$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json) Hash identifier: t6ozMYG3oKhAk+rkd16S0GBwJep5WycyH/jGDiOZn+Q= Subject key identifier: 65:60:AF:A5:A6:CC:A7:0F:8E:F1:CC:62:EE:47:8B:2A:5C:57:79:6C Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft Manifest number: 021E Signing time: Sun 05 Apr 2026 02:21:20 +0000 Manifest this update: Sun 05 Apr 2026 02:21:19 +0000 Manifest next update: Sun 12 Apr 2026 02:21:19 +0000 Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: Jy34vScwqDCqx8fEcujtWoK5npg0WqjSaa3MEbcIZ0I=) 2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: aajUanjdNrNtkjhupeIjAdiXMn4aEREZ53JBb0jvqlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Validity Not Before: Apr 5 02:21:19 2026 GMT Not After : Apr 12 02:21:19 2026 GMT Subject: CN=69d1c720-1c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:20:d9:22:ed:8b:d6:4b:db:72:64:cc:02: 51:02:ae:0f:3c:37:f4:4d:58:f5:bd:c4:bc:22:7a: b4:98:e7:45:b6:93:1b:56:af:c3:ac:a7:12:25:88: 41:3f:45:76:00:56:4e:74:3b:27:3e:df:09:bc:61: 6f:cc:92:7f:9e:44:ad:67:57:a9:87:9f:3f:a8:5b: 0f:ee:ad:b4:34:53:02:5a:cf:7c:43:f9:40:0e:76: 18:2a:7a:cd:99:4e:2e:ac:6f:cb:2c:4f:50:64:00: a7:1c:0f:a8:86:e3:d7:ac:de:c8:47:ff:db:7a:9d: eb:bf:17:e1:dc:a2:af:e8:45:f4:ba:32:b7:c3:c4: d8:8a:4b:97:6f:a1:c5:22:6f:5a:17:3b:5e:a7:2c: 31:c4:42:40:aa:b1:91:a7:be:72:31:79:03:66:d2: 66:c6:80:7d:55:47:dc:63:65:f0:47:e1:0c:f1:4c: 40:a9:d8:e7:18:30:29:9e:e9:fd:cf:af:90:56:85: 6f:44:58:1d:21:b0:d8:15:be:8e:10:e3:9e:ad:f2: 47:0a:da:4f:b7:bf:7d:d0:3b:b7:c5:c3:ee:38:08: 96:d1:32:4c:bb:b6:a8:41:2a:da:51:45:32:3c:df: 55:e4:43:3b:77:9f:75:3b:0c:1d:b4:2e:c4:c2:6d: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:60:AF:A5:A6:CC:A7:0F:8E:F1:CC:62:EE:47:8B:2A:5C:57:79:6C X509v3 Authority Key Identifier: keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:bc:73:d2:4a:9b:a8:96:40:7f:bb:0c:24:25:0d:c0:90:53: 05:7f:e3:8b:80:5e:44:1a:a5:73:21:61:d4:5c:e4:db:e8:7f: 8a:e5:49:ac:b7:bd:44:a6:04:5f:87:80:bb:80:d9:ab:1c:16: 90:ba:1b:f2:32:3e:ca:75:05:f9:a7:f2:8b:4e:48:e8:02:b2: b3:86:95:8c:83:e5:26:a8:49:ce:43:c0:8b:47:c3:08:6f:09: d0:3a:db:2a:be:db:99:0e:22:c8:39:49:1b:07:9c:f3:4c:7b: 7e:b4:a4:a8:16:cb:44:5e:7b:a6:3e:e0:06:6d:66:1e:8b:cf: 48:75:49:cf:5f:7b:cf:3b:0a:e7:8b:83:74:f5:95:0b:85:52: 35:bf:d2:30:91:8c:23:8d:58:0d:56:e1:98:e4:3b:d1:5c:94: c6:40:ac:ff:f4:18:43:41:1e:a3:e8:03:0a:ab:36:b6:fe:37: 41:4d:c8:25:7e:62:c9:d3:6f:0d:7b:b8:49:35:64:3d:ab:4a: 06:d3:d0:08:6a:24:d7:e3:59:04:ec:19:16:07:c6:67:d4:e0: fe:ae:75:18:18:7a:c8:09:09:15:9e:8f:03:40:42:08:47:77: 27:53:6f:0f:b6:e8:19:5e:c0:52:c8:64:ab:bd:e3:b4:cf:e4: e3:2b:8f:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1MzIxMTAvBgNVBAUTKEM0RkE2QkJBQkZEMTk5N0NDOEYxRDIwRkU2QTU1NzRE RUU5QjMyNTYwHhcNMjYwNDA1MDIyMTE5WhcNMjYwNDEyMDIyMTE5WjAYMRYwFAYD VQQDEw02OWQxYzcyMC0xYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc8g2SLti9ZL23JkzAJRAq4PPDf0TVj1vcS8Inq0mOdFtpMbVq/DrKcSJYhB P0V2AFZOdDsnPt8JvGFvzJJ/nkStZ1eph58/qFsP7q20NFMCWs98Q/lADnYYKnrN mU4urG/LLE9QZACnHA+ohuPXrN7IR//bep3rvxfh3KKv6EX0ujK3w8TYikuXb6HF Im9aFztepywxxEJAqrGRp75yMXkDZtJmxoB9VUfcY2XwR+EM8UxAqdjnGDApnun9 z6+QVoVvRFgdIbDYFb6OEOOerfJHCtpPt7990Du3xcPuOAiW0TJMu7aoQSraUUUy PN9V5EM7d591OwwdtC7Ewm0XDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVgr6Wm zKcPjvHMYu5HiypcV3lsMB8GA1UdIwQYMBaAFMT6a7q/0Zl8yPHSD+alV03umzJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzMi85QTY2RUI5RUY2 NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Yekk4ZElQNXFWWFRlNmJN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQcHJ1cl9SbVh6SThkSVA1cVZYVGU2Yk1sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzMi85QTY2RUI5RUY2NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Y ekk4ZElQNXFWWFRlNmJNbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAorxz0kqbqJZAf7sMJCUNwJBTBX/ji4BeRBqlcyFh1Fzk2+h/iuVJrLe9RKYE X4eAu4DZqxwWkLob8jI+ynUF+afyi05I6AKys4aVjIPlJqhJzkPAi0fDCG8J0Drb Kr7bmQ4iyDlJGwec80x7frSkqBbLRF57pj7gBm1mHovPSHVJz197zzsK54uDdPWV C4VSNb/SMJGMI41YDVbhmOQ70VyUxkCs//QYQ0Eeo+gDCqs2tv43QU3IJX5iydNv DXu4STVkPatKBtPQCGok1+NZBOwZFgfGZ9Tg/q51GBh6yAkJFZ6PA0BCCEd3J1Nv D7boGV7AUshkq73jtM/k4yuPDw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:06 2026 by rpki-client