$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: sn1Su/DBCOKbIAzJSBSnvxAvnNMcWmrkcV5va94AsTY= Subject key identifier: 7D:60:DC:55:5D:C4:52:18:18:6E:7E:AE:72:3C:55:C6:DE:98:3B:74 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 356C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 3539 Signing time: Sat 18 Apr 2026 15:09:04 +0000 Manifest this update: Sat 18 Apr 2026 15:09:03 +0000 Manifest next update: Sat 25 Apr 2026 15:09:03 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: jqdRSH3x8NgSm4UbsFxIPD6JpjXA5TiXn8MfCfhU0jA=) 2: AF01BDAE331211F1A2C10B79B1833773.roa (hash: +lp+LJ18Jwi0gflyPYkZccPDvT37HJQu97mBM2XRD3I=) 3: 504CB1588D3911F093856C71C4F9AE02.roa (hash: XbsPrmHsv3A3kJ0QH0nWqPm+aVwo38LG2afXIGK/eHk=) 4: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: IHiT2JkC8madnsWfQDkJBYO++lG67IBJ1W4/S66TXLY=) 5: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: 5cXLpNEPj2n6/HEGy8/26JkT8yzOfvZLJ/SaAIq5f84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13676 (0x356c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Apr 18 15:09:03 2026 GMT Not After : Apr 25 15:09:03 2026 GMT Subject: CN=69e39e8f-1bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:dc:45:75:09:38:c6:d4:d3:8c:9c:0c:1e: d0:38:77:ae:b0:1e:32:56:7b:eb:23:44:0a:2e:38: a4:6f:14:dd:91:ec:31:48:ee:0c:0a:c7:e1:f6:87: 98:ea:47:32:14:43:93:d3:69:6e:71:1e:5e:b6:18: 65:4c:f4:0b:b0:74:56:a6:e7:e9:48:f7:ac:0c:f7: bc:58:3f:90:8e:a0:25:4e:9c:55:36:04:88:d3:01: c6:42:30:aa:e6:dc:2a:52:10:2f:f8:b6:23:66:3c: eb:f3:19:01:f8:16:6a:ff:d6:93:9b:cd:7b:17:66: b0:d2:85:73:25:d3:39:15:21:23:cb:a9:b6:b2:32: 8e:ba:53:f9:04:28:33:8a:d6:d5:fc:2a:28:11:e0: 59:ce:4f:28:f6:f7:02:46:28:34:3b:66:f7:fd:ea: 3e:91:71:94:56:d2:1e:a5:12:0a:40:f4:b7:45:12: e8:2a:2f:1a:fe:78:29:7b:a4:ca:d0:22:13:8d:1d: f7:56:51:aa:85:34:14:29:12:b0:df:86:a7:b4:1a: fb:9f:03:65:c2:99:92:88:b3:21:f3:95:11:23:a7: 34:cd:8b:6c:bd:94:b7:11:a4:53:8f:a1:e6:1a:7d: 9a:e6:52:57:e4:c4:04:7e:02:ee:68:bc:0c:00:86: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:60:DC:55:5D:C4:52:18:18:6E:7E:AE:72:3C:55:C6:DE:98:3B:74 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:41:de:43:bc:4d:0c:2d:c3:16:f4:3d:c5:e9:a3:17:58:5e: e4:07:72:2f:a7:b6:c0:e3:10:44:f5:72:1b:b9:a3:2b:c3:47: 55:d0:dc:34:75:28:50:7e:e1:21:50:4a:d4:8b:19:28:df:ab: cb:6b:a6:f3:30:c0:bb:e0:51:03:4c:f0:e8:a1:72:8d:b1:4d: fe:9d:0f:12:2c:bd:60:73:ea:8a:05:20:18:b7:74:3f:d6:39: dd:a0:c9:46:82:32:d2:d2:56:ad:81:4c:47:bb:dd:b2:bc:79: 48:4a:f6:e5:07:48:d2:0e:07:d7:94:c1:b6:4a:e7:9c:82:ef: 26:bd:91:d1:d9:85:24:35:e8:5b:8c:a7:e6:89:48:19:f6:70: b9:81:67:27:f2:83:c6:5a:93:3c:4e:db:c0:84:8f:5d:cc:ef: 23:34:ea:2e:ee:31:62:e5:1a:e5:44:e9:22:0d:42:00:0f:57: 4f:7f:ae:3d:ec:48:45:f3:a2:5a:6c:f2:b8:7a:1e:62:bd:51: bf:f9:91:5f:df:d1:ac:c9:a1:52:77:bb:37:29:cf:31:07:f1: 32:56:4d:49:93:3b:7d:0d:7a:d7:c4:43:8a:6c:91:23:c6:79: 66:97:d3:0b:bc:b4:cc:07:8b:25:fa:9d:bb:e3:10:8b:9d:50: ba:31:8f:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjYwNDE4MTUwOTAzWhcNMjYwNDI1MTUwOTAzWjAYMRYwFAYD VQQDEw02OWUzOWU4Zi0xYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOfcRXUJOMbU04ycDB7QOHeusB4yVnvrI0QKLjikbxTdkewxSO4MCsfh9oeY 6kcyFEOT02lucR5ethhlTPQLsHRWpufpSPesDPe8WD+QjqAlTpxVNgSI0wHGQjCq 5twqUhAv+LYjZjzr8xkB+BZq/9aTm817F2aw0oVzJdM5FSEjy6m2sjKOulP5BCgz itbV/CooEeBZzk8o9vcCRig0O2b3/eo+kXGUVtIepRIKQPS3RRLoKi8a/ngpe6TK 0CITjR33VlGqhTQUKRKw34antBr7nwNlwpmSiLMh85URI6c0zYtsvZS3EaRTj6Hm Gn2a5lJX5MQEfgLuaLwMAIbe2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1g3FVd xFIYGG5+rnI8VcbemDt0MB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAakHeQ7xNDC3DFvQ9xemjF1he5AdyL6e2wOMQRPVyG7mjK8NHVdDcNHUoUH7h IVBK1IsZKN+ry2um8zDAu+BRA0zw6KFyjbFN/p0PEiy9YHPqigUgGLd0P9Y53aDJ RoIy0tJWrYFMR7vdsrx5SEr25QdI0g4H15TBtkrnnILvJr2R0dmFJDXoW4yn5olI GfZwuYFnJ/KDxlqTPE7bwISPXczvIzTqLu4xYuUa5UTpIg1CAA9XT3+uPexIRfOi WmzyuHoeYr1Rv/mRX9/RrMmhUne7NynPMQfxMlZNSZM7fQ1618RDimyRI8Z5ZpfT C7y0zAeLJfqdu+MQi51QujGPyw== -----END CERTIFICATE-----Generated at Sat Apr 18 21:08:19 2026 by rpki-client