9eI89ZJ8Z90f/9T5eOiRl3OAVt+p1VyUgCwIXmp3LM=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=) 3: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=) 4: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: May 13 01:50:17 2026 GMT Not After : May 20 01:50:17 2026 GMT Subject: CN=6a03d8da-06ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:17:dc:9d:64:25:af:50:dc:0d:a3:43:c2: c2:5a:96:7b:e1:c5:73:35:28:55:9f:fc:8f:88:3c: f8:f4:62:b8:cc:56:53:e8:fb:42:80:50:87:c5:4c: 8c:7a:00:31:91:d8:97:a1:5a:98:77:9f:a1:1d:2c: df:54:ed:d4:e2:32:d8:7a:2e:e5:a3:d8:43:6c:0f: 89:69:04:96:1f:4b:96:89:c8:48:07:9b:d4:5a:9c: d1:f8:ae:b1:8c:cd:52:35:7c:24:e3:3f:9d:ab:7a: dc:19:48:ae:74:37:f9:ad:e1:99:6c:16:b1:40:78: c2:8a:fb:03:3f:ac:2f:c9:aa:b4:6c:67:8b:9d:d7: 8f:53:ee:7f:c2:6b:68:db:4a:92:aa:66:7f:fc:2d: ba:5b:65:1a:8c:08:38:b4:c9:b4:f7:8c:80:e5:6d: d3:a1:fc:c7:c6:a8:be:3a:b9:fc:d1:33:47:66:3b: c5:ff:26:9c:9d:ab:94:fa:fd:b9:ce:48:4a:8a:14: 7d:85:b8:5a:a8:06:c8:58:83:33:53:5c:8c:02:4c: 08:e8:11:91:59:e4:22:56:f3:4a:1e:8f:a2:ba:dc: 5e:4a:5e:85:9a:6c:4a:85:01:03:3a:86:8e:f9:a1: 55:d5:2a:10:d1:5d:5f:b0:fe:e8:1e:22:a5:ee:a3: 7c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:17:BE:60:A5:43:AA:B3:40:EE:FB:BC:76:7F:10:E1:99:D3:00 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bc:02:78:bd:86:fc:01:dc:f3:ef:8a:c7:8a:f6:cd:20:5c: b9:26:9e:29:84:02:4f:1b:2a:79:f5:fd:c3:69:ba:05:12:c1: 28:45:8a:5f:d2:ce:a5:4c:7e:29:3e:b6:2d:f8:36:f5:71:1b: ea:83:65:e0:39:12:d3:f1:ea:e1:56:38:2c:ba:85:73:9a:d5: 9e:18:fa:f7:64:21:97:10:cd:42:62:d9:d1:a4:fd:00:90:3a: 1e:cf:bc:46:2a:d4:0d:fa:66:d9:db:33:86:28:75:73:82:a6: 14:df:5d:03:49:bf:de:87:57:4d:21:21:66:21:40:dd:91:1a: f7:62:ef:b5:0f:e9:fd:b7:7f:3f:47:a4:b7:88:09:1b:c5:67: a3:a1:27:16:b3:68:9a:25:b7:a4:8a:3b:97:d1:a3:69:84:5d: 52:91:f5:ea:2f:7f:7f:01:54:18:72:a0:e0:1a:3b:5f:d3:b3: 15:b0:fd:01:b4:e6:42:60:5d:9c:55:02:82:23:35:a7:29:3b: 18:74:bc:29:de:c3:31:0a:99:95:d0:6e:01:f3:be:bc:9c:cb: bc:ce:2f:68:d7:50:22:bb:7d:42:3e:83:ef:b9:4f:6d:80:57: 0d:cc:81:74:e0:0d:2a:18:d4:37:47:04:a3:f7:86:29:90:20: a9:d5:5c:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjYwNTEzMDE1MDE3WhcNMjYwNTIwMDE1MDE3WjAYMRYwFAYD VQQDEw02YTAzZDhkYS0wNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtswX3J1kJa9Q3A2jQ8LCWpZ74cVzNShVn/yPiDz49GK4zFZT6PtCgFCHxUyM egAxkdiXoVqYd5+hHSzfVO3U4jLYei7lo9hDbA+JaQSWH0uWichIB5vUWpzR+K6x jM1SNXwk4z+dq3rcGUiudDf5reGZbBaxQHjCivsDP6wvyaq0bGeLndePU+5/wmto 20qSqmZ//C26W2UajAg4tMm094yA5W3TofzHxqi+Orn80TNHZjvF/yacnauU+v25 zkhKihR9hbhaqAbIWIMzU1yMAkwI6BGRWeQiVvNKHo+iutxeSl6FmmxKhQEDOoaO +aFV1SoQ0V1fsP7oHiKl7qN8lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1UF75g pUOqs0Du+7x2fxDhmdMAMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPrwCeL2G/AHc8++Kx4r2zSBcuSaeKYQCTxsqefX9w2m6BRLBKEWKX9LOpUx+ KT62Lfg29XEb6oNl4DkS0/Hq4VY4LLqFc5rVnhj692QhlxDNQmLZ0aT9AJA6Hs+8 RirUDfpm2dszhih1c4KmFN9dA0m/3odXTSEhZiFA3ZEa92LvtQ/p/bd/P0ekt4gJ G8Vno6EnFrNomiW3pIo7l9GjaYRdUpH16i9/fwFUGHKg4Bo7X9OzFbD9AbTmQmBd nFUCgiM1pyk7GHS8Kd7DMQqZldBuAfO+vJzLvM4vaNdQIrt9Qj6D77lPbYBXDcyB dOANKhjUN0cEo/eGKZAgqdVc3Q== -----END CERTIFICATE-----Generated at Wed May 13 06:45:44 2026 by rpki-client