$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: XSQbUv+6v/ObwaoDi00PUMTe7nNi6Pl2DM7CO3CNqn0= Subject key identifier: 9C:EA:87:3E:86:98:8A:F1:1A:D7:B7:92:FD:E2:67:B6:BE:5A:F1:B3 Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 01DF Signing time: Sun 05 Apr 2026 02:57:44 +0000 Manifest this update: Sun 05 Apr 2026 02:57:44 +0000 Manifest next update: Sun 12 Apr 2026 02:57:44 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: Xe93PRzEk2e5+v2hU8fACJudxFIVOqz6/NDfkjE0uXs=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: O9lCjMQypdSGWG3ll22zLdodDNP/53eTRSGfWnDPLFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Apr 5 02:57:44 2026 GMT Not After : Apr 12 02:57:44 2026 GMT Subject: CN=69d1cfa8-a1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:1d:d4:fc:a1:f0:41:41:1c:75:5a:78:f4: f1:ac:05:67:09:10:d5:71:6f:a7:1d:60:21:61:13: 4c:46:e5:db:eb:8f:8f:0a:d0:b2:32:bb:b3:fe:6c: d0:15:39:38:16:5b:25:f8:3a:d5:95:32:49:4e:8b: e2:18:ca:a0:6f:13:ec:a1:d0:40:c2:89:b0:c9:17: bc:ed:f6:84:f1:e3:d2:73:6d:a2:ed:51:ca:d3:f3: d2:de:0e:57:27:f1:b7:84:7c:95:35:2c:31:f5:ae: c7:df:5f:7a:c1:4d:8d:fa:18:af:7a:6f:f5:3f:fc: c0:7e:05:30:75:cf:49:9d:d4:5b:be:4a:64:d1:5c: c8:da:a1:0e:e8:d3:e6:04:d0:d7:89:1d:87:c8:22: a7:54:59:69:cb:b8:b9:70:07:18:b2:d1:33:83:56: 31:ea:a0:cf:a3:1f:eb:4d:9b:45:c1:9c:cb:71:14: fb:4d:7e:e6:22:5e:dd:65:b2:83:df:30:f5:41:ff: e7:f0:f9:21:6d:5c:25:84:6b:47:08:7f:2e:c6:2f: 7c:28:59:9b:ed:27:9a:2a:68:f5:0e:d5:69:8c:52: fa:f9:fc:c5:02:b7:1e:7b:1e:c5:dd:f5:94:5f:61: af:16:72:57:81:7b:9f:39:97:b4:99:12:a0:0d:2b: be:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EA:87:3E:86:98:8A:F1:1A:D7:B7:92:FD:E2:67:B6:BE:5A:F1:B3 X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:40:eb:04:5c:da:fe:dd:d8:c8:af:54:35:f6:92:e3:61:72: d6:14:3d:d8:72:84:bf:89:1c:5d:ea:12:0d:d1:51:c7:b6:a2: f8:c4:5a:d4:cc:19:c1:6e:0d:7a:25:f1:2b:20:42:4e:1d:e9: 86:79:81:cc:30:4d:a8:7a:ae:65:e5:d1:7d:69:5b:19:c8:a3: fa:81:e7:4c:8c:10:36:b4:55:f2:48:12:3c:a9:09:a6:b9:c5: 72:12:17:ac:b9:0a:cc:5b:ac:50:d9:b1:8f:af:95:b7:56:f0: 37:dc:93:09:00:8a:7c:b6:c5:53:61:a3:1f:35:0c:20:a6:f1: a4:27:e6:3c:d5:de:3a:b1:2d:7b:51:96:85:64:50:27:8e:4c: c4:77:01:f9:18:c1:4e:cd:2d:ea:0c:0f:84:35:0a:65:bb:62: 78:e1:e2:e1:4a:9c:86:37:22:c0:24:ab:b6:43:ca:ef:0c:06: f6:28:e7:63:f6:94:69:f9:6a:74:43:f3:e1:b1:2e:12:e1:4b: a7:04:9a:99:de:8d:68:ff:5e:12:49:5a:3b:2d:36:4a:e5:5e: ac:9d:61:ee:94:96:22:44:c2:64:b4:00:16:f4:1a:ec:71:dc: cd:c8:c0:6c:82:2e:65:8b:55:8c:5d:3e:52:67:fe:8b:f9:b1: af:d6:53:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjYwNDA1MDI1NzQ0WhcNMjYwNDEyMDI1NzQ0WjAYMRYwFAYD VQQDEw02OWQxY2ZhOC1hMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1psd1Pyh8EFBHHVaePTxrAVnCRDVcW+nHWAhYRNMRuXb64+PCtCyMruz/mzQ FTk4Flsl+DrVlTJJToviGMqgbxPsodBAwomwyRe87faE8ePSc22i7VHK0/PS3g5X J/G3hHyVNSwx9a7H3196wU2N+hivem/1P/zAfgUwdc9JndRbvkpk0VzI2qEO6NPm BNDXiR2HyCKnVFlpy7i5cAcYstEzg1Yx6qDPox/rTZtFwZzLcRT7TX7mIl7dZbKD 3zD1Qf/n8PkhbVwlhGtHCH8uxi98KFmb7SeaKmj1DtVpjFL6+fzFArceex7F3fWU X2GvFnJXgXufOZe0mRKgDSu+rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzqhz6G mIrxGte3kv3iZ7a+WvGzMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlUDrBFza/t3YyK9UNfaS42Fy1hQ92HKEv4kcXeoSDdFRx7ai+MRa1MwZwW4N eiXxKyBCTh3phnmBzDBNqHquZeXRfWlbGcij+oHnTIwQNrRV8kgSPKkJprnFchIX rLkKzFusUNmxj6+Vt1bwN9yTCQCKfLbFU2GjHzUMIKbxpCfmPNXeOrEte1GWhWRQ J45MxHcB+RjBTs0t6gwPhDUKZbtieOHi4UqchjciwCSrtkPK7wwG9ijnY/aUaflq dEPz4bEuEuFLpwSamd6NaP9eEklaOy02SuVerJ1h7pSWIkTCZLQAFvQa7HHczcjA bIIuZYtVjF0+Umf+i/mxr9ZTFA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:53 2026 by rpki-client