$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json) Hash identifier: 1XJWJi76WrYgR2t0q6cvhYfjYuxSbfnZXWX1SNdgB/4= Subject key identifier: EC:19:AE:68:C4:08:4D:9D:EA:88:17:3C:D4:6B:3E:7B:E5:74:11:AC Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft Manifest number: 0185 Signing time: Sun 05 Apr 2026 03:58:32 +0000 Manifest this update: Sun 05 Apr 2026 03:58:32 +0000 Manifest next update: Sun 12 Apr 2026 03:58:32 +0000 Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: hxyGSllyPI/BnX4XfxGALEyoTVuMqKDMTNgQiDAvY4k=) 2: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: EZoQFirW5esN1VtBDXZEiHNnC8g7jkK9EPytiN1M6xw=) 3: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: ddXLbsnNUJaK9PsrG7ysG03ljzK1G3ktx48YRWrpG8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: Apr 5 03:58:32 2026 GMT Not After : Apr 12 03:58:32 2026 GMT Subject: CN=69d1dde8-8054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:31:41:a6:c6:d0:25:af:98:3c:a4:2f:1c: dc:14:2f:29:f5:60:20:56:a3:f9:cc:b0:05:dd:15: 06:4e:86:83:dd:d0:d5:30:88:0e:71:5a:20:16:59: 74:33:d1:a6:00:5b:8b:97:49:2e:a2:ee:9e:fa:c8: 09:2c:14:f8:16:9f:36:51:4e:69:a9:be:ae:60:26: 99:8d:ea:e1:7b:d7:34:25:7e:6e:66:54:8f:1b:aa: ac:f4:f4:8a:ae:04:e8:da:fa:f7:08:a9:55:57:05: fc:16:20:ff:78:35:46:32:5b:43:1e:25:55:a9:e1: fd:c9:98:31:45:4b:13:39:b5:1a:d1:1a:4e:6a:ba: 64:62:94:f7:dd:92:89:8d:c8:e9:26:c6:ad:5c:ee: 6f:46:18:dc:32:ff:d0:5f:03:97:68:0f:c4:9b:21: ea:21:b2:96:0b:44:cf:4e:77:d9:55:a6:59:33:21: 5b:1f:0e:82:7a:5e:ba:09:87:b9:75:6d:6d:2d:2b: c3:44:4c:6d:e4:df:17:53:1f:36:5a:10:7c:74:6e: 18:83:e5:b6:f2:3b:6c:0c:39:17:9d:ee:5b:e9:1f: 01:7b:70:f3:af:4a:ca:7f:04:d6:b2:99:1c:ab:b1: 79:39:3c:0f:17:17:21:26:45:f5:b1:8d:0e:2b:61: 3d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:AE:68:C4:08:4D:9D:EA:88:17:3C:D4:6B:3E:7B:E5:74:11:AC X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d0:e2:ff:a3:b8:32:53:fb:0a:4e:35:b8:60:aa:c1:79:f8: b8:70:21:59:ca:fc:3d:5e:9b:ed:de:42:cd:b9:8e:27:76:56: 77:46:6c:89:96:e9:03:5c:db:fe:42:e9:41:38:c5:7b:71:10: e7:47:71:bb:69:05:5c:d4:cf:24:20:02:d2:b7:5b:a9:33:57: 1d:0b:c1:2c:e1:48:84:f9:75:04:7b:b7:d1:34:14:45:6a:45: 74:93:72:58:ae:b5:12:51:bb:ea:08:91:c9:6a:84:a6:fd:01: e1:17:77:8a:1a:09:6b:3a:e4:55:7d:f9:80:0a:d9:eb:58:14: 1d:93:b3:4a:39:51:9e:b3:16:d1:24:47:41:26:90:1c:63:f5: bb:18:7b:ab:1c:53:8f:aa:46:0c:75:ee:3d:10:0d:8e:1a:d9: 96:2a:84:e3:a6:43:0f:0c:5c:fd:a7:b2:62:e8:88:4a:d3:cb: 33:22:a2:5c:d3:53:98:a7:2d:1b:07:fd:47:0d:5c:da:5e:b3: d3:18:04:58:00:4c:ba:f3:ec:cc:5c:09:bc:49:07:8e:fb:ce: 58:8a:8c:ea:c3:95:fa:a3:fb:1d:52:a0:9f:10:41:43:64:73: 03:b1:7b:d5:ea:78:53:d4:db:d6:bd:ef:e6:eb:b6:5c:99:c6: e9:e5:c9:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy OTFDNDdCQUYwHhcNMjYwNDA1MDM1ODMyWhcNMjYwNDEyMDM1ODMyWjAYMRYwFAYD VQQDEw02OWQxZGRlOC04MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfoxQabG0CWvmDykLxzcFC8p9WAgVqP5zLAF3RUGToaD3dDVMIgOcVogFll0 M9GmAFuLl0kuou6e+sgJLBT4Fp82UU5pqb6uYCaZjerhe9c0JX5uZlSPG6qs9PSK rgTo2vr3CKlVVwX8FiD/eDVGMltDHiVVqeH9yZgxRUsTObUa0RpOarpkYpT33ZKJ jcjpJsatXO5vRhjcMv/QXwOXaA/EmyHqIbKWC0TPTnfZVaZZMyFbHw6Cel66CYe5 dW1tLSvDRExt5N8XUx82WhB8dG4Yg+W28jtsDDkXne5b6R8Be3Dzr0rKfwTWspkc q7F5OTwPFxchJkX1sY0OK2E9HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwZrmjE CE2d6ogXPNRrPnvldBGsMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM9Di/6O4MlP7Ck41uGCqwXn4uHAhWcr8PV6b7d5CzbmOJ3ZWd0ZsiZbpA1zb /kLpQTjFe3EQ50dxu2kFXNTPJCAC0rdbqTNXHQvBLOFIhPl1BHu30TQURWpFdJNy WK61ElG76giRyWqEpv0B4Rd3ihoJazrkVX35gArZ61gUHZOzSjlRnrMW0SRHQSaQ HGP1uxh7qxxTj6pGDHXuPRANjhrZliqE46ZDDwxc/aeyYuiIStPLMyKiXNNTmKct Gwf9Rw1c2l6z0xgEWABMuvPszFwJvEkHjvvOWIqM6sOV+qP7HVKgnxBBQ2RzA7F7 1ep4U9Tb1r3v5uu2XJnG6eXJ6w== -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:56 2026 by rpki-client