$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: CVkZ35c/rAT7Y12AGZF7Bj9FNkRKUTgXkqx0U6ZcuEI= Subject key identifier: 9D:89:27:19:FB:D9:BF:59:C4:2C:A9:90:A9:C1:BF:6B:51:04:89:CF Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 0210 Signing time: Sun 05 Apr 2026 02:27:30 +0000 Manifest this update: Sun 05 Apr 2026 02:27:30 +0000 Manifest next update: Sun 12 Apr 2026 02:27:30 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: HaBo6RP1LummGq8d3aYLwCG7fhM5uQCykJ4P3moV++I=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: DSwrQXXqByoPFQJXpbDE85/HMdoqbU+SR14BjY//Wvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: Apr 5 02:27:30 2026 GMT Not After : Apr 12 02:27:30 2026 GMT Subject: CN=69d1c892-dd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:c6:e8:a0:17:6f:46:67:10:67:eb:d0:8c: 16:6d:50:0b:87:02:71:60:46:9f:00:4d:5f:fc:92: 5f:1f:0a:f7:58:9c:17:44:3a:70:fd:13:54:d3:16: c5:0b:1d:b6:49:36:20:b2:1b:0b:7b:03:f9:62:30: e5:0f:e9:fc:e9:a8:11:ca:d9:30:18:b3:2d:97:cc: 8b:e9:54:bf:5f:e5:38:a4:c0:95:36:1d:1b:bc:03: a5:0e:40:93:ac:7d:0a:37:8c:1a:05:9d:bf:b0:0b: 5e:6f:52:41:da:66:55:39:f0:a3:80:b6:36:b2:93: 05:bf:74:c5:e9:ce:1b:84:13:f8:03:bf:8a:65:45: 08:72:97:3d:71:a3:53:7b:a3:2d:6a:1e:d8:43:ef: 07:28:dd:4d:36:b6:91:88:69:22:60:32:0e:b0:f8: 6f:b4:13:44:5d:30:e8:1b:37:41:68:18:57:6f:c4: b1:92:d9:28:a8:28:b7:c3:a1:03:9f:73:b4:ad:8d: 5a:c6:5b:e7:2e:da:12:88:48:01:02:d7:b3:17:ab: 0d:72:ba:30:ea:a5:83:3e:c5:2d:12:76:73:c9:ba: 40:47:91:64:b6:1a:81:e7:7c:32:3f:0a:de:f0:51: c1:aa:fe:51:15:25:45:01:4b:1e:10:7d:92:e7:a8: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:89:27:19:FB:D9:BF:59:C4:2C:A9:90:A9:C1:BF:6B:51:04:89:CF X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:aa:35:28:ee:3e:44:83:8c:93:49:6a:0f:5f:6a:78:3b:f4: e9:97:37:e5:01:8a:d3:fc:df:23:6b:7c:8d:e6:cf:09:b8:c0: 0e:c9:4a:e1:1a:6c:23:2e:69:ab:64:97:60:08:9a:3b:03:d8: 8a:f4:d5:9f:bc:5d:7a:dd:23:75:79:61:53:f1:e4:b7:62:70: da:79:9d:3a:01:41:56:40:d2:65:8f:98:d1:93:11:97:9e:ae: 5c:6b:94:13:5f:f8:f2:74:03:00:d7:d4:4a:2f:2c:a1:5a:55: 6d:9c:be:7a:32:c7:81:a7:81:10:dd:36:e1:e2:be:57:7b:12: 57:03:fa:3e:04:6b:a2:54:a2:ee:b9:d2:b2:31:82:7b:0b:3d: 1e:3a:28:b6:b1:ec:c5:53:42:a1:bf:88:18:eb:54:6d:4b:30: d6:46:c3:29:15:5e:f3:51:65:71:fe:59:42:31:8c:d4:08:3c: 2d:26:34:ee:fc:2d:f2:02:c2:ac:41:b8:f2:8f:a8:c9:a2:0a: 29:b2:98:da:6e:6f:97:4d:f4:55:25:16:0e:0e:78:f0:6a:c3: 44:d5:4a:9e:88:b6:eb:fb:e0:b9:89:11:8f:17:32:f9:87:10: 2d:07:71:53:13:b3:11:3f:62:e4:8f:fd:b7:74:db:84:cf:65: 7e:d7:0b:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjYwNDA1MDIyNzMwWhcNMjYwNDEyMDIyNzMwWjAYMRYwFAYD VQQDEw02OWQxYzg5Mi1kZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyHG6KAXb0ZnEGfr0IwWbVALhwJxYEafAE1f/JJfHwr3WJwXRDpw/RNU0xbF Cx22STYgshsLewP5YjDlD+n86agRytkwGLMtl8yL6VS/X+U4pMCVNh0bvAOlDkCT rH0KN4waBZ2/sAteb1JB2mZVOfCjgLY2spMFv3TF6c4bhBP4A7+KZUUIcpc9caNT e6Mtah7YQ+8HKN1NNraRiGkiYDIOsPhvtBNEXTDoGzdBaBhXb8SxktkoqCi3w6ED n3O0rY1axlvnLtoSiEgBAtezF6sNcrow6qWDPsUtEnZzybpAR5FkthqB53wyPwre 8FHBqv5RFSVFAUseEH2S56grawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2JJxn7 2b9ZxCypkKnBv2tRBInPMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaao1KO4+RIOMk0lqD19qeDv06Zc35QGK0/zfI2t8jebPCbjADslK4RpsIy5p q2SXYAiaOwPYivTVn7xdet0jdXlhU/Hkt2Jw2nmdOgFBVkDSZY+Y0ZMRl56uXGuU E1/48nQDANfUSi8soVpVbZy+ejLHgaeBEN024eK+V3sSVwP6PgRrolSi7rnSsjGC ews9HjootrHsxVNCob+IGOtUbUsw1kbDKRVe81Flcf5ZQjGM1Ag8LSY07vwt8gLC rEG48o+oyaIKKbKY2m5vl030VSUWDg548GrDRNVKnoi26/vguYkRjxcy+YcQLQdx UxOzET9i5I/9t3TbhM9lftcLyA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:50 2026 by rpki-client