$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json) Hash identifier: ZrvlEJiSA/Z5BspPKAq+aQjgSllXFtzmXL7A17pxJ14= Subject key identifier: 54:77:EC:C7:E3:80:C4:2C:0F:AA:C4:A6:39:44:3D:D2:AC:27:F1:57 Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft Manifest number: 49 Signing time: Sun 05 Apr 2026 07:39:06 +0000 Manifest this update: Sun 05 Apr 2026 07:39:06 +0000 Manifest next update: Sun 12 Apr 2026 07:39:06 +0000 Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: KQiPyFCnPPRI5SgRfW/Nk7kfSOFIUQy0qcvpwPBJDLs=) 2: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wK4ZUFHP7svDczy0YCkmOX/r2Vqw7guLhrYQg+0Ja2I=) 3: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: vM2NU/PkWzUmY2ujZBzsjC1mzDOV/eoIUaPwXnbjazI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Validity Not Before: Apr 5 07:39:06 2026 GMT Not After : Apr 12 07:39:06 2026 GMT Subject: CN=69d2119a-f1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:79:e2:91:1e:63:9e:b5:c9:4a:e2:b3:fd: 6c:9a:a7:39:4d:7d:c9:3d:73:1c:d7:c3:e7:c6:6d: f9:a6:33:bc:99:86:63:fe:40:df:d3:8f:d3:58:d7: 84:c6:37:a8:7a:52:e0:2c:ff:ef:6a:1c:7c:16:28: 40:b1:46:9f:8b:aa:01:d7:25:7d:99:f8:53:2f:93: 2d:d8:6e:a3:5b:af:03:b5:69:bf:92:a1:21:ca:ad: f2:93:98:69:bd:71:c9:1c:b4:f9:80:7d:26:37:d1: d1:66:1a:52:df:fc:59:5f:ca:4d:1b:96:b6:e2:03: 89:51:82:f8:d1:da:2d:e0:9e:8c:ba:09:07:b5:37: 70:9e:31:6e:ee:6e:a7:16:f5:5b:c6:1b:b1:32:65: 70:34:87:d2:e1:56:31:c6:44:27:4d:74:18:c9:d9: 97:a7:75:e5:cf:6d:76:4f:a7:5e:41:13:41:c9:49: 19:40:fd:65:6e:74:95:87:62:82:d7:6a:ea:d0:76: e4:ab:5e:68:cb:09:55:06:05:31:3b:04:20:17:1f: f6:af:e5:67:7c:1e:a7:7d:a1:19:28:da:67:38:57: b6:92:67:c7:79:d6:53:29:b7:06:c5:aa:39:54:eb: 83:25:30:37:90:e3:f9:1a:d0:64:8b:2a:a0:af:cb: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:77:EC:C7:E3:80:C4:2C:0F:AA:C4:A6:39:44:3D:D2:AC:27:F1:57 X509v3 Authority Key Identifier: keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b9:f4:30:a1:2a:77:ea:fa:7b:98:59:ef:2e:33:e2:fa:84: 62:07:57:12:13:d8:a3:6c:93:02:67:bd:7d:b2:4f:cf:29:9e: 29:5f:c8:85:73:a4:d3:f2:7c:77:0d:60:66:d6:7a:59:0a:c3: d9:f1:51:3e:6b:a5:8e:e2:12:3a:c7:e8:2e:17:b5:90:6b:ca: 56:ac:52:15:99:b8:9b:90:76:03:f7:5e:f4:14:be:2a:a8:6f: 3a:52:49:23:ce:29:c1:52:0c:0a:b7:89:85:be:e8:0a:c3:03: c4:3a:00:42:ff:73:1a:0d:01:90:ce:54:ca:1d:27:95:36:41: 17:5a:c9:01:1d:4e:15:6d:76:b8:a2:fa:be:e2:33:4a:c8:d5: 0a:b4:92:14:3e:59:bd:46:49:c5:b9:e9:4d:2b:a8:d3:fe:96: d0:3c:0b:e4:10:e2:cb:83:c1:e6:28:02:40:42:13:9e:b4:68: d3:8c:99:32:06:b3:00:77:aa:fb:ed:f5:a6:bc:a3:01:3c:ae: a6:50:00:c3:53:38:96:20:1d:8d:90:46:24:6c:b7:23:b7:4b: a0:8d:72:a4:b5:0d:ba:32:e4:39:cd:00:32:10:dc:c5:a0:10: 87:de:3c:eb:db:26:26:48:ff:27:e6:83:fe:df:39:e7:cb:98: f8:a2:23:32 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0ZDNTExMC8GA1UEBRMoNUNDQTk4Rjg3OEM5MjQwMkUyRjEwNEUyQjhCREFCODE5 MEIxRkFBMjAeFw0yNjA0MDUwNzM5MDZaFw0yNjA0MTIwNzM5MDZaMBgxFjAUBgNV BAMTDTY5ZDIxMTlhLWYxZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ8nnikR5jnrXJSuKz/WyapzlNfck9cxzXw+fGbfmmM7yZhmP+QN/Tj9NY14TG N6h6UuAs/+9qHHwWKECxRp+LqgHXJX2Z+FMvky3YbqNbrwO1ab+SoSHKrfKTmGm9 cckctPmAfSY30dFmGlLf/Flfyk0blrbiA4lRgvjR2i3gnoy6CQe1N3CeMW7ubqcW 9VvGG7EyZXA0h9LhVjHGRCdNdBjJ2ZendeXPbXZPp15BE0HJSRlA/WVudJWHYoLX aurQduSrXmjLCVUGBTE7BCAXH/av5Wd8Hqd9oRko2mc4V7aSZ8d51lMptwbFqjlU 64MlMDeQ4/ka0GSLKqCvyxUHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVHfsx+OA xCwPqsSmOUQ90qwn8VcwHwYDVR0jBBgwFoAUXMqY+HjJJALi8QTiuL2rgZCx+qIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDRkM1Lzk5OUYwMjQ4QzVB QjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1x SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWE1xWS1IakpKQUxpOFFUaXVMMnJnWkN4LXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD RkM1Lzk5OUYwMjQ4QzVBQjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFM aThRVGl1TDJyZ1pDeC1xSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGufQwoSp36vp7mFnvLjPi+oRiB1cSE9ijbJMCZ719sk/PKZ4pX8iFc6TT8nx3 DWBm1npZCsPZ8VE+a6WO4hI6x+guF7WQa8pWrFIVmbibkHYD9170FL4qqG86Ukkj zinBUgwKt4mFvugKwwPEOgBC/3MaDQGQzlTKHSeVNkEXWskBHU4VbXa4ovq+4jNK yNUKtJIUPlm9RknFuelNK6jT/pbQPAvkEOLLg8HmKAJAQhOetGjTjJkyBrMAd6r7 7fWmvKMBPK6mUADDUziWIB2NkEYkbLcjt0ugjXKktQ26MuQ5zQAyENzFoBCH3jzr 2yYmSP8n5oP+3znny5j4oiMy -----END CERTIFICATE-----Generated at Sun Apr 5 21:10:25 2026 by rpki-client