$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: 7E8ANh6PiUaV7wNj79mpsL66a4hICFgc57CJ49/4Zng= Subject key identifier: 91:4C:E6:44:A3:1E:66:3C:27:44:61:28:EE:45:32:AD:63:CF:3B:26 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 3524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 3524 Signing time: Sat 04 Apr 2026 15:06:04 +0000 Manifest this update: Sat 04 Apr 2026 15:06:03 +0000 Manifest next update: Sat 11 Apr 2026 15:06:03 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: 6MkNm6Z/3fXHGkGyxDhULV3HQRktbjlF9GttstU8VKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13604 (0x3524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Apr 4 15:06:03 2026 GMT Not After : Apr 11 15:06:03 2026 GMT Subject: CN=69d128dc-e43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:59:c3:2b:09:fc:62:3e:fa:de:94:f9:5f: 7f:f9:c6:8e:4c:f7:76:d7:63:98:c7:e5:b5:4c:7f: 4b:7e:ce:bf:fc:df:6c:84:8e:69:a6:a8:32:99:a3: 5e:f1:6e:91:d2:5f:c7:61:90:0a:0d:04:04:ce:fd: 25:62:53:14:82:2d:6d:eb:f5:81:67:e2:47:f0:ce: 91:8b:7c:88:c7:30:79:0f:29:cf:5e:d3:4c:90:09: aa:17:24:4d:7d:b4:0a:e7:88:df:cf:f1:73:d0:eb: 30:df:be:b2:31:b4:1d:c2:31:ec:67:d7:dc:2d:eb: 77:56:9e:ac:c0:fa:07:12:83:9c:4d:ca:d4:b3:2f: 78:01:90:e5:fa:58:ea:8d:1d:f1:ec:b5:d6:a3:75: 46:fe:bf:07:fe:39:02:88:c8:89:0c:ee:7c:a9:8c: f5:0a:d5:2b:d5:b9:a0:0f:bc:9b:66:95:0c:eb:92: 0e:f6:25:3f:fe:b4:df:2f:c7:d9:4d:3e:cf:3c:f1: 29:82:e2:ae:53:62:27:1b:33:1e:6b:c1:da:59:a0: 77:c3:cf:0d:e5:30:47:e7:3c:f1:d9:84:ef:7f:a5: ee:e2:e7:e8:d2:2d:4b:49:58:3e:dd:44:f4:8a:90: 11:37:d4:3c:11:c9:1a:cd:f3:ca:5a:03:b3:4d:ba: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4C:E6:44:A3:1E:66:3C:27:44:61:28:EE:45:32:AD:63:CF:3B:26 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:29:52:66:5b:10:42:14:e4:fb:ac:40:0a:2e:80:b0:f8:6a: 7e:8f:db:76:71:ef:16:40:69:18:30:54:a5:b2:1a:3d:55:fe: 11:37:8d:1b:b0:bf:a6:de:cf:a2:99:ee:6f:8d:0e:2e:e8:2c: 9f:2a:bc:72:06:2a:4a:b7:9c:31:0a:db:b1:53:55:68:56:41: 00:e3:92:a7:cf:98:47:ec:c0:11:c8:46:04:d4:9c:b6:de:55: 6a:3a:9d:09:e3:f9:65:11:61:3f:5e:d6:57:97:13:c3:14:0e: f2:a5:33:a1:77:b8:74:1b:10:5d:36:cd:05:9a:9c:88:4c:d3: cf:33:0f:bd:9f:7c:c4:98:59:ce:00:d4:d0:9d:16:11:93:3a: 2b:88:e2:1e:77:ad:e7:cc:2e:70:4a:12:53:e8:96:75:19:b1: 1f:b8:cf:73:92:8d:a8:72:6b:e9:0c:fb:90:2b:c2:6b:a5:9c: 37:21:cd:c7:db:d2:c6:5f:cc:b4:dc:16:3c:10:6f:09:82:29: 20:3e:27:d3:67:ec:f1:9c:50:3b:89:e1:ae:61:fc:f2:9d:c1: b0:f9:6b:36:7f:77:53:9c:4c:21:6b:ac:51:d7:61:1c:fc:e7: c2:4e:ba:d0:92:ff:f9:4a:a5:6e:f4:8d:d0:ec:d7:60:98:e6: ac:3a:64:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjYwNDA0MTUwNjAzWhcNMjYwNDExMTUwNjAzWjAYMRYwFAYD VQQDEw02OWQxMjhkYy1lNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFlZwysJ/GI++t6U+V9/+caOTPd212OYx+W1TH9Lfs6//N9shI5ppqgymaNe 8W6R0l/HYZAKDQQEzv0lYlMUgi1t6/WBZ+JH8M6Ri3yIxzB5DynPXtNMkAmqFyRN fbQK54jfz/Fz0Osw376yMbQdwjHsZ9fcLet3Vp6swPoHEoOcTcrUsy94AZDl+ljq jR3x7LXWo3VG/r8H/jkCiMiJDO58qYz1CtUr1bmgD7ybZpUM65IO9iU//rTfL8fZ TT7PPPEpguKuU2InGzMea8HaWaB3w88N5TBH5zzx2YTvf6Xu4ufo0i1LSVg+3UT0 ipARN9Q8EckazfPKWgOzTbpvWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFM5kSj HmY8J0RhKO5FMq1jzzsmMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzSlSZlsQQhTk+6xACi6AsPhqfo/bdnHvFkBpGDBUpbIaPVX+ETeNG7C/pt7P opnub40OLugsnyq8cgYqSrecMQrbsVNVaFZBAOOSp8+YR+zAEchGBNSctt5Vajqd CeP5ZRFhP17WV5cTwxQO8qUzoXe4dBsQXTbNBZqciEzTzzMPvZ98xJhZzgDU0J0W EZM6K4jiHnet58wucEoSU+iWdRmxH7jPc5KNqHJr6Qz7kCvCa6WcNyHNx9vSxl/M tNwWPBBvCYIpID4n02fs8ZxQO4nhrmH88p3BsPlrNn93U5xMIWusUddhHPznwk66 0JL/+UqlbvSN0OzXYJjmrDpkBg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:58 2026 by rpki-client