$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: VdER3NWaGtHOuwP7NJ6q7WaJPQCjlO+yd30XGx9G9Cs= Subject key identifier: 50:54:C5:77:40:AF:71:5D:EA:FA:BE:D3:C2:61:E2:24:4C:6A:7D:9D Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 173D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 172F Signing time: Sat 04 Apr 2026 16:31:04 +0000 Manifest this update: Sat 04 Apr 2026 16:31:04 +0000 Manifest next update: Sat 11 Apr 2026 16:31:04 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: 7+KiH4+JjC3N1g3wZ5nF9FyaSjHzUphbfy0hXtXHcTE=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: n3LIJOsHlARAi65lnMhL3wL2TR8QPk4sPY0Xr04F6l0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5949 (0x173d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Apr 4 16:31:04 2026 GMT Not After : Apr 11 16:31:04 2026 GMT Subject: CN=69d13cc8-1a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:34:77:48:7f:b8:d0:b9:bb:49:c2:c8:68: ca:89:23:37:4d:05:cd:95:42:d9:8c:87:91:0f:5e: 73:f5:59:61:7d:8c:3c:19:d3:ed:39:4d:e1:7f:fc: c3:46:f8:1d:e5:6c:89:4c:68:ec:0e:72:fb:e3:6b: 2a:da:b3:e5:ca:72:fa:a9:02:b9:fb:ac:d9:a1:bb: 19:f4:e5:4b:37:66:51:e0:82:fa:3f:00:01:cf:b0: 03:91:b2:45:de:ee:7a:54:da:c4:90:62:89:cf:1a: ec:c4:e2:0a:78:92:ea:0a:e3:7a:6a:77:81:86:77: 94:1c:26:44:e0:ef:9b:58:31:dd:df:91:b4:bf:96: 44:2b:cd:d8:16:cd:75:34:3a:b5:db:14:c9:70:b4: 20:10:75:e7:79:0f:ac:71:56:42:7f:c0:83:26:84: 1f:85:f6:08:bb:1c:a4:22:ad:e9:fc:dc:60:ae:e4: ce:34:f9:23:66:d6:0b:09:6b:d6:20:df:15:21:b3: 8b:73:ab:7a:e2:38:f8:e8:0d:69:b2:a7:88:28:e6: e2:73:4e:cd:5d:30:b1:78:02:59:0e:91:fb:00:ce: 00:b1:7e:05:06:b5:54:fc:eb:ff:12:df:59:97:c5: 4d:32:7b:3f:9e:49:76:fd:9b:47:ad:8b:ae:14:e6: 3f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:C5:77:40:AF:71:5D:EA:FA:BE:D3:C2:61:E2:24:4C:6A:7D:9D X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:11:ef:6a:81:df:f4:2b:02:c7:7b:29:bb:7f:a3:a5:aa:b9: 1a:76:95:63:e2:53:92:af:17:63:34:5f:e4:bb:cf:04:55:5e: 10:d7:04:d7:7e:ca:1e:ec:25:0d:72:9f:b8:8c:23:d7:31:14: 15:77:6e:6f:f1:d5:f2:c6:f5:0e:6e:d3:f2:55:52:77:62:11: 0a:05:5d:85:d7:50:b7:c5:01:d7:76:fb:34:d2:59:70:23:13: 8b:e3:ba:f7:2b:87:80:99:39:00:b1:4a:64:cd:aa:00:ca:7f: f3:e5:fc:aa:3a:0f:db:b5:d7:94:03:66:7d:32:76:b2:b0:07: 15:f6:8d:fa:73:69:cd:12:f2:39:f6:2e:47:e2:5a:4d:3b:71: 86:0d:d4:a5:70:76:dd:73:ca:d6:54:85:e0:5c:36:d6:e3:4e: d6:cd:d8:b8:50:1e:eb:09:1c:3c:50:15:e7:d4:c3:da:c5:0b: 96:e1:dc:5a:f5:5c:56:2a:d4:fe:24:ce:9d:87:c6:62:06:9f: a9:3f:1f:06:df:24:04:72:a1:19:73:13:c6:dd:13:a9:2f:17: 5a:db:3a:f5:c8:cc:02:a8:7e:c3:55:30:55:e9:db:29:f3:00: 3a:9c:12:42:3c:45:c7:b7:19:d1:a1:0a:3a:e4:87:7c:61:90: e1:41:58:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjYwNDA0MTYzMTA0WhcNMjYwNDExMTYzMTA0WjAYMRYwFAYD VQQDEw02OWQxM2NjOC0xYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yM0d0h/uNC5u0nCyGjKiSM3TQXNlULZjIeRD15z9VlhfYw8GdPtOU3hf/zD Rvgd5WyJTGjsDnL742sq2rPlynL6qQK5+6zZobsZ9OVLN2ZR4IL6PwABz7ADkbJF 3u56VNrEkGKJzxrsxOIKeJLqCuN6aneBhneUHCZE4O+bWDHd35G0v5ZEK83YFs11 NDq12xTJcLQgEHXneQ+scVZCf8CDJoQfhfYIuxykIq3p/NxgruTONPkjZtYLCWvW IN8VIbOLc6t64jj46A1psqeIKObic07NXTCxeAJZDpH7AM4AsX4FBrVU/Ov/Et9Z l8VNMns/nkl2/ZtHrYuuFOY/awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBUxXdA r3Fd6vq+08Jh4iRMan2dMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzRHvaoHf9CsCx3spu3+jpaq5GnaVY+JTkq8XYzRf5LvPBFVeENcE137KHuwl DXKfuIwj1zEUFXdub/HV8sb1Dm7T8lVSd2IRCgVdhddQt8UB13b7NNJZcCMTi+O6 9yuHgJk5ALFKZM2qAMp/8+X8qjoP27XXlANmfTJ2srAHFfaN+nNpzRLyOfYuR+Ja TTtxhg3UpXB23XPK1lSF4Fw21uNO1s3YuFAe6wkcPFAV59TD2sULluHcWvVcVirU /iTOnYfGYgafqT8fBt8kBHKhGXMTxt0TqS8XWts69cjMAqh+w1UwVenbKfMAOpwS QjxFx7cZ0aEKOuSHfGGQ4UFY/A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:52 2026 by rpki-client