$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft File: CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft (raw, json) Hash identifier: AT0akWmVRo/s/JXXCoBRQ5cdIS/gezB+1PIIPU2Cq/g= Subject key identifier: 9D:15:47:02:18:0A:2A:A7:DE:27:FD:3E:53:8B:6B:B8:84:BA:E2:22 Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E Certificate issuer: /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Certificate serial: 356B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft Manifest number: 3549 Signing time: Sat 04 Apr 2026 14:19:31 +0000 Manifest this update: Sat 04 Apr 2026 14:19:31 +0000 Manifest next update: Sat 11 Apr 2026 14:19:31 +0000 Files and hashes: 1: CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl (hash: uEanf1rqheb4PwvKOYSToVHSv0w94qwkfJE4nIO1Lbk=) 2: E404430CB0F811E595E0F761C4F9AE02.roa (hash: owZAiKzsMVZHcu5y/uvghCfcRo2W0WEoElBFnrF91Ts=) 3: 81C9B5A4BBFA11ED99272016C4F9AE02.roa (hash: wULzE/YcKLKygpTy9Qm31PPUJvQ48rS9tgycJrdEzjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13675 (0x356b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D1A, serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Validity Not Before: Apr 4 14:19:31 2026 GMT Not After : Apr 11 14:19:31 2026 GMT Subject: CN=69d11df3-8b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:ed:d6:b1:82:9c:2f:22:01:bf:b8:6c:c9: b3:a8:b0:10:1b:5d:4c:04:87:a2:08:d6:70:0c:a1: 52:27:2a:37:1e:f9:e0:e0:f0:2f:05:3d:0b:97:4b: b5:af:4c:ce:4f:6f:57:b7:3b:e8:62:48:c9:16:01: 8d:b1:2d:64:3e:c3:3d:1e:6f:94:c9:3d:1f:89:ff: 20:b1:f6:45:ca:88:52:a1:d8:9f:49:89:7b:7f:61: 0e:c9:dd:77:d1:e8:8d:50:82:a0:26:08:d4:6a:9c: 4e:d9:2b:32:7e:46:10:f9:66:40:69:be:26:90:88: 96:3b:9b:d9:b2:2f:1a:ff:39:07:8f:16:62:b6:c3: 26:9b:b1:9a:5a:c6:e5:de:2e:73:9d:2b:f1:86:d4: ac:f7:6c:6c:c7:ea:81:0a:40:04:c3:c3:e4:6c:1e: 93:53:3d:6d:8f:d7:97:8a:6f:f7:1d:d6:05:0c:4b: 31:50:fa:2d:c9:01:08:e2:85:17:cb:ef:60:9e:7c: 16:0c:cd:51:7e:4e:60:af:59:f1:fa:ec:e7:fa:11: f7:58:a8:89:34:f3:ee:ea:c8:32:e9:7c:63:c2:19: d4:aa:7e:48:e6:1a:6e:31:c9:69:c0:ac:11:fb:37: 17:ee:57:17:77:5e:75:e3:d2:12:58:98:f0:a2:9e: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:15:47:02:18:0A:2A:A7:DE:27:FD:3E:53:8B:6B:B8:84:BA:E2:22 X509v3 Authority Key Identifier: keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9b:e8:6a:f2:51:be:3a:71:0c:1b:48:26:bf:57:76:33:98: 34:71:46:fa:b3:d6:4d:d7:c9:ad:02:89:ce:af:93:71:84:8c: fb:b5:b4:05:7b:cf:f5:70:c4:68:64:a8:65:d9:da:98:63:a7: a3:3b:22:d4:d6:36:96:b0:b4:42:c1:bf:a0:97:1c:1f:07:77: f4:d6:43:70:21:51:68:46:3c:71:7a:49:54:2a:de:6b:dc:61: f0:34:90:f2:f7:c7:39:69:4e:dc:10:7d:65:a1:eb:17:37:c4: 86:f9:75:7b:b8:64:d0:3d:09:89:3d:5d:69:87:40:06:61:de: e9:23:94:7c:08:68:38:67:fb:62:23:ac:4d:c7:aa:1d:ae:3f: 40:cb:5e:63:ee:ac:ef:10:7b:1f:30:58:b9:22:4d:82:fe:45: e7:17:e6:a0:22:1b:9e:93:ce:e5:aa:26:f9:75:4a:56:0f:0e: 6d:da:9f:83:44:50:0a:a1:a8:ef:33:43:2b:5c:fe:d7:51:38: 64:7c:a5:da:11:fd:ae:51:c0:a7:ad:d5:2a:7a:d1:02:47:80: 2f:ef:7b:ef:5a:90:26:89:0b:1d:8a:83:95:6c:7b:ae:ef:bf: d4:35:40:a8:92:0d:0f:fe:76:21:9a:a3:4f:14:1a:f3:bd:6a: a8:cb:a4:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMUExMTAvBgNVBAUTKDA5NzZGQzNEMjMxODZENDhDNjcxNzczNzQwODkxQ0Y1 NEUzMUI4MEUwHhcNMjYwNDA0MTQxOTMxWhcNMjYwNDExMTQxOTMxWjAYMRYwFAYD VQQDEw02OWQxMWRmMy04YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1bt1rGCnC8iAb+4bMmzqLAQG11MBIeiCNZwDKFSJyo3Hvng4PAvBT0Ll0u1 r0zOT29XtzvoYkjJFgGNsS1kPsM9Hm+UyT0fif8gsfZFyohSodifSYl7f2EOyd13 0eiNUIKgJgjUapxO2SsyfkYQ+WZAab4mkIiWO5vZsi8a/zkHjxZitsMmm7GaWsbl 3i5znSvxhtSs92xsx+qBCkAEw8PkbB6TUz1tj9eXim/3HdYFDEsxUPotyQEI4oUX y+9gnnwWDM1Rfk5gr1nx+uzn+hH3WKiJNPPu6sgy6XxjwhnUqn5I5hpuMclpwKwR +zcX7lcXd15149ISWJjwop4ZjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0VRwIY Ciqn3if9PlOLa7iEuuIiMB8GA1UdIwQYMBaAFAl2/D0jGG1IxnF3N0CJHPVOMbgO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQxQS9DNTlCMDJEQTFE NzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJVakdjWGMzUUlrYzlVNHh1 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NYYjhQU01ZYlVqR2NYYzNRSWtjOVU0eHVBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQxQS9DNTlCMDJEQTFENzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJV akdjWGMzUUlrYzlVNHh1QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARJvoavJRvjpxDBtIJr9XdjOYNHFG+rPWTdfJrQKJzq+TcYSM+7W0BXvP9XDE aGSoZdnamGOnozsi1NY2lrC0QsG/oJccHwd39NZDcCFRaEY8cXpJVCrea9xh8DSQ 8vfHOWlO3BB9ZaHrFzfEhvl1e7hk0D0JiT1daYdABmHe6SOUfAhoOGf7YiOsTceq Ha4/QMteY+6s7xB7HzBYuSJNgv5F5xfmoCIbnpPO5aom+XVKVg8Obdqfg0RQCqGo 7zNDK1z+11E4ZHyl2hH9rlHAp63VKnrRAkeAL+9771qQJokLHYqDlWx7ru+/1DVA qJIND/52IZqjTxQa871qqMukQQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:03 2026 by rpki-client