$ rpki-client -vvf rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft File: xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft (raw, json) Hash identifier: tfp0OLvO/ExQDdxCf/TUHYQUGRbnenD3TMRjTOpj5OM= Subject key identifier: 6C:86:38:79:30:A4:D0:1D:94:C2:AC:DA:83:AE:6A:4C:64:FB:BE:D3 Authority key identifier: C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64 Certificate issuer: /CN=A917D488/serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft Manifest number: 4B Signing time: Sun 05 Apr 2026 07:36:38 +0000 Manifest this update: Sun 05 Apr 2026 07:36:38 +0000 Manifest next update: Sun 12 Apr 2026 07:36:38 +0000 Files and hashes: 1: xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl (hash: L55UotjOSl+uN0RqZ0+Gn9ls0bQ8aUVEM8LlYokkl20=) 2: 038304DEC11F11F0A9F08209C4F9AE02.roa (hash: Y37EvjA3svHQwyGXd0a+TXPBLOFhRYmTcbPi/KdjSGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D488, serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64 Validity Not Before: Apr 5 07:36:38 2026 GMT Not After : Apr 12 07:36:38 2026 GMT Subject: CN=69d21106-baf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:18:be:ef:80:65:56:c7:62:17:38:02:8c: bc:2d:67:7e:ff:68:7a:87:1f:43:cc:87:57:2e:32: 97:e7:b3:48:46:11:0a:81:0b:ea:3b:6d:09:eb:64: 13:0b:65:57:44:ac:3e:1d:ee:97:36:b4:98:6b:e5: 9e:37:88:c5:09:8a:cc:cd:50:30:3a:b8:9c:17:29: 8b:c6:c8:a0:6f:89:42:0a:66:95:ee:75:17:ad:fa: f7:3c:ef:64:a5:a2:ac:ca:26:a5:ad:a1:69:62:c1: 35:32:cd:fb:f0:2a:b2:aa:48:47:ae:1b:8e:58:9e: 01:8c:2f:bd:cf:80:76:8e:7c:94:05:fa:ea:33:8f: 22:bc:84:30:40:ed:f3:b2:64:31:40:52:fc:d0:48: d3:8d:4f:07:5c:23:85:e5:fa:d5:e7:4b:31:2a:cf: 88:ab:93:17:e5:f1:78:51:cd:74:11:96:d8:3e:3d: 00:56:24:1b:a4:06:bd:43:54:38:7b:08:f1:bb:0e: c6:ca:0e:e8:b3:9d:f5:d3:be:1c:67:9f:81:af:2e: dd:31:a1:5a:2b:ca:75:fc:02:39:a2:f1:d1:9d:78: a2:46:6b:0d:ef:83:99:b5:a7:a5:f8:b9:ea:b0:d8: 30:aa:e2:66:c7:40:c8:28:da:91:71:02:18:a2:7b: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:86:38:79:30:A4:D0:1D:94:C2:AC:DA:83:AE:6A:4C:64:FB:BE:D3 X509v3 Authority Key Identifier: keyid:C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:fc:33:35:23:bf:7b:1b:08:af:46:b6:56:23:de:7d:85:78: 5f:34:62:11:6b:e1:a4:b6:f6:92:17:09:99:98:9f:d6:83:64: f6:9c:49:97:56:47:2b:ac:a5:4b:35:36:82:1b:7d:ac:38:63: 13:aa:e3:be:7d:ed:f7:54:9e:9f:79:4c:0f:93:b2:87:31:49: a5:4d:0c:b4:d7:62:57:8a:25:25:35:2b:0b:7f:d5:cc:fc:46: 73:24:0b:bf:37:33:89:5d:9f:27:f4:96:db:82:aa:7e:8b:20: be:f8:a8:4a:02:06:00:61:7b:8b:33:76:0b:cf:92:8c:78:1a: 07:34:72:52:f8:bf:b1:b6:94:1c:dd:33:08:2b:1b:37:ed:23: e2:5d:91:86:41:d3:ff:24:b3:83:33:05:b7:b0:65:9a:8d:7f: 38:7b:50:39:f8:bc:b7:36:9c:5e:56:7a:c6:0f:4e:4e:cc:74: c0:f0:39:0c:56:8e:f4:33:2d:33:3f:c0:ad:ba:92:d9:24:a6: fb:53:6b:5f:ce:73:3a:5b:f0:6c:5f:e8:02:19:9e:51:bf:fc: ff:38:4a:28:cd:88:28:9b:14:44:5d:2a:7b:9c:6c:75:a4:9f: 8b:b5:b9:aa:93:b2:d4:40:37:e1:f6:3f:87:4e:03:d7:f2:5d: 68:12:64:5a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDQ4ODExMC8GA1UEBRMoQzQzQzhGRURBNDU1MTA1OTIyOThCNUI5NTNFMjc5RkJB Q0U0NUE2NDAeFw0yNjA0MDUwNzM2MzhaFw0yNjA0MTIwNzM2MzhaMBgxFjAUBgNV BAMTDTY5ZDIxMTA2LWJhZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClqhi+74BlVsdiFzgCjLwtZ37/aHqHH0PMh1cuMpfns0hGEQqBC+o7bQnrZBML ZVdErD4d7pc2tJhr5Z43iMUJiszNUDA6uJwXKYvGyKBviUIKZpXudRet+vc872Sl oqzKJqWtoWliwTUyzfvwKrKqSEeuG45YngGML73PgHaOfJQF+uozjyK8hDBA7fOy ZDFAUvzQSNONTwdcI4Xl+tXnSzEqz4irkxfl8XhRzXQRltg+PQBWJBukBr1DVDh7 CPG7DsbKDuiznfXTvhxnn4GvLt0xoVorynX8Ajmi8dGdeKJGaw3vg5m1p6X4ueqw 2DCq4mbHQMgo2pFxAhiie8KZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbIY4eTCk 0B2Uwqzag65qTGT7vtMwHwYDVR0jBBgwFoAUxDyP7aRVEFkimLW5U+J5+6zkWmQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENDg4LzhENzMzQUNBQzEx RTExRjA4RERFODc4N0M0RjlBRTAyL3hEeVA3YVJWRUZraW1MVzVVLUo1LTZ6a1dt US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveER5UDdhUlZFRmtpbUxXNVUtSjUtNnprV21RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE NDg4LzhENzMzQUNBQzExRTExRjA4RERFODc4N0M0RjlBRTAyL3hEeVA3YVJWRUZr aW1MVzVVLUo1LTZ6a1dtUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCl/DM1I797GwivRrZWI959hXhfNGIRa+GktvaSFwmZmJ/Wg2T2nEmXVkcrrKVL NTaCG32sOGMTquO+fe33VJ6feUwPk7KHMUmlTQy012JXiiUlNSsLf9XM/EZzJAu/ NzOJXZ8n9Jbbgqp+iyC++KhKAgYAYXuLM3YLz5KMeBoHNHJS+L+xtpQc3TMIKxs3 7SPiXZGGQdP/JLODMwW3sGWajX84e1A5+Ly3NpxeVnrGD05OzHTA8DkMVo70My0z P8CtupLZJKb7U2tfznM6W/BsX+gCGZ5Rv/z/OEoozYgomxREXSp7nGx1pJ+Ltbmq k7LUQDfh9j+HTgPX8l1oEmRa -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:03 2026 by rpki-client