$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: zfu8iujq6LD/lqDiC1x5QjCtVzCHAvrLPCOJxBOkYZg= Subject key identifier: 34:69:2E:C8:56:02:AB:3E:6D:1F:AF:38:5D:03:56:72:92:04:42:11 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 316C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 30EF Signing time: Mon 20 Apr 2026 15:25:25 +0000 Manifest this update: Mon 20 Apr 2026 15:25:25 +0000 Manifest next update: Mon 27 Apr 2026 15:25:25 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: M8VpEaF21TgdlsVUvbb1Ekp+L/wQQiRemS094DMWxa8=) 2: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: UIF18yXEMKB6Xi+ID1n3xjpnZMc0AimyXBIjScTOYBA=) 3: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: Mu9rMlzhoKL6wcm2IQfT1fYiz3u1EpWT7mob7q7u//c=) 4: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: de2C8Xu2sn4wIkObgdX6KvmUkB+P2+zRTh51LUtEnFY=) 5: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: wmmz/QZK42uhoPNkWkDZAabuw7FDO3k7EWNvm0NWAOw=) 6: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: w6jopDYdBCSKneIqUB+uGylPK/ivurOX7DEN4AdjgnA=) 7: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: fcJYmXSZeVG/6eLQqu0NVh0YwupBcKyyjG3vFyzIP2U=) 8: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: tIuCeWt8loP5ZmBWFAM7052UGdSqIBcg6mUyDDDPLo0=) 9: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: SmQ5CGEJCE3s9/YNxwJXtFcb33wFKBOX7DlFwf6j2G4=) 10: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: y5ciIKx3lqS7z/BR3HumcZnil59gOk0O6RNJFaL0JeY=) 11: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: /FrpL0qVU1o4ddXI6hWw5Yj8pF2l/G6Nolhot450TQg=) 12: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: ccU5A3TwZ5EmSAvHoBQM+S9rDORLffXDKuCFeSF3XaM=) 13: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: ZCk+fEsQHe2jlnBNkTm2b7TPnu7HbyKCFYwP585vSWU=) 14: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: gko9Q35KdBOiYMYQc7V0na7o/2+tf0Ti0oIVrHZBvXA=) 15: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wbfTUnUAKsJRrWfnHjlaeLodofy5Oo1bl9O6vPfn9a4=) 16: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: BRSGBu/6q3GwQLt600UgprgrzUqX0i//fWpSz8ak1m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 15:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12652 (0x316c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Apr 20 15:25:25 2026 GMT Not After : Apr 27 15:25:25 2026 GMT Subject: CN=69e64565-dde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:d8:8c:c0:48:43:c7:01:fd:a8:63:21:03: c0:01:55:f3:b9:03:d3:2f:a6:26:c1:a7:ef:04:25: 98:74:f5:79:38:3f:b4:d0:0e:e0:45:a2:c1:b6:52: 19:85:b2:c5:05:86:8b:35:b4:f5:55:f4:35:58:7b: 