$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: ITIF2kV8v562QzhoiAWvmaNLXFo/86M44cLMGxisxoY= Subject key identifier: 77:F1:60:CC:96:D0:D9:34:6B:D8:68:3E:3C:BA:DB:F3:D0:2F:38:FB Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 0865 Signing time: Sat 04 Apr 2026 20:32:18 +0000 Manifest this update: Sat 04 Apr 2026 20:32:18 +0000 Manifest next update: Sat 11 Apr 2026 20:32:18 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: nmmr7G+fP/TPxAEUB4Q3Qo6ZDQk0v082NE3FZ9WT94A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Apr 4 20:32:18 2026 GMT Not After : Apr 11 20:32:18 2026 GMT Subject: CN=69d17552-6cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2d:a2:09:09:47:b4:70:41:c4:17:47:a7:bc: 38:db:da:5a:bf:7d:67:09:ee:f7:2d:ff:a2:43:44: ff:df:5a:60:ea:52:7e:34:9d:55:fa:2f:4d:ab:59: 6e:f2:b5:3a:14:76:ae:a8:a2:e1:da:2a:84:d8:38: fb:2f:ca:89:dc:c2:31:ef:25:b7:a0:3d:8b:59:23: 13:76:92:b4:38:0d:23:67:c8:ee:08:9a:da:57:b8: dc:94:c3:b1:b3:2c:bc:d9:6a:d2:0d:40:48:f7:d9: 68:6a:68:fa:84:0b:ac:55:76:3c:9a:e9:9c:d0:87: 70:5e:ed:a7:e2:32:8b:65:9e:d6:e4:c1:61:24:5f: e9:a6:62:03:76:ff:7e:87:b6:f8:a0:23:d1:4b:e2: d4:58:bb:10:4e:57:8b:cd:2e:dc:07:0f:0d:7b:2d: b1:7a:e3:92:08:11:47:d7:fe:76:58:2a:3e:57:99: 4c:4d:1e:ac:44:92:6a:a3:46:bf:a5:bf:25:eb:9a: fc:40:1f:18:66:af:65:60:e2:97:68:3c:29:95:60: 59:b2:7e:7b:e7:d2:51:3d:ef:b2:5e:03:58:60:82: 00:22:eb:dc:f7:86:ba:1d:11:6d:ef:e8:82:21:48: c5:37:75:38:4c:ad:89:16:aa:28:32:c7:ce:7b:ff: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F1:60:CC:96:D0:D9:34:6B:D8:68:3E:3C:BA:DB:F3:D0:2F:38:FB X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f5:ba:e4:85:6a:c0:c0:8d:5f:be:cf:7c:05:ba:7c:03:ae: 2b:d9:ea:ab:cc:c9:53:df:23:a2:92:24:9e:6f:78:c4:a9:02: 9b:e5:e4:89:92:65:0a:b6:41:61:c8:2f:8a:d5:08:e6:78:20: 8c:8b:c5:25:ba:e9:c7:cb:51:58:ef:bd:42:cd:d4:5f:fe:d0: 71:01:8b:bd:b6:96:d6:7d:97:3b:38:bd:e8:b2:a2:aa:63:67: 58:ab:7b:e9:d6:ff:80:8e:4e:1d:27:be:ad:95:a6:27:64:29: da:da:e4:f2:a3:4d:07:8b:c5:44:84:d5:01:65:13:21:75:15: 97:dd:ea:02:06:e8:97:2e:67:36:ea:a1:50:80:10:6c:88:dc: 27:68:7c:99:01:83:8d:35:e1:74:0e:fe:73:fe:41:d4:0b:91: 15:97:9f:17:15:97:7c:39:86:63:ad:b3:4f:d0:12:57:65:62: 88:62:52:6c:c1:77:28:ff:65:0f:21:af:30:f7:a7:5b:3e:08: c8:01:b6:b0:3f:31:a8:bd:87:e0:af:c5:ac:02:ff:15:d9:9e: 9c:93:73:4d:17:79:0c:a1:14:58:41:8a:37:5c:e9:c1:d6:b3: 11:61:fd:8f:e7:45:98:5c:58:0b:68:f9:22:97:ff:f0:aa:86: 9c:ba:7e:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjYwNDA0MjAzMjE4WhcNMjYwNDExMjAzMjE4WjAYMRYwFAYD VQQDEw02OWQxNzU1Mi02Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkC2iCQlHtHBBxBdHp7w429pav31nCe73Lf+iQ0T/31pg6lJ+NJ1V+i9Nq1lu 8rU6FHauqKLh2iqE2Dj7L8qJ3MIx7yW3oD2LWSMTdpK0OA0jZ8juCJraV7jclMOx syy82WrSDUBI99loamj6hAusVXY8mumc0IdwXu2n4jKLZZ7W5MFhJF/ppmIDdv9+ h7b4oCPRS+LUWLsQTleLzS7cBw8Ney2xeuOSCBFH1/52WCo+V5lMTR6sRJJqo0a/ pb8l65r8QB8YZq9lYOKXaDwplWBZsn5759JRPe+yXgNYYIIAIuvc94a6HRFt7+iC IUjFN3U4TK2JFqooMsfOe//rCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfxYMyW 0Nk0a9hoPjy62/PQLzj7MB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnPW65IVqwMCNX77PfAW6fAOuK9nqq8zJU98jopIknm94xKkCm+XkiZJlCrZB YcgvitUI5nggjIvFJbrpx8tRWO+9Qs3UX/7QcQGLvbaW1n2XOzi96LKiqmNnWKt7 6db/gI5OHSe+rZWmJ2Qp2trk8qNNB4vFRITVAWUTIXUVl93qAgboly5nNuqhUIAQ bIjcJ2h8mQGDjTXhdA7+c/5B1AuRFZefFxWXfDmGY62zT9ASV2ViiGJSbMF3KP9l DyGvMPenWz4IyAG2sD8xqL2H4K/FrAL/FdmenJNzTRd5DKEUWEGKN1zpwdazEWH9 j+dFmFxYC2j5Ipf/8KqGnLp+YQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:06 2026 by rpki-client