$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json) Hash identifier: q30yydE4NezwHN7u9OM395r6pKcVo3Dj15/dEOdvtwI= Subject key identifier: 6F:DB:B3:28:58:1B:E6:81:AD:F1:73:AA:08:12:BB:B5:27:B4:7F:08 Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft Manifest number: 21 Signing time: Mon 11 May 2026 09:03:50 +0000 Manifest this update: Mon 11 May 2026 09:03:50 +0000 Manifest next update: Mon 18 May 2026 09:03:50 +0000 Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: Cx++g8JmgM5dIW6Nqrvm3eFvohcQLGI4ieN8CDwixw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Validity Not Before: May 11 09:03:50 2026 GMT Not After : May 18 09:03:50 2026 GMT Subject: CN=6a019b76-1513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:2b:bd:ca:0f:23:56:5e:61:0c:5f:04:0a: 44:05:0a:7b:a2:83:80:9e:2b:ec:e3:c6:0a:d9:1b: 5b:c4:c7:03:fe:be:c6:29:7d:46:ef:8d:cd:b1:4c: f4:b9:36:f9:8e:1e:da:7e:95:72:45:b5:d3:6b:66: 65:f8:6a:df:fb:f6:2b:5a:3a:e4:b4:02:d3:f2:4a: c1:1e:db:14:52:09:a0:69:de:f8:f4:32:02:79:b9: 24:dd:2b:10:1c:37:11:f2:9c:24:46:74:94:50:a2: 0c:75:50:c9:de:c1:00:dc:2e:42:2e:77:b0:5d:f8: 90:ee:ee:fd:cd:ea:89:0d:c7:b7:f1:47:ab:d0:b7: 69:fb:27:75:61:8e:57:c5:22:17:ec:da:06:51:b3: 90:2b:54:e7:b5:5a:37:ac:1b:86:c7:1b:ac:58:6c: 0f:8a:a9:f0:dc:b6:59:52:09:e9:69:68:22:a0:4d: 08:17:19:ee:71:73:7c:67:a9:bc:33:33:30:2d:20: fc:ab:3d:08:f5:88:59:f3:a7:18:eb:c7:a1:b3:1c: c6:a6:0b:1e:9d:05:2d:d5:e7:df:12:58:f3:2a:d6: 5e:3e:16:ce:b6:b5:be:ee:93:92:9d:d5:f7:46:fc: 77:36:07:05:72:bc:de:25:cb:17:4a:84:a4:75:11: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DB:B3:28:58:1B:E6:81:AD:F1:73:AA:08:12:BB:B5:27:B4:7F:08 X509v3 Authority Key Identifier: keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:03:8f:82:92:d2:b6:1e:e0:15:c4:b1:41:af:cb:3e:3b:1c: 18:46:1d:d8:77:99:5d:f7:ad:d4:de:d9:e4:c8:4a:b9:1a:1e: 44:ed:56:dc:60:60:83:7a:14:a1:88:47:ea:e3:dc:98:c6:27: 44:1a:c4:54:db:41:8c:2f:40:b5:7a:7d:11:de:32:90:88:ae: cd:5d:ce:de:5a:c9:65:ef:40:2c:28:db:2e:81:1c:74:8e:11: 2b:09:a4:68:41:19:d6:65:d9:63:f1:72:7c:f3:66:d2:c2:78: 79:22:2f:61:0b:d1:83:4d:b7:53:d9:61:37:d4:3f:e7:ba:86: 43:55:ed:15:25:ed:7b:c3:46:e1:73:66:94:54:00:11:bd:52: 6a:f9:e6:73:4c:8c:a5:9a:fc:f6:0e:3c:d4:df:80:0a:f6:40: b9:fe:cd:a7:91:b6:b9:05:32:39:cd:18:1b:a3:ba:f7:3d:e9: 77:2c:d1:03:f9:9e:28:83:cb:23:f1:14:9e:aa:86:00:20:63: 12:be:5b:96:cf:7a:37:86:34:83:c8:1a:a3:b3:ea:48:f4:d7: bd:26:db:b8:b6:1a:71:ad:d7:32:0b:21:5b:15:f4:25:99:ab: 46:df:62:2f:a7:c8:c2:cb:1a:47:5f:d5:43:5a:74:2c:e6:d9: e8:42:29:c8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy MURFNDE0QjAeFw0yNjA1MTEwOTAzNTBaFw0yNjA1MTgwOTAzNTBaMBgxFjAUBgNV BAMTDTZhMDE5Yjc2LTE1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYbiu9yg8jVl5hDF8ECkQFCnuig4CeK+zjxgrZG1vExwP+vsYpfUbvjc2xTPS5 NvmOHtp+lXJFtdNrZmX4at/79itaOuS0AtPySsEe2xRSCaBp3vj0MgJ5uSTdKxAc NxHynCRGdJRQogx1UMnewQDcLkIud7Bd+JDu7v3N6okNx7fxR6vQt2n7J3VhjlfF Ihfs2gZRs5ArVOe1WjesG4bHG6xYbA+KqfDctllSCelpaCKgTQgXGe5xc3xnqbwz MzAtIPyrPQj1iFnzpxjrx6GzHMamCx6dBS3V598SWPMq1l4+Fs62tb7uk5Kd1fdG /Hc2BwVyvN4lyxdKhKR1ET+PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUb9uzKFgb 5oGt8XOqCBK7tSe0fwgwHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmA4+CktK2HuAVxLFBr8s+OxwYRh3Yd5ld963U3tnkyEq5Gh5E7VbcYGCDehSh iEfq49yYxidEGsRU20GML0C1en0R3jKQiK7NXc7eWsll70AsKNsugRx0jhErCaRo QRnWZdlj8XJ882bSwnh5Ii9hC9GDTbdT2WE31D/nuoZDVe0VJe17w0bhc2aUVAAR vVJq+eZzTIylmvz2DjzU34AK9kC5/s2nkba5BTI5zRgbo7r3Pel3LNED+Z4og8sj 8RSeqoYAIGMSvluWz3o3hjSDyBqjs+pI9Ne9Jtu4thpxrdcyCyFbFfQlmatG32Iv p8jCyxpHX9VDWnQs5tnoQinI -----END CERTIFICATE-----Generated at Wed May 13 05:39:38 2026 by rpki-client