14:77:9f:89:64:c1:7c:19:4d:de:10:12:97:fc:df: 74:f4:d7:75:08:a0:14:96:57:27:d8:7c:71:53:00: cd:ac:5d:9b:72:24:00:f8:35:a6:d0:26:16:6d:a6: be:a7:d2:70:d0:f6:8b:99:56:4b:be:c1:5f:87:6f: 40:31:f7:59:2c:cc:26:0d:f0:94:dc:e9:32:a2:97: dd:e7:8f:fb:e7:e4:ea:81:11:14:95:22:ef:81:b3: 6e:21:63:ca:05:4d:82:3f:08:cf:e6:6d:0e:38:be: 04:40:8b:52:e0:a6:49:f2:ac:60:a2:9e:28:e1:72: 9b:d2:39:19:67:16:ef:7b:22:96:66:80:6c:99:48: c6:30:f2:ed:61:d9:8e:d3:2e:cf:e6:c2:1f:56:1e: 5c:2d:60:f9:a1:37:a8:f6:b9:be:5e:cb:f1:6d:62: 13:e1:2c:51:b2:bb:c1:68:a3:f4:6a:23:4f:76:d5: 6b:1b:79:c2:6d:78:09:53:52:9a:44:e7:c5:3d:80: 32:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:69:2E:C8:56:02:AB:3E:6D:1F:AF:38:5D:03:56:72:92:04:42:11 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:26:74:be:0e:03:dd:04:85:a5:41:c0:17:04:27:3d:2d:62: be:82:1d:d9:d5:52:ee:05:c0:88:36:4b:66:2d:9f:8d:83:f7: 6d:39:93:5c:c2:ca:80:c5:c7:3e:d7:e4:0a:b6:7d:60:4d:92: 04:60:89:86:b1:80:b7:fc:26:74:a2:5f:09:ad:a8:a0:c6:62: 83:50:11:c2:b0:bc:7c:60:4b:fe:64:29:a3:ff:82:9b:56:31: 38:93:7f:da:dc:e2:49:c8:9c:2b:07:68:40:fe:75:93:78:ce: 0d:bf:e3:b3:e6:c5:fa:16:23:5f:2a:f2:d5:36:df:a2:27:53: 70:06:15:bd:a7:63:fb:93:72:98:77:7c:da:4f:2b:51:c2:0e: 62:2f:d4:ae:6c:05:d8:58:f5:34:70:d9:68:b2:35:22:ca:01: dd:7a:6a:2e:56:ac:da:7a:d4:45:a6:e9:5e:39:1c:04:a5:1e: 1f:e1:ee:53:a8:9c:8c:b3:36:55:9d:23:98:46:59:46:18:09: 30:38:be:58:c6:40:db:b1:a8:b1:22:ad:8d:af:db:0d:5f:bb: d5:8b:d7:9a:43:36:b2:eb:8b:4b:24:8a:33:56:93:30:b1:01: b4:2a:d9:26:90:64:35:c2:85:0d:6a:08:82:65:2a:d2:41:7a: 04:ed:14:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjYwNDIwMTUyNTI1WhcNMjYwNDI3MTUyNTI1WjAYMRYwFAYD VQQDEw02OWU2NDU2NS1kZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohrYjMBIQ8cB/ahjIQPAAVXzuQPTL6YmwafvBCWYdPV5OD+00A7gRaLBtlIZ hbLFBYaLNbT1VfQ1WHsUd5+JZMF8GU3eEBKX/N909Nd1CKAUllcn2HxxUwDNrF2b ciQA+DWm0CYWbaa+p9Jw0PaLmVZLvsFfh29AMfdZLMwmDfCU3Okyopfd54/75+Tq gREUlSLvgbNuIWPKBU2CPwjP5m0OOL4EQItS4KZJ8qxgop4o4XKb0jkZZxbveyKW ZoBsmUjGMPLtYdmO0y7P5sIfVh5cLWD5oTeo9rm+XsvxbWIT4SxRsrvBaKP0aiNP dtVrG3nCbXgJU1KaROfFPYAyHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRpLshW Aqs+bR+vOF0DVnKSBEIRMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPiZ0vg4D3QSFpUHAFwQnPS1ivoId2dVS7gXAiDZLZi2fjYP3bTmTXMLKgMXH PtfkCrZ9YE2SBGCJhrGAt/wmdKJfCa2ooMZig1ARwrC8fGBL/mQpo/+Cm1YxOJN/ 2tziScicKwdoQP51k3jODb/js+bF+hYjXyry1TbfoidTcAYVvadj+5NymHd82k8r UcIOYi/UrmwF2Fj1NHDZaLI1IsoB3XpqLlas2nrURabpXjkcBKUeH+HuU6icjLM2 VZ0jmEZZRhgJMDi+WMZA27GosSKtja/bDV+71YvXmkM2suuLSySKM1aTMLEBtCrZ JpBkNcKFDWoIgmUq0kF6BO0UEw== -----END CERTIFICATE-----Generated at Wed Apr 22 00:09:47 2026 by rpki-client