$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft File: XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json) Hash identifier: Gc7+4d5bVi5+SKpdgsBgd2BK7q4h6u2NrVXZyTV1DH4= Subject key identifier: 95:07:00:04:66:F7:7B:5C:9D:D5:79:E8:18:31:3B:A5:BB:AF:39:BD Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft Manifest number: 43 Signing time: Mon 13 Apr 2026 08:07:50 +0000 Manifest this update: Mon 13 Apr 2026 08:07:49 +0000 Manifest next update: Mon 20 Apr 2026 08:07:49 +0000 Files and hashes: 1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: 0w/GJc0kRBBmnJ9nzhPkxUK0RhS/K1uVhAqZoeRNaBI=) 2: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (hash: 6RxldyO2/Y3wToEhzB/mHNRPtNgIGcUmqFl9NgQBrdA=) 3: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (hash: eAx7dd7W8IzFugozPftJzHrtY4Ej4f42CnK31HLLaRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Validity Not Before: Apr 13 08:07:49 2026 GMT Not After : Apr 20 08:07:49 2026 GMT Subject: CN=69dca456-91eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:a0:3d:31:50:81:cb:b5:d2:7a:47:aa:61: ad:0f:14:13:72:ff:84:72:3f:cf:76:24:ad:89:2c: e2:0f:89:46:83:57:91:ee:2c:13:75:d7:81:dc:07: b9:75:a8:e3:0a:71:ea:ff:54:07:f7:e5:36:9a:44: 65:88:08:92:81:16:f9:e0:03:0a:54:71:54:e3:85: 5a:97:37:b0:68:93:a1:75:b0:10:63:83:d3:c8:e7: 0c:d7:36:d9:6e:1f:60:66:ac:bd:93:ae:ec:db:fa: f5:14:87:5c:30:a9:2a:15:67:0b:22:ce:88:3f:79: 80:8c:e5:45:a5:6d:55:28:75:37:07:8a:42:a8:dd: df:85:ac:4d:db:f0:58:86:8c:fc:f5:db:2d:c4:a9: e0:7f:d1:39:15:95:b8:e6:8a:24:9d:5b:96:2d:0d: 7a:5b:18:0f:79:01:d2:2f:22:e0:e3:5c:57:6a:b9: b5:dc:41:ac:07:fb:0e:97:5b:f7:3f:df:31:14:66: 78:e9:9d:65:e0:f5:8e:8e:eb:47:f2:91:41:0f:9c: da:9d:8b:59:73:fb:5b:71:7c:70:2f:9b:49:a2:ba: 7e:8d:8e:7b:55:d6:f5:39:53:49:1f:bc:4a:a2:36: 8b:c8:d0:58:41:45:bb:b1:17:77:76:d1:c7:fc:30: 92:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:07:00:04:66:F7:7B:5C:9D:D5:79:E8:18:31:3B:A5:BB:AF:39:BD X509v3 Authority Key Identifier: keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f3:4c:aa:c0:58:c6:3d:ac:be:30:cc:9c:78:f2:6a:1e:9e: 53:92:aa:7b:f4:07:b5:ec:3f:e8:a4:4d:9a:a4:6d:41:8e:38: 3e:27:ed:b8:03:40:7e:8a:a3:f5:2e:ee:16:44:bd:83:38:3d: 5b:83:1a:37:45:8a:a0:ee:c8:6b:48:2c:0e:9a:dd:25:63:dc: 00:0b:e5:0c:79:2d:b2:9d:f1:f4:37:7d:e1:b6:bc:2e:27:6a: db:55:7c:4d:bf:11:f2:f4:2e:c9:53:78:19:56:c6:a5:52:3e: bd:46:c3:15:37:8b:7a:a2:b6:8d:1b:65:97:8f:2f:0e:70:64: 89:b2:78:0c:05:76:68:2f:45:76:ad:9e:95:0e:ac:4b:fc:6b: 46:58:f9:ba:1a:c1:d6:27:f4:ef:27:69:a7:56:0d:cd:1f:da: fe:96:8f:20:1a:dd:c1:18:4e:01:8c:9d:b7:8d:84:77:62:66: a9:9c:a5:13:6a:9f:67:d9:89:74:95:07:98:77:ec:33:53:43: db:9f:a7:5b:be:39:a7:2f:97:e8:be:f3:aa:78:4b:b6:41:c0: 55:43:e0:e4:56:d9:bf:78:e1:c7:c4:a1:48:f9:38:48:62:15: 3e:00:0b:25:9d:fe:b4:83:70:42:38:ef:43:4f:e2:d5:ca:a6: 33:aa:f7:4e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoNUQzMEVFQkYxMUU0MTc4RDYyM0JFMUJERTREQkI0Q0I1 OUNDODQzNzAeFw0yNjA0MTMwODA3NDlaFw0yNjA0MjAwODA3NDlaMBgxFjAUBgNV BAMTDTY5ZGNhNDU2LTkxZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgRaA9MVCBy7XSekeqYa0PFBNy/4RyP892JK2JLOIPiUaDV5HuLBN114HcB7l1 qOMKcer/VAf35TaaRGWICJKBFvngAwpUcVTjhVqXN7Bok6F1sBBjg9PI5wzXNtlu H2BmrL2Truzb+vUUh1wwqSoVZwsizog/eYCM5UWlbVUodTcHikKo3d+FrE3b8FiG jPz12y3EqeB/0TkVlbjmiiSdW5YtDXpbGA95AdIvIuDjXFdqubXcQawH+w6XW/c/ 3zEUZnjpnWXg9Y6O60fykUEPnNqdi1lz+1txfHAvm0miun6NjntV1vU5U0kfvEqi NovI0FhBRbuxF3d20cf8MJIRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlQcABGb3 e1yd1XnoGDE7pbuvOb0wHwYDVR0jBBgwFoAUXTDuvxHkF41iO+G95Nu0y1nMhDcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzBGOTEwNzU0RENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQxaU8tRzk1TnUweTFuTWhE Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWFREdXZ4SGtGNDFpTy1HOTVOdTB5MW5NaERjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzBGOTEwNzU0RENBMzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQx aU8tRzk1TnUweTFuTWhEYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAP80yqwFjGPay+MMycePJqHp5Tkqp79Ae17D/opE2apG1Bjjg+J+24A0B+iqP1 Lu4WRL2DOD1bgxo3RYqg7shrSCwOmt0lY9wAC+UMeS2ynfH0N33htrwuJ2rbVXxN vxHy9C7JU3gZVsalUj69RsMVN4t6oraNG2WXjy8OcGSJsngMBXZoL0V2rZ6VDqxL /GtGWPm6GsHWJ/TvJ2mnVg3NH9r+lo8gGt3BGE4BjJ23jYR3YmapnKUTap9n2Yl0 lQeYd+wzU0Pbn6dbvjmnL5fovvOqeEu2QcBVQ+DkVtm/eOHHxKFI+ThIYhU+AAsl nf60g3BCOO9DT+LVyqYzqvdO -----END CERTIFICATE-----Generated at Mon Apr 13 16:17:54 2026 by rpki-client