$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: nZwK4gNqr333IkkeinZO7q+W0xvDgSqC1r6O42sFUzU= Subject key identifier: 85:CA:AC:E8:D2:73:74:57:88:7F:9E:BE:32:4E:F1:A5:86:D6:6E:7E Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 01CE Signing time: Mon 11 May 2026 03:42:36 +0000 Manifest this update: Mon 11 May 2026 03:42:35 +0000 Manifest next update: Mon 18 May 2026 03:42:35 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: cIV0w2TyjI1AyRp845nnZyAVE4deFrDxT0WiyUUgZ64=) 2: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: p9m+Ky6KPaxoCxqhurBlkPRkCfywo+5r7qphI33Ipdo=) 3: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: yzwQF5BWuhV75DE3qzozKQNyER1bQqJr/dSB8bkYg7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: May 11 03:42:35 2026 GMT Not After : May 18 03:42:35 2026 GMT Subject: CN=6a01502b-8f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:75:49:ca:37:2b:e9:75:23:d1:24:61:dd: 71:21:da:00:03:b8:43:a4:07:59:b2:22:94:f6:d5: fd:6c:a7:8e:76:05:67:74:f3:46:02:8e:03:42:a8: 22:c7:c6:1b:64:db:ce:5d:cf:47:29:7b:5d:d5:ae: e2:3d:e1:b1:bb:94:d7:6a:b5:69:ed:ec:ce:fc:9c: a3:69:54:22:98:51:58:db:ba:a2:1c:75:39:05:85: 18:29:f8:00:86:db:c2:e0:f7:39:03:0b:e9:88:08: fe:86:5e:e7:01:29:e2:f9:46:ad:be:1c:47:88:42: 85:6b:fb:1b:81:ea:ce:db:17:c4:65:54:39:3b:50: 68:6a:cc:0e:1a:9b:3a:03:29:ad:07:0c:08:f9:39: d1:a2:13:d5:40:f1:f9:33:ea:ea:e0:9a:3d:a3:e4: 9d:03:b0:a7:20:89:f1:54:84:f9:f8:69:2b:b7:75: 0b:3d:79:65:00:7e:f2:ae:f4:a1:a9:4b:de:8e:88: 6d:18:ef:8c:4d:31:9c:1d:1a:f4:f9:4b:55:a7:25: d2:81:34:94:6a:32:05:9d:45:80:48:31:9b:43:b0: af:1d:11:fe:13:02:cb:cb:99:84:05:07:ed:93:67: 7e:c2:71:8e:3a:52:f7:15:73:e9:13:73:58:0c:6e: f2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:AC:E8:D2:73:74:57:88:7F:9E:BE:32:4E:F1:A5:86:D6:6E:7E X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:27:aa:94:d7:e3:ee:a5:91:8a:a1:22:e4:c7:12:03:96:3a: ee:d8:ba:0c:14:4e:64:de:19:25:c6:25:df:80:cc:07:8f:d8: de:dd:a4:3b:47:85:83:4c:91:74:5b:5c:e6:04:cc:a4:11:e1: 79:8a:3d:f6:8d:d9:c0:42:d0:af:f5:f5:a0:48:7d:c7:f8:97: 5e:73:94:bc:14:f9:1c:79:28:b3:89:18:61:0d:69:51:66:c2: ca:fe:83:d0:ad:f5:9d:6f:1b:15:a8:71:61:d9:e1:51:ce:f8: ad:3c:27:16:c6:f3:4d:af:1a:ad:95:71:b7:a8:92:fb:20:e9: 89:01:1d:a3:9e:37:c6:42:4e:d7:ec:93:fa:bf:da:dd:02:f5: cd:49:86:07:54:1c:60:bf:b9:b8:eb:a3:40:16:06:02:ab:94: fe:b6:7c:e3:12:46:08:1d:34:01:2f:6d:be:81:0f:e6:ba:d5: fb:6a:d4:6e:36:1a:67:4e:94:03:1b:99:5b:f6:33:88:64:03: d3:e2:2d:b2:62:8e:37:d8:cb:94:7d:ef:72:af:0d:33:b2:3b: bc:e2:92:ef:44:c5:2a:14:b5:22:7d:1f:5c:f6:9a:aa:f7:d8: 89:a5:44:75:98:f3:2b:5e:ea:ed:de:df:8b:fe:e1:7e:90:73: dd:00:b5:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjYwNTExMDM0MjM1WhcNMjYwNTE4MDM0MjM1WjAYMRYwFAYD VQQDEw02YTAxNTAyYi04ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiYx1Sco3K+l1I9EkYd1xIdoAA7hDpAdZsiKU9tX9bKeOdgVndPNGAo4DQqgi x8YbZNvOXc9HKXtd1a7iPeGxu5TXarVp7ezO/JyjaVQimFFY27qiHHU5BYUYKfgA htvC4Pc5AwvpiAj+hl7nASni+UatvhxHiEKFa/sbgerO2xfEZVQ5O1BoaswOGps6 AymtBwwI+TnRohPVQPH5M+rq4Jo9o+SdA7CnIInxVIT5+Gkrt3ULPXllAH7yrvSh qUvejohtGO+MTTGcHRr0+UtVpyXSgTSUajIFnUWASDGbQ7CvHRH+EwLLy5mEBQft k2d+wnGOOlL3FXPpE3NYDG7y/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXKrOjS c3RXiH+evjJO8aWG1m5+MB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdCeqlNfj7qWRiqEi5McSA5Y67ti6DBROZN4ZJcYl34DMB4/Y3t2kO0eFg0yR dFtc5gTMpBHheYo99o3ZwELQr/X1oEh9x/iXXnOUvBT5HHkos4kYYQ1pUWbCyv6D 0K31nW8bFahxYdnhUc74rTwnFsbzTa8arZVxt6iS+yDpiQEdo543xkJO1+yT+r/a 3QL1zUmGB1QcYL+5uOujQBYGAquU/rZ84xJGCB00AS9tvoEP5rrV+2rUbjYaZ06U AxuZW/YziGQD0+ItsmKON9jLlH3vcq8NM7I7vOKS70TFKhS1In0fXPaaqvfYiaVE dZjzK17q7d7fi/7hfpBz3QC1Lw== -----END CERTIFICATE-----Generated at Wed May 13 05:28:10 2026 by rpki-client