$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json) Hash identifier: yq+6HLgSqsdWONq3LhnA8am5b4Pe7TAbvoarMaLlL3c= Subject key identifier: 5A:DB:6F:D5:C1:CF:29:77:2B:86:56:3B:28:86:44:A8:6B:0D:D2:78 Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F Certificate issuer: /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft Manifest number: 38 Signing time: Mon 11 May 2026 08:45:13 +0000 Manifest this update: Mon 11 May 2026 08:45:13 +0000 Manifest next update: Mon 18 May 2026 08:45:13 +0000 Files and hashes: 1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: vyLy/zeGBJMskKKtG9VbBl6dTbUQzOmW8MIHlcnbcJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F Validity Not Before: May 11 08:45:13 2026 GMT Not After : May 18 08:45:13 2026 GMT Subject: CN=6a019719-6e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:5f:de:de:57:6f:14:cb:a8:a7:fd:ee:a0: 6f:d5:72:31:d4:34:ef:11:65:80:10:90:d6:2b:98: f5:4f:c1:ad:36:0c:b2:44:41:07:6d:77:cc:dd:dc: c4:5d:8a:9b:13:70:56:0e:a6:7f:5a:7d:91:84:d0: 59:d8:64:52:8b:1c:ab:e0:d1:c4:09:3f:ad:a5:26: 67:2f:a7:38:d8:77:0b:a7:91:35:f5:f9:e6:24:ae: 1c:3c:96:8c:26:45:8e:a6:bd:1c:05:33:e3:e5:bb: 1f:71:be:38:57:54:79:70:af:86:11:30:a7:5a:95: f6:de:71:6a:3c:35:fd:e4:f3:d3:2e:50:92:28:a8: a8:52:55:b1:94:2a:3e:82:8f:2f:dc:71:4a:b1:e8: 53:b9:25:59:a5:6e:3b:0a:2d:47:f1:90:a2:1a:05: 1b:06:24:ac:01:35:86:e3:c8:e6:d1:3d:0f:72:ee: 69:ae:1a:0b:a3:73:ae:72:0e:18:72:57:26:34:b2: a7:f2:fc:e0:04:a1:cc:54:3a:7b:e2:6e:44:e3:80: d3:0d:69:00:eb:9a:d0:42:7c:cf:71:64:de:21:dd: af:9f:98:66:c5:61:df:01:c8:d2:4b:e3:45:ac:77: 90:1d:7d:64:76:e8:01:60:c8:17:61:32:28:b5:bd: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DB:6F:D5:C1:CF:29:77:2B:86:56:3B:28:86:44:A8:6B:0D:D2:78 X509v3 Authority Key Identifier: keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f6:b6:e3:9c:08:79:fd:0f:c4:f9:d6:89:43:eb:5a:08:da: 18:b9:9d:f9:2f:99:b6:b2:6b:e7:d3:fd:3a:c3:c6:e4:c9:13: 34:f3:2d:76:f2:a3:25:f4:ac:b3:89:a1:7e:f2:4d:1d:54:ec: 54:23:ad:46:3f:8d:b2:fa:58:56:c5:ba:72:61:57:15:81:93: 65:27:65:c3:f3:b3:6e:4e:28:82:f3:87:97:31:c5:f3:b8:79: 2a:07:38:91:3f:29:9c:0d:bd:46:89:e6:5f:64:1f:19:ce:a2: c5:b5:2c:e5:9d:d0:d3:a2:65:1d:d7:2f:42:b3:41:43:d9:3d: b3:b6:55:77:bf:73:1b:26:ff:45:e3:89:8d:96:62:76:77:94: d1:fe:4c:12:15:28:ed:4d:5f:c5:7a:67:04:31:01:13:5b:51: 44:4e:3e:66:63:90:12:1e:0d:a0:c3:c9:01:30:15:f6:ac:53: 2c:d2:a7:f4:f6:15:10:ff:dc:34:bf:e6:1b:98:69:b0:60:fa: 4f:0f:21:39:55:1d:0a:2f:5e:89:8d:0e:a7:4f:ba:37:1f:9e: 4b:d2:8f:04:4a:d5:e3:6d:5a:ba:12:d1:c4:8c:7d:9c:a6:c7: 7e:3c:83:bc:6e:ae:87:db:ef:05:f4:28:71:74:05:22:a6:80: 6d:bd:a3:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJDQjExMC8GA1UEBRMoRjIxNzA2MzBBMDE0RjgyMThGRjMwNzU2NDlGNDEyNDIw MDNENDQ2RjAeFw0yNjA1MTEwODQ1MTNaFw0yNjA1MTgwODQ1MTNaMBgxFjAUBgNV BAMTDTZhMDE5NzE5LTZlM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEAV/e3ldvFMuop/3uoG/VcjHUNO8RZYAQkNYrmPVPwa02DLJEQQdtd8zd3MRd ipsTcFYOpn9afZGE0FnYZFKLHKvg0cQJP62lJmcvpzjYdwunkTX1+eYkrhw8lowm RY6mvRwFM+Plux9xvjhXVHlwr4YRMKdalfbecWo8Nf3k89MuUJIoqKhSVbGUKj6C jy/ccUqx6FO5JVmlbjsKLUfxkKIaBRsGJKwBNYbjyObRPQ9y7mmuGgujc65yDhhy VyY0sqfy/OAEocxUOnvibkTjgNMNaQDrmtBCfM9xZN4h3a+fmGbFYd8ByNJL40Ws d5AdfWR26AFgyBdhMii1vXBFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWttv1cHP KXcrhlY7KIZEqGsN0ngwHwYDVR0jBBgwFoAU8hcGMKAU+CGP8wdWSfQSQgA9RG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0IyREZGNjU2RkRC QzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNHUDh3ZFdTZlFTUWdBOVJH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGhjR01LQVUtQ0dQOHdkV1NmUVNRZ0E5Ukc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNH UDh3ZFdTZlFTUWdBOVJHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAx9rbjnAh5/Q/E+daJQ+taCNoYuZ35L5m2smvn0/06w8bkyRM08y128qMl9Kyz iaF+8k0dVOxUI61GP42y+lhWxbpyYVcVgZNlJ2XD87NuTiiC84eXMcXzuHkqBziR PymcDb1GieZfZB8ZzqLFtSzlndDTomUd1y9Cs0FD2T2ztlV3v3MbJv9F44mNlmJ2 d5TR/kwSFSjtTV/FemcEMQETW1FETj5mY5ASHg2gw8kBMBX2rFMs0qf09hUQ/9w0 v+YbmGmwYPpPDyE5VR0KL16JjQ6nT7o3H55L0o8EStXjbVq6EtHEjH2cpsd+PIO8 bq6H2+8F9ChxdAUipoBtvaOw -----END CERTIFICATE-----Generated at Wed May 13 00:16:32 2026 by rpki-client