$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: DzZnA1Udpf3+ArziOxS5Bw5Fz/7xTGGh+RK5pBYDqBM= Subject key identifier: A7:76:0C:38:98:C2:C3:1A:B6:FA:BC:E0:70:B4:15:7B:22:32:FF:C6 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: A5 Signing time: Sun 05 Apr 2026 06:40:27 +0000 Manifest this update: Sun 05 Apr 2026 06:40:26 +0000 Manifest next update: Sun 12 Apr 2026 06:40:26 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: yGuZI8M2Xg3u9Kgtkmlxi65W0cYo+81vHNDClq2NgwI=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Apr 5 06:40:26 2026 GMT Not After : Apr 12 06:40:26 2026 GMT Subject: CN=69d203db-3d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:59:49:a7:f1:53:e4:78:77:53:25:97:24: 45:0f:72:c8:fe:74:41:cd:2f:de:bb:22:cf:09:24: e0:be:6b:1c:84:f0:10:90:ea:a1:25:b5:a1:8e:d4: 7b:08:eb:4b:67:00:1b:65:8f:37:25:58:4c:eb:ba: 93:c3:f6:e6:d9:14:3f:bc:08:82:71:b4:73:63:72: 19:8f:4f:4e:ce:fd:b5:b6:f5:bc:f0:26:81:3b:c8: 62:53:e1:8d:42:7f:40:41:d5:3f:db:23:a9:e4:11: 50:4e:51:35:2f:2f:eb:18:f0:50:a0:fa:7b:76:3b: 04:d3:d3:98:af:b6:2b:c1:35:09:9f:8a:36:12:62: 04:74:52:2d:82:fe:cb:fc:40:01:dd:8a:9f:a6:b7: ca:84:8c:b7:c2:02:73:26:a4:c5:26:08:c7:eb:48: 30:41:3c:bf:c4:ff:a7:2c:d9:98:eb:3c:29:6c:1a: 15:7a:29:a5:de:9d:3d:33:ab:ec:e2:8c:43:4d:fd: e4:c1:06:26:e7:65:8a:bd:e9:28:16:11:47:d6:fc: d9:7e:2b:38:e5:4a:89:ce:03:71:99:3a:d0:77:3f: 97:b6:1a:ea:63:3a:d1:75:20:35:8b:9a:42:c2:b0: 7e:65:22:d7:7d:58:36:12:62:20:9c:54:ef:00:9c: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:76:0C:38:98:C2:C3:1A:B6:FA:BC:E0:70:B4:15:7B:22:32:FF:C6 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:4b:62:80:97:19:e0:80:31:96:0d:e1:b4:4b:cd:fb:31:cd: bf:69:e3:04:ad:9c:11:2f:15:1c:e9:70:04:35:86:5d:4f:d0: 04:5d:a8:c9:a3:44:ee:09:35:11:13:5f:c8:a4:aa:d2:29:19: 6a:7f:7a:39:ec:81:5f:d2:7e:9a:bf:16:f3:82:47:c3:19:6f: 31:ab:c6:35:dc:07:20:8b:5c:4a:15:95:9d:18:cb:fd:c8:a9: 98:28:fc:39:5e:9a:ad:24:6f:63:18:03:ee:72:e7:93:b1:38: 27:aa:33:30:35:18:00:18:d1:61:eb:bc:7a:d5:36:8d:f2:2f: 37:30:ea:34:d9:07:6c:9d:f6:d9:93:39:ed:34:15:92:b8:84: 11:cd:4d:5e:51:92:c5:b2:d8:4a:4d:f0:d2:4d:12:5e:ec:6e: f1:59:70:4f:a0:26:41:a6:62:d6:06:19:fe:0a:ab:91:6b:da: 9a:65:fb:9a:df:e5:83:c1:94:13:1b:8c:1a:d1:30:b3:95:37: 87:36:4a:2b:f0:97:73:1e:dc:32:5a:48:6d:e3:ee:3c:ae:72: e1:a4:1c:ad:b8:1d:8d:8a:04:0d:54:6b:33:fb:71:08:c8:78: b5:81:04:60:7a:2f:9c:e8:85:b8:d1:24:1b:99:4e:29:74:6b: 03:9a:0e:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwNDA1MDY0MDI2WhcNMjYwNDEyMDY0MDI2WjAYMRYwFAYD VQQDEw02OWQyMDNkYi0zZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2RZSafxU+R4d1MllyRFD3LI/nRBzS/euyLPCSTgvmschPAQkOqhJbWhjtR7 COtLZwAbZY83JVhM67qTw/bm2RQ/vAiCcbRzY3IZj09Ozv21tvW88CaBO8hiU+GN Qn9AQdU/2yOp5BFQTlE1Ly/rGPBQoPp7djsE09OYr7YrwTUJn4o2EmIEdFItgv7L /EAB3YqfprfKhIy3wgJzJqTFJgjH60gwQTy/xP+nLNmY6zwpbBoVeiml3p09M6vs 4oxDTf3kwQYm52WKvekoFhFH1vzZfis45UqJzgNxmTrQdz+XthrqYzrRdSA1i5pC wrB+ZSLXfVg2EmIgnFTvAJyl2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKd2DDiY wsMatvq84HC0FXsiMv/GMB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMktigJcZ4IAxlg3htEvN+zHNv2njBK2cES8VHOlwBDWGXU/QBF2oyaNE7gk1 ERNfyKSq0ikZan96OeyBX9J+mr8W84JHwxlvMavGNdwHIItcShWVnRjL/cipmCj8 OV6arSRvYxgD7nLnk7E4J6ozMDUYABjRYeu8etU2jfIvNzDqNNkHbJ322ZM57TQV kriEEc1NXlGSxbLYSk3w0k0SXuxu8VlwT6AmQaZi1gYZ/gqrkWvammX7mt/lg8GU ExuMGtEws5U3hzZKK/CXcx7cMlpIbePuPK5y4aQcrbgdjYoEDVRrM/txCMh4tYEE YHovnOiFuNEkG5lOKXRrA5oOoA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:07 2026 by rpki-client