$ rpki-client -vvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft File: xh7aKdRphAjI5WdDhpTVNnJaEn0.mft (raw, json) Hash identifier: bK+EbuuhPDKrjSyCQH10bU1hk+iSBABvy/Zh99OjFiA= Subject key identifier: DB:41:DF:DF:CA:6A:E7:75:77:87:FB:36:F7:D6:18:A5:FC:35:5C:14 Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D Certificate issuer: /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft Manifest number: 1F Signing time: Sun 05 Apr 2026 08:14:02 +0000 Manifest this update: Sun 05 Apr 2026 08:14:01 +0000 Manifest next update: Sun 12 Apr 2026 08:14:01 +0000 Files and hashes: 1: xh7aKdRphAjI5WdDhpTVNnJaEn0.crl (hash: wQrc/42+TBngBbDiOeWSeAOnYcOVCYMEGxHELXSFbVg=) 2: 7FA6A66E072511F18DD83FDE2B3D8C67.roa (hash: Yle2np8VHG9XuuKa/Zf8owqSx1f8Kx45AoedIOUz9Gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D Validity Not Before: Apr 5 08:14:01 2026 GMT Not After : Apr 12 08:14:01 2026 GMT Subject: CN=69d219ca-a6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:61:b3:5f:02:ba:8e:4c:70:44:5d:5a:64: 34:dd:c3:92:73:28:83:f4:1d:5a:eb:03:2f:f8:2d: 2b:c5:6f:be:03:05:e7:6b:35:dd:05:7d:57:53:fc: 0d:34:ec:c0:3e:de:a2:f6:10:36:8a:4e:c8:88:80: 32:89:b0:34:db:13:43:03:b0:82:0b:32:d5:e1:df: 76:21:d0:4d:5e:2b:fb:01:f1:4d:ba:cb:72:74:ec: 0e:21:6b:7d:08:47:26:65:2b:37:10:4f:11:1c:8a: fa:56:a4:c8:bd:6a:c3:56:b8:97:99:90:08:a7:dd: 8a:8b:9f:96:f3:ae:e2:f8:65:f8:87:f3:81:2a:cf: 63:6e:46:6a:01:c2:23:db:e6:e7:48:87:7c:8d:fc: b6:66:77:a6:12:43:25:f8:68:a9:b3:55:49:d5:4a: 85:3f:fc:45:1e:2c:3e:35:82:97:e8:b9:57:55:3c: 61:69:d9:7b:de:f8:46:3a:28:f7:52:71:f7:23:75: 01:a7:dc:14:64:d3:23:0f:63:e7:22:96:13:f5:8a: 69:1a:e3:73:35:6a:a7:72:24:40:27:f6:e8:fa:24: bf:ea:66:67:9f:30:91:df:aa:c7:83:c6:f3:2d:37: d2:37:22:d7:43:47:35:5a:d0:6b:45:a8:77:7d:fd: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:41:DF:DF:CA:6A:E7:75:77:87:FB:36:F7:D6:18:A5:FC:35:5C:14 X509v3 Authority Key Identifier: keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3f:57:92:fa:bb:ff:b3:09:16:67:56:9c:69:a9:0d:bf:23: 88:be:58:c0:8b:f8:49:a1:67:4e:d8:96:b4:0b:49:af:61:b3: 4a:e2:91:08:ae:42:3a:13:f6:3c:5f:a8:65:2e:62:87:42:25: 8a:6b:fc:8a:2b:19:24:38:66:6a:12:d6:e6:7d:eb:96:a0:40: 8e:49:fb:95:be:02:5d:2b:13:b9:e6:65:42:85:15:d5:d1:19: 83:2b:e6:8f:0b:0a:b0:dd:8b:06:e2:47:e3:c8:51:74:b2:f9: da:1f:cf:28:7f:d4:ca:3e:b7:1d:05:08:cc:3e:4e:56:9e:aa: bc:33:3c:e7:8c:5b:39:a5:5b:44:39:79:46:c3:88:11:52:8f: d5:33:59:6b:d9:12:d5:13:b1:25:db:e6:09:3e:9b:00:83:99: e1:5e:4d:90:90:cb:4a:4c:30:99:94:aa:59:34:20:6f:c5:cc: 0d:a4:7d:18:3d:b6:f8:da:21:71:af:15:2e:be:a6:24:f7:e2: d0:bc:ac:9d:9a:e7:58:29:c1:07:16:bc:24:ef:e1:3f:46:de: 9f:62:8a:7c:48:07:6e:18:bb:eb:ef:44:8e:55:40:f5:d3:60: 74:22:ec:c9:52:9e:4f:ac:9f:59:20:d8:62:16:05:d6:ef:f0: 9f:a3:05:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTY2RjExMC8GA1UEBRMoQzYxRURBMjlENDY5ODQwOEM4RTU2NzQzODY5NEQ1MzY3 MjVBMTI3RDAeFw0yNjA0MDUwODE0MDFaFw0yNjA0MTIwODE0MDFaMBgxFjAUBgNV BAMTDTY5ZDIxOWNhLWE2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvUmGzXwK6jkxwRF1aZDTdw5JzKIP0HVrrAy/4LSvFb74DBedrNd0FfVdT/A00 7MA+3qL2EDaKTsiIgDKJsDTbE0MDsIILMtXh33Yh0E1eK/sB8U26y3J07A4ha30I RyZlKzcQTxEcivpWpMi9asNWuJeZkAin3YqLn5bzruL4ZfiH84Eqz2NuRmoBwiPb 5udIh3yN/LZmd6YSQyX4aKmzVUnVSoU//EUeLD41gpfouVdVPGFp2Xve+EY6KPdS cfcjdQGn3BRk0yMPY+cilhP1imka43M1aqdyJEAn9uj6JL/qZmefMJHfqseDxvMt N9I3ItdDRzVa0GtFqHd9/QNtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU20Hf38pq 53V3h/s299YYpfw1XBQwHwYDVR0jBBgwFoAUxh7aKdRphAjI5WdDhpTVNnJaEn0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjZGLzdFMjI5MDE2MDcy MzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFqSTVXZERocFRWTm5KYUVu MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveGg3YUtkUnBoQWpJNVdkRGhwVFZObkphRW4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 NjZGLzdFMjI5MDE2MDcyMzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFq STVXZERocFRWTm5KYUVuMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCOP1eS+rv/swkWZ1acaakNvyOIvljAi/hJoWdO2Ja0C0mvYbNK4pEIrkI6E/Y8 X6hlLmKHQiWKa/yKKxkkOGZqEtbmfeuWoECOSfuVvgJdKxO55mVChRXV0RmDK+aP Cwqw3YsG4kfjyFF0svnaH88of9TKPrcdBQjMPk5Wnqq8MzznjFs5pVtEOXlGw4gR Uo/VM1lr2RLVE7El2+YJPpsAg5nhXk2QkMtKTDCZlKpZNCBvxcwNpH0YPbb42iFx rxUuvqYk9+LQvKydmudYKcEHFrwk7+E/Rt6fYop8SAduGLvr70SOVUD102B0IuzJ Up5PrJ9ZINhiFgXW7/CfowU6 -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:18 2026 by rpki-client