$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: DZkwoMfEZeWf+FA35PFxMeBaue9LBaT8fv7L2qdAcE8= Subject key identifier: 4F:3B:32:AC:97:87:B0:9E:27:DB:FA:63:F0:2E:D4:4B:EC:FF:4C:62 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0D8E Signing time: Sun 26 Apr 2026 17:54:29 +0000 Manifest this update: Sun 26 Apr 2026 17:54:28 +0000 Manifest next update: Sun 03 May 2026 17:54:28 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: i08ahocmlmkconNDtlqZjP7i/OFBA5IpDjCMfXHT+3A=) 2: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) 3: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) 4: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) 5: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) 6: 762C16422E9811F1A14B442FB4833773.roa (hash: 6dVRqPwjNiBJWT/1IpcKvHD9YdgtV5RR7uiRlRvanfU=) 7: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 17:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3531 (0xdcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Apr 26 17:54:28 2026 GMT Not After : May 3 17:54:28 2026 GMT Subject: CN=69ee5155-cb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:19:57:67:d8:b5:25:77:df:df:e5:d4:0f:06: 71:f7:79:97:c3:1d:7f:7c:4a:61:73:9c:98:54:38: b2:8a:a7:c6:0c:2e:71:0a:5c:b9:85:91:1b:06:1e: 0d:0f:19:a3:0b:8d:90:55:1c:54:ea:ae:9b:86:ba: a0:73:fa:52:23:34:a2:36:fb:df:80:ce:79:5e:9d: a1:a5:fc:1b:d7:25:4c:ea:bf:85:45:7b:7d:68:99: b1:ae:1e:5a:c1:6a:7c:14:e0:ca:aa:24:e5:d9:01: c7:b6:0d:2c:09:9d:43:f0:f0:d3:17:e7:c7:58:04: 02:8a:fc:a2:2e:c0:a0:55:b3:97:cb:1f:60:90:97: 8f:63:29:0d:c6:f6:46:c2:fc:9f:5a:d6:53:69:c4: f1:fb:81:50:56:20:84:66:12:52:ee:ef:6c:3e:12: 25:b9:c2:00:40:a7:5b:b6:39:d9:e9:5b:0a:df:d2: 99:f5:ff:87:b1:97:24:0e:c6:76:d0:20:3d:e4:1f: a8:e0:b9:8d:30:c7:f3:0c:b0:69:10:d5:e6:1b:d5: 88:43:ee:24:a3:a3:ef:72:4e:23:5c:6e:ef:7d:41: 3b:81:54:ef:d7:68:36:a1:db:e9:d6:3c:46:22:94: fc:7f:b7:b7:65:ca:94:16:92:0d:9f:14:f4:5b:2f: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3B:32:AC:97:87:B0:9E:27:DB:FA:63:F0:2E:D4:4B:EC:FF:4C:62 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:64:2a:1c:0f:b8:b7:70:06:ac:7b:23:cb:b2:86:0c:4c:60: 2b:1b:f9:f7:b5:2d:3a:21:f2:cb:26:9f:1b:96:59:6d:05:27: e1:5d:b8:18:54:45:c7:f2:32:8f:74:03:74:4a:7f:0b:f9:e4: 64:82:9f:59:e0:44:18:ce:59:27:a1:37:be:dc:43:5d:2f:7a: ca:39:21:cd:a9:ff:35:87:e6:0a:81:68:64:ed:39:a2:12:dc: a1:4d:be:d2:04:24:5f:67:67:53:f6:0e:a5:bb:f8:54:6f:5f: d6:3b:20:dc:77:c6:82:1b:01:f7:6a:bd:f0:84:4a:06:2d:e0: 7e:c7:b8:34:9b:24:9e:c7:79:10:29:cb:bd:da:4a:43:14:af: 78:b0:2d:57:f6:b9:b7:03:b7:6d:b3:72:ba:97:80:72:67:a7: d8:c7:e3:32:34:43:1a:59:39:65:77:43:aa:c3:f3:62:b0:ed: b8:be:9c:da:f9:25:1e:8c:1a:c7:be:a8:76:6f:81:71:29:ef: d7:51:a3:92:44:c0:7e:c6:8f:fa:d7:b7:8b:2c:c4:18:cd:e1: ea:39:a8:19:3c:49:85:80:db:b6:3b:2a:e5:64:f3:9c:41:53: 01:e0:f6:76:92:d7:78:04:51:24:07:bb:8a:b3:61:f8:cf:b6: ec:c2:ad:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwNDI2MTc1NDI4WhcNMjYwNTAzMTc1NDI4WjAYMRYwFAYD VQQDEw02OWVlNTE1NS1jYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+BlXZ9i1JXff3+XUDwZx93mXwx1/fEphc5yYVDiyiqfGDC5xCly5hZEbBh4N DxmjC42QVRxU6q6bhrqgc/pSIzSiNvvfgM55Xp2hpfwb1yVM6r+FRXt9aJmxrh5a wWp8FODKqiTl2QHHtg0sCZ1D8PDTF+fHWAQCivyiLsCgVbOXyx9gkJePYykNxvZG wvyfWtZTacTx+4FQViCEZhJS7u9sPhIlucIAQKdbtjnZ6VsK39KZ9f+HsZckDsZ2 0CA95B+o4LmNMMfzDLBpENXmG9WIQ+4ko6Pvck4jXG7vfUE7gVTv12g2odvp1jxG IpT8f7e3ZcqUFpINnxT0Wy9LewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE87MqyX h7CeJ9v6Y/Au1Evs/0xiMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsmQqHA+4t3AGrHsjy7KGDExgKxv597UtOiHyyyafG5ZZbQUn4V24GFRFx/Iy j3QDdEp/C/nkZIKfWeBEGM5ZJ6E3vtxDXS96yjkhzan/NYfmCoFoZO05ohLcoU2+ 0gQkX2dnU/YOpbv4VG9f1jsg3HfGghsB92q98IRKBi3gfse4NJsknsd5ECnLvdpK QxSveLAtV/a5twO3bbNyupeAcmen2MfjMjRDGlk5ZXdDqsPzYrDtuL6c2vklHowa x76odm+BcSnv11GjkkTAfsaP+te3iyzEGM3h6jmoGTxJhYDbtjsq5WTznEFTAeD2 dpLXeARRJAe7irNh+M+27MKtog== -----END CERTIFICATE-----Generated at Tue Apr 28 17:16:01 2026 by rpki-client