$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: znkYRTnfr/l4a3QzMWMB99q8Xegvac6eXz8q9AsmxZI= Subject key identifier: 6D:52:7F:49:BD:C6:35:7B:35:92:5F:2D:A9:5F:0E:9F:A6:0D:4F:09 Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 07E3 Signing time: Sat 04 Apr 2026 21:07:08 +0000 Manifest this update: Sat 04 Apr 2026 21:07:08 +0000 Manifest next update: Sat 11 Apr 2026 21:07:08 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: 7ck/zU/JanJt1DFzB8TkJR94Mjq3sq9+2vcGFMau4CU=) 2: 7B75895EC99D11F0BD81DF1AC4F9AE02.roa (hash: +rCTG6JZi7JEMmqfGkKCUunmYVSB0vlKZX7+nQnHdDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Apr 4 21:07:08 2026 GMT Not After : Apr 11 21:07:08 2026 GMT Subject: CN=69d17d7c-733c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:61:2d:b6:15:bc:cf:c7:30:f7:c0:20:ff: b7:4f:be:83:69:25:85:3b:3d:04:cc:d7:3e:9d:f6: 29:b1:b4:3e:79:cb:35:ef:fb:84:10:5a:e6:97:13: 26:a9:cf:f2:47:f9:ca:50:ff:ee:b1:fd:d2:12:50: 71:83:25:b1:99:a6:b0:b5:b5:88:f5:ab:64:98:df: af:7f:03:f5:fd:8d:05:8d:c3:46:8a:64:80:c2:50: 6d:3f:6a:4f:20:e2:e5:77:09:cb:d6:4b:75:e4:c4: de:f9:09:b2:c7:3b:fc:ff:2e:a5:cd:9a:bb:ef:fb: b3:25:58:27:14:f2:81:5e:b6:62:39:0f:dc:54:99: 15:90:f9:7b:c9:de:e1:75:e4:c1:fc:51:26:8d:15: b6:ef:92:e2:e1:97:e6:72:22:e0:6d:2c:e1:26:27: 92:a4:ca:c7:80:ac:8b:92:1e:91:c0:8b:9a:26:27: 1f:2a:c6:e4:22:86:8d:c9:31:37:5d:68:20:6e:36: 9c:8a:e0:a1:25:db:a3:df:1c:bd:a8:34:f5:7f:6f: ef:38:45:26:47:db:cb:c8:e1:0b:d9:43:20:9d:e4: cb:6b:eb:2e:12:33:67:78:ce:1c:63:0c:96:74:63: c4:54:0b:e8:9d:6b:cf:5e:f7:d2:c9:3f:ae:af:fc: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:7F:49:BD:C6:35:7B:35:92:5F:2D:A9:5F:0E:9F:A6:0D:4F:09 X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c5:2f:1d:4b:6b:f4:55:93:38:a8:b9:a4:5e:0b:2b:a1:07: e5:ee:fc:a7:c3:c9:27:d0:f1:cf:d5:4a:95:80:b2:28:b5:b3: 18:0a:69:2e:9c:a2:03:70:ce:f3:f5:97:36:7f:5f:bd:14:69: d7:18:52:13:bf:5b:1d:8d:66:03:c5:a5:6a:d4:5d:30:d4:da: 65:4b:e8:2a:ba:e0:dc:72:63:a4:c6:66:8e:78:fa:97:06:57: ce:e5:8a:ed:99:8a:b2:c4:b4:41:e6:1b:42:4a:50:a5:dc:9a: f3:7a:d2:0b:67:11:a2:5f:96:65:be:e0:ce:07:28:11:05:80: 1b:47:df:e5:d6:cf:6b:f1:f4:73:f5:80:cf:93:e2:ab:94:21: 84:56:f7:37:a1:0b:b1:c6:cf:62:19:85:00:4d:8b:c1:7d:f8: 0c:8e:bc:e4:e7:ff:68:be:e1:21:37:aa:b4:2d:3e:68:5f:44: 1d:19:42:82:2d:af:e9:67:c3:75:db:34:d5:fd:8e:03:e9:f4: ff:3e:a6:ef:48:52:1b:fe:71:01:57:6e:d5:1a:05:db:b1:a2: 8d:60:b7:ec:92:e0:a6:f3:dc:12:6c:38:b7:86:9d:ef:ad:21: ca:3d:b7:7e:1d:11:b3:6b:c9:ee:1f:c9:80:ad:d5:3b:f9:06: 4d:b8:c9:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjYwNDA0MjEwNzA4WhcNMjYwNDExMjEwNzA4WjAYMRYwFAYD VQQDEw02OWQxN2Q3Yy03MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWthLbYVvM/HMPfAIP+3T76DaSWFOz0EzNc+nfYpsbQ+ecs17/uEEFrmlxMm qc/yR/nKUP/usf3SElBxgyWxmaawtbWI9atkmN+vfwP1/Y0FjcNGimSAwlBtP2pP IOLldwnL1kt15MTe+Qmyxzv8/y6lzZq77/uzJVgnFPKBXrZiOQ/cVJkVkPl7yd7h deTB/FEmjRW275Li4ZfmciLgbSzhJieSpMrHgKyLkh6RwIuaJicfKsbkIoaNyTE3 XWggbjaciuChJduj3xy9qDT1f2/vOEUmR9vLyOEL2UMgneTLa+suEjNneM4cYwyW dGPEVAvonWvPXvfSyT+ur/zXDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1Sf0m9 xjV7NZJfLalfDp+mDU8JMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtcUvHUtr9FWTOKi5pF4LK6EH5e78p8PJJ9Dxz9VKlYCyKLWzGAppLpyiA3DO 8/WXNn9fvRRp1xhSE79bHY1mA8WlatRdMNTaZUvoKrrg3HJjpMZmjnj6lwZXzuWK 7ZmKssS0QeYbQkpQpdya83rSC2cRol+WZb7gzgcoEQWAG0ff5dbPa/H0c/WAz5Pi q5QhhFb3N6ELscbPYhmFAE2LwX34DI685Of/aL7hITeqtC0+aF9EHRlCgi2v6WfD dds01f2OA+n0/z6m70hSG/5xAVdu1RoF27GijWC37JLgpvPcEmw4t4ad760hyj23 fh0Rs2vJ7h/JgK3VO/kGTbjJLg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:18 2026 by rpki-client