$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: FZxNM9EPTRrKoKsC34HN85JHaYMuRTY90/F+6T06Ws4= Subject key identifier: 8C:AD:2C:96:7A:C9:BA:7F:F7:96:88:E0:99:7B:79:94:64:7C:4D:FE Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0CE0 Signing time: Sat 04 Apr 2026 18:09:00 +0000 Manifest this update: Sat 04 Apr 2026 18:08:59 +0000 Manifest next update: Sat 11 Apr 2026 18:08:59 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: HupKhz/5f4RBxNsPKHItIUzexva4lGuX/j6aMwydwYE=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Apr 4 18:08:59 2026 GMT Not After : Apr 11 18:08:59 2026 GMT Subject: CN=69d153bc-8d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:bb:3c:9a:16:2c:c3:62:56:48:35:1e:5e: 77:ec:b1:d6:d3:61:6a:f0:05:81:ec:b6:e8:c0:ca: e3:00:c6:61:72:b9:2b:35:09:0f:37:56:fa:04:53: 3d:10:bd:e3:03:da:88:69:0e:d0:82:ad:96:66:49: 0c:05:65:5a:28:b8:1d:f0:53:99:7c:36:f1:e9:37: bc:0a:3d:66:7f:d0:a4:b8:ea:75:3f:66:4d:df:46: 00:25:71:dd:27:50:d9:0a:39:c1:43:40:a7:6e:e7: 48:ad:46:38:ac:b5:b6:15:b2:5a:c4:73:a9:21:b4: 79:9d:8c:88:42:94:2d:d5:10:bd:20:51:e1:c4:67: 61:89:cd:b3:c9:d6:09:5b:25:2f:c4:0e:27:01:99: 47:b5:69:b3:2b:c5:cf:bf:5b:61:e6:47:c1:d3:e2: ee:d7:d8:06:9a:72:74:e0:16:52:6b:47:bb:e9:6e: 95:77:d0:1c:10:1b:c3:b0:9f:25:61:2f:8a:4c:43: df:1d:33:c3:ad:f7:7f:1f:55:fb:60:90:90:43:cf: 43:0b:94:ce:c5:ca:9a:90:61:3b:af:39:ae:33:de: c0:30:81:25:06:3a:87:9e:76:2c:86:c2:51:65:c1: d0:d5:13:65:db:97:0e:18:a8:38:05:bb:ce:c3:c0: 99:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:2C:96:7A:C9:BA:7F:F7:96:88:E0:99:7B:79:94:64:7C:4D:FE X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:be:37:41:b2:97:7c:9b:37:68:ca:38:bb:fd:a1:d1:7e:92: 30:83:99:32:5d:9b:30:ef:4d:a4:00:d5:2a:13:4d:75:a7:33: 99:3a:e5:6e:29:48:f9:94:3c:c0:5e:b2:52:14:4f:ab:1e:8a: 33:5a:5a:62:00:a9:ac:87:a3:71:65:02:26:ae:83:5a:db:15: db:a9:12:44:f9:1f:8e:e0:8c:59:42:e3:b3:97:bf:75:36:da: 26:c8:6d:8b:e1:b2:b3:2e:71:ff:52:bd:10:f9:92:95:a7:84: 35:3c:21:c2:24:a2:48:8a:dc:f8:53:af:56:e8:10:e3:2c:76: 22:be:28:71:76:b9:66:f1:90:c3:b3:7b:30:b5:81:a8:c6:cf: 10:b7:55:06:07:24:ea:43:53:0a:76:df:59:2a:7e:9a:77:d0: 21:5d:32:90:65:92:50:b9:20:16:99:e3:d8:1f:68:02:49:5d: 6e:2d:c9:1f:f8:2b:95:1b:0f:89:ba:e9:db:25:ec:b8:49:29: d3:d3:72:dc:76:cd:db:32:01:4c:e0:42:7a:a6:4c:62:d3:57: ca:a2:f6:e0:d2:3b:d7:e7:8d:4c:cc:a4:1b:ab:48:fa:75:89: 9b:2b:a8:5d:dc:e5:83:80:71:f8:54:9f:af:60:0e:d4:20:ac: f0:01:a7:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjYwNDA0MTgwODU5WhcNMjYwNDExMTgwODU5WjAYMRYwFAYD VQQDEw02OWQxNTNiYy04ZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GO7PJoWLMNiVkg1Hl537LHW02Fq8AWB7LbowMrjAMZhcrkrNQkPN1b6BFM9 EL3jA9qIaQ7Qgq2WZkkMBWVaKLgd8FOZfDbx6Te8Cj1mf9CkuOp1P2ZN30YAJXHd J1DZCjnBQ0CnbudIrUY4rLW2FbJaxHOpIbR5nYyIQpQt1RC9IFHhxGdhic2zydYJ WyUvxA4nAZlHtWmzK8XPv1th5kfB0+Lu19gGmnJ04BZSa0e76W6Vd9AcEBvDsJ8l YS+KTEPfHTPDrfd/H1X7YJCQQ89DC5TOxcqakGE7rzmuM97AMIElBjqHnnYshsJR ZcHQ1RNl25cOGKg4BbvOw8CZkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIytLJZ6 ybp/95aI4Jl7eZRkfE3+MB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACr43QbKXfJs3aMo4u/2h0X6SMIOZMl2bMO9NpADVKhNNdaczmTrlbilI+ZQ8 wF6yUhRPqx6KM1paYgCprIejcWUCJq6DWtsV26kSRPkfjuCMWULjs5e/dTbaJsht i+Gysy5x/1K9EPmSlaeENTwhwiSiSIrc+FOvVugQ4yx2Ir4ocXa5ZvGQw7N7MLWB qMbPELdVBgck6kNTCnbfWSp+mnfQIV0ykGWSULkgFpnj2B9oAkldbi3JH/grlRsP ibrp2yXsuEkp09Ny3HbN2zIBTOBCeqZMYtNXyqL24NI71+eNTMykG6tI+nWJmyuo Xdzlg4Bx+FSfr2AO1CCs8AGn7g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:51 2026 by rpki-client