$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft File: xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json) Hash identifier: reAYYex9oDUiB73SPjdnfFvB0065nJPJWlBIZDsqKMI= Subject key identifier: 10:04:C8:6D:D5:8B:AB:48:B0:E9:AC:11:02:9A:61:F1:0E:AD:BA:66 Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft Manifest number: 0654 Signing time: Sat 04 Apr 2026 22:27:04 +0000 Manifest this update: Sat 04 Apr 2026 22:27:03 +0000 Manifest next update: Sat 11 Apr 2026 22:27:03 +0000 Files and hashes: 1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: z8Q1OIFUdiPjFpKAPc1mFOBflhYYBMhGUYD1bA0d8YE=) 2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: tx+Y/n+r9hRdlH/NzXABSvt/2qdhadoLP0Jf7gqVFNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Validity Not Before: Apr 4 22:27:03 2026 GMT Not After : Apr 11 22:27:03 2026 GMT Subject: CN=69d19037-ed34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:df:ee:13:d8:0c:f0:0d:2c:39:5e:25:8f: 14:38:79:9d:d3:0d:03:9d:2b:93:4f:73:65:0e:60: 41:71:42:1d:6e:d1:bc:05:e2:e9:5a:cc:1f:bb:8c: 87:7b:cd:8a:4f:5d:6e:21:ef:59:1c:83:f4:10:fa: 28:b4:8a:0b:42:74:23:da:07:4a:1c:0f:45:05:eb: a4:4f:8f:f0:bd:29:85:40:b8:5d:c0:ef:51:fb:61: 13:65:24:f1:cf:a3:2a:22:22:00:9e:06:1f:e0:6a: d7:9d:60:b8:01:d3:05:6f:4c:42:da:ca:a1:ca:cf: 00:53:1c:9d:0f:df:a1:37:a0:05:cc:01:92:c5:7d: 0a:a0:4e:12:86:ad:f0:03:21:31:04:9a:50:d2:79: f8:19:22:5d:f0:e1:58:a4:be:4c:06:83:a8:45:8a: 64:97:be:d6:81:42:5c:13:7a:f8:db:1d:28:2d:eb: 5a:53:b8:ff:ec:41:94:c8:59:1c:7d:65:c9:77:31: fc:4a:88:67:1e:3c:c6:2a:69:3d:a2:e3:67:9c:8d: 3c:59:5d:3c:cf:12:9f:47:4b:34:6c:70:47:5e:f7: fa:bc:20:31:b6:54:a6:19:5e:2c:f5:ba:01:cc:93: d4:73:46:31:53:b1:da:fd:cf:99:1f:5f:7b:86:79: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:04:C8:6D:D5:8B:AB:48:B0:E9:AC:11:02:9A:61:F1:0E:AD:BA:66 X509v3 Authority Key Identifier: keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a5:44:dc:fb:53:71:e8:eb:21:57:a8:66:b0:67:66:8b:46: 46:03:a4:66:eb:9d:25:e3:7d:af:a9:5e:1e:64:8d:c7:52:db: b8:3b:6b:58:cf:cd:de:fd:e0:c6:2f:70:60:5d:26:f7:c8:04: 20:13:e2:12:da:89:a1:be:05:da:d3:d9:48:e8:32:de:2e:c4: 02:f5:f4:c6:a4:69:2e:00:5d:c0:d5:ae:53:e5:83:f0:d4:87: 68:47:51:f2:85:46:62:8d:b2:77:62:cd:81:fa:dc:da:49:58: f7:19:58:56:b5:81:e9:51:1a:2a:b7:24:77:66:2a:42:bc:b7: ba:80:02:eb:e1:70:2a:a4:55:99:ff:6c:9f:26:e6:09:3e:e4: b6:8d:40:97:dd:54:c4:a0:18:c9:71:db:7f:5e:51:75:2a:65: 75:8f:0d:f7:76:86:26:19:07:01:81:eb:2f:a8:2b:05:41:2b: 52:f5:3e:ad:1c:2f:74:d2:85:7d:12:ae:67:03:0b:8a:81:30: 7c:3c:6f:68:75:58:d1:9a:54:ce:21:d8:5f:8c:0e:86:5d:fe: a9:8a:09:4f:0f:f5:cc:01:9e:19:2f:c5:95:54:f5:d8:cf:d7: ca:a9:33:93:fb:18:8c:28:03:26:b8:ae:be:1d:93:63:14:1c: ea:53:48:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE NjU4NDQ3NkEwHhcNMjYwNDA0MjIyNzAzWhcNMjYwNDExMjIyNzAzWjAYMRYwFAYD VQQDEw02OWQxOTAzNy1lZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAronf7hPYDPANLDleJY8UOHmd0w0DnSuTT3NlDmBBcUIdbtG8BeLpWswfu4yH e82KT11uIe9ZHIP0EPootIoLQnQj2gdKHA9FBeukT4/wvSmFQLhdwO9R+2ETZSTx z6MqIiIAngYf4GrXnWC4AdMFb0xC2sqhys8AUxydD9+hN6AFzAGSxX0KoE4Shq3w AyExBJpQ0nn4GSJd8OFYpL5MBoOoRYpkl77WgUJcE3r42x0oLetaU7j/7EGUyFkc fWXJdzH8SohnHjzGKmk9ouNnnI08WV08zxKfR0s0bHBHXvf6vCAxtlSmGV4s9boB zJPUc0YxU7Ha/c+ZH197hnljLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAEyG3V i6tIsOmsEQKaYfEOrbpmMB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4 MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTkwMy9FRTZCNzQxOEM4MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1 Qlh4Z2ppRnJ0cl9XV0VSMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMqVE3PtTcejrIVeoZrBnZotGRgOkZuudJeN9r6leHmSNx1LbuDtrWM/N3v3g xi9wYF0m98gEIBPiEtqJob4F2tPZSOgy3i7EAvX0xqRpLgBdwNWuU+WD8NSHaEdR 8oVGYo2yd2LNgfrc2klY9xlYVrWB6VEaKrckd2YqQry3uoAC6+FwKqRVmf9snybm CT7kto1Al91UxKAYyXHbf15RdSpldY8N93aGJhkHAYHrL6grBUErUvU+rRwvdNKF fRKuZwMLioEwfDxvaHVY0ZpUziHYX4wOhl3+qYoJTw/1zAGeGS/FlVT12M/Xyqkz k/sYjCgDJriuvh2TYxQc6lNIOw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:18 2026 by rpki-client