$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: bYnoralJgFCeJd56IGAAolJ369B8esySH2yxbqP0Rag= Subject key identifier: EA:72:40:64:F0:E3:8C:7D:11:C1:A9:0A:A5:11:9B:5A:E1:E7:00:11 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 3521 Signing time: Sat 04 Apr 2026 15:06:23 +0000 Manifest this update: Sat 04 Apr 2026 15:06:22 +0000 Manifest next update: Sat 11 Apr 2026 15:06:22 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: t0vi9dImj18NOENZdNEXvL5tq+PWLLycvpsIjnvxz0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Apr 4 15:06:22 2026 GMT Not After : Apr 11 15:06:22 2026 GMT Subject: CN=69d128ef-4c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:32:e2:7d:2a:9f:60:5e:81:d3:39:09:2c: 5b:26:db:cb:80:0a:0d:5b:cf:12:ea:30:ca:65:21: 00:23:6c:83:ef:34:c8:52:8b:f2:96:bf:d8:50:fe: b6:52:ec:25:82:e2:5c:b4:25:5b:ad:35:e2:2d:2d: 01:50:e8:92:ba:08:34:b3:43:4c:b1:28:17:33:4a: 87:84:12:b5:85:c9:cf:6a:a5:25:5e:a1:34:64:50: 15:f3:7c:24:b5:57:c5:ba:e2:9b:02:93:bb:93:31: f3:a6:a8:d1:bd:b1:02:44:d2:ad:b7:fe:8a:52:2d: b8:1c:56:5e:e2:d2:ce:c6:58:b8:99:99:e8:70:1e: 44:a4:7f:8c:ef:5e:76:bd:2d:d9:c7:80:67:18:8b: d4:c5:f4:3b:9c:65:26:95:9d:7c:7c:23:db:78:0e: 80:63:14:fc:f3:63:48:cf:e7:a2:47:6b:07:3e:e3: f4:84:c2:13:8c:a3:67:68:c4:96:d2:1c:e6:ce:b0: 01:47:04:2b:b8:6e:27:12:86:61:2f:f8:ae:d9:c9: ad:9f:93:92:d7:f6:47:18:79:ce:44:06:69:e5:eb: 66:a8:47:2a:fd:81:0f:31:4c:cf:d0:ed:e7:c5:e7: 5d:bc:03:bf:21:38:45:f4:d9:fd:c8:dd:48:27:f4: ba:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:72:40:64:F0:E3:8C:7D:11:C1:A9:0A:A5:11:9B:5A:E1:E7:00:11 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9e:a0:68:25:16:41:4d:d5:89:bd:c8:5b:bc:d9:a3:90:94: ed:da:83:a1:1d:90:20:65:54:d0:2f:db:b5:2b:cb:69:f7:ea: db:56:db:fc:ba:e1:00:32:63:82:be:15:55:56:b5:9b:f2:a0: c3:8c:da:5b:4a:b1:e0:ab:6c:2c:60:ef:2a:4d:8f:fc:6a:2a: dc:a5:2e:3b:49:bd:0f:5b:c5:fb:0e:c0:12:3d:32:87:1b:8f: 90:2a:d7:2c:c4:0e:6a:77:7b:4b:ab:37:00:4c:46:48:73:9c: 3b:2f:a5:77:b3:1d:bf:a1:99:92:62:d7:49:53:b8:88:06:1b: b4:75:6b:f8:5d:5f:3c:0c:af:ff:b6:89:e3:9b:ed:02:9c:21: 0e:6d:3e:43:eb:d3:40:6f:d1:e2:fa:3a:44:19:81:d9:f3:d7: f6:00:87:7a:77:b2:11:fc:a8:99:80:17:ce:df:ec:32:a2:e0: 6f:3a:84:05:6e:f1:04:f3:20:a9:ad:97:18:c5:50:37:bc:85: 9f:30:ce:da:57:06:5b:b9:1c:00:bc:8e:b3:af:fb:74:8a:47: 6b:ff:0a:ea:73:55:b0:8d:59:f0:c1:34:3f:2a:37:c5:d0:a8: e0:55:aa:22:3e:c7:f8:41:a3:bc:35:46:ef:ba:f9:a8:69:ac: 5a:fd:98:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjYwNDA0MTUwNjIyWhcNMjYwNDExMTUwNjIyWjAYMRYwFAYD VQQDEw02OWQxMjhlZi00YzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX8y4n0qn2BegdM5CSxbJtvLgAoNW88S6jDKZSEAI2yD7zTIUovylr/YUP62 UuwlguJctCVbrTXiLS0BUOiSugg0s0NMsSgXM0qHhBK1hcnPaqUlXqE0ZFAV83wk tVfFuuKbApO7kzHzpqjRvbECRNKtt/6KUi24HFZe4tLOxli4mZnocB5EpH+M7152 vS3Zx4BnGIvUxfQ7nGUmlZ18fCPbeA6AYxT882NIz+eiR2sHPuP0hMITjKNnaMSW 0hzmzrABRwQruG4nEoZhL/iu2cmtn5OS1/ZHGHnORAZp5etmqEcq/YEPMUzP0O3n xeddvAO/IThF9Nn9yN1IJ/S6BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpyQGTw 44x9EcGpCqURm1rh5wARMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYZ6gaCUWQU3Vib3IW7zZo5CU7dqDoR2QIGVU0C/btSvLaffq21bb/LrhADJj gr4VVVa1m/Kgw4zaW0qx4KtsLGDvKk2P/Goq3KUuO0m9D1vF+w7AEj0yhxuPkCrX LMQOand7S6s3AExGSHOcOy+ld7Mdv6GZkmLXSVO4iAYbtHVr+F1fPAyv/7aJ45vt ApwhDm0+Q+vTQG/R4vo6RBmB2fPX9gCHeneyEfyomYAXzt/sMqLgbzqEBW7xBPMg qa2XGMVQN7yFnzDO2lcGW7kcALyOs6/7dIpHa/8K6nNVsI1Z8ME0Pyo3xdCo4FWq Ij7H+EGjvDVG77r5qGmsWv2Ysw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:57 2026 by rpki-client