$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: cRa6p7BRvLL6wvRmwFXkPzH0nnLQGANVguGPxwMyOPo= Subject key identifier: 44:26:66:10:5E:95:FA:6F:8B:67:EC:DB:0C:3D:39:88:CC:8C:D2:B8 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 0872 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 0865 Signing time: Sat 04 Apr 2026 20:31:48 +0000 Manifest this update: Sat 04 Apr 2026 20:31:48 +0000 Manifest next update: Sat 11 Apr 2026 20:31:48 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: wcwhLRsyG5kHzwqTOSr2SxWCQfSZ+KCJQxvmxyOsRIQ=) 2: B08421401D2C11F1AC765BFB153D8C67.roa (hash: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU=) 3: 137DD3E8E60C11F0A18B1E57676F56BC.roa (hash: uV78r469K9kpBYYycBaJqz/OEoI2cFdGsz5vaAFm0kA=) 4: 8FB8171E1D2C11F18BD061F8153D8C67.roa (hash: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo=) 5: DFBB127A1FD911F18338B27E3F3D8C67.roa (hash: /SYY7WeR+aA+gbxGrf5qM5FajASTqqxf81wX3CNIlA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2162 (0x872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Apr 4 20:31:48 2026 GMT Not After : Apr 11 20:31:48 2026 GMT Subject: CN=69d17534-2d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:85:9b:cb:f2:ba:40:53:09:cf:05:2a:bb: e5:c2:fa:5c:ac:58:c6:1c:32:bb:bf:00:e6:60:c6: ea:6b:13:45:9b:e7:9a:97:09:12:0e:7f:90:c6:6e: 94:4e:8c:32:89:8f:a6:c0:e8:c7:b3:fb:a3:d0:5f: 61:02:f9:db:c0:eb:bd:b3:9d:3a:ee:55:a0:e2:f3: 19:c8:8b:49:13:14:89:a3:e2:ce:d0:92:e1:a1:bf: c0:28:a2:d3:ae:ca:c9:da:ed:75:8c:21:60:af:00: b2:46:91:7e:4c:00:e9:43:de:f6:91:b2:60:86:de: 89:9a:a1:ad:d7:d5:6b:c0:2e:c2:ac:e2:ec:e1:05: e2:5f:69:12:c7:90:60:51:68:d5:42:b0:3b:e5:08: ec:31:88:72:06:57:92:89:92:f9:f9:33:35:bc:04: b8:c4:82:af:46:a8:7d:1b:b9:25:c6:67:68:78:c3: 95:90:71:64:f7:4b:b2:cf:d5:94:15:22:31:f0:f4: 59:a5:c0:04:07:36:b3:d2:5d:bc:e4:20:24:ee:e0: 59:53:d8:b7:ee:0a:7c:69:c5:a2:84:59:91:bf:85: 6e:20:4d:6d:0a:30:e2:c3:4a:b6:e2:65:60:64:af: 4e:22:20:10:cc:6e:32:5c:de:7f:83:b2:a9:21:b1: f9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:26:66:10:5E:95:FA:6F:8B:67:EC:DB:0C:3D:39:88:CC:8C:D2:B8 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d6:85:49:ad:6a:aa:a8:94:87:12:c2:fa:04:7e:b2:fd:72: 91:cf:a2:3e:56:18:02:36:86:73:b9:f1:74:7e:0c:99:82:07: 62:1e:00:28:13:bf:ca:c7:28:1b:7e:d1:d7:f4:66:db:83:72: 21:ad:ab:db:91:aa:ae:a7:93:2c:a6:dc:ea:10:29:c5:3a:54: 05:6a:f4:94:c0:f9:d8:1d:48:0a:8a:0d:a9:47:bc:55:f8:fa: 63:f2:a5:90:06:49:6e:ca:62:87:b1:f1:61:32:70:e2:e2:dd: 5b:a5:56:54:92:12:93:b3:1c:80:46:05:e7:cc:64:f2:9c:2c: 3a:9a:82:c2:db:3f:de:e9:2e:cb:84:52:61:0c:01:0c:d4:ce: 7b:b9:35:33:61:6e:f0:95:52:39:6d:c3:62:72:57:e7:67:73: 62:12:76:02:2e:9b:b9:8c:7b:14:e7:73:8f:1a:a1:0b:0c:2e: 96:f8:db:d3:98:23:50:58:2d:60:05:5f:3a:7b:17:22:80:ee: 0c:f5:dc:b1:1d:f3:89:a3:bd:60:f5:9b:91:73:7c:5f:eb:7e: 4b:98:94:e6:d8:68:f4:3b:4f:9e:1d:0f:82:53:ef:ef:41:bc: 0a:36:50:d7:97:b8:1d:fc:55:c3:53:da:87:3e:3a:9d:4b:b1: ce:b4:da:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjYwNDA0MjAzMTQ4WhcNMjYwNDExMjAzMTQ4WjAYMRYwFAYD VQQDEw02OWQxNzUzNC0yZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp96Fm8vyukBTCc8FKrvlwvpcrFjGHDK7vwDmYMbqaxNFm+ealwkSDn+Qxm6U TowyiY+mwOjHs/uj0F9hAvnbwOu9s5067lWg4vMZyItJExSJo+LO0JLhob/AKKLT rsrJ2u11jCFgrwCyRpF+TADpQ972kbJght6JmqGt19VrwC7CrOLs4QXiX2kSx5Bg UWjVQrA75QjsMYhyBleSiZL5+TM1vAS4xIKvRqh9G7klxmdoeMOVkHFk90uyz9WU FSIx8PRZpcAEBzaz0l285CAk7uBZU9i37gp8acWihFmRv4VuIE1tCjDiw0q24mVg ZK9OIiAQzG4yXN5/g7KpIbH5HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQmZhBe lfpvi2fs2ww9OYjMjNK4MB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAndaFSa1qqqiUhxLC+gR+sv1ykc+iPlYYAjaGc7nxdH4MmYIHYh4AKBO/ysco G37R1/Rm24NyIa2r25GqrqeTLKbc6hApxTpUBWr0lMD52B1ICooNqUe8Vfj6Y/Kl kAZJbspih7HxYTJw4uLdW6VWVJISk7McgEYF58xk8pwsOpqCwts/3ukuy4RSYQwB DNTOe7k1M2Fu8JVSOW3DYnJX52dzYhJ2Ai6buYx7FOdzjxqhCwwulvjb05gjUFgt YAVfOnsXIoDuDPXcsR3ziaO9YPWbkXN8X+t+S5iU5tho9DtPnh0PglPv70G8CjZQ 15e4HfxVw1Pahz46nUuxzrTaMA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:28 2026 by rpki-client