$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft File: xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft (raw, json) Hash identifier: MRAdFg8DkceubDPM+YnC+vftm/KXvxjJg6vuBoroI5A= Subject key identifier: B1:91:1D:38:84:FB:EC:D6:39:1C:AD:93:24:F2:E1:C0:D1:38:52:62 Authority key identifier: C4:D8:BD:A7:B8:BE:43:10:66:6F:36:F4:CC:2A:F4:44:F6:0F:A3:23 Certificate issuer: /CN=A913C68B/serialNumber=C4D8BDA7B8BE4310666F36F4CC2AF444F60FA323 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft Manifest number: 01F2 Signing time: Sun 05 Apr 2026 03:04:29 +0000 Manifest this update: Sun 05 Apr 2026 03:04:29 +0000 Manifest next update: Sun 12 Apr 2026 03:04:29 +0000 Files and hashes: 1: xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl (hash: K7AE0lRNxWtAqatWOlpxP3BdddgGYY5wy914+E/8F80=) 2: BDE8001C1DDC11F19EDFCAE80F3D8C67.roa (hash: 8F8BmpcqqNwCt1bx4x79r5JtxIiJgA0CKQxMbNzF+xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C68B, serialNumber=C4D8BDA7B8BE4310666F36F4CC2AF444F60FA323 Validity Not Before: Apr 5 03:04:29 2026 GMT Not After : Apr 12 03:04:29 2026 GMT Subject: CN=69d1d13d-5580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:b9:50:0b:f0:81:86:a0:0a:e0:e2:b4:05: 87:6b:52:1e:4d:5f:38:97:a1:a9:f0:3c:c2:44:23: 11:ed:3c:5a:2d:6c:44:fa:ff:c0:50:e9:58:eb:3f: 96:56:af:bd:3d:72:b3:87:2b:c5:08:56:fd:87:ac: 5a:fc:b9:48:90:80:ad:6a:c0:20:97:77:18:5d:f8: c5:f6:df:88:31:e4:b7:75:5e:36:b5:8a:ef:f9:1c: 5e:67:48:83:5c:c6:17:e4:f4:38:23:f5:68:8f:6d: d6:76:a3:a1:99:b7:55:3b:32:4b:73:45:03:45:40: df:5b:3a:64:08:cd:bf:8e:69:81:8f:eb:24:88:de: c7:fc:e5:d6:cb:03:3a:a8:ad:f4:2c:25:b4:14:88: 2a:30:28:66:f1:c2:29:45:2f:e9:07:03:e9:fb:03: c5:d7:d8:7c:d9:c3:b5:a1:30:fb:e9:3b:94:e7:c2: cc:46:11:e7:ba:1c:0e:62:72:c7:e3:8d:b7:ac:90: 71:be:63:44:a6:56:34:ec:d9:ea:2e:01:fb:92:9a: 20:fc:09:72:d8:2d:ca:73:02:8e:48:2b:0d:76:d9: 4b:0c:d6:14:84:e7:7f:fc:61:11:26:89:19:89:37: b4:46:f7:c5:71:f4:28:60:bd:fe:10:3c:81:aa:3f: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:91:1D:38:84:FB:EC:D6:39:1C:AD:93:24:F2:E1:C0:D1:38:52:62 X509v3 Authority Key Identifier: keyid:C4:D8:BD:A7:B8:BE:43:10:66:6F:36:F4:CC:2A:F4:44:F6:0F:A3:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5c:c7:8f:6d:73:6a:04:e0:86:18:7d:3a:4f:83:b2:ee:66: