$ rpki-client -vvf rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft File: XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft (raw, json) Hash identifier: c7T+UJEMUU7SEIKuhr5PApynG0ZQitqL/+BaFqD3+1k= Subject key identifier: 77:6C:09:E0:FE:31:B9:8A:12:4C:54:49:4D:5B:8A:6F:FC:EC:8B:87 Authority key identifier: 5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67 Certificate issuer: /CN=A91230A3/serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft Manifest number: 23 Signing time: Sun 05 Apr 2026 08:13:55 +0000 Manifest this update: Sun 05 Apr 2026 08:13:55 +0000 Manifest next update: Sun 12 Apr 2026 08:13:55 +0000 Files and hashes: 1: XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl (hash: fDVnpOR7kzBbHeY/WiqrTKhGtqlleHBqtBFBTVmO7o0=) 2: 16AC8742071011F19135264E253D8C67.roa (hash: Ho7coqEarWJ9BJhEvGox/ePOuY1nkqkaNGKMo78IrM4=) 3: 175E7E7A071011F19135264E253D8C67.roa (hash: yFSB05iQ3FLuwiQ0oQDl3ISNbrEcFFMS5/g24lUEvSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230A3, serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067 Validity Not Before: Apr 5 08:13:55 2026 GMT Not After : Apr 12 08:13:55 2026 GMT Subject: CN=69d219c3-8766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:7e:47:28:99:d9:6e:db:bb:63:bb:57:58: 93:a5:31:61:dd:f9:99:a6:ba:b0:32:2c:a4:3d:d0: 57:ac:04:50:60:36:35:9e:b4:d0:10:0e:35:27:11: e7:1b:8b:67:d6:a8:61:74:2b:1c:a3:17:54:23:1e: e5:3e:da:72:5f:71:bd:18:50:56:9a:1e:90:27:4c: cb:b0:5e:84:cb:66:00:69:9f:81:bc:fb:04:a4:db: 4b:21:f2:fb:31:3e:5a:40:90:db:8d:f6:dd:09:d8: 53:1f:58:1a:1d:98:83:5c:25:07:54:ac:13:a4:dd: c1:67:2f:62:2c:88:31:ec:56:64:89:a0:8d:fd:37: f3:58:95:67:26:da:b6:49:70:7c:59:60:05:b5:9e: 1c:87:67:ea:27:ac:c0:8b:7f:e1:c3:b2:bb:0a:3e: 68:c3:35:61:7a:96:35:0f:d0:95:91:32:d5:39:13: f4:ae:c5:ca:a9:94:43:17:9a:d0:a6:51:28:02:44: 5d:ab:af:ce:71:9d:be:e1:15:07:c4:48:24:b6:ea: b9:d1:c6:57:1a:2a:3f:3c:4a:3c:98:b1:7d:dd:99: f7:14:ce:2f:e7:df:59:eb:71:00:72:b4:c2:b1:6b: 2d:91:b4:95:4a:3a:1a:32:74:6c:93:b8:7a:bf:bc: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6C:09:E0:FE:31:B9:8A:12:4C:54:49:4D:5B:8A:6F:FC:EC:8B:87 X509v3 Authority Key Identifier: keyid:5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:84:67:db:42:66:a7:a1:6b:f9:81:50:97:6c:49:4d:06:c3: a1:91:54:b2:67:47:db:2d:62:f8:08:82:b4:9a:9c:94:b1:28: 4b:77:f9:95:32:7d:5d:64:63:1a:f4:72:86:ca:d9:f5:6f:67: 66:7b:98:e0:46:aa:5a:50:50:7e:44:62:47:68:45:b9:a5:7f: 4d:84:12:71:5e:54:b6:99:0f:57:f1:21:ec:4e:14:f9:97:a5: 23:71:27:71:77:c3:48:c9:e7:cb:8d:23:3f:1e:6b:70:92:e5: 88:03:30:39:b5:57:74:89:d3:19:44:4b:1c:35:f7:8e:b4:90: 0c:32:8a:bc:1f:19:d4:75:ad:e4:17:b6:e0:bd:a5:a3:9c:c7: eb:bd:d5:4a:9e:42:88:4d:cf:8f:4b:2f:4f:76:c4:11:7f:c1: 61:fa:3b:f5:61:25:c3:93:89:8c:34:77:93:1c:fc:8c:31:29: 70:45:62:cf:32:20:75:dc:4a:3f:cf:6e:ce:02:66:f5:d9:ca: 04:e6:c1:3f:27:f3:76:58:55:1c:53:ac:39:0d:65:5b:9d:12: 02:eb:2f:b9:fb:9a:82:75:46:07:0b:31:a6:7e:af:36:cb:b6: dd:49:b1:21:5d:da:3a:c6:0c:ec:ff:cc:98:0b:5a:80:d6:8e: 9c:04:2c:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzBBMzExMC8GA1UEBRMoNUVGMkJDNzZGQ0MzRkRDOTc5NTc5RUIzNDE5RjgyMTg3 NEU5NjA2NzAeFw0yNjA0MDUwODEzNTVaFw0yNjA0MTIwODEzNTVaMBgxFjAUBgNV BAMTDTY5ZDIxOWMzLTg3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxgH5HKJnZbtu7Y7tXWJOlMWHd+ZmmurAyLKQ90FesBFBgNjWetNAQDjUnEecb i2fWqGF0KxyjF1QjHuU+2nJfcb0YUFaaHpAnTMuwXoTLZgBpn4G8+wSk20sh8vsx PlpAkNuN9t0J2FMfWBodmINcJQdUrBOk3cFnL2IsiDHsVmSJoI39N/NYlWcm2rZJ cHxZYAW1nhyHZ+onrMCLf+HDsrsKPmjDNWF6ljUP0JWRMtU5E/SuxcqplEMXmtCm USgCRF2rr85xnb7hFQfESCS26rnRxlcaKj88SjyYsX3dmfcUzi/n31nrcQBytMKx ay2RtJVKOhoydGyTuHq/vBilAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUd2wJ4P4x uYoSTFRJTVuKb/zsi4cwHwYDVR0jBBgwFoAUXvK8dvzD/cl5V56zQZ+CGHTpYGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMEEzL0ZCOTgwOUE2MDcw MzExRjFBODEwNUY1NTIyM0Q4QzY3L1h2SzhkdnpEX2NsNVY1NnpRWi1DR0hUcFlH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZLOGR2ekRfY2w1VjU2elFaLUNHSFRwWUdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MEEzL0ZCOTgwOUE2MDcwMzExRjFBODEwNUY1NTIyM0Q4QzY3L1h2SzhkdnpEX2Ns NVY1NnpRWi1DR0hUcFlHYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdhGfbQmanoWv5gVCXbElNBsOhkVSyZ0fbLWL4CIK0mpyUsShLd/mVMn1dZGMa 9HKGytn1b2dme5jgRqpaUFB+RGJHaEW5pX9NhBJxXlS2mQ9X8SHsThT5l6UjcSdx d8NIyefLjSM/HmtwkuWIAzA5tVd0idMZREscNfeOtJAMMoq8HxnUda3kF7bgvaWj nMfrvdVKnkKITc+PSy9PdsQRf8Fh+jv1YSXDk4mMNHeTHPyMMSlwRWLPMiB13Eo/ z27OAmb12coE5sE/J/N2WFUcU6w5DWVbnRIC6y+5+5qCdUYHCzGmfq82y7bdSbEh Xdo6xgzs/8yYC1qA1o6cBCz4 -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:47 2026 by rpki-client