$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json) Hash identifier: xUyZOTzPdPR/FuKF19f/06/9tGSD5P4X1OvPCYH6pC8= Subject key identifier: CD:BE:39:CB:D3:57:93:5C:D1:38:1F:23:80:E8:05:56:16:3D:F1:3E Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft Manifest number: 021C Signing time: Sun 05 Apr 2026 02:23:01 +0000 Manifest this update: Sun 05 Apr 2026 02:23:00 +0000 Manifest next update: Sun 12 Apr 2026 02:23:00 +0000 Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: xMcAaChARr41p/VYAFbiSgrknMvpDKM1OtGgcnJMNAs=) 2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: GNsFivW7Cs+ML6I7eCh6qC+A58oL1ugghHS/rkeeyfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Validity Not Before: Apr 5 02:23:00 2026 GMT Not After : Apr 12 02:23:00 2026 GMT Subject: CN=69d1c784-dfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:8d:d4:f4:04:32:74:56:31:45:8a:84:c0: 9c:c0:7b:07:2f:21:dc:fd:3f:29:00:67:31:2a:de: 7a:da:b3:06:6c:ee:99:47:db:26:4b:2f:47:68:d1: 9a:21:8a:ce:20:58:c2:b8:8a:79:82:aa:9d:e6:15: 8b:67:83:51:19:a4:95:7f:9e:cb:0d:70:8b:13:9d: f2:54:05:1f:9f:dc:f9:e9:45:65:e6:61:3d:7e:d6: b2:ed:3d:f2:8c:d2:cc:30:4c:04:7e:57:9c:e0:a3: e0:eb:85:3d:e9:e0:36:b4:21:68:3a:a3:5e:ec:99: 68:cf:c8:ee:6b:62:74:dc:71:a6:06:be:a1:45:de: 9b:d2:af:83:43:2e:ce:b7:68:ca:6b:dc:6d:6f:cf: 78:94:5c:1c:86:a6:b8:cb:fe:f0:5e:e8:35:2e:9d: 9b:84:fa:80:a5:58:61:ac:d4:b4:98:94:04:06:7d: ee:10:b4:bc:88:88:af:77:dd:31:f3:f0:78:d1:14: 62:10:b8:60:af:3c:64:a0:dc:2c:ec:b9:b6:50:6a: 77:a9:e4:6b:00:fc:4f:2c:c9:79:7d:45:03:81:5c: c0:03:88:23:4b:df:51:13:8b:64:2e:c3:ca:62:a7: 79:b8:9d:e7:85:31:b7:bd:05:a3:ff:6d:62:c2:e5: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BE:39:CB:D3:57:93:5C:D1:38:1F:23:80:E8:05:56:16:3D:F1:3E X509v3 Authority Key Identifier: keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:5d:ae:d6:bf:ff:a0:e0:f6:bd:23:9b:ed:f7:eb:34:53:3b: bf:6f:7b:57:02:0c:67:c9:e6:c0:73:8b:cf:0f:b8:54:71:57: cf:6e:ad:35:a0:84:b3:37:52:ef:09:f6:fc:d1:16:60:5b:03: eb:63:0c:0b:5c:2e:9a:d8:79:de:61:a0:58:a8:11:22:56:4e: 28:06:91:7c:a4:dc:02:24:bc:5a:30:4c:64:d8:9d:b0:69:74: a6:cb:fb:8b:8d:5e:0d:39:11:fc:0c:f0:85:6d:6b:1a:3c:a9: c1:b4:07:57:ac:e0:a4:5e:32:8c:be:28:45:59:46:84:51:fc: 82:74:b3:6b:05:13:d3:d5:62:e6:7e:cf:7d:54:6b:90:0e:e9: 3d:d0:29:2f:2e:b2:e8:98:fa:44:f8:51:f1:10:7b:0a:1e:50: 8b:1b:81:46:ce:81:dc:64:0b:0e:ae:2c:a7:ee:94:ac:25:ef: 33:bd:45:d5:ba:88:db:d4:a0:fa:57:bf:94:50:2e:ed:37:65: ca:ac:69:f2:3c:10:1d:21:61:f7:55:f8:d1:9a:19:a3:1d:4c: 9f:6f:46:3c:ab:ab:3f:46:1b:6b:33:b0:78:25:1d:8b:d2:2d: 27:b0:12:25:ec:ef:2b:33:6f:d6:c8:b7:47:90:c0:ce:e4:ff: a3:e3:67:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE MDM5NUYxRTQwHhcNMjYwNDA1MDIyMzAwWhcNMjYwNDEyMDIyMzAwWjAYMRYwFAYD VQQDEw02OWQxYzc4NC1kZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrKN1PQEMnRWMUWKhMCcwHsHLyHc/T8pAGcxKt562rMGbO6ZR9smSy9HaNGa IYrOIFjCuIp5gqqd5hWLZ4NRGaSVf57LDXCLE53yVAUfn9z56UVl5mE9ftay7T3y jNLMMEwEflec4KPg64U96eA2tCFoOqNe7Jloz8jua2J03HGmBr6hRd6b0q+DQy7O t2jKa9xtb894lFwchqa4y/7wXug1Lp2bhPqApVhhrNS0mJQEBn3uELS8iIivd90x 8/B40RRiELhgrzxkoNws7Lm2UGp3qeRrAPxPLMl5fUUDgVzAA4gjS99RE4tkLsPK Yqd5uJ3nhTG3vQWj/21iwuX6bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2+OcvT V5Nc0TgfI4DoBVYWPfE+MB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4 ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNBOS9BNjM4NzY4NEZBQTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNR enFxRTRxcW5GSVBRT1Y4ZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcF2u1r//oOD2vSOb7ffrNFM7v297VwIMZ8nmwHOLzw+4VHFXz26tNaCEszdS 7wn2/NEWYFsD62MMC1wumth53mGgWKgRIlZOKAaRfKTcAiS8WjBMZNidsGl0psv7 i41eDTkR/AzwhW1rGjypwbQHV6zgpF4yjL4oRVlGhFH8gnSzawUT09Vi5n7PfVRr kA7pPdApLy6y6Jj6RPhR8RB7Ch5QixuBRs6B3GQLDq4sp+6UrCXvM71F1bqI29Sg +le/lFAu7Tdlyqxp8jwQHSFh91X40ZoZox1Mn29GPKurP0YbazOweCUdi9ItJ7AS JezvKzNv1si3R5DAzuT/o+NnsQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:37 2026 by rpki-client