$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: Lb/DFhmwMrQq4w6t1Qc4UrKyVwvTUgJfq1bC2EelxPA= Subject key identifier: 36:0F:DA:C2:39:BA:BF:29:EE:0C:E4:D5:EE:2E:D3:34:45:5A:1B:B7 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0D2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CF9 Signing time: Sat 04 Apr 2026 18:12:39 +0000 Manifest this update: Sat 04 Apr 2026 18:12:39 +0000 Manifest next update: Sat 11 Apr 2026 18:12:39 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: NVdSksk3ifhUaYUDnq7QXGKcLLv3Uh4DWFVF1r/7cKw=) 2: F0202A84B36311F082F02072C4F9AE02.roa (hash: rVfs6LGzrLN0wWbbQ4d7gHO9mKYMBzycz9A93jxHPEY=) 3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3371 (0xd2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Apr 4 18:12:39 2026 GMT Not After : Apr 11 18:12:39 2026 GMT Subject: CN=69d15497-f529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:fd:66:d8:3f:79:8b:9a:1d:e1:02:45:b4: 20:7a:27:64:c6:e5:de:9e:29:ce:c1:06:af:2d:6d: 18:88:e6:f4:3a:8a:6c:a3:e2:f5:b3:69:91:35:60: 46:df:da:97:a0:94:2a:b9:fd:bb:af:66:c0:f7:7b: a4:fe:b8:e4:7b:df:48:69:bc:53:04:5a:15:3d:fe: 65:d5:4b:c2:dc:55:b8:31:b2:c3:4a:26:8e:5f:0f: e6:f7:9c:12:83:d8:71:77:79:5f:6b:5d:0b:9f:ec: c4:81:ae:34:04:2b:87:52:f3:7d:bf:8f:c5:5d:df: d5:81:40:af:8c:f8:96:78:42:9e:3a:54:2d:db:be: b7:4f:71:1d:70:ec:6c:5a:b3:0a:04:05:17:e1:b5: 64:c7:cc:0e:86:e9:e1:78:14:0b:ae:e5:9a:17:3a: 19:72:49:5e:c1:3f:0b:d5:8f:91:34:07:4f:4f:a9: 75:6e:3d:c5:ed:e1:49:2e:77:55:29:34:de:27:5d: 52:10:e8:a6:bc:df:a6:96:9c:70:9b:fa:6a:21:a3: 9f:8e:e0:7e:f0:4c:d5:ad:88:01:6a:7c:23:a8:bd: 99:a4:57:aa:3f:91:bc:27:da:a8:14:2a:56:1d:79: 94:d8:43:2d:12:17:82:fb:98:e6:28:4c:80:f3:0d: e7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0F:DA:C2:39:BA:BF:29:EE:0C:E4:D5:EE:2E:D3:34:45:5A:1B:B7 X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:bb:0a:5c:db:7c:02:cb:ac:e0:8c:ff:19:2a:82:a0:5e:f6: 14:27:85:d1:8c:f4:ea:07:34:c5:0c:47:79:38:36:09:d8:f6: 15:bc:33:8e:ad:1c:fb:10:69:29:9e:13:c2:22:62:a2:e5:0b: a3:ba:7a:87:eb:99:88:ba:4d:2a:94:5a:1b:cc:64:c9:ef:dd: 76:29:0f:87:18:f0:d2:53:c8:4d:90:9d:b2:eb:8d:5a:52:10: 1c:df:1f:72:4b:dd:51:1e:a2:d9:0b:02:42:dd:07:b4:4b:38: de:78:3d:f7:a2:27:f0:1e:59:3b:e3:24:cd:3c:7e:14:e0:a4: 81:42:1f:a3:28:cb:c8:39:9a:81:fa:d5:a6:be:fe:ac:27:d6: 2f:f5:48:aa:85:08:fd:7d:e1:12:19:17:19:fa:62:40:3b:29: cb:f7:50:cf:e6:4c:11:ca:e2:c6:ba:a9:62:1c:d8:98:f9:64: 09:0e:6d:1c:27:2b:1d:8a:ba:f9:12:8b:46:df:3f:c9:b8:74: 91:11:d7:c1:92:ac:c1:6c:62:e6:67:7e:d2:72:4f:90:b6:f3: 60:3c:64:d0:b1:a6:61:5b:61:b0:33:e7:38:40:c7:24:f4:99: 7b:68:8c:bc:20:25:30:ea:d6:79:e7:ee:f5:12:2b:65:e1:f6: 65:18:8a:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjYwNDA0MTgxMjM5WhcNMjYwNDExMTgxMjM5WjAYMRYwFAYD VQQDEw02OWQxNTQ5Ny1mNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyH9Ztg/eYuaHeECRbQgeidkxuXeninOwQavLW0YiOb0Oopso+L1s2mRNWBG 39qXoJQquf27r2bA93uk/rjke99IabxTBFoVPf5l1UvC3FW4MbLDSiaOXw/m95wS g9hxd3lfa10Ln+zEga40BCuHUvN9v4/FXd/VgUCvjPiWeEKeOlQt2763T3EdcOxs WrMKBAUX4bVkx8wOhunheBQLruWaFzoZcklewT8L1Y+RNAdPT6l1bj3F7eFJLndV KTTeJ11SEOimvN+mlpxwm/pqIaOfjuB+8EzVrYgBanwjqL2ZpFeqP5G8J9qoFCpW HXmU2EMtEheC+5jmKEyA8w3nJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYP2sI5 ur8p7gzk1e4u0zRFWhu3MB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3LsKXNt8Asus4Iz/GSqCoF72FCeF0Yz06gc0xQxHeTg2Cdj2Fbwzjq0c+xBp KZ4TwiJiouULo7p6h+uZiLpNKpRaG8xkye/ddikPhxjw0lPITZCdsuuNWlIQHN8f ckvdUR6i2QsCQt0HtEs43ng996In8B5ZO+MkzTx+FOCkgUIfoyjLyDmagfrVpr7+ rCfWL/VIqoUI/X3hEhkXGfpiQDspy/dQz+ZMEcrixrqpYhzYmPlkCQ5tHCcrHYq6 +RKLRt8/ybh0kRHXwZKswWxi5md+0nJPkLbzYDxk0LGmYVthsDPnOEDHJPSZe2iM vCAlMOrWeefu9RIrZeH2ZRiKzA== -----END CERTIFICATE-----Generated at Mon Apr 6 14:26:35 2026 by rpki-client