$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: 2zIO4A4Hi+VKVvscui6u/L07nM9lsoUaulVXy8QbBAs= Subject key identifier: DE:B4:02:93:AF:48:1C:52:0B:4A:DD:B9:95:FD:F3:22:0C:65:58:9E Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 0512 Signing time: Sun 05 Apr 2026 00:58:47 +0000 Manifest this update: Sun 05 Apr 2026 00:58:46 +0000 Manifest next update: Sun 12 Apr 2026 00:58:46 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: 82N3WIhBKoSdBj8/GWM1wRLgTX0F1qnpg4Gd4f5FG4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Apr 5 00:58:46 2026 GMT Not After : Apr 12 00:58:46 2026 GMT Subject: CN=69d1b3c7-4a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:15:ad:49:70:66:7f:bd:0d:d4:95:79:02: 0a:6f:bb:48:04:65:4f:91:aa:d8:95:88:4b:c3:cd: 0e:45:ed:d5:61:ef:1f:b4:89:49:40:a3:3e:aa:51: dc:d7:3b:0a:05:f7:f6:6f:67:5f:bc:2d:d1:4c:86: c7:9a:95:a8:0e:6c:95:02:e1:8d:c7:e2:33:8e:af: 60:7a:11:06:ef:ff:ec:80:f4:5d:13:9a:9e:2f:f4: c2:a3:e1:93:6e:1e:f8:76:41:6d:0b:45:3f:09:5e: f9:a6:86:0c:69:45:e9:f8:f5:d4:5d:39:58:5c:95: a1:6e:e4:22:05:46:32:d7:67:03:fe:6d:f9:21:42: 33:49:38:59:04:c0:86:76:03:a0:41:d0:47:8b:00: 8a:67:e4:b7:32:2d:21:b4:bb:91:13:99:2f:89:4f: 69:be:5e:a0:fa:79:8c:b7:31:5c:f4:7e:1c:f3:ec: ce:d0:2a:d6:ba:eb:ad:cc:d1:1f:00:da:10:ac:5b: a8:a8:71:36:f7:a2:d6:34:74:da:65:5d:fe:3e:72: e5:ec:98:a5:05:b0:05:95:b1:32:28:a4:dc:fd:29: 6b:eb:a4:78:7a:86:7f:0c:d3:86:fa:fa:e9:9f:16: a3:c1:52:f9:27:1e:37:5c:6e:ff:6c:64:5b:2c:21: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B4:02:93:AF:48:1C:52:0B:4A:DD:B9:95:FD:F3:22:0C:65:58:9E X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:5b:95:9d:f8:33:37:af:fa:63:54:c6:bc:48:0e:44:46:c7: f6:b2:37:d2:2d:31:67:9e:17:b8:2a:b9:c7:27:da:bb:e6:43: 2d:f1:37:bc:43:cb:1e:2e:b0:ae:6b:bb:5a:9e:24:61:77:94: b8:b2:23:40:1a:5c:a3:1d:b3:c3:78:65:d6:e1:ef:b0:ce:aa: 84:b0:34:3f:d1:42:dd:77:f6:52:3a:83:fb:32:c5:fc:88:47: a9:97:a1:1a:33:28:a6:3e:fb:c3:95:f0:b5:f6:36:1b:41:a2: 71:57:ca:d7:90:d3:b6:22:ea:9f:6c:c5:c9:f1:d8:e2:a3:4a: 05:ce:f4:74:6e:b4:fa:a2:b5:6f:68:75:c2:16:e1:71:31:48: 1e:d7:c4:f7:d1:2d:fb:77:6c:55:d0:7f:f3:e8:15:8c:d6:ea: 25:80:2d:cf:f9:1b:53:21:61:cf:15:c3:37:49:47:ff:68:ed: 8f:03:60:ea:fb:ec:45:1b:d6:22:b4:bd:f0:2a:54:e9:b6:f3: 33:cf:98:03:56:2b:cb:35:bd:30:bd:6d:28:cf:bc:40:6a:a2: 13:df:31:88:11:ab:02:a1:69:49:90:df:4b:db:c1:5f:2f:1b: 24:ad:e7:21:9c:7d:9b:80:52:2b:44:fd:cb:59:f5:f7:30:13: 67:26:66:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjYwNDA1MDA1ODQ2WhcNMjYwNDEyMDA1ODQ2WjAYMRYwFAYD VQQDEw02OWQxYjNjNy00YTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJoVrUlwZn+9DdSVeQIKb7tIBGVPkarYlYhLw80ORe3VYe8ftIlJQKM+qlHc 1zsKBff2b2dfvC3RTIbHmpWoDmyVAuGNx+Izjq9gehEG7//sgPRdE5qeL/TCo+GT bh74dkFtC0U/CV75poYMaUXp+PXUXTlYXJWhbuQiBUYy12cD/m35IUIzSThZBMCG dgOgQdBHiwCKZ+S3Mi0htLuRE5kviU9pvl6g+nmMtzFc9H4c8+zO0CrWuuutzNEf ANoQrFuoqHE296LWNHTaZV3+PnLl7JilBbAFlbEyKKTc/Slr66R4eoZ/DNOG+vrp nxajwVL5Jx43XG7/bGRbLCHExwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN60ApOv SBxSC0rduZX98yIMZVieMB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA1uVnfgzN6/6Y1TGvEgOREbH9rI30i0xZ54XuCq5xyfau+ZDLfE3vEPLHi6w rmu7Wp4kYXeUuLIjQBpcox2zw3hl1uHvsM6qhLA0P9FC3Xf2UjqD+zLF/IhHqZeh GjMopj77w5XwtfY2G0GicVfK15DTtiLqn2zFyfHY4qNKBc70dG60+qK1b2h1whbh cTFIHtfE99Et+3dsVdB/8+gVjNbqJYAtz/kbUyFhzxXDN0lH/2jtjwNg6vvsRRvW IrS98CpU6bbzM8+YA1YryzW9ML1tKM+8QGqiE98xiBGrAqFpSZDfS9vBXy8bJK3n IZx9m4BSK0T9y1n19zATZyZmbg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:06 2026 by rpki-client