$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json) Hash identifier: GVQHwpMF5gvGyN4H+wObes7THh29rjXXBzKcss0Dlho= Subject key identifier: 23:20:71:93:59:2B:29:5F:73:82:E7:1C:93:80:E6:51:F3:91:E6:23 Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Certificate serial: 1ED3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft Manifest number: 1EB2 Signing time: Sat 04 Apr 2026 15:59:18 +0000 Manifest this update: Sat 04 Apr 2026 15:59:17 +0000 Manifest next update: Sat 11 Apr 2026 15:59:17 +0000 Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: fC0sITP2zYDmy1zMUQw9Aw1Rsspdxw/bmwaqxv9P91c=) 2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: HxzSJQ72nx6phfJVkbYAuQ4gq7ZAkIN3NRVxvU93nY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7891 (0x1ed3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Validity Not Before: Apr 4 15:59:17 2026 GMT Not After : Apr 11 15:59:17 2026 GMT Subject: CN=69d13556-305c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d0:1d:6f:d7:6e:29:d0:26:19:f8:49:47:9b: 04:92:8a:e5:33:d2:82:77:73:e1:2c:f0:bb:43:94: ae:8b:44:56:ad:9d:5d:a7:ad:86:ae:2b:ae:19:ae: f1:74:74:6d:f3:61:68:cd:54:84:83:f9:2b:59:98: 34:9d:84:ad:f0:5a:a3:e1:68:6a:ef:38:7f:3f:d9: 24:36:ed:88:33:b5:b2:1d:7b:bc:a0:5b:d3:1f:57: 18:a2:16:2c:10:cf:ae:39:a5:4e:f3:d0:df:3c:d3: f5:b9:97:de:d8:90:da:06:f7:96:4b:c7:1c:67:23: 96:ee:73:ff:a3:f3:24:1b:73:a9:b0:4d:48:97:ef: 35:a6:10:50:60:2b:97:46:79:e5:01:20:3e:6f:7c: 9e:58:8b:ca:8f:37:f9:bd:1b:59:27:30:14:14:64: a0:43:c9:f7:a6:50:77:03:25:e3:ff:f3:55:6c:18: 10:7b:22:4f:35:fe:19:a1:08:aa:4f:1c:c3:fd:b0: 7b:7d:d4:e3:4b:13:56:e8:b8:f3:57:fd:ab:18:7d: 07:d4:20:54:9d:1c:5d:d0:c9:c8:e7:6d:af:14:9b: 37:60:08:f4:d6:d5:60:b1:bd:59:75:d5:6d:c8:b6: 15:63:8f:68:b7:38:1b:67:d1:72:6c:52:c8:7e:98: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:20:71:93:59:2B:29:5F:73:82:E7:1C:93:80:E6:51:F3:91:E6:23 X509v3 Authority Key Identifier: keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f6:be:d0:82:16:94:2c:dd:6a:1e:92:f0:10:e3:5b:6e:45: 7a:e0:b4:c5:54:d3:56:69:82:e1:57:01:ec:76:2e:99:98:8b: f3:b8:94:8f:04:fd:c1:d2:27:81:ab:ec:a7:56:63:25:9b:6f: 1d:43:e2:2f:4e:81:c8:cb:d2:ba:d1:33:21:e3:47:27:bc:96: c3:7d:11:68:1d:2c:94:64:53:73:76:00:d5:9f:43:eb:3a:7e: 07:99:61:93:60:c4:5d:37:b5:94:2c:96:f6:52:4f:6d:34:5d: a9:4f:5a:a0:4d:2d:eb:98:51:36:f0:90:a0:28:a2:43:00:c4: 31:a0:69:2f:c8:16:4d:26:ba:f8:f9:7a:6d:8e:9b:c2:30:10: e9:41:e9:ad:2a:90:d6:47:66:be:35:2e:3e:0a:ef:34:6f:3c: c0:6a:cf:4b:0a:9d:cb:63:c8:ea:7d:97:03:7b:e3:63:28:a5: 1d:78:34:84:c1:fe:dc:8f:ce:78:2b:e0:ad:0d:a2:66:72:97: 12:9e:4e:a2:8a:71:ac:e8:e1:8c:83:7e:0e:1d:c7:e7:15:96: 91:70:a3:6b:80:01:ec:cd:d1:1a:21:34:17:2b:f7:82:1c:54: e0:5f:ac:9c:44:99:9f:9a:3d:9a:9c:ee:a1:e1:3c:d0:aa:5f: bf:bd:51:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKEM0RkI5MTgxM0U3QkEwOTlEOTFFOUM0ODE3MjA5NEI5 OTA1QzBGMTEwHhcNMjYwNDA0MTU1OTE3WhcNMjYwNDExMTU1OTE3WjAYMRYwFAYD VQQDEw02OWQxMzU1Ni0zMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNAdb9duKdAmGfhJR5sEkorlM9KCd3PhLPC7Q5Sui0RWrZ1dp62GriuuGa7x dHRt82FozVSEg/krWZg0nYSt8Fqj4Whq7zh/P9kkNu2IM7WyHXu8oFvTH1cYohYs EM+uOaVO89DfPNP1uZfe2JDaBveWS8ccZyOW7nP/o/MkG3OpsE1Il+81phBQYCuX RnnlASA+b3yeWIvKjzf5vRtZJzAUFGSgQ8n3plB3AyXj//NVbBgQeyJPNf4ZoQiq TxzD/bB7fdTjSxNW6LjzV/2rGH0H1CBUnRxd0MnI522vFJs3YAj01tVgsb1ZddVt yLYVY49otzgbZ9FybFLIfpiKfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMgcZNZ Kylfc4LnHJOA5lHzkeYjMB8GA1UdIwQYMBaAFMT7kYE+e6CZ2R6cSBcglLmQXA8R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zODEyNDRGRThG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29KblpIcHhJRnlDVXVaQmNE eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQdVJnVDU3b0puWkhweElGeUNVdVpCY0R4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjNCQy8zODEyNDRGRThGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29K blpIcHhJRnlDVXVaQmNEeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl/a+0IIWlCzdah6S8BDjW25FeuC0xVTTVmmC4VcB7HYumZiL87iUjwT9wdIn gavsp1ZjJZtvHUPiL06ByMvSutEzIeNHJ7yWw30RaB0slGRTc3YA1Z9D6zp+B5lh k2DEXTe1lCyW9lJPbTRdqU9aoE0t65hRNvCQoCiiQwDEMaBpL8gWTSa6+Pl6bY6b wjAQ6UHprSqQ1kdmvjUuPgrvNG88wGrPSwqdy2PI6n2XA3vjYyilHXg0hMH+3I/O eCvgrQ2iZnKXEp5OoopxrOjhjIN+Dh3H5xWWkXCja4AB7M3RGiE0Fyv3ghxU4F+s nESZn5o9mpzuoeE80Kpfv71RAA== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:42 2026 by rpki-client