$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft File: 8WJXDJs0J9iIMy8qJEOCiAfghyM.mft (raw, json) Hash identifier: C5SSmqyjpPFuc15I2O+fplN6iuvkkpymeZo8HPE42q0= Subject key identifier: 7D:0E:2E:9E:74:39:88:BC:3E:40:91:DF:13:25:CF:72:45:63:8A:3D Authority key identifier: F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23 Certificate issuer: /CN=A91EA850/serialNumber=F162570C9B3427D888332F2A2443828807E08723 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft Manifest number: 4A Signing time: Wed 13 May 2026 08:32:48 +0000 Manifest this update: Wed 13 May 2026 08:32:48 +0000 Manifest next update: Wed 20 May 2026 08:32:48 +0000 Files and hashes: 1: 8WJXDJs0J9iIMy8qJEOCiAfghyM.crl (hash: qpmZ50/GrSlxO4bs2orjvZUWIVkAN3j2NwD0CY/YVSc=) 2: 59A00586ED3B11F0828F39A04B6F56BC.roa (hash: EgWrQHGbU31Uz75+qWGvTeIJzWumnz7hpQn1ooNpH0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA850, serialNumber=F162570C9B3427D888332F2A2443828807E08723 Validity Not Before: May 13 08:32:48 2026 GMT Not After : May 20 08:32:48 2026 GMT Subject: CN=6a043730-82ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:b6:96:f2:60:3f:10:67:af:02:da:14:ab: 3e:26:8c:f0:39:4a:45:a8:8b:c6:98:18:e2:b3:cf: 3c:76:02:22:43:6d:d9:8d:c6:49:36:96:78:64:96: a8:b4:cd:30:dc:3c:4b:2a:5b:4a:3b:25:ea:40:a1: 17:d8:d6:f1:30:97:65:64:1d:43:d9:eb:9c:38:31: aa:66:9c:7f:c7:a7:fe:94:72:80:e8:e0:70:a6:9b: 2f:2d:cf:38:5b:c3:bd:86:a7:c1:31:36:26:a1:31: 00:ee:06:4d:ea:c9:b0:29:6e:b8:48:b2:b1:8d:64: 66:74:41:5b:05:ea:da:dd:30:62:11:05:af:24:53: cb:e5:ec:f7:b5:49:c7:26:ef:72:10:47:c0:eb:68: 48:a8:d7:15:a2:7a:26:73:ab:63:89:f9:8c:73:91: be:4b:38:dc:b9:8c:46:32:49:08:e8:44:29:35:b6: c2:a6:17:84:b7:19:e3:5b:e5:f3:49:38:d9:53:04: d5:67:22:1a:2d:4d:be:68:a1:93:5e:47:8b:a3:44: 11:eb:f9:ae:71:be:38:9c:d1:d8:f8:fa:e1:13:bd: fe:b1:b9:f6:ae:7a:8b:38:c4:2a:33:d7:d7:bc:39: f4:90:31:d7:97:6c:60:0e:cf:82:4c:61:fd:7d:1e: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0E:2E:9E:74:39:88:BC:3E:40:91:DF:13:25:CF:72:45:63:8A:3D X509v3 Authority Key Identifier: keyid:F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e6:42:45:f9:73:b4:7d:a4:5c:67:36:22:3c:ab:fd:78:39: da:3e:f6:32:f1:09:ba:7f:95:b9:2f:d2:ad:1b:22:cb:e8:e9: ef:6e:2b:37:6b:84:3a:4e:cd:c1:77:80:a7:ab:d1:97:ee:55: 8b:62:cb:56:1d:6d:b9:5e:a8:4f:99:c5:03:ea:f4:80:17:fc: 8c:e0:a0:3a:31:3a:0d:2c:a1:13:90:4d:35:b8:cb:55:49:49: c9:07:48:ac:cf:b6:d2:4d:d6:c7:5b:12:0a:90:98:0d:ee:86: 45:5a:0f:9e:74:70:5f:fb:fc:1c:23:28:48:65:2a:ef:38:b1: ec:6b:6b:55:18:ca:cf:ff:3f:47:3a:e1:ee:ac:be:32:b6:3a: 83:70:d7:43:6c:99:4f:1c:c1:9f:42:0e:b6:3a:61:0e:0e:ca: ba:14:46:fa:0b:84:5e:e4:c6:84:0b:53:e2:1f:61:df:ab:58: 25:da:17:e9:6b:7a:bb:23:eb:ed:dc:19:d1:9f:89:96:82:d6: d0:c4:82:a9:06:b3:e9:6f:1a:89:5f:de:1a:a1:46:8f:cc:36: 6b:f9:aa:ff:80:a7:54:d8:56:54:73:1d:33:26:b4:3e:15:33: fb:c3:4d:be:c8:49:cd:72:43:e5:06:b7:d8:70:c3:fb:50:19: aa:46:28:a6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTg1MDExMC8GA1UEBRMoRjE2MjU3MEM5QjM0MjdEODg4MzMyRjJBMjQ0MzgyODgw N0UwODcyMzAeFw0yNjA1MTMwODMyNDhaFw0yNjA1MjAwODMyNDhaMBgxFjAUBgNV BAMTDTZhMDQzNzMwLTgyZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDceraW8mA/EGevAtoUqz4mjPA5SkWoi8aYGOKzzzx2AiJDbdmNxkk2lnhklqi0 zTDcPEsqW0o7JepAoRfY1vEwl2VkHUPZ65w4MapmnH/Hp/6UcoDo4HCmmy8tzzhb w72Gp8ExNiahMQDuBk3qybApbrhIsrGNZGZ0QVsF6trdMGIRBa8kU8vl7Pe1Sccm 73IQR8DraEio1xWieiZzq2OJ+Yxzkb5LONy5jEYySQjoRCk1tsKmF4S3GeNb5fNJ ONlTBNVnIhotTb5ooZNeR4ujRBHr+a5xvjic0dj4+uETvf6xufaueos4xCoz19e8 OfSQMdeXbGAOz4JMYf19Hmh9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfQ4unnQ5 iLw+QJHfEyXPckVjij0wHwYDVR0jBBgwFoAU8WJXDJs0J9iIMy8qJEOCiAfghyMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODUwLzMwMjgzM0MwRUM3 QTExRjA5QkE0RTI1RDU0NkY1NkJDLzhXSlhESnMwSjlpSU15OHFKRU9DaUFmZ2h5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFdKWERKczBKOWlJTXk4cUpFT0NpQWZnaHlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB ODUwLzMwMjgzM0MwRUM3QTExRjA5QkE0RTI1RDU0NkY1NkJDLzhXSlhESnMwSjlp SU15OHFKRU9DaUFmZ2h5TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBK5kJF+XO0faRcZzYiPKv9eDnaPvYy8Qm6f5W5L9KtGyLL6Onvbis3a4Q6Ts3B d4Cnq9GX7lWLYstWHW25XqhPmcUD6vSAF/yM4KA6MToNLKETkE01uMtVSUnJB0is z7bSTdbHWxIKkJgN7oZFWg+edHBf+/wcIyhIZSrvOLHsa2tVGMrP/z9HOuHurL4y tjqDcNdDbJlPHMGfQg62OmEODsq6FEb6C4Re5MaEC1PiH2Hfq1gl2hfpa3q7I+vt 3BnRn4mWgtbQxIKpBrPpbxqJX94aoUaPzDZr+ar/gKdU2FZUcx0zJrQ+FTP7w02+ yEnNckPlBrfYcMP7UBmqRiim -----END CERTIFICATE-----Generated at Wed May 13 13:04:50 2026 by rpki-client