$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: ysGVc79WvhzGdlDVYnwWYauOGtSuu3HFTFtAEPbPTZ8= Subject key identifier: 77:2D:17:74:D3:D8:F8:6D:C9:91:A9:BF:B6:95:88:CB:06:05:F2:5B Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 23FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 23DF Signing time: Sat 04 Apr 2026 15:45:05 +0000 Manifest this update: Sat 04 Apr 2026 15:45:05 +0000 Manifest next update: Sat 11 Apr 2026 15:45:05 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: mo/6ACzoPfy+cpwuc3ajlYcuac04yVLCiHHuV5xN5V4=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: aqWngdjtRLqUSkhygiAXUU1YJGxW+DXL13gbX9vTVWo=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9215 (0x23ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Apr 4 15:45:05 2026 GMT Not After : Apr 11 15:45:05 2026 GMT Subject: CN=69d13201-ef61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:9e:b8:6f:3b:a4:81:98:3f:ea:21:0f:1a: 67:25:02:31:9f:26:86:82:0e:7f:9d:ae:36:24:ea: a5:97:4b:b0:1c:76:8a:be:70:41:23:a4:96:82:bf: f2:ae:d8:c2:33:ab:a9:18:46:4a:be:b1:34:46:c5: ce:7a:49:f4:6e:3d:72:c4:2f:35:77:ba:b4:62:fc: 78:98:59:84:30:b3:a1:26:51:74:08:43:d0:a8:cf: 85:d4:17:9f:7e:35:44:14:f3:90:19:82:d8:fb:69: d9:96:30:36:77:01:75:3c:61:bb:b5:9b:16:ad:20: 8e:36:81:12:10:a2:5c:b2:fd:36:69:f3:a8:6a:16: f0:d1:2a:eb:ff:fa:45:88:10:80:75:7a:65:09:85: 8e:00:3f:75:1d:b5:4b:38:fc:1e:31:b8:67:48:a8: 88:8f:79:51:8b:dd:42:76:41:a7:f2:cc:68:73:a1: 40:62:9e:23:77:4c:d5:ca:0f:bc:51:af:40:d7:10: 75:52:aa:70:d1:24:60:1f:bb:bd:0c:c3:81:f0:cf: f5:1e:6a:af:fa:83:80:cc:8e:c0:c1:e0:bf:bd:58: 4a:33:32:cf:f0:10:6d:e5:19:c6:47:e6:cc:fb:dd: 5a:5c:73:f7:3a:56:b9:b5:44:85:a8:15:dc:be:ff: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:17:74:D3:D8:F8:6D:C9:91:A9:BF:B6:95:88:CB:06:05:F2:5B X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a5:ef:00:fb:3f:33:00:d4:a4:2a:8a:dd:f7:2b:c8:68:dd: a7:8e:1f:25:dc:ce:fc:2e:1c:d3:16:9f:8e:bf:9e:a6:fc:ef: 9d:e7:a3:a0:4f:a9:8d:63:37:16:bb:cb:f3:ae:22:cc:a2:d0: 44:4b:3b:4a:1c:6f:28:89:0c:37:8e:86:24:a5:81:76:54:69: 33:8d:4b:0c:10:9c:28:ff:07:7e:0c:b5:8b:92:73:70:da:70: fd:ba:10:e9:94:2d:96:f3:e9:e7:21:73:1c:77:38:a5:01:91: 0e:db:88:64:c3:0a:f7:96:b5:48:00:16:95:3a:f3:4e:e1:8f: 58:3c:99:84:80:a1:1b:fe:af:5a:39:d4:03:22:2f:c2:50:27: ec:33:12:b7:bf:35:59:84:20:8b:8b:f8:f8:72:ab:5d:35:44: 97:00:84:91:fb:86:55:5b:03:86:a2:b7:8f:10:05:c4:d2:4b: 0a:41:63:01:5e:3e:48:4d:34:7b:fb:a8:92:62:3d:a7:90:60: 59:4e:d3:3b:81:10:6e:54:14:1c:a4:8c:dc:ba:5d:78:d0:d9: 5c:b3:38:6b:21:84:67:ba:3d:86:f2:cb:af:8b:a3:44:03:20: 35:4b:d5:f3:0a:26:2d:ad:44:57:37:a0:79:9e:b7:6c:ac:13: 8b:a8:d9:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjYwNDA0MTU0NTA1WhcNMjYwNDExMTU0NTA1WjAYMRYwFAYD VQQDEw02OWQxMzIwMS1lZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/WeuG87pIGYP+ohDxpnJQIxnyaGgg5/na42JOqll0uwHHaKvnBBI6SWgr/y rtjCM6upGEZKvrE0RsXOekn0bj1yxC81d7q0Yvx4mFmEMLOhJlF0CEPQqM+F1Bef fjVEFPOQGYLY+2nZljA2dwF1PGG7tZsWrSCONoESEKJcsv02afOoahbw0Srr//pF iBCAdXplCYWOAD91HbVLOPweMbhnSKiIj3lRi91CdkGn8sxoc6FAYp4jd0zVyg+8 Ua9A1xB1Uqpw0SRgH7u9DMOB8M/1Hmqv+oOAzI7AweC/vVhKMzLP8BBt5RnGR+bM +91aXHP3Ola5tUSFqBXcvv/dUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHctF3TT 2PhtyZGpv7aViMsGBfJbMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmKXvAPs/MwDUpCqK3fcryGjdp44fJdzO/C4c0xafjr+epvzvneejoE+pjWM3 FrvL864izKLQREs7ShxvKIkMN46GJKWBdlRpM41LDBCcKP8Hfgy1i5JzcNpw/boQ 6ZQtlvPp5yFzHHc4pQGRDtuIZMMK95a1SAAWlTrzTuGPWDyZhIChG/6vWjnUAyIv wlAn7DMSt781WYQgi4v4+HKrXTVElwCEkfuGVVsDhqK3jxAFxNJLCkFjAV4+SE00 e/uokmI9p5BgWU7TO4EQblQUHKSM3LpdeNDZXLM4ayGEZ7o9hvLLr4ujRAMgNUvV 8womLa1EVzegeZ63bKwTi6jZYQ== -----END CERTIFICATE-----Generated at Mon Apr 6 14:01:51 2026 by rpki-client