$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: j2HNdsqJq8HbVkruIlYFQyIXacrqbiIwf7dSfpqwn2Y= Subject key identifier: C2:23:C6:39:39:E6:41:EC:A4:AF:0D:4B:CB:AA:1A:31:E4:A6:14:C9 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 023A Signing time: Sun 05 Apr 2026 02:07:20 +0000 Manifest this update: Sun 05 Apr 2026 02:07:20 +0000 Manifest next update: Sun 12 Apr 2026 02:07:20 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: GA9d1fz1mWHASJuV6wjRh4qviUZq5cnUxNZQUXl2JLk=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: YiM67MBOQyQiFAZiHKZnFOav4WykQTG7bAqQs/W9ABA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Apr 5 02:07:20 2026 GMT Not After : Apr 12 02:07:20 2026 GMT Subject: CN=69d1c3d8-00f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:32:33:4a:71:17:07:5c:d1:97:8c:6f:c0:e5: 11:9f:b8:75:e9:5c:3f:0a:0f:d7:1e:69:7f:57:de: ae:08:b5:fe:c8:8a:38:6d:b5:3f:d3:78:63:0a:40: e4:93:be:46:c6:36:90:a2:42:06:a5:7a:97:f8:ab: f3:4b:85:db:5d:d5:fe:d3:e0:ca:4c:f2:37:c3:b1: 6e:9b:fc:7a:2e:d5:63:94:bf:ac:f7:f6:15:ba:45: 18:cb:bc:21:10:aa:f7:22:32:ac:0a:05:f8:19:26: d4:ed:f1:ca:38:8f:38:e8:07:17:88:e7:62:3d:84: b3:fa:e0:f1:69:5e:c5:84:00:b3:d9:f6:86:00:55: 6f:2e:08:56:b9:65:3a:51:7d:65:b6:a8:5e:50:74: fd:16:34:e7:52:c2:67:8f:20:a7:e7:0c:9d:2e:b2: 97:00:45:f9:7f:62:0f:c8:50:16:06:1f:00:eb:1b: fd:5e:9a:4a:36:48:06:19:10:c6:b9:50:97:ca:75: 9c:ff:a4:af:8e:f4:ef:cb:68:95:01:3b:28:bf:ad: 04:3f:0d:ab:7e:04:24:d7:80:cf:17:92:ee:54:41: e1:40:9f:f9:57:82:54:bb:cd:4e:86:ba:51:6a:46: 37:8c:94:5e:8f:42:01:61:a1:f0:09:67:b7:79:f1: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:23:C6:39:39:E6:41:EC:A4:AF:0D:4B:CB:AA:1A:31:E4:A6:14:C9 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:c5:ee:14:27:32:74:55:c7:a2:ef:a5:e2:89:99:76:22:08: 6c:1e:00:13:9d:5a:d2:fc:5f:5f:ba:1c:65:cc:54:ce:fe:9f: b8:c8:84:51:9f:6d:ab:2b:52:90:81:76:ff:e3:e8:fa:7c:4a: ce:a8:ae:01:58:f4:78:cb:a7:52:fd:30:de:85:3f:9c:e0:f8: e6:d2:ad:dd:5b:0d:88:c2:a9:e1:df:a7:64:a6:d9:b6:ce:d2: 25:fc:3d:02:10:4d:ef:a8:47:4c:d5:82:b2:10:2d:65:bd:d5: 46:8e:50:13:71:ae:01:a4:04:98:1c:2a:12:14:36:9f:f9:09: 13:66:57:88:d5:0d:e5:69:8c:cc:a1:a3:ef:dc:af:ff:ac:a2: c1:70:c1:70:50:f8:bf:b4:19:6b:5f:82:3e:8d:de:9f:01:3a: ad:32:55:b9:66:0f:ba:58:2a:00:3f:94:3b:cc:8b:de:4b:3f: 5e:e7:02:49:cc:82:d9:e1:7f:56:29:fd:ca:3b:a3:53:bc:56: 83:af:f1:1d:50:1a:41:fb:df:3f:12:cd:b0:e0:53:f0:87:55: f3:e8:e1:6d:65:e2:44:83:ad:90:db:90:77:1d:1a:7e:57:cf: d9:0f:bd:7e:5f:76:f8:06:03:fb:69:90:11:e3:10:02:86:b9: 5b:da:ef:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjYwNDA1MDIwNzIwWhcNMjYwNDEyMDIwNzIwWjAYMRYwFAYD VQQDEw02OWQxYzNkOC0wMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zIzSnEXB1zRl4xvwOURn7h16Vw/Cg/XHml/V96uCLX+yIo4bbU/03hjCkDk k75GxjaQokIGpXqX+KvzS4XbXdX+0+DKTPI3w7Fum/x6LtVjlL+s9/YVukUYy7wh EKr3IjKsCgX4GSbU7fHKOI846AcXiOdiPYSz+uDxaV7FhACz2faGAFVvLghWuWU6 UX1ltqheUHT9FjTnUsJnjyCn5wydLrKXAEX5f2IPyFAWBh8A6xv9XppKNkgGGRDG uVCXynWc/6SvjvTvy2iVATsov60EPw2rfgQk14DPF5LuVEHhQJ/5V4JUu81OhrpR akY3jJRej0IBYaHwCWe3efH+7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIjxjk5 5kHspK8NS8uqGjHkphTJMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd8XuFCcydFXHou+l4omZdiIIbB4AE51a0vxfX7ocZcxUzv6fuMiEUZ9tqytS kIF2/+Po+nxKzqiuAVj0eMunUv0w3oU/nOD45tKt3VsNiMKp4d+nZKbZts7SJfw9 AhBN76hHTNWCshAtZb3VRo5QE3GuAaQEmBwqEhQ2n/kJE2ZXiNUN5WmMzKGj79yv /6yiwXDBcFD4v7QZa1+CPo3enwE6rTJVuWYPulgqAD+UO8yL3ks/XucCScyC2eF/ Vin9yjujU7xWg6/xHVAaQfvfPxLNsOBT8IdV8+jhbWXiRIOtkNuQdx0aflfP2Q+9 fl92+AYD+2mQEeMQAoa5W9rvPw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:33 2026 by rpki-client