$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: 7q+A7C+Z7T66znXZBDs6kCj7CuC2JAGsOIEE+N44/Mo= Subject key identifier: 5B:67:D7:AC:B3:98:87:20:75:ED:51:BE:D1:A8:85:17:EA:F1:16:56 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 080F Signing time: Sat 04 Apr 2026 21:01:31 +0000 Manifest this update: Sat 04 Apr 2026 21:01:31 +0000 Manifest next update: Sat 11 Apr 2026 21:01:31 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: snnxlrzjQ+rubt7TH6c5ceXTbabEYMZTd7n/mXe9jw0=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 9WkU0MG65lqjQrS/cbUMSYyvQ66+hlJyNvzSbxcBRt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Apr 4 21:01:31 2026 GMT Not After : Apr 11 21:01:31 2026 GMT Subject: CN=69d17c2b-aa50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:81:0b:64:5b:af:63:88:ea:99:a0:93:93: a4:d1:b8:1b:f4:55:99:76:8d:f3:68:94:33:ce:8c: fe:60:c5:f9:aa:77:0b:d4:85:a3:7c:7a:c4:35:82: f0:e7:1f:e4:ef:34:b2:44:78:19:5c:f8:a3:57:b1: 0c:f7:bf:a2:04:ac:8f:11:81:92:53:85:0a:64:46: 4a:45:f4:dc:5b:50:84:05:ca:de:f7:ba:24:ad:1c: e0:2e:20:4f:06:a3:50:2f:9e:ec:65:09:6e:7d:d6: a0:8d:56:97:77:5d:83:4b:1a:89:97:70:8e:1a:58: 13:2f:a2:aa:63:bd:2d:59:ec:51:e9:af:76:0a:c9: f8:8b:5a:97:b2:36:1b:15:e2:6f:2f:c3:5e:95:ba: 7a:d0:09:b3:b1:ac:44:06:e4:0f:63:c8:69:9f:58: 94:e5:5d:26:3d:30:f2:ab:55:ae:b9:b7:85:e8:8c: 0a:13:7b:62:79:5d:2e:41:f7:a7:a9:8b:79:be:f4: 44:fe:f9:c5:35:99:68:bc:36:1f:0f:9d:01:51:e6: 0a:6d:a6:93:15:62:b3:bf:03:8c:9a:db:54:d8:3f: 6d:f5:17:58:2d:8d:b8:62:76:a3:b4:5c:70:bb:2b: f5:70:9f:33:03:61:78:d2:3e:45:11:a3:85:92:50: fa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:67:D7:AC:B3:98:87:20:75:ED:51:BE:D1:A8:85:17:EA:F1:16:56 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:f4:b2:d7:3d:d9:a0:bd:a9:d3:e6:7e:81:ce:3e:26:e5:22: 1e:da:24:6c:2f:8d:ab:42:01:59:0d:e6:89:0f:13:70:c2:8f: c7:b4:cf:d4:f1:b2:a1:6a:37:43:11:d2:f9:7c:9d:bc:59:53: 10:14:cc:4a:ea:b4:55:64:fa:3b:16:8f:ad:cc:60:03:05:d8: 86:79:33:14:bd:03:b8:3f:97:dc:f8:e2:d8:09:09:a4:dd:80: da:57:9e:38:9a:1e:ee:6f:97:27:db:13:3e:58:1c:81:b2:48: 0c:54:4c:0c:06:1c:90:3f:cc:43:d7:cf:da:4d:13:8a:ee:17: 6f:f2:48:96:93:a9:ed:6f:b8:67:85:5b:08:ed:25:de:1c:db: 0e:99:ef:bb:df:40:d9:74:78:7a:d5:1e:f0:38:95:82:b6:3f: ee:46:08:2d:db:72:c1:95:bc:1a:58:7c:c3:d7:f1:49:7d:5a: be:23:2f:b8:52:dc:6d:22:c3:30:f5:40:c3:25:2f:2a:83:70: 3b:1b:fc:8c:3a:70:ec:b3:83:b1:c8:11:fb:fb:29:1b:4c:36: 41:77:47:57:5a:d7:62:ff:c5:54:e5:c7:92:b2:70:29:a7:ae: 64:a5:ea:20:33:55:63:47:d3:45:c9:a3:ac:5d:75:f6:3c:c7: 17:0c:4c:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjYwNDA0MjEwMTMxWhcNMjYwNDExMjEwMTMxWjAYMRYwFAYD VQQDEw02OWQxN2MyYi1hYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1N+BC2Rbr2OI6pmgk5Ok0bgb9FWZdo3zaJQzzoz+YMX5qncL1IWjfHrENYLw 5x/k7zSyRHgZXPijV7EM97+iBKyPEYGSU4UKZEZKRfTcW1CEBcre97okrRzgLiBP BqNQL57sZQlufdagjVaXd12DSxqJl3COGlgTL6KqY70tWexR6a92Csn4i1qXsjYb FeJvL8Nelbp60AmzsaxEBuQPY8hpn1iU5V0mPTDyq1WuubeF6IwKE3tieV0uQfen qYt5vvRE/vnFNZlovDYfD50BUeYKbaaTFWKzvwOMmttU2D9t9RdYLY24YnajtFxw uyv1cJ8zA2F40j5FEaOFklD69wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtn16yz mIcgde1RvtGohRfq8RZWMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2/Sy1z3ZoL2p0+Z+gc4+JuUiHtokbC+Nq0IBWQ3miQ8TcMKPx7TP1PGyoWo3 QxHS+XydvFlTEBTMSuq0VWT6OxaPrcxgAwXYhnkzFL0DuD+X3Pji2AkJpN2A2lee OJoe7m+XJ9sTPlgcgbJIDFRMDAYckD/MQ9fP2k0Tiu4Xb/JIlpOp7W+4Z4VbCO0l 3hzbDpnvu99A2XR4etUe8DiVgrY/7kYILdtywZW8Glh8w9fxSX1aviMvuFLcbSLD MPVAwyUvKoNwOxv8jDpw7LODscgR+/spG0w2QXdHV1rXYv/FVOXHkrJwKaeuZKXq IDNVY0fTRcmjrF119jzHFwxMjA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:24:33 2026 by rpki-client