$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: lMaZh026Nec/KY1VJS5wxRAjYdr5KB/DH5Z9FKhSoN4= Subject key identifier: E4:2C:19:55:6F:64:FC:4C:32:7B:5D:D0:53:F6:D6:F7:2D:88:36:FC Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 0A5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 0A35 Signing time: Sat 04 Apr 2026 19:34:33 +0000 Manifest this update: Sat 04 Apr 2026 19:34:33 +0000 Manifest next update: Sat 11 Apr 2026 19:34:33 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: bWmQ18pbqTtiZ9605r6T9lnR46Pcj9cqYKkGErm4gxY=) 2: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: WPLajparplJU8xXoLqj3sJQqQv2qTK7SmIP3Bri0gcA=) 3: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 72DcOTbzZF7+TCywcpXepZonikbAwf9INnwgkXqBzAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2654 (0xa5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Apr 4 19:34:33 2026 GMT Not After : Apr 11 19:34:33 2026 GMT Subject: CN=69d167c9-9e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:ab:b4:7c:23:e5:5a:7b:a4:9e:3d:48:8f: 1f:73:e3:32:62:c1:5b:4c:a9:72:16:8a:55:f4:c6: f6:45:53:3f:a3:f0:79:02:be:0f:cd:d8:32:74:59: 17:89:bc:fc:8c:c0:45:49:83:dd:48:97:94:50:85: 28:d2:fc:d2:32:98:26:c5:cf:1e:95:1f:2b:cd:99: a3:5d:f2:84:b8:f2:47:5e:84:95:00:49:87:91:24: f5:d8:ec:f8:bd:ab:0c:27:b5:25:41:03:2d:62:35: e6:a9:80:26:89:38:92:49:ca:56:d7:b3:56:29:4a: d9:31:26:b0:38:5e:0c:87:a4:f4:ea:b0:4e:af:2a: 6f:9c:19:de:b1:46:a1:65:76:a1:bb:1f:40:ca:63: 9a:31:dd:9d:01:ea:c9:cd:7c:7e:40:8c:54:d3:90: d8:fb:0c:2c:0c:08:1a:16:92:84:aa:93:e0:da:12: b9:e0:5c:cd:21:b2:f6:f5:c2:97:7b:87:2c:e2:aa: 33:39:1c:04:28:40:ba:65:8c:1b:3a:de:5f:78:3f: 07:f3:3f:c1:4e:97:0b:42:24:fd:48:19:b3:eb:79: 27:31:61:cb:0b:26:d3:96:21:9c:c4:06:68:c0:da: 18:1a:f0:54:56:83:53:38:95:d8:91:c9:40:75:66: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2C:19:55:6F:64:FC:4C:32:7B:5D:D0:53:F6:D6:F7:2D:88:36:FC X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a1:45:a3:2e:58:db:9d:eb:dd:27:c1:af:21:50:7b:bc:53: eb:ac:81:f1:70:70:a8:06:0f:ff:26:0a:2e:ab:1c:76:c9:d1: cc:5e:00:03:e5:24:eb:dc:8a:8c:d5:84:28:eb:07:6e:ff:fc: 40:15:e8:77:68:fc:89:ca:67:90:88:31:77:17:25:43:8c:8b: 0d:ee:e2:da:42:9f:cd:b4:bf:45:bb:da:b4:94:5f:da:ed:a0: 8c:7b:9a:b3:1a:95:df:b9:d5:2d:90:05:78:98:89:50:e5:61: a5:22:f3:12:6a:3c:0a:f0:58:d1:21:92:d7:d7:cd:68:be:17: e6:f2:a3:91:88:17:6b:38:ae:34:0c:12:82:35:be:6b:2e:51: f9:1e:de:f3:bc:ce:28:51:a7:f3:88:12:ef:e6:d2:8f:e3:91: f6:f8:97:aa:e7:75:4b:87:0c:52:a4:10:43:ae:bd:e9:65:a2: 80:2f:8b:c3:0f:04:e5:23:21:b0:25:e6:32:e3:db:6e:05:ca: ac:b7:6c:98:47:ec:17:23:a8:39:06:a8:01:4f:23:ba:24:f4: 70:cb:c3:d9:19:aa:ad:8c:c0:37:d6:1b:c2:8c:63:46:98:03: f5:a4:da:ad:c9:c1:9f:82:16:ea:6f:19:01:d3:4d:35:39:8b: 01:00:63:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjYwNDA0MTkzNDMzWhcNMjYwNDExMTkzNDMzWjAYMRYwFAYD VQQDEw02OWQxNjdjOS05ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubSrtHwj5Vp7pJ49SI8fc+MyYsFbTKlyFopV9Mb2RVM/o/B5Ar4PzdgydFkX ibz8jMBFSYPdSJeUUIUo0vzSMpgmxc8elR8rzZmjXfKEuPJHXoSVAEmHkST12Oz4 vasMJ7UlQQMtYjXmqYAmiTiSScpW17NWKUrZMSawOF4Mh6T06rBOrypvnBnesUah ZXahux9AymOaMd2dAerJzXx+QIxU05DY+wwsDAgaFpKEqpPg2hK54FzNIbL29cKX e4cs4qozORwEKEC6ZYwbOt5feD8H8z/BTpcLQiT9SBmz63knMWHLCybTliGcxAZo wNoYGvBUVoNTOJXYkclAdWbFiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQsGVVv ZPxMMntd0FP21vctiDb8MB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYKFFoy5Y253r3SfBryFQe7xT66yB8XBwqAYP/yYKLqscdsnRzF4AA+Uk69yK jNWEKOsHbv/8QBXod2j8icpnkIgxdxclQ4yLDe7i2kKfzbS/RbvatJRf2u2gjHua sxqV37nVLZAFeJiJUOVhpSLzEmo8CvBY0SGS19fNaL4X5vKjkYgXaziuNAwSgjW+ ay5R+R7e87zOKFGn84gS7+bSj+OR9viXqud1S4cMUqQQQ6696WWigC+Lww8E5SMh sCXmMuPbbgXKrLdsmEfsFyOoOQaoAU8juiT0cMvD2RmqrYzAN9YbwoxjRpgD9aTa rcnBn4IW6m8ZAdNNNTmLAQBjqQ== -----END CERTIFICATE-----Generated at Sun Apr 5 21:10:29 2026 by rpki-client