$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: bySrvz5ByRdGc2xbT71ZEQD3x7SZvLbJmxgzm5yoG4w= Subject key identifier: C8:75:29:73:51:DF:7B:69:44:22:21:C1:91:96:DF:C6:AB:74:B3:2D Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 1895 Signing time: Sat 04 Apr 2026 17:24:09 +0000 Manifest this update: Sat 04 Apr 2026 17:24:09 +0000 Manifest next update: Sat 11 Apr 2026 17:24:09 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: Cd1i2eJpLeIsZoegh4N5XdRznL5Iuoz3I1cGU8VVCzU=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: MxyzD6uP6BV8vVRqDcKdMO9gZ3aEGm0a3vLNIBFA74A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: Apr 4 17:24:09 2026 GMT Not After : Apr 11 17:24:09 2026 GMT Subject: CN=69d14939-4477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:09:8b:75:4d:e2:98:c4:3a:50:16:3e:ed: 8c:b3:a9:20:d1:69:86:67:02:7c:0b:c9:6a:47:ca: 53:cb:d6:c8:5f:38:6f:47:61:4e:74:9f:4d:f7:5f: 2e:f0:c2:95:00:2c:81:bf:b7:ce:e4:9b:d8:b3:03: 11:57:56:35:11:6b:97:9a:7e:aa:a1:b3:20:21:16: fd:d4:f6:6c:c2:26:66:66:ab:37:b7:89:17:3a:29: d0:d3:b0:79:08:02:2a:75:9e:0b:a2:3e:1e:fa:1a: fc:34:c4:b6:98:03:c6:c3:b6:2b:3b:39:cd:2f:ea: b8:f6:ee:89:13:c6:f1:35:76:df:3a:f6:e9:1e:ae: 5b:60:a6:71:cb:e5:46:8d:8c:94:a0:6a:f4:81:57: a2:3f:a2:5d:45:bf:90:e0:4e:02:99:5f:b7:d6:7b: b5:b6:19:49:12:69:12:68:7f:ff:31:3d:07:a5:2c: 63:c7:36:a7:e4:23:21:42:2d:a1:45:d9:c1:05:6f: f0:69:5f:80:92:7f:40:da:96:b8:76:c8:c2:ef:d9: 5a:7c:a4:cd:16:e0:8d:66:5b:82:e3:93:ac:19:64: 90:19:86:a2:9d:9d:6b:7f:17:09:7e:83:fd:52:c3: e6:ff:42:3c:a6:af:96:bd:9b:07:4b:5b:2b:0d:63: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:75:29:73:51:DF:7B:69:44:22:21:C1:91:96:DF:C6:AB:74:B3:2D X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:db:b6:35:26:59:24:d2:b2:7b:5e:db:40:99:5a:af:61:54: 7f:17:2a:76:b7:66:ab:6f:59:a1:15:b0:87:cc:5a:2e:71:ef: c9:37:d2:3f:d7:6d:7a:8f:52:cd:11:81:c5:93:ab:fd:82:a1: 58:6d:e4:f5:39:36:61:5a:2c:b7:45:16:2a:00:d0:fd:22:fa: 4f:3c:05:0a:83:d4:49:40:38:29:7f:6c:0c:4f:9d:b4:20:9a: 82:2f:ca:21:a1:49:51:f2:85:37:19:63:f5:b2:b0:74:98:17: 67:91:5c:0d:ba:a2:a7:96:cd:ac:64:28:22:ce:32:be:f0:e6: 8f:b6:ed:be:10:49:ae:ac:4b:8e:33:3f:03:80:1c:e7:e2:22: 37:dc:42:5d:4e:08:68:14:6b:4e:9f:56:17:aa:11:08:d3:df: fe:63:c8:bd:c6:b8:31:c9:3d:6f:23:49:22:45:08:ea:4d:3a: 88:6e:b4:62:5f:27:2a:2a:cf:c3:2b:89:a4:b9:32:eb:0e:ef: c4:4f:e1:20:c9:ae:a4:4e:7b:b2:8b:a1:22:60:ed:c1:00:24: 78:bd:36:db:4a:04:c6:6b:89:81:3c:dd:76:10:62:3d:a9:62: dd:35:84:2a:5c:2f:95:5d:ae:4a:66:1e:0f:3d:99:bc:4e:b2: 1a:c2:5b:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjYwNDA0MTcyNDA5WhcNMjYwNDExMTcyNDA5WjAYMRYwFAYD VQQDEw02OWQxNDkzOS00NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnAJi3VN4pjEOlAWPu2Ms6kg0WmGZwJ8C8lqR8pTy9bIXzhvR2FOdJ9N918u 8MKVACyBv7fO5JvYswMRV1Y1EWuXmn6qobMgIRb91PZswiZmZqs3t4kXOinQ07B5 CAIqdZ4Loj4e+hr8NMS2mAPGw7YrOznNL+q49u6JE8bxNXbfOvbpHq5bYKZxy+VG jYyUoGr0gVeiP6JdRb+Q4E4CmV+31nu1thlJEmkSaH//MT0HpSxjxzan5CMhQi2h RdnBBW/waV+Akn9A2pa4dsjC79lafKTNFuCNZluC45OsGWSQGYainZ1rfxcJfoP9 UsPm/0I8pq+WvZsHS1srDWM76wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMh1KXNR 33tpRCIhwZGW38ardLMtMB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU9u2NSZZJNKye17bQJlar2FUfxcqdrdmq29ZoRWwh8xaLnHvyTfSP9dteo9S zRGBxZOr/YKhWG3k9Tk2YVost0UWKgDQ/SL6TzwFCoPUSUA4KX9sDE+dtCCagi/K IaFJUfKFNxlj9bKwdJgXZ5FcDbqip5bNrGQoIs4yvvDmj7btvhBJrqxLjjM/A4Ac 5+IiN9xCXU4IaBRrTp9WF6oRCNPf/mPIvca4Mck9byNJIkUI6k06iG60Yl8nKirP wyuJpLky6w7vxE/hIMmupE57souhImDtwQAkeL0220oExmuJgTzddhBiPali3TWE KlwvlV2uSmYeDz2ZvE6yGsJbqQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:06 2026 by rpki-client