$ rpki-client -vvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft File: xF0041r6UWc07r4-Xaxxv0jh1fM.mft (raw, json) Hash identifier: qX2JcnqBOidUdl3omy4/JAVbCUdnhPgnto40okjLF+c= Subject key identifier: 75:78:63:84:7D:06:4F:B1:E7:A1:B4:61:46:06:DE:14:A9:BF:7F:D2 Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3 Certificate issuer: /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft Manifest number: 29 Signing time: Sun 05 Apr 2026 08:07:56 +0000 Manifest this update: Sun 05 Apr 2026 08:07:56 +0000 Manifest next update: Sun 12 Apr 2026 08:07:56 +0000 Files and hashes: 1: xF0041r6UWc07r4-Xaxxv0jh1fM.crl (hash: hbcV8Lrn6vQ1AJ6kfFNdFY+6DxpyazPhXBuKOPXqARA=) 2: F3BA62BEFD9011F0AC0D2AEE5B6F56BC.roa (hash: fngJ91q3M8+ZvnNF07B50n4sFQUoH1YzhPTItYhTEoc=) 3: F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (hash: ZVS5A/ssJ9e5s48dOy5KKX8LrbmgceLLERs2KPItheg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3 Validity Not Before: Apr 5 08:07:56 2026 GMT Not After : Apr 12 08:07:56 2026 GMT Subject: CN=69d2185c-9623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:38:af:a7:96:e8:d4:b0:0b:3f:46:12:77: 85:c1:34:c9:3d:a7:b1:54:e7:d1:6c:b5:7e:a6:57: 11:0c:db:fb:4f:31:8b:e2:3f:bf:93:5f:2a:3b:ff: 59:5e:6c:f9:aa:62:a1:66:eb:27:39:99:b4:b0:f4: 4e:fe:09:28:e1:f8:b2:13:81:ee:a0:4f:8b:f1:92: 7c:4c:23:50:7a:b9:8d:c6:14:54:1c:1e:37:c0:24: e5:a9:1a:64:9c:67:76:f3:0d:f4:4b:19:b7:af:86: a0:af:94:67:6f:dc:78:2a:fa:a0:c2:b8:3c:0a:e2: ae:ae:05:ba:e1:fc:cc:90:e5:81:b1:83:c2:c9:6c: 10:e1:e1:fc:b4:18:77:6f:a3:df:0a:92:c2:4c:40: eb:1d:ef:c0:1a:ca:4a:a0:b1:70:93:7a:cf:e8:0b: d0:70:f9:69:9d:7d:bf:bb:7a:bb:73:d8:66:46:1f: 01:28:e8:c5:35:3e:4d:f9:f7:27:52:32:0c:96:cc: af:c8:24:e9:87:36:59:72:20:92:6f:97:42:22:ea: 91:15:0b:a8:58:0e:86:f8:95:ca:40:5b:63:a7:50: fe:6e:7b:ba:6e:ce:2d:f2:05:cf:a8:34:38:2d:ea: d2:ba:18:1f:3f:f0:c5:8b:e5:5f:aa:74:bc:d9:7e: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:78:63:84:7D:06:4F:B1:E7:A1:B4:61:46:06:DE:14:A9:BF:7F:D2 X509v3 Authority Key Identifier: keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:0e:35:64:5b:1d:c2:c1:ae:2c:f8:e8:79:dc:9d:37:26:ef: c7:c9:2a:8b:e7:53:ba:27:32:e5:f5:a4:9b:d2:50:df:98:d1: eb:06:bf:05:d4:29:9d:26:a5:5c:9a:50:ec:0f:78:93:fd:e8: 