$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: TRtAByqab37nzCDRUCW4QhL5wgb73DedMqQ8B//wn5o= Subject key identifier: 13:C5:7B:8E:69:42:77:4B:54:01:F5:60:E5:D0:B6:50:0D:D0:8F:28 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0217 Signing time: Wed 29 Apr 2026 03:31:56 +0000 Manifest this update: Wed 29 Apr 2026 03:31:56 +0000 Manifest next update: Wed 06 May 2026 03:31:56 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: Ucwap4QTMQS302RYdJf/HXd0NhT7lQvrRO2fd6LJGxI=) 2: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: xUQFAVTTdAa8CqNrRE2SBv3wHjSfgqDOaaBb6DaJIhs=) 3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: a/sMWsbe2PPLiNo0V4QVI0MPQGpJqfAh/ZXuIbQB9VE=) 4: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: aKljY48TNAmDYgzUHTH7Yg9ZPBKBFIkH7Kz1QZqrLgc=) 5: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: 7UL7W+XoowNRuIfuRKS9SoKzU2RSCaYL5GSAeRQ5fHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 03:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Apr 29 03:31:56 2026 GMT Not After : May 6 03:31:56 2026 GMT Subject: CN=69f17bac-6188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:dc:eb:b4:51:b4:44:c4:a6:09:1f:1b:6b: 5d:55:23:2f:15:92:7f:e9:e4:56:c7:71:07:61:66: 1f:ac:9e:bc:07:06:a0:9d:17:87:5c:ee:77:f2:bc: 84:e5:83:e0:4e:2a:63:9c:45:54:20:91:8e:66:c8: ee:1a:67:dc:aa:06:c1:49:49:43:ba:c2:6d:7a:4d: 91:e5:dd:6c:29:67:5a:6e:83:e2:b7:d8:ed:f7:95: 22:1c:b2:0d:5f:7d:2d:cc:c9:11:be:98:af:e4:14: fd:7c:df:5f:15:bd:c1:9c:5a:81:1f:cc:01:95:d4: a0:f5:c0:cf:64:f7:1e:aa:c2:bf:f2:3b:96:4d:72: 10:a5:d2:ad:36:76:17:6b:bc:a9:f5:37:2b:cc:1a: 5c:b7:02:23:b5:e0:65:3b:14:53:b5:69:dd:e3:70: 07:31:1e:ac:f9:bf:a7:30:ef:a3:e6:4a:a4:da:00: ab:34:18:da:b8:14:9b:82:79:5c:ad:fc:8f:58:de: 9d:d3:d7:54:a5:dc:5b:b4:66:2c:c6:cc:69:b8:76: c4:9e:4a:c8:a9:3b:e6:c2:5b:62:89:e2:5e:8b:fe: 5e:ad:7a:c0:60:a9:28:8d:09:8a:3a:2d:91:18:90: e9:da:3e:80:3a:ba:65:0f:56:de:f1:1c:f7:7c:85: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C5:7B:8E:69:42:77:4B:54:01:F5:60:E5:D0:B6:50:0D:D0:8F:28 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c3:0d:37:d1:88:6c:9e:2a:5d:3c:a6:78:5d:02:9a:af:ba: fa:b4:21:dc:d9:a0:2a:a8:70:d5:81:78:9e:fc:0c:a0:3e:7f: a5:14:18:09:38:cf:04:fa:74:80:8a:8c:bc:29:55:ed:10:24: a7:e7:89:16:52:a3:62:17:8f:89:2a:6e:a8:72:ae:b8:d8:52: 5b:02:3a:b4:ed:d5:79:96:c3:5c:85:fc:04:12:49:6d:8a:c3: df:0d:92:40:db:da:a2:cf:ba:34:53:c1:1d:a3:b7:b2:7c:ab: c7:35:06:57:75:fa:cf:05:7b:06:4a:62:a0:a3:ee:dc:18:92: 25:47:21:3c:1c:c4:8c:42:8f:26:7a:e4:68:db:41:b5:db:64: 6c:f1:67:c7:fc:58:1f:7e:9d:74:97:15:65:92:b8:b7:10:93: 4f:80:e0:e2:1b:fe:0b:d4:dd:98:cf:fb:e7:e8:30:9a:c4:78: ce:5c:dc:90:3c:17:d7:3d:aa:5f:85:4c:2a:9a:40:31:a0:3b: b6:38:4d:12:cd:af:1e:75:19:b9:38:77:5a:b3:81:93:2c:34: 72:0a:19:7b:8b:7c:4a:35:5e:5b:06:6a:60:b9:4e:ed:6e:e2: c6:5c:2b:a4:ca:39:a7:56:c0:c2:f7:9d:1e:16:47:f3:d3:3e: dd:0c:8c:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjYwNDI5MDMzMTU2WhcNMjYwNTA2MDMzMTU2WjAYMRYwFAYD VQQDEw02OWYxN2JhYy02MTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwvc67RRtETEpgkfG2tdVSMvFZJ/6eRWx3EHYWYfrJ68BwagnReHXO538ryE 5YPgTipjnEVUIJGOZsjuGmfcqgbBSUlDusJtek2R5d1sKWdaboPit9jt95UiHLIN X30tzMkRvpiv5BT9fN9fFb3BnFqBH8wBldSg9cDPZPceqsK/8juWTXIQpdKtNnYX a7yp9TcrzBpctwIjteBlOxRTtWnd43AHMR6s+b+nMO+j5kqk2gCrNBjauBSbgnlc rfyPWN6d09dUpdxbtGYsxsxpuHbEnkrIqTvmwltiieJei/5erXrAYKkojQmKOi2R GJDp2j6AOrplD1be8Rz3fIUWEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPFe45p QndLVAH1YOXQtlAN0I8oMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMcMNN9GIbJ4qXTymeF0Cmq+6+rQh3NmgKqhw1YF4nvwMoD5/pRQYCTjPBPp0 gIqMvClV7RAkp+eJFlKjYhePiSpuqHKuuNhSWwI6tO3VeZbDXIX8BBJJbYrD3w2S QNvaos+6NFPBHaO3snyrxzUGV3X6zwV7BkpioKPu3BiSJUchPBzEjEKPJnrkaNtB tdtkbPFnx/xYH36ddJcVZZK4txCTT4Dg4hv+C9TdmM/75+gwmsR4zlzckDwX1z2q X4VMKppAMaA7tjhNEs2vHnUZuTh3WrOBkyw0cgoZe4t8SjVeWwZqYLlO7W7ixlwr pMo5p1bAwvedHhZH89M+3QyM4g== -----END CERTIFICATE-----Generated at Wed Apr 29 06:50:56 2026 by rpki-client