$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: lENY7s8/6jmdUbAY+JKOuFa82Grq6F60jkx+8Vg+/AE= Subject key identifier: 75:83:C7:CD:A2:C0:D8:E0:F7:AA:80:16:8B:61:FF:EF:E5:94:8A:7A Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 057B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 056B Signing time: Sat 04 Apr 2026 23:07:24 +0000 Manifest this update: Sat 04 Apr 2026 23:07:23 +0000 Manifest next update: Sat 11 Apr 2026 23:07:23 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: IifvYND8H+mzdfXHq97owiYv/PjABv3NtZ6G66SJnhA=) 2: 7A88B1FCB44311F09019B577C4F9AE02.roa (hash: GVEQA+3eqIkzA9/ZGe521NeAxe7jSsSWSid0hUiNJOE=) 3: 308E4138CF7911F081AD0016C4F9AE02.roa (hash: Qe0QBeQXxDexEGZWCVceFBZ0omw7zxCKTPm8MWRJOG0=) 4: 3108D830CF7911F0861E0016C4F9AE02.roa (hash: 0gEebnFcx96IWAD0Qo+4/3MnsrXoHBiI9ORKhrPhb3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: Apr 4 23:07:23 2026 GMT Not After : Apr 11 23:07:23 2026 GMT Subject: CN=69d199ac-295e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:15:c7:d3:af:36:33:58:16:36:d9:97:f8:5d: 05:e9:d8:f9:cf:15:22:fc:f8:d5:a2:bd:cd:57:92: 41:6d:94:3c:10:c5:9b:7d:ef:62:69:40:9e:79:21: 6b:4d:50:2d:d2:45:b3:b8:d3:e6:6f:c2:c1:e6:0e: 72:f1:d5:f5:9d:9f:b1:25:87:7e:8d:08:64:1c:65: 65:6c:16:3e:9a:dc:50:e2:84:d5:df:4e:b3:06:52: be:cb:f3:a9:35:3d:94:ec:c7:77:81:8e:1c:fd:03: 9e:03:75:6d:e7:f6:82:31:3d:e5:a6:4e:7a:1d:23: d9:05:dc:b9:3e:3d:b1:39:fa:2b:43:c7:86:c3:68: 48:de:08:98:82:fb:90:0a:26:5e:6d:80:b2:a0:f1: 65:78:f2:f6:7e:df:5c:9f:87:8d:de:4f:b7:c7:a9: b8:32:44:b8:1c:33:5c:32:b4:ac:e6:22:78:6e:4c: f9:7f:b5:ab:5e:49:0f:b8:59:9c:70:45:4b:99:92: 99:38:a6:8b:64:8e:16:50:cd:22:a1:5c:4d:0c:e3: 90:4c:8f:10:f7:75:e5:0e:b7:6e:fc:66:f8:0d:a2: 72:43:2c:f5:00:6b:7b:2f:6a:10:b2:fa:f7:9c:f0: b0:33:08:91:b5:8d:52:8a:74:f7:62:70:b7:d8:85: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:83:C7:CD:A2:C0:D8:E0:F7:AA:80:16:8B:61:FF:EF:E5:94:8A:7A X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d8:47:ee:6f:a4:17:32:a5:c9:9d:df:f0:54:fe:8d:48:57: fe:7b:05:ab:8e:70:b6:55:0b:3f:70:52:4a:ef:8c:ee:13:00: 31:6c:2f:ac:4e:e9:39:df:ab:f6:8f:39:af:a3:5f:45:6c:10: 1a:29:35:33:6a:b2:72:a1:7a:f7:7f:01:3f:7b:87:c5:8f:7d: 66:90:e7:4e:27:63:de:ed:f9:3e:68:c1:f5:5e:06:de:5e:b2: a9:ce:2a:2e:2b:a1:d7:8a:5d:59:90:e5:fd:41:8a:4e:4f:8c: d4:38:18:78:71:70:bb:6f:6f:89:1c:57:b7:c3:cc:6a:ec:4e: dd:09:d8:39:21:31:76:ec:eb:3d:a0:ad:d6:bf:b3:32:1a:0f: 6f:b2:7f:6a:51:bb:ba:8c:4c:6b:57:dc:6c:c0:dc:0a:af:15: a0:9f:a1:0f:e9:49:b9:f3:36:f2:57:1c:9c:a4:ad:bb:40:ae: 66:65:e8:92:86:e8:9f:d7:14:bb:4c:76:ab:d9:1b:f5:1e:8b: 83:c6:b9:2c:41:c6:86:ce:43:b8:c4:58:c5:f9:33:ae:bb:2a: 80:94:52:0a:85:b1:b8:87:de:bd:a1:3a:5a:ca:fb:f1:af:f3: bf:34:ef:41:1b:34:66:5d:41:95:81:15:7f:51:08:4b:75:b9: 33:19:1a:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjYwNDA0MjMwNzIzWhcNMjYwNDExMjMwNzIzWjAYMRYwFAYD VQQDEw02OWQxOTlhYy0yOTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7RXH0682M1gWNtmX+F0F6dj5zxUi/PjVor3NV5JBbZQ8EMWbfe9iaUCeeSFr TVAt0kWzuNPmb8LB5g5y8dX1nZ+xJYd+jQhkHGVlbBY+mtxQ4oTV306zBlK+y/Op NT2U7Md3gY4c/QOeA3Vt5/aCMT3lpk56HSPZBdy5Pj2xOforQ8eGw2hI3giYgvuQ CiZebYCyoPFlePL2ft9cn4eN3k+3x6m4MkS4HDNcMrSs5iJ4bkz5f7WrXkkPuFmc cEVLmZKZOKaLZI4WUM0ioVxNDOOQTI8Q93XlDrdu/Gb4DaJyQyz1AGt7L2oQsvr3 nPCwMwiRtY1SinT3YnC32IXGFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWDx82i wNjg96qAFoth/+/llIp6MB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb9hH7m+kFzKlyZ3f8FT+jUhX/nsFq45wtlULP3BSSu+M7hMAMWwvrE7pOd+r 9o85r6NfRWwQGik1M2qycqF6938BP3uHxY99ZpDnTidj3u35PmjB9V4G3l6yqc4q Liuh14pdWZDl/UGKTk+M1DgYeHFwu29viRxXt8PMauxO3QnYOSExduzrPaCt1r+z MhoPb7J/alG7uoxMa1fcbMDcCq8VoJ+hD+lJufM28lccnKStu0CuZmXokobon9cU u0x2q9kb9R6Lg8a5LEHGhs5DuMRYxfkzrrsqgJRSCoWxuIfevaE6Wsr78a/zvzTv QRs0Zl1BlYEVf1EIS3W5MxkaPQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:47:30 2026 by rpki-client