$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft File: XZRtT0edN7zhcAywut1RosPfYg8.mft (raw, json) Hash identifier: aYJZCPb4uCIgfag1yZmnp1EsY5LACPKwi3+H750DK1s= Subject key identifier: 0B:5A:A7:1D:2C:9D:04:C5:61:E0:02:28:F2:DD:A7:1C:B3:FC:25:8A Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F Certificate issuer: /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft Manifest number: 0115 Signing time: Sun 05 Apr 2026 05:19:13 +0000 Manifest this update: Sun 05 Apr 2026 05:19:12 +0000 Manifest next update: Sun 12 Apr 2026 05:19:12 +0000 Files and hashes: 1: XZRtT0edN7zhcAywut1RosPfYg8.crl (hash: Uh6BdipxIlrCl5bsWhZVM9JESd910ox1RPpvM/PGxE4=) 2: CB24F37C033711F0B76A8520C4F9AE02.roa (hash: XEgsmSONdO5QmyZ+W6pwM4gqDm2Ruw04W/Sgse84F1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Validity Not Before: Apr 5 05:19:12 2026 GMT Not After : Apr 12 05:19:12 2026 GMT Subject: CN=69d1f0d0-e857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:00:90:48:ca:40:34:49:ce:6e:6a:be:8d: 84:10:03:e0:2b:01:af:24:f9:ac:22:e4:17:8b:1b: a9:08:29:6c:0e:80:2d:5c:fd:5b:ed:28:c4:96:ee: d0:6c:15:1a:87:4e:68:75:c8:d6:08:ab:b6:77:91: 04:23:b3:9a:13:88:9e:76:01:e0:6f:8b:eb:50:67: c3:b6:85:59:9b:69:47:6c:73:d8:cc:51:bf:04:1f: 41:84:0b:94:a1:a7:00:23:96:d6:73:44:57:f3:bb: 40:ff:93:7b:95:22:e8:3f:cf:40:71:c4:00:0d:e7: 79:92:23:97:56:4e:97:cc:d1:29:88:96:53:8f:b6: 48:55:5c:57:a0:36:08:9a:e2:f4:99:15:e4:30:b7: f9:77:7a:ad:c4:b6:fd:88:9d:4c:b4:ea:f6:2f:dd: 5d:26:f3:dc:b0:8b:e8:e5:a5:73:5b:b7:39:5d:07: 4f:ff:20:6f:a7:79:3e:f7:fb:f1:7b:88:4f:4e:54: d9:bb:ce:bb:40:36:f5:97:8c:cc:69:22:21:3d:20: ee:4b:d2:d1:75:c1:f5:97:da:9c:bf:7a:1a:12:79: e0:d4:89:66:68:47:e5:75:cf:6c:53:0f:a3:9d:c3: dc:c5:7d:18:85:bf:07:3d:1e:63:af:d9:f3:13:74: 0f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5A:A7:1D:2C:9D:04:C5:61:E0:02:28:F2:DD:A7:1C:B3:FC:25:8A X509v3 Authority Key Identifier: keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fb:83:0f:82:05:39:18:cb:ad:29:29:c2:c6:ca:cc:27:13: a2:3e:70:61:2d:a6:25:86:56:42:74:82:15:5b:00:52:8f:63: 43:8b:8a:25:c8:df:87:4f:79:c1:28:66:b4:06:e9:db:a8:25: 6b:ae:12:f9:a1:4e:ef:57:80:d3:50:5e:11:de:40:a8:06:46: a8:d3:36:55:61:da:0b:a8:cd:6b:d2:7a:c0:27:4d:ee:dd:9f: c1:d3:5f:b8:e4:d3:ed:4e:a3:e1:85:39:11:97:d8:fe:e5:54: 0d:e9:08:4e:42:d0:2d:f4:7d:b5:f2:e1:ed:5b:c1:c4:33:dc: 00:14:54:32:e8:1e:8b:97:e6:eb:6d:e2:38:0f:43:83:65:d2: a0:be:27:ab:e1:7b:3b:4d:4f:e2:c0:af:ef:0a:f4:6d:10:22: c1:a2:7d:e7:81:a0:0d:c1:27:ed:13:c4:24:bb:08:d9:ad:d7: af:18:df:3e:d6:28:8e:77:9c:25:e0:9f:87:2d:55:8f:fa:b4: 74:f1:f1:5d:ff:4c:16:0f:c1:18:00:e6:26:d3:77:a4:62:ed: a1:6f:f2:16:8b:3d:60:23:32:f7:e4:2d:69:8e:fc:60:5f:45: 4d:c0:22:20:4f:82:7b:d6:72:97:74:46:22:68:ec:80:80:8d: 61:b6:f7:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3ODcxMTAvBgNVBAUTKDVEOTQ2RDRGNDc5RDM3QkNFMTcwMENCMEJBREQ1MUEy QzNERjYyMEYwHhcNMjYwNDA1MDUxOTEyWhcNMjYwNDEyMDUxOTEyWjAYMRYwFAYD VQQDEw02OWQxZjBkMC1lODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfoAkEjKQDRJzm5qvo2EEAPgKwGvJPmsIuQXixupCClsDoAtXP1b7SjElu7Q bBUah05odcjWCKu2d5EEI7OaE4iedgHgb4vrUGfDtoVZm2lHbHPYzFG/BB9BhAuU oacAI5bWc0RX87tA/5N7lSLoP89AccQADed5kiOXVk6XzNEpiJZTj7ZIVVxXoDYI muL0mRXkMLf5d3qtxLb9iJ1MtOr2L91dJvPcsIvo5aVzW7c5XQdP/yBvp3k+9/vx e4hPTlTZu867QDb1l4zMaSIhPSDuS9LRdcH1l9qcv3oaEnng1IlmaEfldc9sUw+j ncPcxX0Yhb8HPR5jr9nzE3QPGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAtapx0s nQTFYeACKPLdpxyz/CWKMB8GA1UdIwQYMBaAFF2UbU9HnTe84XAMsLrdUaLD32IP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yMjg2NTYyQThG NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi9YWlJ0VDBlZE43emhjQXl3dXQxUm9zUGZZ ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1haUnRUMGVkTjd6aGNBeXd1dDFSb3NQZllnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mjc4Ny8yMjg2NTYyQThGNzkxMUVGOTJBQzc4MUVDNEY5QUUwMi9YWlJ0VDBlZE43 emhjQXl3dXQxUm9zUGZZZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFvuDD4IFORjLrSkpwsbKzCcToj5wYS2mJYZWQnSCFVsAUo9jQ4uKJcjfh095 wShmtAbp26gla64S+aFO71eA01BeEd5AqAZGqNM2VWHaC6jNa9J6wCdN7t2fwdNf uOTT7U6j4YU5EZfY/uVUDekITkLQLfR9tfLh7VvBxDPcABRUMugei5fm623iOA9D g2XSoL4nq+F7O01P4sCv7wr0bRAiwaJ954GgDcEn7RPEJLsI2a3XrxjfPtYojnec JeCfhy1Vj/q0dPHxXf9MFg/BGADmJtN3pGLtoW/yFos9YCMy9+QtaY78YF9FTcAi IE+Ce9Zyl3RGImjsgICNYbb3MA== -----END CERTIFICATE-----Generated at Mon Apr 6 14:34:33 2026 by rpki-client