$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: ywMyr/Qe2cEuoXOMwSL5CpfxcCBsO5ks/q18jO1dUt8= Subject key identifier: E8:97:28:CB:03:88:A6:97:F7:AF:44:B5:C1:17:43:21:60:FA:CD:14 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0BA0 Signing time: Sat 04 Apr 2026 18:56:20 +0000 Manifest this update: Sat 04 Apr 2026 18:56:19 +0000 Manifest next update: Sat 11 Apr 2026 18:56:19 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: r9ZGsfwbjXMdJaH0aF3yBgSgw9OCbC774iOoV7htxrQ=) 2: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: jgODBf90PLIekmliPOAF3OzdEJpw9Z8/WZ9KJk+7ktg=) 3: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 92685NiysBbrtWZSw0HVcicqfMgScx//nGEoHRhDw1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Apr 4 18:56:19 2026 GMT Not After : Apr 11 18:56:19 2026 GMT Subject: CN=69d15ed4-614b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:f4:a2:6b:e5:14:e7:20:84:a8:e5:18:eb: 5d:dd:21:ab:0b:40:cc:8f:37:61:57:79:dd:dd:23: 54:0a:66:7a:65:2f:2f:75:c5:ad:55:b8:4d:aa:de: 0f:a8:58:57:dc:c9:77:01:3c:66:27:c9:a3:57:c9: 0a:d0:bf:72:5b:8c:ee:77:f0:29:eb:27:0a:ee:f6: 5c:3a:f7:d7:2e:33:76:cd:73:8b:71:53:97:ac:b1: bd:2c:bd:40:25:fc:69:cd:7a:58:b1:c5:53:d5:21: 23:1a:71:11:a8:fa:99:dd:05:a4:04:01:c3:9d:59: 4c:f7:8f:15:96:fe:a5:00:17:b9:62:58:88:ed:1a: 9e:16:a6:1c:75:13:11:9e:45:a3:c0:12:6d:ae:f3: 01:72:d5:a7:99:16:37:aa:8b:bb:53:e4:0c:33:a1: d3:76:bc:22:8a:a8:c9:fc:d9:33:c0:94:86:15:dc: 13:47:9f:3c:59:78:51:ba:f7:e7:7e:04:c0:8f:15: 77:96:0d:14:1c:44:c4:bf:74:d9:09:3d:a9:83:bb: 98:0b:07:ab:06:3b:97:03:34:4b:a6:ee:37:52:72: a3:2d:4d:0a:09:e3:69:be:9f:1f:72:8d:5f:29:e9: 59:fe:c7:cb:b7:fa:12:6c:63:44:78:44:21:77:e2: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:97:28:CB:03:88:A6:97:F7:AF:44:B5:C1:17:43:21:60:FA:CD:14 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b8:5a:f8:e1:77:c5:e9:a9:e4:8c:33:7e:c4:f1:e0:3e:c9: b3:f1:4d:c0:c1:39:a0:28:ad:88:de:45:28:ec:a7:27:01:5d: 52:92:d8:85:01:33:68:d3:49:a3:6a:07:53:94:a4:50:5b:fa: 0f:a8:dc:b8:fe:65:3c:01:82:30:33:86:9f:d5:3a:45:f9:4c: 04:c3:66:bb:a3:03:7b:7a:4a:5c:c9:67:2c:e3:58:3d:02:eb: d9:9c:24:b3:c7:04:64:5b:b7:41:7c:6e:a6:d9:1e:db:5d:08: 06:63:70:d1:ca:7d:db:26:21:2e:aa:e7:80:bc:8b:9c:78:3f: 55:8a:79:5b:41:f7:0f:b0:3c:3c:87:12:b7:b3:6a:b4:03:1b: 3d:62:c9:1a:cc:ce:94:aa:eb:cb:fa:c2:ea:19:41:61:fb:a3: 37:7f:72:ca:9d:7d:e4:02:2a:a7:86:c8:fc:7c:2a:67:17:d7: 02:72:53:71:2d:2f:2e:81:a3:f0:a8:cf:b2:d5:6b:53:dd:5c: 22:aa:d5:72:ac:31:72:55:bb:d6:bc:39:b4:63:bc:94:5b:09: 25:d9:9b:20:da:47:d9:fe:31:a4:d0:33:81:61:5d:80:25:c5: 17:89:4a:8f:a0:50:99:a0:de:dc:b0:e5:fb:94:9a:2e:07:10: 5e:a5:99:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjYwNDA0MTg1NjE5WhcNMjYwNDExMTg1NjE5WjAYMRYwFAYD VQQDEw02OWQxNWVkNC02MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfX0omvlFOcghKjlGOtd3SGrC0DMjzdhV3nd3SNUCmZ6ZS8vdcWtVbhNqt4P qFhX3Ml3ATxmJ8mjV8kK0L9yW4zud/Ap6ycK7vZcOvfXLjN2zXOLcVOXrLG9LL1A JfxpzXpYscVT1SEjGnERqPqZ3QWkBAHDnVlM948Vlv6lABe5YliI7RqeFqYcdRMR nkWjwBJtrvMBctWnmRY3qou7U+QMM6HTdrwiiqjJ/NkzwJSGFdwTR588WXhRuvfn fgTAjxV3lg0UHETEv3TZCT2pg7uYCwerBjuXAzRLpu43UnKjLU0KCeNpvp8fco1f KelZ/sfLt/oSbGNEeEQhd+I8pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiXKMsD iKaX969EtcEXQyFg+s0UMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADrha+OF3xemp5IwzfsTx4D7Js/FNwME5oCitiN5FKOynJwFdUpLYhQEzaNNJ o2oHU5SkUFv6D6jcuP5lPAGCMDOGn9U6RflMBMNmu6MDe3pKXMlnLONYPQLr2Zwk s8cEZFu3QXxuptke210IBmNw0cp92yYhLqrngLyLnHg/VYp5W0H3D7A8PIcSt7Nq tAMbPWLJGszOlKrry/rC6hlBYfujN39yyp195AIqp4bI/HwqZxfXAnJTcS0vLoGj 8KjPstVrU91cIqrVcqwxclW71rw5tGO8lFsJJdmbINpH2f4xpNAzgWFdgCXFF4lK j6BQmaDe3LDl+5SaLgcQXqWZMg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:52 2026 by rpki-client