$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: YK8MtVsdIq8YhBDCkKJSX1Gx5qAiEexNO3uQ2x+BKHM= Subject key identifier: 62:01:B8:DE:A9:B8:1F:9C:C7:36:CB:C4:8D:DC:68:63:5B:B1:DE:56 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 0759 Signing time: Sat 04 Apr 2026 21:30:41 +0000 Manifest this update: Sat 04 Apr 2026 21:30:41 +0000 Manifest next update: Sat 11 Apr 2026 21:30:41 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: DflA0lpvsSwRaS6g/YGgD5u26NpOXwtavrIMLVl8wrw=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Apr 4 21:30:41 2026 GMT Not After : Apr 11 21:30:41 2026 GMT Subject: CN=69d18301-9364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:bc:2e:3f:fe:16:20:00:6e:e4:de:04:1c: 54:a0:47:4f:a9:ac:fa:17:1a:dc:d1:d4:48:c3:43: 19:00:95:a4:80:06:99:4a:bc:5b:16:af:d6:22:e3: 59:03:c5:e5:e5:94:51:ca:a4:36:7a:fb:0f:30:66: 59:bd:4f:30:b7:5f:5a:29:9b:e8:b4:33:a7:f9:d3: 4a:70:c9:c4:7c:dc:30:b4:91:da:b0:69:5f:5a:52: 77:75:21:0a:fd:4a:da:4c:7a:c8:cd:c0:e1:2f:ec: 26:72:d0:c9:7a:ee:f3:39:02:90:47:20:bf:1f:11: 03:04:3e:f7:60:09:a1:ab:05:4a:4f:6e:99:35:47: d1:f3:fe:ba:eb:96:79:0c:8e:4f:c1:bc:bb:ce:b6: fe:75:1d:5c:5b:c9:55:45:80:57:b8:d6:23:71:49: 05:22:1d:6d:cc:f8:e5:c2:db:d8:6c:e6:68:84:c6: b6:98:02:4d:31:eb:33:ed:a2:70:dd:d4:d1:88:d9: 85:a4:9b:fa:31:56:6a:28:c9:1d:d4:c8:03:85:d9: 38:44:68:6c:49:44:da:28:51:b8:a2:66:05:62:36: 3c:a0:0e:aa:f1:05:c4:74:91:66:0b:73:2f:76:23: a1:5f:2a:f1:3f:d1:53:6c:ce:55:9f:36:87:86:7a: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:01:B8:DE:A9:B8:1F:9C:C7:36:CB:C4:8D:DC:68:63:5B:B1:DE:56 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8b:a9:04:bb:ce:fa:42:e6:be:63:d2:b3:9f:20:e6:b8:40: 15:fc:83:b8:83:5e:b5:eb:7a:d0:f2:35:75:51:0f:f3:4d:e4: 4f:57:c7:69:44:a3:72:bb:f1:a9:d3:ce:1f:96:c2:5d:2f:62: 19:d8:df:f9:b7:36:b2:7f:17:08:13:0a:2f:10:bb:66:77:f1: 7d:a3:3d:23:53:6d:fc:0f:1e:4e:dc:ee:08:bf:2f:2e:1c:03: 73:16:53:33:46:35:40:b2:73:9b:71:be:8f:71:00:a3:eb:d1: 36:87:7b:0e:a4:67:d1:88:57:5b:62:2e:55:b5:1c:9a:85:71: 82:0b:47:de:fe:cd:cc:80:e8:e2:dd:32:45:b0:45:a5:64:de: 03:86:81:d1:f9:ba:4b:c6:d6:a5:be:db:58:19:f0:8e:a3:90: 9d:06:14:ad:85:f1:44:46:75:22:c3:e5:87:bc:b2:c1:78:d2: 75:19:2e:ab:db:24:97:a3:be:be:ca:f0:aa:76:9b:21:ba:09: 69:c6:7d:8e:49:5a:44:0f:af:03:d1:21:2c:0a:48:e6:03:36: 04:dc:85:59:68:a8:26:f5:76:d1:cc:78:61:2d:68:56:51:18: b9:5f:46:5a:7d:d8:7f:a3:d6:20:0c:ed:7e:8f:5f:eb:a0:a0: 03:39:fd:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjYwNDA0MjEzMDQxWhcNMjYwNDExMjEzMDQxWjAYMRYwFAYD VQQDEw02OWQxODMwMS05MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArve8Lj/+FiAAbuTeBBxUoEdPqaz6Fxrc0dRIw0MZAJWkgAaZSrxbFq/WIuNZ A8Xl5ZRRyqQ2evsPMGZZvU8wt19aKZvotDOn+dNKcMnEfNwwtJHasGlfWlJ3dSEK /UraTHrIzcDhL+wmctDJeu7zOQKQRyC/HxEDBD73YAmhqwVKT26ZNUfR8/6665Z5 DI5Pwby7zrb+dR1cW8lVRYBXuNYjcUkFIh1tzPjlwtvYbOZohMa2mAJNMesz7aJw 3dTRiNmFpJv6MVZqKMkd1MgDhdk4RGhsSUTaKFG4omYFYjY8oA6q8QXEdJFmC3Mv diOhXyrxP9FTbM5VnzaHhnoNzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIBuN6p uB+cxzbLxI3caGNbsd5WMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeYupBLvO+kLmvmPSs58g5rhAFfyDuINetet60PI1dVEP803kT1fHaUSjcrvx qdPOH5bCXS9iGdjf+bc2sn8XCBMKLxC7ZnfxfaM9I1Nt/A8eTtzuCL8vLhwDcxZT M0Y1QLJzm3G+j3EAo+vRNod7DqRn0YhXW2IuVbUcmoVxggtH3v7NzIDo4t0yRbBF pWTeA4aB0fm6S8bWpb7bWBnwjqOQnQYUrYXxREZ1IsPlh7yywXjSdRkuq9skl6O+ vsrwqnabIboJacZ9jklaRA+vA9EhLApI5gM2BNyFWWioJvV20cx4YS1oVlEYuV9G Wn3Yf6PWIAztfo9f66CgAzn9FQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:05:41 2026 by rpki-client