$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: A3Ru6eUkn2H/X/nV3JccaGj6wwVKvtJ994LWV0HQbsY= Subject key identifier: 2C:3C:E4:D0:32:CB:B4:9F:A7:30:12:AC:B6:2B:D5:22:BA:A5:76:76 Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 01F3 Signing time: Sun 05 Apr 2026 02:47:26 +0000 Manifest this update: Sun 05 Apr 2026 02:47:26 +0000 Manifest next update: Sun 12 Apr 2026 02:47:26 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: 0V/08tZABiofAfX70B4/EtLYxdX2CDtpJjy25D69u1g=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: cutsButNN4vD7PlDi3ED+TD0SRxebGD6KjlE+3nvyoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: Apr 5 02:47:26 2026 GMT Not After : Apr 12 02:47:26 2026 GMT Subject: CN=69d1cd3e-2a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0a:82:31:c7:70:67:34:75:e9:f5:72:37:ed: 45:5e:d1:9b:a4:89:d0:41:58:ec:26:6e:28:d4:1d: 58:ff:7c:24:62:36:04:9d:7d:e4:76:f9:6e:b3:8f: 1a:5e:fd:8f:cb:fc:93:fb:9e:b6:46:16:2f:10:2a: d0:18:8c:b6:a5:6e:f4:67:49:f4:14:d3:bc:a9:8b: d3:e2:40:a2:cb:71:19:4b:c9:56:b3:25:f3:cc:80: 7e:b0:82:d8:4a:6f:d1:6d:6e:33:be:10:c8:e9:24: 56:0e:8f:40:4f:f8:33:89:e1:7d:91:71:cf:77:d7: e3:8e:2d:e4:68:99:ae:80:04:94:73:cf:07:5e:f7: 4d:12:e8:52:be:c5:8a:98:78:9d:9d:25:d8:10:37: 88:52:b3:1f:0a:f4:b2:ee:bd:56:8b:6c:4b:2f:85: cd:49:2a:1b:6f:c5:0e:82:78:54:e0:ef:07:21:2e: d1:54:b7:bd:af:5a:12:c5:88:78:8f:85:cc:5a:b4: f8:24:17:12:a7:bb:f3:98:99:96:37:88:ed:7c:b8: 7f:b3:72:21:d9:24:bf:d9:ed:a4:0b:3e:4c:53:b3: d6:f6:b3:11:d7:fa:0f:26:16:93:04:e2:b5:30:d9: fa:f7:f6:05:77:79:ec:d4:99:1e:92:aa:63:ce:17: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3C:E4:D0:32:CB:B4:9F:A7:30:12:AC:B6:2B:D5:22:BA:A5:76:76 X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:28:04:26:dd:79:4a:bb:d7:bc:88:7f:51:25:7a:f6:2b:8e: 03:08:cf:c1:e8:9d:29:99:e5:31:7f:ad:b4:d9:6c:57:95:f7: 67:f2:d1:44:a9:c2:f0:b1:20:70:5d:d6:2a:45:bc:20:80:26: 1f:38:70:ed:9b:75:a1:d9:a3:e4:1e:42:9d:f6:5d:9a:fe:09: 18:96:79:fd:66:11:a3:dc:1c:83:ff:42:2b:ad:c6:fe:2a:15: 3d:4d:e3:20:17:9d:42:3d:32:fd:68:c9:8e:3d:98:3e:06:dd: c7:ae:ce:ec:fc:28:34:cd:10:56:50:be:d7:ea:39:a2:b0:36: d3:06:cd:a6:68:80:6f:8c:b8:cd:3a:ab:a3:ec:aa:b1:a4:6d: 93:e9:4e:17:f9:ec:9c:7c:79:01:84:d6:93:eb:f2:1a:4d:ec: cd:eb:32:85:39:e8:f9:9a:34:e7:ce:6d:9d:1a:fe:82:41:11: 42:68:69:1d:06:c0:39:b5:29:56:91:fb:35:05:e0:d8:56:02: d8:8e:7c:37:1b:50:c8:08:87:c9:8c:9e:7e:a6:7c:2b:92:66: 5e:24:49:85:f4:be:b5:ad:17:04:57:99:fd:b7:a1:28:6b:f4: 7e:3d:71:e0:b9:f2:fc:cc:20:35:a1:22:43:09:c8:08:c4:eb: ea:af:b7:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjYwNDA1MDI0NzI2WhcNMjYwNDEyMDI0NzI2WjAYMRYwFAYD VQQDEw02OWQxY2QzZS0yYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QqCMcdwZzR16fVyN+1FXtGbpInQQVjsJm4o1B1Y/3wkYjYEnX3kdvlus48a Xv2Py/yT+562RhYvECrQGIy2pW70Z0n0FNO8qYvT4kCiy3EZS8lWsyXzzIB+sILY Sm/RbW4zvhDI6SRWDo9AT/gzieF9kXHPd9fjji3kaJmugASUc88HXvdNEuhSvsWK mHidnSXYEDeIUrMfCvSy7r1Wi2xLL4XNSSobb8UOgnhU4O8HIS7RVLe9r1oSxYh4 j4XMWrT4JBcSp7vzmJmWN4jtfLh/s3Ih2SS/2e2kCz5MU7PW9rMR1/oPJhaTBOK1 MNn69/YFd3ns1Jkekqpjzhc+bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCw85NAy y7SfpzASrLYr1SK6pXZ2MB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHCgEJt15SrvXvIh/USV69iuOAwjPweidKZnlMX+ttNlsV5X3Z/LRRKnC8LEg cF3WKkW8IIAmHzhw7Zt1odmj5B5CnfZdmv4JGJZ5/WYRo9wcg/9CK63G/ioVPU3j IBedQj0y/WjJjj2YPgbdx67O7PwoNM0QVlC+1+o5orA20wbNpmiAb4y4zTqro+yq saRtk+lOF/nsnHx5AYTWk+vyGk3szesyhTno+Zo0585tnRr+gkERQmhpHQbAObUp VpH7NQXg2FYC2I58NxtQyAiHyYyefqZ8K5JmXiRJhfS+ta0XBFeZ/behKGv0fj1x 4Lny/MwgNaEiQwnICMTr6q+32Q== -----END CERTIFICATE-----Generated at Mon Apr 6 10:10:03 2026 by rpki-client