$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: tt/Ejmaw9vpSsFhkO5VQQJOY5KbRuPnj9voeaTQnW3U= Subject key identifier: D9:57:34:A5:69:B5:26:CF:7C:83:97:66:45:D5:EB:68:ED:CD:B5:AC Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 25DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 25C9 Signing time: Sat 18 Apr 2026 15:36:40 +0000 Manifest this update: Sat 18 Apr 2026 15:36:40 +0000 Manifest next update: Sat 25 Apr 2026 15:36:40 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: MSzbwpF3VJutz5eS1wiQo5mv8sJQy2rK+LaN97ZLAsM=) 2: 9461B15C144611EBA5418244C4F9AE02.roa (hash: 7pgMl5wJH137QshYHXwPE7o/xvV6r1Ih+WJdLlRyQ5s=) 3: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: JBL89dWtitdBoLgC+TScExrJHUYZ4Y9/ZvmW7eALzXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9691 (0x25db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: Apr 18 15:36:40 2026 GMT Not After : Apr 25 15:36:40 2026 GMT Subject: CN=69e3a508-cbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:72:88:14:a6:22:ff:d1:7e:65:ff:7e:6c: ee:a4:9b:d4:fc:21:39:18:b0:b8:11:5f:cc:ea:62: e1:2c:af:0c:4a:1d:e6:44:a5:c0:28:b8:a2:e5:cf: ce:f6:a8:95:98:11:85:92:11:ea:9d:6d:08:9a:61: 66:46:f4:25:6b:7f:a1:05:8e:0c:28:ed:fa:5f:68: 7d:ca:e6:87:1a:d8:61:48:e3:1c:06:8a:8d:3b:38: f7:77:bd:3c:65:d9:e9:9f:15:e0:41:66:bf:22:4a: 89:ce:89:e2:6e:16:64:80:5d:21:33:bb:02:99:53: f1:26:53:4b:79:c2:7e:88:ea:f5:36:1e:79:e3:82: f5:6c:61:ad:7d:8f:c4:a5:46:7a:9f:2d:b6:cd:02: f9:7a:70:01:37:ea:90:1e:62:1c:04:b8:7d:b5:1a: ff:3a:f5:ff:3c:4c:ad:db:c1:bc:a8:ad:92:f7:f8: 24:e3:f8:72:6e:e3:d1:a6:ef:42:3a:e2:d8:1c:61: 8c:d2:9e:4e:8e:35:8a:7d:32:0b:da:08:83:e2:fb: 8f:71:bc:e1:11:52:cc:0c:e7:34:39:bf:5e:33:26: 47:8a:f8:91:0e:df:98:90:57:7b:43:98:ca:be:1f: 35:8d:c8:bc:3a:f4:ab:10:d0:8d:77:00:63:d0:64: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:57:34:A5:69:B5:26:CF:7C:83:97:66:45:D5:EB:68:ED:CD:B5:AC X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:8a:9e:5e:8d:59:58:07:65:3b:54:90:39:08:54:40:5b:fc: 11:5a:d8:a2:6e:e4:d3:60:7a:91:8c:6b:99:68:48:65:1f:43: 83:b3:bd:76:b4:b4:03:a2:d3:4d:29:0d:4c:89:cf:7a:a0:ee: 8f:a0:5c:ab:09:c9:fd:c9:c5:4c:dd:b1:93:4d:e4:c6:0a:80: 3e:78:94:35:c6:65:0d:2f:8e:ff:95:33:c6:a0:d7:1b:bb:81: 59:f2:d3:31:0e:2d:96:ea:40:09:ea:82:4d:e7:14:41:44:d9: f7:85:bf:c6:3d:8f:12:5b:6f:d8:9e:30:fc:bf:06:8a:e3:8f: 2a:cb:1d:12:0d:43:48:8f:0e:b0:bc:68:15:74:10:36:76:74: 86:c4:e4:a4:73:66:b5:55:5b:89:ee:ba:50:cf:1f:87:99:f6: de:9b:e2:59:66:6f:ee:04:f8:3e:10:43:9d:e8:6e:c7:57:71: a2:b4:05:48:19:13:2f:d6:02:58:45:af:7a:76:c6:ec:23:f3: 94:94:3a:45:d5:03:49:5d:eb:d7:a9:05:ae:57:3e:fc:dd:73: cf:28:62:56:48:7a:d1:6e:de:f0:48:33:48:85:eb:1e:8d:80: 28:07:e1:85:d4:e5:13:ab:6e:9c:93:8d:8f:6d:7e:05:36:c2: 76:87:dd:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjYwNDE4MTUzNjQwWhcNMjYwNDI1MTUzNjQwWjAYMRYwFAYD VQQDEw02OWUzYTUwOC1jYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsStyiBSmIv/RfmX/fmzupJvU/CE5GLC4EV/M6mLhLK8MSh3mRKXAKLii5c/O 9qiVmBGFkhHqnW0ImmFmRvQla3+hBY4MKO36X2h9yuaHGthhSOMcBoqNOzj3d708 ZdnpnxXgQWa/IkqJzonibhZkgF0hM7sCmVPxJlNLecJ+iOr1Nh5544L1bGGtfY/E pUZ6ny22zQL5enABN+qQHmIcBLh9tRr/OvX/PEyt28G8qK2S9/gk4/hybuPRpu9C OuLYHGGM0p5OjjWKfTIL2giD4vuPcbzhEVLMDOc0Ob9eMyZHiviRDt+YkFd7Q5jK vh81jci8OvSrENCNdwBj0GSW4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlXNKVp tSbPfIOXZkXV62jtzbWsMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArIqeXo1ZWAdlO1SQOQhUQFv8EVrYom7k02B6kYxrmWhIZR9Dg7O9drS0A6LT TSkNTInPeqDuj6BcqwnJ/cnFTN2xk03kxgqAPniUNcZlDS+O/5UzxqDXG7uBWfLT MQ4tlupACeqCTecUQUTZ94W/xj2PEltv2J4w/L8GiuOPKssdEg1DSI8OsLxoFXQQ NnZ0hsTkpHNmtVVbie66UM8fh5n23pviWWZv7gT4PhBDnehux1dxorQFSBkTL9YC WEWvenbG7CPzlJQ6RdUDSV3r16kFrlc+/N1zzyhiVkh60W7e8EgzSIXrHo2AKAfh hdTlE6tunJONj21+BTbCdofd2w== -----END CERTIFICATE-----Generated at Sat Apr 18 22:23:35 2026 by rpki-client