f4:17:4f:19:c1:2c:3c:9f:bf:cc:3f:56:ae:1d:8a:47:39:fe: 26:1c:85:6d:63:fc:26:50:c5:07:ab:15:ff:e8:09:0d:12:78: 50:c4:aa:45:d8:ac:2c:63:c4:e7:db:1c:3e:ce:da:39:ba:c1: 40:69:4d:43:83:3a:68:ef:b5:84:90:c0:ff:a3:e3:1f:3b:06: d6:b8:7d:8d:d7:b8:34:f0:20:4a:d0:1e:8f:6e:be:b8:06:30: d2:f3:51:33:93:65:ce:51:b0:75:81:0a:d1:29:ab:17:5a:e4: 33:54:ac:b1:67:57:99:69:51:c6:3d:d8:b8:af:fa:a8:00:c4: 6e:4d:fd:1d:31:c3:9a:aa:44:d6:8e:49:ec:3d:66:86:ab:37: d3:40:0a:37:b3:74:01:f1:32:00:54:43:58:ea:76:95:d5:53: 70:db:9d:40:ef:50:e3:0a:4f:af:d9:e3:51:2b:04:d3:26:d7: df:4b:8c:56:49:6b:54:95:73:dc:96:d8:8c:50:ab:b1:9c:d7: ee:18:80:4b:d2:6c:7f:9a:60:2c:bd:e8:36:c5:2d:a9:3f:60: 59:3e:9b:22:eb:94:a5:da:d8:01:fb:32:90:46:3c:1a:0b:54: c3:13:91:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzY4QjExMC8GA1UEBRMoQzREOEJEQTdCOEJFNDMxMDY2NkYzNkY0Q0MyQUY0NDRG NjBGQTMyMzAeFw0yNjA0MDUwMzA0MjlaFw0yNjA0MTIwMzA0MjlaMBgxFjAUBgNV BAMTDTY5ZDFkMTNkLTU1ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuH7lQC/CBhqAK4OK0BYdrUh5NXziXoanwPMJEIxHtPFotbET6/8BQ6VjrP5ZW r709crOHK8UIVv2HrFr8uUiQgK1qwCCXdxhd+MX234gx5Ld1Xja1iu/5HF5nSINc xhfk9Dgj9WiPbdZ2o6GZt1U7MktzRQNFQN9bOmQIzb+OaYGP6ySI3sf85dbLAzqo rfQsJbQUiCowKGbxwilFL+kHA+n7A8XX2HzZw7WhMPvpO5TnwsxGEee6HA5icsfj jbeskHG+Y0SmVjTs2eouAfuSmiD8CXLYLcpzAo5IKw122UsM1hSE53/8YREmiRmJ N7RG98Vx9Chgvf4QPIGqP7WBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsZEdOIT7 7NY5HK2TJPLhwNE4UmIwHwYDVR0jBBgwFoAUxNi9p7i+QxBmbzb0zCr0RPYPoyMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDNjhCLzRFOUMxRjkwNjJE MTExRUVBQTFDODY0REM0RjlBRTAyL3hOaTlwN2ktUXhCbWJ6YjB6Q3IwUlBZUG95 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveE5pOXA3aS1ReEJtYnpiMHpDcjBSUFlQb3lNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND NjhCLzRFOUMxRjkwNjJEMTExRUVBQTFDODY0REM0RjlBRTAyL3hOaTlwN2ktUXhC bWJ6YjB6Q3IwUlBZUG95TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzXMePbXNqBOCGGH06T4Oy7mb0F08ZwSw8n7/MP1auHYpHOf4mHIVtY/wmUMUH qxX/6AkNEnhQxKpF2KwsY8Tn2xw+zto5usFAaU1Dgzpo77WEkMD/o+MfOwbWuH2N 17g08CBK0B6Pbr64BjDS81Ezk2XOUbB1gQrRKasXWuQzVKyxZ1eZaVHGPdi4r/qo AMRuTf0dMcOaqkTWjknsPWaGqzfTQAo3s3QB8TIAVENY6naV1VNw251A71DjCk+v 2eNRKwTTJtffS4xWSWtUlXPcltiMUKuxnNfuGIBL0mx/mmAsveg2xS2pP2BZPpsi 65Sl2tgB+zKQRjwaC1TDE5Gw -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:15 2026 by rpki-client