$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: 8/xQ1XhSnJ3UxRCrDMwe0qlWyk/zLvIKDgLTvqBlJlk= Subject key identifier: 5E:EE:EB:02:CA:6C:F7:C0:1F:6D:B2:25:58:D1:F6:FD:42:91:D3:83 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0289 Signing time: Sun 05 Apr 2026 01:21:57 +0000 Manifest this update: Sun 05 Apr 2026 01:21:57 +0000 Manifest next update: Sun 12 Apr 2026 01:21:57 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: jyyUwy7hA11vvdmUxWVBlLSurlUWv8gvmML3ANMVGOA=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: SV+bZOpveaF6gRb1xTwAjvC4Ahc21Acwt2F034JPZjM=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 0JBG3JjfF5NTvz1BrXwe7qxV2dsEYREu6KbN96r4FFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Apr 5 01:21:57 2026 GMT Not After : Apr 12 01:21:57 2026 GMT Subject: CN=69d1b935-f11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:96:cf:7d:aa:f7:95:c6:55:2b:18:40:be: 80:d7:3f:95:fc:e2:a2:7b:dd:16:51:52:61:5b:76: e4:bc:6b:c1:03:1d:06:4c:88:40:57:2e:9b:23:3e: fc:49:b3:b0:d1:33:5c:9e:35:6f:01:ca:df:3a:35: 9f:89:19:f0:b1:60:55:d6:d2:07:d4:d0:c8:99:01: 64:73:f6:f6:b2:85:93:b9:ad:4f:f5:a3:21:1d:a9: aa:23:ee:29:38:5e:06:f6:ea:42:cd:02:4c:f9:7f: 75:25:94:21:aa:74:9e:7b:75:3d:44:af:b6:95:e7: 9d:e0:e6:dc:1a:94:7c:02:4c:c0:c0:da:a9:88:94: 5d:27:95:a0:08:53:a9:96:85:77:27:c6:ae:63:98: 8f:82:81:f7:50:12:81:11:cc:4e:6c:81:ec:9f:53: 60:ea:59:57:8f:14:3b:50:e3:fd:46:5d:71:59:f1: 83:73:d3:71:e9:78:8b:d8:45:f2:8e:98:89:06:95: 5d:e0:6e:7d:a4:26:69:27:2a:bb:55:75:43:70:62: 1a:c5:62:39:0f:1a:16:33:4a:1f:41:02:1c:53:98: 0c:b3:f3:09:5c:b9:8f:d3:25:7c:27:59:ea:e4:2d: bf:82:1c:e8:d6:e8:2a:10:4f:c8:1a:cf:e8:bf:d0: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EE:EB:02:CA:6C:F7:C0:1F:6D:B2:25:58:D1:F6:FD:42:91:D3:83 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:37:02:b3:6a:8c:09:82:57:e5:58:c1:f5:03:0c:90:f3:fb: ea:69:1f:1a:70:54:02:3e:93:f4:49:a7:34:fe:09:62:7f:d4: d6:5f:eb:71:df:a6:d8:46:db:58:55:08:2a:5e:44:fe:c7:07: b5:72:c9:26:0e:38:8b:10:08:74:34:7d:74:5b:3b:8c:b7:e9: 07:16:23:ee:fd:7a:b2:64:98:b2:0f:f4:8d:7d:85:8c:76:7b: 67:49:66:ed:92:62:2f:5c:c4:9b:c9:be:a4:55:36:01:df:af: cc:22:e1:4f:64:66:1e:45:5e:09:9d:d0:d7:45:53:a9:2c:0e: 8d:46:e6:af:4a:b8:9a:50:8b:f9:7b:4e:ff:ef:94:83:cc:3b: 32:79:b3:8f:57:c6:39:e4:f1:28:7d:a6:4f:d1:72:e0:2c:e1: 3f:c8:52:b3:63:5f:ec:5b:05:04:52:4b:5a:c9:68:6f:c4:ae: 4f:f4:db:76:c3:3d:07:9a:ed:56:4b:cd:41:71:84:70:96:e2: 0d:81:b9:9a:a0:19:ec:fc:ae:e9:6b:56:8b:9d:72:14:be:fe: 93:dc:61:87:54:41:93:5c:24:3b:67:7d:04:50:3a:9b:26:b9: 0c:e9:78:94:6b:28:7c:24:a4:3a:d5:f2:a7:9d:e4:d1:c1:98: 43:a7:40:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjYwNDA1MDEyMTU3WhcNMjYwNDEyMDEyMTU3WjAYMRYwFAYD VQQDEw02OWQxYjkzNS1mMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b+Wz32q95XGVSsYQL6A1z+V/OKie90WUVJhW3bkvGvBAx0GTIhAVy6bIz78 SbOw0TNcnjVvAcrfOjWfiRnwsWBV1tIH1NDImQFkc/b2soWTua1P9aMhHamqI+4p OF4G9upCzQJM+X91JZQhqnSee3U9RK+2leed4ObcGpR8AkzAwNqpiJRdJ5WgCFOp loV3J8auY5iPgoH3UBKBEcxObIHsn1Ng6llXjxQ7UOP9Rl1xWfGDc9Nx6XiL2EXy jpiJBpVd4G59pCZpJyq7VXVDcGIaxWI5DxoWM0ofQQIcU5gMs/MJXLmP0yV8J1nq 5C2/ghzo1ugqEE/IGs/ov9BytwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7u6wLK bPfAH22yJVjR9v1CkdODMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApDcCs2qMCYJX5VjB9QMMkPP76mkfGnBUAj6T9EmnNP4JYn/U1l/rcd+m2Ebb WFUIKl5E/scHtXLJJg44ixAIdDR9dFs7jLfpBxYj7v16smSYsg/0jX2FjHZ7Z0lm 7ZJiL1zEm8m+pFU2Ad+vzCLhT2RmHkVeCZ3Q10VTqSwOjUbmr0q4mlCL+XtO/++U g8w7Mnmzj1fGOeTxKH2mT9Fy4CzhP8hSs2Nf7FsFBFJLWslob8SuT/TbdsM9B5rt VkvNQXGEcJbiDYG5mqAZ7Pyu6WtWi51yFL7+k9xhh1RBk1wkO2d9BFA6mya5DOl4 lGsofCSkOtXyp53k0cGYQ6dAYQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:03 2026 by rpki-client