$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: 6fDfw5PDqazhlEytQAZYSdXxCKTLoxwC6dIQPEeqMwo= Subject key identifier: 13:15:6E:FA:29:2F:04:27:52:F1:11:D3:10:02:D6:FD:AD:BC:4A:CF Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 1146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 1125 Signing time: Sat 04 Apr 2026 17:08:37 +0000 Manifest this update: Sat 04 Apr 2026 17:08:36 +0000 Manifest next update: Sat 11 Apr 2026 17:08:36 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: ZeBNzuXC83Uklb7QsK0Rc1+99uwxv/Tz1NA9W7hMnAA=) 2: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: dYx5rg+ikh6rVRuWFPmqQgmz1ejCnGZL23u6GCNg5Bw=) 3: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg=) 4: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: ssMQ43fjcNDdMMcxP4Zyw/zUAL+E/8FkY3VJGMomUwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4422 (0x1146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Apr 4 17:08:36 2026 GMT Not After : Apr 11 17:08:36 2026 GMT Subject: CN=69d14595-eb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:d3:59:ae:03:e8:0e:97:6f:ed:57:1f:39: 22:f0:41:61:69:60:bc:2b:10:4b:ab:cc:0f:6a:3b: 02:46:0c:04:f9:19:27:1c:48:7a:c8:e9:3c:24:75: a0:6b:0b:06:e5:ce:96:8d:9e:51:28:e7:ee:fa:ed: ad:a0:7f:c9:99:fd:42:8e:ee:91:56:03:6b:d1:90: f3:1f:d3:e8:d9:3d:07:3e:70:2b:c8:26:16:77:1f: 42:c0:cc:ae:a3:5c:94:4b:ef:d6:62:bb:8f:d9:66: 84:77:7a:09:ff:d0:d4:62:90:61:02:2a:82:20:37: 2e:a9:05:59:09:25:ba:66:da:02:9a:f9:15:9b:e0: 78:e9:9d:5e:09:38:13:18:a5:43:d6:bd:9e:c4:a5: 4e:04:99:bb:78:61:9d:75:16:41:34:b7:68:ed:3c: 8b:0d:3c:5a:41:9f:30:2b:3a:ce:04:01:ed:2e:2a: 19:8e:2c:65:91:c3:19:6d:69:42:54:b6:6f:02:2d: 79:06:58:c5:3b:c5:72:ee:b7:69:11:bd:b5:18:77: 1a:60:42:66:08:8b:ec:77:3c:ab:70:77:14:ce:81: 99:b3:ef:23:35:db:75:7e:dd:ee:04:17:ba:87:a5: b7:76:a5:ce:f1:dd:74:08:3f:01:44:96:31:ae:1e: b4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:15:6E:FA:29:2F:04:27:52:F1:11:D3:10:02:D6:FD:AD:BC:4A:CF X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a1:55:4f:98:a8:21:5c:23:23:c9:f7:72:5c:a9:06:12:79: c1:02:65:e1:87:60:e7:a6:0b:e6:ff:53:7c:fe:f9:91:50:00: be:25:7b:e4:b5:44:ae:2b:72:73:5f:fd:02:0e:d1:dd:a7:e2: 09:98:9f:52:d7:c2:ce:f1:5a:e2:72:d1:38:b1:ed:d3:92:65: 60:50:27:d9:b3:b9:e0:6f:49:f0:93:82:be:c9:80:f5:3f:c9: bb:3d:db:44:24:84:a4:b9:e5:c3:64:02:81:4e:ae:26:2d:d7: ec:04:4b:11:03:f2:21:cb:15:72:62:21:82:29:1a:08:c1:32: 46:96:ad:6b:60:5d:72:4c:90:3a:83:d6:fd:36:be:a5:60:29: 69:4c:d9:56:fc:d6:4e:66:34:78:8a:ea:e8:83:cc:26:d3:02: 98:7c:51:d9:7e:fd:92:37:0c:f3:df:df:38:97:33:1e:1b:9f: 0a:7c:4f:23:1b:e7:c7:49:c8:c5:29:a1:e9:c4:33:c2:c0:3f: c2:01:15:ec:7b:53:25:80:c7:f7:46:ec:ac:3a:62:32:cb:47: 0c:6d:88:0d:bc:69:45:17:0c:3a:b5:98:d1:91:b5:1a:74:ce: 5e:68:5c:2c:43:37:92:ac:27:27:3d:cf:f0:9e:30:ea:90:78: b9:7e:31:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjYwNDA0MTcwODM2WhcNMjYwNDExMTcwODM2WjAYMRYwFAYD VQQDEw02OWQxNDU5NS1lYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJzTWa4D6A6Xb+1XHzki8EFhaWC8KxBLq8wPajsCRgwE+RknHEh6yOk8JHWg awsG5c6WjZ5RKOfu+u2toH/Jmf1Cju6RVgNr0ZDzH9Po2T0HPnAryCYWdx9CwMyu o1yUS+/WYruP2WaEd3oJ/9DUYpBhAiqCIDcuqQVZCSW6ZtoCmvkVm+B46Z1eCTgT GKVD1r2exKVOBJm7eGGddRZBNLdo7TyLDTxaQZ8wKzrOBAHtLioZjixlkcMZbWlC VLZvAi15BljFO8Vy7rdpEb21GHcaYEJmCIvsdzyrcHcUzoGZs+8jNdt1ft3uBBe6 h6W3dqXO8d10CD8BRJYxrh60aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMVbvop LwQnUvER0xAC1v2tvErPMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiKFVT5ioIVwjI8n3clypBhJ5wQJl4Ydg56YL5v9TfP75kVAAviV75LVErity c1/9Ag7R3afiCZifUtfCzvFa4nLROLHt05JlYFAn2bO54G9J8JOCvsmA9T/Juz3b RCSEpLnlw2QCgU6uJi3X7ARLEQPyIcsVcmIhgikaCMEyRpata2BdckyQOoPW/Ta+ pWApaUzZVvzWTmY0eIrq6IPMJtMCmHxR2X79kjcM89/fOJczHhufCnxPIxvnx0nI xSmh6cQzwsA/wgEV7HtTJYDH90bsrDpiMstHDG2IDbxpRRcMOrWY0ZG1GnTOXmhc LEM3kqwnJz3P8J4w6pB4uX4xBw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:33:56 2026 by rpki-client