$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: MnOuS2n3WOgHo5DGgEexCb01wpW1JzWhoTGdPknzAzk= Subject key identifier: EE:9C:75:06:BF:E1:BF:A4:19:CD:D7:47:C9:77:02:65:34:98:CD:85 Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 0665 Signing time: Sat 04 Apr 2026 22:24:06 +0000 Manifest this update: Sat 04 Apr 2026 22:24:05 +0000 Manifest next update: Sat 11 Apr 2026 22:24:05 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: G/JRVc2Y1BLB3RsDcfhZfJ4eqsFG6OhMm2tomVmxmHs=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: 3A2pV/UTZtR9m+Y1mc0+3JTKgqWFh6fCoGK6Q5CmqNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: Apr 4 22:24:05 2026 GMT Not After : Apr 11 22:24:05 2026 GMT Subject: CN=69d18f86-235f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:9e:54:46:6d:a9:03:20:0e:d2:f0:89:57: cc:b7:7b:07:7d:e4:5f:40:7d:ad:a4:47:9b:8c:57: c9:43:74:50:85:f3:ba:73:7b:bc:5b:e3:b3:e6:42: b1:1a:2f:a0:5f:e4:f3:10:06:b7:0c:c7:f4:6e:ae: 49:87:63:ad:a2:5c:10:ff:4d:25:41:f9:84:04:a4: 84:54:8b:54:41:70:59:99:1f:a5:62:45:4c:ff:e8: 4e:ac:ce:d1:ad:2d:2e:5d:c2:32:8d:89:39:ff:82: c0:e9:ff:53:fb:0c:55:58:90:63:af:ea:b6:5b:ff: 22:19:28:50:d3:7a:a5:5a:9d:3e:ee:83:00:60:28: b9:9f:68:0a:8d:e3:31:98:7e:66:9c:eb:71:49:d9: 4e:fe:81:7c:b8:af:7b:85:7a:99:87:80:09:89:f5: 34:4d:4a:b6:08:96:0b:df:f5:a7:04:cb:61:cb:1a: f9:cb:a3:6c:3b:0d:45:13:84:eb:46:24:bc:b8:23: c2:91:d2:ab:4e:0f:a9:f3:8b:87:31:7b:a9:0d:c4: 5e:78:3a:5f:fe:f0:06:1e:cd:a1:44:4a:38:1d:8d: 95:71:f4:ca:06:d6:4b:74:17:9c:bd:6b:7d:1f:45: d8:1f:50:fc:c3:d8:a3:98:ac:38:34:9a:18:74:d8: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9C:75:06:BF:E1:BF:A4:19:CD:D7:47:C9:77:02:65:34:98:CD:85 X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b1:12:e9:78:72:2c:f7:be:78:98:21:03:81:97:81:90:e6: ef:b8:53:b1:95:53:e1:20:70:64:06:0e:a2:4e:f8:6d:91:8f: 34:9b:43:5b:ea:ee:92:33:0f:4e:52:32:fe:05:70:cc:d5:e3: ed:db:5c:cb:c4:af:5e:13:60:36:1f:27:04:cf:1b:87:85:5e: 1c:dc:14:dd:85:88:47:fa:e2:63:92:e9:32:f9:a5:ea:a9:29: cf:28:a1:89:90:e1:22:da:24:fc:cd:9c:c4:f5:28:d5:5d:e5: 2e:54:76:8a:f9:0d:de:74:3c:04:87:6e:e6:6b:89:22:b6:c8: e3:e4:25:b7:d7:0c:6a:b2:b1:a1:25:19:bd:74:a7:b2:a7:9d: 3e:d3:04:b9:39:dc:70:7b:7e:9c:12:a3:b7:3e:5f:2b:7a:6d: 14:76:fc:d0:f7:37:ba:14:b6:35:17:18:3e:0c:d2:1c:e4:0c: da:f0:c6:25:73:3f:68:29:e7:da:31:26:f7:eb:7b:85:c6:f1: 87:c9:cd:4e:d1:a7:b4:f0:b7:37:55:31:31:83:28:9d:e2:5e: 79:e2:83:c1:76:1b:ac:30:62:08:99:e3:e1:3a:ef:2d:47:93: a8:5b:42:d2:fa:40:47:a2:3f:42:14:36:96:04:f7:ca:2e:d0: 0d:74:11:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjYwNDA0MjIyNDA1WhcNMjYwNDExMjIyNDA1WjAYMRYwFAYD VQQDEw02OWQxOGY4Ni0yMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFSeVEZtqQMgDtLwiVfMt3sHfeRfQH2tpEebjFfJQ3RQhfO6c3u8W+Oz5kKx Gi+gX+TzEAa3DMf0bq5Jh2OtolwQ/00lQfmEBKSEVItUQXBZmR+lYkVM/+hOrM7R rS0uXcIyjYk5/4LA6f9T+wxVWJBjr+q2W/8iGShQ03qlWp0+7oMAYCi5n2gKjeMx mH5mnOtxSdlO/oF8uK97hXqZh4AJifU0TUq2CJYL3/WnBMthyxr5y6NsOw1FE4Tr RiS8uCPCkdKrTg+p84uHMXupDcReeDpf/vAGHs2hREo4HY2VcfTKBtZLdBecvWt9 H0XYH1D8w9ijmKw4NJoYdNhl+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6cdQa/ 4b+kGc3XR8l3AmU0mM2FMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdrES6XhyLPe+eJghA4GXgZDm77hTsZVT4SBwZAYOok74bZGPNJtDW+rukjMP TlIy/gVwzNXj7dtcy8SvXhNgNh8nBM8bh4VeHNwU3YWIR/riY5LpMvml6qkpzyih iZDhItok/M2cxPUo1V3lLlR2ivkN3nQ8BIdu5muJIrbI4+Qlt9cMarKxoSUZvXSn sqedPtMEuTnccHt+nBKjtz5fK3ptFHb80Pc3uhS2NRcYPgzSHOQM2vDGJXM/aCnn 2jEm9+t7hcbxh8nNTtGntPC3N1UxMYMoneJeeeKDwXYbrDBiCJnj4TrvLUeTqFtC 0vpAR6I/QhQ2lgT3yi7QDXQRAQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:47:33 2026 by rpki-client