$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json) Hash identifier: 4Lcty9FBDumD7owACLbm/ibhPdIUz6akzN7ndR+5jD0= Subject key identifier: 06:EC:98:DE:0E:79:74:96:A9:CF:0D:F7:08:B9:23:5B:05:C0:2B:39 Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft Manifest number: 016C Signing time: Sun 05 Apr 2026 04:13:37 +0000 Manifest this update: Sun 05 Apr 2026 04:13:37 +0000 Manifest next update: Sun 12 Apr 2026 04:13:37 +0000 Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: i9qRlwQMWTMhD6IXM4UU1N6YnXQTMsklPvD9suHdQf8=) 2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: tC7+VJT22TXj7yUL7xjBDLMNT6SajKWeU3nOU11r1Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Validity Not Before: Apr 5 04:13:37 2026 GMT Not After : Apr 12 04:13:37 2026 GMT Subject: CN=69d1e171-6193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:c6:aa:b4:7a:94:d8:45:84:1b:c3:31:76: ae:c2:e1:ab:b3:6b:d1:53:47:e0:e3:cc:56:ca:53: ae:0f:4f:af:7b:07:94:c5:d8:15:45:c5:8a:0f:df: a1:ed:01:0f:8d:0e:e3:90:26:df:d5:b9:77:e7:58: 07:cf:69:38:d5:0b:e8:a8:c0:d3:fc:d7:f4:8b:50: 3b:5d:c6:dc:84:70:f8:09:73:e8:c1:49:c6:0d:06: d8:c8:16:d5:9f:43:01:22:3a:7c:61:21:d3:82:27: ab:76:37:2b:96:07:4b:18:ca:9d:05:ba:4b:35:df: 3d:76:83:ed:43:7c:14:01:35:c9:08:94:29:f5:b6: ff:59:de:62:d6:a0:af:80:d6:fd:7b:aa:11:6b:d3: 3a:5f:f3:e4:79:cb:a9:aa:f2:b3:62:11:7b:9f:9a: 22:5a:92:d1:af:df:e2:ee:16:16:83:4e:68:55:9d: 54:64:2b:9f:b9:6e:b0:66:96:fe:0f:f3:a5:d5:a3: 69:7c:9b:e3:5f:76:ae:ca:82:dd:2a:f6:53:cf:6b: de:3c:40:ba:4e:32:3c:37:b0:9b:a1:3f:93:00:da: 09:a5:fc:82:d8:41:bb:6d:94:39:38:b0:c8:8b:81: 1a:b6:12:0f:69:ba:38:1d:02:ff:2e:b1:43:90:af: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EC:98:DE:0E:79:74:96:A9:CF:0D:F7:08:B9:23:5B:05:C0:2B:39 X509v3 Authority Key Identifier: keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9c:a7:70:dc:3f:e9:97:a5:ea:c6:28:e0:85:d7:89:89:bc: 53:11:bc:61:ab:12:95:5f:53:08:e3:7d:8d:3e:6c:96:2e:91: 33:11:ec:7f:13:5a:3e:27:22:ce:f6:91:a1:d3:c8:0d:84:52: 82:cf:15:e1:ba:00:3b:62:7c:75:87:07:57:34:44:82:c4:a1: f8:03:af:62:7d:66:2b:6c:0d:6c:d3:ff:13:a0:6b:dd:98:eb: fb:85:3d:ff:7e:42:3e:71:42:ec:ab:ec:b3:71:9a:2f:88:b1: 39:95:33:f3:65:fc:97:d9:75:cc:c2:2a:77:90:a0:85:d6:91: 92:7a:14:6a:e0:8c:3f:9c:35:fb:d5:47:26:4b:00:3b:27:64: 06:c1:3c:36:ec:e9:a1:68:0a:40:0c:e0:31:55:9d:b0:e4:08: 61:49:56:2a:4f:80:ea:3c:12:27:54:42:8e:f9:35:58:1b:40: 8b:df:a9:af:47:02:d2:d8:06:9d:b9:74:44:69:d5:3f:43:78: ae:93:3b:6e:82:c1:55:18:71:ef:f9:7c:6f:d9:b2:f4:36:b6: fc:2b:44:69:e6:2d:be:d9:a4:9d:a2:ea:5b:ae:b3:09:62:15: 52:dd:cc:55:89:ed:59:6c:cd:11:92:e7:ae:cf:8f:f9:83:41: 7f:63:fc:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3 ODZDOEFDMEEwHhcNMjYwNDA1MDQxMzM3WhcNMjYwNDEyMDQxMzM3WjAYMRYwFAYD VQQDEw02OWQxZTE3MS02MTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEHGqrR6lNhFhBvDMXauwuGrs2vRU0fg48xWylOuD0+veweUxdgVRcWKD9+h 7QEPjQ7jkCbf1bl351gHz2k41QvoqMDT/Nf0i1A7XcbchHD4CXPowUnGDQbYyBbV n0MBIjp8YSHTgierdjcrlgdLGMqdBbpLNd89doPtQ3wUATXJCJQp9bb/Wd5i1qCv gNb9e6oRa9M6X/PkecupqvKzYhF7n5oiWpLRr9/i7hYWg05oVZ1UZCufuW6wZpb+ D/Ol1aNpfJvjX3auyoLdKvZTz2vePEC6TjI8N7CboT+TANoJpfyC2EG7bZQ5OLDI i4EathIPabo4HQL/LrFDkK/S2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbsmN4O eXSWqc8N9wi5I1sFwCs5MB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm dnd1YlA0NzJOMUI0YklyQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALJyncNw/6Zel6sYo4IXXiYm8UxG8YasSlV9TCON9jT5sli6RMxHsfxNaPici zvaRodPIDYRSgs8V4boAO2J8dYcHVzREgsSh+AOvYn1mK2wNbNP/E6Br3Zjr+4U9 /35CPnFC7Kvss3GaL4ixOZUz82X8l9l1zMIqd5CghdaRknoUauCMP5w1+9VHJksA OydkBsE8NuzpoWgKQAzgMVWdsOQIYUlWKk+A6jwSJ1RCjvk1WBtAi9+pr0cC0tgG nbl0RGnVP0N4rpM7boLBVRhx7/l8b9my9Da2/CtEaeYtvtmknaLqW66zCWIVUt3M VYntWWzNEZLnrs+P+YNBf2P8fQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:48 2026 by rpki-client