$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: aNPStVf3ewHa7XbkYLDjvnwSmWzGZiKSqkFL7X3N1rw= Subject key identifier: 77:8B:9C:D2:04:60:5F:CE:D8:47:B1:4A:43:5D:55:F8:3C:1C:37:BF Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0CE4 Signing time: Sat 04 Apr 2026 18:07:24 +0000 Manifest this update: Sat 04 Apr 2026 18:07:24 +0000 Manifest next update: Sat 11 Apr 2026 18:07:24 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: W7MySDUyxB4RusrlPdGyAGKUD8CyzG1RGOPqlWQVmjU=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: DyvlHpc+Y3k78Xna4wfmukjiR2XTaIl+kDH030UpDGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Apr 4 18:07:24 2026 GMT Not After : Apr 11 18:07:24 2026 GMT Subject: CN=69d1535c-8ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:86:ca:a3:f8:25:f2:17:36:08:a2:6d:fb: ba:c6:38:25:80:79:c7:91:2f:df:89:14:e4:ae:94: 6f:00:56:92:3c:79:9a:c0:25:ec:87:29:62:c0:7a: 61:85:e1:e5:13:15:75:65:99:24:37:84:a2:52:0b: a1:17:2e:db:62:e4:df:f1:26:2e:38:18:ba:70:42: 48:85:51:d4:7e:8e:11:45:e0:5d:ed:1a:65:2f:61: 41:66:97:fe:bd:c2:0d:e7:a2:32:86:30:85:15:52: 14:1e:88:a2:97:1c:66:69:74:e9:76:aa:6e:ab:d6: b4:95:75:35:db:ba:37:02:ec:3f:5a:b5:9b:96:7c: 1b:66:f3:40:9e:2c:54:60:81:a6:8c:63:b3:6f:98: 9d:39:29:ac:21:76:a6:e2:a7:54:d6:f3:f0:40:e5: 0e:b4:69:01:95:24:ff:14:b5:79:d7:14:de:40:fd: f4:fa:47:44:5d:02:c6:f0:69:69:04:83:1e:50:30: 12:7c:d4:b0:61:e9:6c:fb:fe:b4:5c:ff:4d:36:f0: 18:75:3a:14:e4:d5:72:72:d5:60:fc:d6:c4:5b:38: 65:b3:d8:06:c1:48:a5:a8:f3:02:89:a0:01:39:7c: 80:e9:18:46:3b:a2:40:ce:97:ca:85:dd:0b:47:68: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8B:9C:D2:04:60:5F:CE:D8:47:B1:4A:43:5D:55:F8:3C:1C:37:BF X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:af:51:30:8c:cf:b0:f7:ea:0c:b0:fb:13:42:17:8a:27:ad: 3d:f1:7d:6c:a0:f8:31:b8:bd:97:f6:ba:c9:2b:fc:d8:d1:b4: 2e:76:3d:ea:42:48:a2:e6:a0:de:0d:16:04:10:96:5d:13:07: 9d:c2:4d:9b:a8:26:de:4e:41:c2:3e:9b:b0:3b:69:bb:ee:b3: c4:7b:74:82:5c:e6:ec:ea:8d:94:56:55:a0:84:3a:ad:15:32: e5:25:bd:af:f7:8e:7c:f9:50:ec:f3:e8:68:4d:37:8c:f8:09: 4c:be:cd:56:d9:7a:30:ca:ba:a9:c4:48:13:f5:ad:7d:e9:e6: 2c:96:6a:75:f2:09:11:df:23:27:e8:ab:5f:f7:61:d9:b9:77: 74:6d:3c:15:4b:32:d0:93:43:00:91:01:9a:9f:e3:f6:9f:e7: 3b:27:bb:4f:04:f7:d4:fe:86:30:6b:80:ee:9b:27:71:8b:fe: cb:2c:e1:9c:a4:5c:47:c5:0f:22:48:bb:1b:f4:1a:41:3c:68: 0a:e3:1c:e8:ba:2d:8b:83:a1:ef:37:06:c7:98:5e:82:19:57: 78:08:9d:1b:13:e6:66:89:78:d3:8d:94:60:ea:78:ec:ce:c5: e1:f0:b2:c7:bc:f9:68:45:58:2f:5a:a0:68:d3:b9:61:06:ae: 04:82:a4:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjYwNDA0MTgwNzI0WhcNMjYwNDExMTgwNzI0WjAYMRYwFAYD VQQDEw02OWQxNTM1Yy04ZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8CGyqP4JfIXNgiibfu6xjglgHnHkS/fiRTkrpRvAFaSPHmawCXshyliwHph heHlExV1ZZkkN4SiUguhFy7bYuTf8SYuOBi6cEJIhVHUfo4RReBd7RplL2FBZpf+ vcIN56IyhjCFFVIUHoiilxxmaXTpdqpuq9a0lXU127o3Auw/WrWblnwbZvNAnixU YIGmjGOzb5idOSmsIXam4qdU1vPwQOUOtGkBlST/FLV51xTeQP30+kdEXQLG8Glp BIMeUDASfNSwYels+/60XP9NNvAYdToU5NVyctVg/NbEWzhls9gGwUilqPMCiaAB OXyA6RhGO6JAzpfKhd0LR2ieawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHeLnNIE YF/O2EexSkNdVfg8HDe/MB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACa9RMIzPsPfqDLD7E0IXiietPfF9bKD4Mbi9l/a6ySv82NG0LnY96kJIouag 3g0WBBCWXRMHncJNm6gm3k5Bwj6bsDtpu+6zxHt0glzm7OqNlFZVoIQ6rRUy5SW9 r/eOfPlQ7PPoaE03jPgJTL7NVtl6MMq6qcRIE/WtfenmLJZqdfIJEd8jJ+irX/dh 2bl3dG08FUsy0JNDAJEBmp/j9p/nOye7TwT31P6GMGuA7psncYv+yyzhnKRcR8UP Iki7G/QaQTxoCuMc6Loti4Oh7zcGx5heghlXeAidGxPmZol4042UYOp47M7F4fCy x7z5aEVYL1qgaNO5YQauBIKk4Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:41:07 2026 by rpki-client