3b:cc:17:f1:98:1f:01:2b:ff:17:4b:7b:94:58:d3:1c:60:3d: 74:8f:86:e8:37:6e:db:10:f2:01:4f:bd:62:64:b8:e1:5b:1f: 55:58:00:22:7d:fb:82:d1:9d:16:0c:31:8c:88:92:cd:6b:7c: b3:9a:a7:03:04:ae:9d:47:8b:9a:d8:f0:97:67:81:0c:1a:93: 32:4b:af:fd:0d:fe:b3:cb:07:74:d0:5d:6b:b8:bb:11:70:12: f6:b4:09:e4:84:6e:98:16:85:c3:f0:85:79:82:90:66:f5:81: 49:4c:6c:4e:2a:bd:ad:e8:ef:ff:f3:12:74:13:fb:58:45:2d: 55:3d:53:e9:18:f6:36:5c:02:a5:2e:2d:22:87:47:4a:df:48: 17:c8:6d:7f:18:86:a1:8a:34:58:94:94:ef:89:9c:f5:a8:94: 12:be:e6:ef:05:bb:78:4d:00:04:28:9a:76:2b:08:1e:8a:86: cb:38:cb:a0:d0:23:40:52:a5:a0:66:53:f7:47:9a:f5:e6:83: 98:3c:6a:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTI3MzExMC8GA1UEBRMoQzQ1RDM0RTM1QUZBNTE2NzM0RUVCRTNFNURBQzcxQkY0 OEUxRDVGMzAeFw0yNjA0MDUwODA3NTZaFw0yNjA0MTIwODA3NTZaMBgxFjAUBgNV BAMTDTY5ZDIxODVjLTk2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeUjivp5bo1LALP0YSd4XBNMk9p7FU59FstX6mVxEM2/tPMYviP7+TXyo7/1le bPmqYqFm6yc5mbSw9E7+CSjh+LITge6gT4vxknxMI1B6uY3GFFQcHjfAJOWpGmSc Z3bzDfRLGbevhqCvlGdv3Hgq+qDCuDwK4q6uBbrh/MyQ5YGxg8LJbBDh4fy0GHdv o98KksJMQOsd78AaykqgsXCTes/oC9Bw+Wmdfb+7ertz2GZGHwEo6MU1Pk359ydS MgyWzK/IJOmHNllyIJJvl0Ii6pEVC6hYDob4lcpAW2OnUP5ue7puzi3yBc+oNDgt 6tK6GB8/8MWL5V+qdLzZfmy7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdXhjhH0G T7HnobRhRgbeFKm/f9IwHwYDVR0jBBgwFoAUxF0041r6UWc07r4+Xaxxv0jh1fMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBMjczLzEzRDMyNURDRkQ5 MDExRjA5OUFCQ0IzOTVCNkY1NkJDL3hGMDA0MXI2VVdjMDdyNC1YYXh4djBqaDFm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEYwMDQxcjZVV2MwN3I0LVhheHh2MGpoMWZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB MjczLzEzRDMyNURDRkQ5MDExRjA5OUFCQ0IzOTVCNkY1NkJDL3hGMDA0MXI2VVdj MDdyNC1YYXh4djBqaDFmTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZDjVkWx3Cwa4s+Oh53J03Ju/HySqL51O6JzLl9aSb0lDfmNHrBr8F1CmdJqVc mlDsD3iT/eg7zBfxmB8BK/8XS3uUWNMcYD10j4boN27bEPIBT71iZLjhWx9VWAAi ffuC0Z0WDDGMiJLNa3yzmqcDBK6dR4ua2PCXZ4EMGpMyS6/9Df6zywd00F1ruLsR cBL2tAnkhG6YFoXD8IV5gpBm9YFJTGxOKr2t6O//8xJ0E/tYRS1VPVPpGPY2XAKl Li0ih0dK30gXyG1/GIahijRYlJTviZz1qJQSvubvBbt4TQAEKJp2KwgeiobLOMug 0CNAUqWgZlP3R5r15oOYPGol -----END CERTIFICATE-----Generated at Sun Apr 5 19:48:28 2026 by rpki-client