$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft File: xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json) Hash identifier: y0+nRWGUcYsuqaycIpgepQXescizoPwe4V+TdL4TWXw= Subject key identifier: CC:A4:98:4F:5C:86:1A:20:80:38:58:E2:2F:94:A2:6F:E2:16:97:96 Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 Certificate issuer: /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft Manifest number: 3A Signing time: Sun 05 Apr 2026 07:53:51 +0000 Manifest this update: Sun 05 Apr 2026 07:53:50 +0000 Manifest next update: Sun 12 Apr 2026 07:53:50 +0000 Files and hashes: 1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: 6U4VT+Q6xrsVlSBIQiNi+qvBE69U9pzWI0cuP0WNV84=) 2: A9AB917CDF2A11F092E976D2656F56BC.roa (hash: 2MH7BDCr/HiI9duO5pISv49IgB4HZsB0I/lhscn+60c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Validity Not Before: Apr 5 07:53:50 2026 GMT Not After : Apr 12 07:53:50 2026 GMT Subject: CN=69d2150f-ab91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:e2:06:3d:78:59:ea:e0:8f:95:44:8c:f1: 2d:f2:34:cc:94:69:84:c7:9a:29:2f:d9:8d:9d:15: a2:5a:65:bc:a4:e9:19:51:02:0f:a4:5c:16:75:b3: 6d:d5:6f:ef:89:e0:7d:2d:ed:a8:bd:16:dc:72:eb: aa:bb:54:80:95:6e:80:3c:a6:93:1a:9c:e8:3c:61: 20:a4:c0:d4:67:4f:60:6c:ba:b3:23:96:68:a0:25: 07:f3:0a:99:36:b4:d4:90:26:4d:bd:d0:81:ec:87: b8:f9:2b:65:51:eb:17:af:22:69:36:80:15:fd:ed: 52:48:7e:ad:a9:59:11:c5:0d:fa:73:3c:b8:b3:3e: 5a:45:61:af:e8:e0:3c:82:c0:d3:97:f4:0e:d5:d6: 9d:6e:3d:94:01:cf:90:b3:3d:4e:99:6e:2e:96:a0: b7:65:52:31:a2:eb:ce:0f:8d:34:33:3d:87:14:54: cf:11:a7:69:61:5f:fb:0b:c4:60:33:ca:2d:24:cf: 7c:a5:4d:2e:2a:8c:83:22:d8:6f:cd:35:10:5c:e9: 22:8f:ba:73:06:0b:23:a6:a1:93:91:43:15:d1:3f: 6a:59:fb:61:d8:0f:9a:53:37:57:3e:ca:2a:98:7e: aa:5c:e7:64:dc:26:e7:f4:57:7b:7f:12:e6:24:05: 61:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A4:98:4F:5C:86:1A:20:80:38:58:E2:2F:94:A2:6F:E2:16:97:96 X509v3 Authority Key Identifier: keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c4:48:ff:c5:93:88:9f:2a:d8:c5:b5:c6:34:79:76:ce:e2: a9:61:58:ab:38:78:44:5e:29:f6:8a:de:be:4c:41:ab:64:5c: ad:2c:ca:db:1f:76:b7:4b:7b:97:44:47:2e:9b:35:69:66:1a: 50:07:78:e1:a5:3c:d7:a9:e5:b1:7d:77:af:9c:79:f1:eb:f5: 61:95:a5:6c:6e:50:88:17:e1:d0:91:c0:b3:84:c1:0f:ac:b4: 5a:74:61:ca:83:0f:61:9b:47:3a:ff:0f:fc:1b:45:ea:74:ab: de:e5:61:3d:41:b2:63:a5:e2:4c:09:ea:63:53:83:9e:ac:3f: 0a:20:69:5e:05:79:85:41:26:e2:17:b7:65:eb:39:fc:4c:08: ab:e8:6a:4c:38:da:1d:c9:cb:8b:0c:16:f1:06:e3:28:5a:51: 8b:39:cc:64:74:d1:8d:5f:09:b3:55:a1:01:6b:78:5d:3b:87: 99:20:5f:50:3d:62:9f:62:cb:82:5a:e4:0e:f9:6a:bf:02:d2: d6:12:1f:bc:cc:7e:19:f0:01:33:a1:c3:61:86:bc:1f:c0:81: 12:f0:cd:c9:9b:5c:78:c2:45:b3:8e:5c:b5:79:6a:d1:f3:e7: 51:71:4a:01:87:1b:7c:73:bc:72:bf:59:1d:1f:f1:a1:f7:f9: 77:3f:79:99 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjFBOTExMC8GA1UEBRMoQzQ3MjM5RkZGNUNGNzg4NTIxN0ZDNkNBOTAxQjdBMzI3 ODA4MzFGMDAeFw0yNjA0MDUwNzUzNTBaFw0yNjA0MTIwNzUzNTBaMBgxFjAUBgNV BAMTDTY5ZDIxNTBmLWFiOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4yOIGPXhZ6uCPlUSM8S3yNMyUaYTHmikv2Y2dFaJaZbyk6RlRAg+kXBZ1s23V b++J4H0t7ai9Ftxy66q7VICVboA8ppManOg8YSCkwNRnT2BsurMjlmigJQfzCpk2 tNSQJk290IHsh7j5K2VR6xevImk2gBX97VJIfq2pWRHFDfpzPLizPlpFYa/o4DyC wNOX9A7V1p1uPZQBz5CzPU6Zbi6WoLdlUjGi684PjTQzPYcUVM8Rp2lhX/sLxGAz yi0kz3ylTS4qjIMi2G/NNRBc6SKPunMGCyOmoZORQxXRP2pZ+2HYD5pTN1c+yiqY fqpc52TcJuf0V3t/EuYkBWH5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzKSYT1yG GiCAOFjiL5Sib+IWl5YwHwYDVR0jBBgwFoAUxHI5//XPeIUhf8bKkBt6MngIMfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MUE5Lzc1MjhCM0IwREYy NzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlVaGY4YktrQnQ2TW5nSU1m QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEhJNV9fWFBlSVVoZjhiS2tCdDZNbmdJTWZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MUE5Lzc1MjhCM0IwREYyNzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlV aGY4YktrQnQ2TW5nSU1mQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzxEj/xZOInyrYxbXGNHl2zuKpYVirOHhEXin2it6+TEGrZFytLMrbH3a3S3uX REcumzVpZhpQB3jhpTzXqeWxfXevnHnx6/VhlaVsblCIF+HQkcCzhMEPrLRadGHK gw9hm0c6/w/8G0XqdKve5WE9QbJjpeJMCepjU4OerD8KIGleBXmFQSbiF7dl6zn8 TAir6GpMONodycuLDBbxBuMoWlGLOcxkdNGNXwmzVaEBa3hdO4eZIF9QPWKfYsuC WuQO+Wq/AtLWEh+8zH4Z8AEzocNhhrwfwIES8M3Jm1x4wkWzjly1eWrR8+dRcUoB hxt8c7xyv1kdH/Gh9/l3P3mZ -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:23 2026 by rpki-client