$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: 2Ruc2BDg5pjlWmwin+zl6ipvlecSddBToCQFlB1jUDE= Subject key identifier: E9:BD:94:C7:18:61:1B:2C:10:DC:A2:AE:70:2C:6A:CF:69:3A:9B:00 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 23E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 23B0 Signing time: Mon 20 Apr 2026 15:46:47 +0000 Manifest this update: Mon 20 Apr 2026 15:46:47 +0000 Manifest next update: Mon 27 Apr 2026 15:46:47 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: v+dzy7xknG1r6IPX67YLnh7Dc15z6DSxySJDJbDbRBI=) 2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: hJzT/XLLbMceVkg1RnXkgd5dOl16o+CTb6P8jS+3k+A=) 3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: uilr/VzadspQ9DLCCiVVicEIdw3R/zCYDu3WsWsjhCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 15:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9188 (0x23e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Apr 20 15:46:47 2026 GMT Not After : Apr 27 15:46:47 2026 GMT Subject: CN=69e64a67-0178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:09:d9:fa:e1:87:ed:d8:45:f0:92:7a:09: 29:ba:4b:4a:08:0f:31:f8:85:d1:c8:cf:4d:e7:24: 5b:37:39:67:df:76:1e:ba:10:68:d3:93:e3:34:c4: ff:7c:fc:fc:08:3e:f3:98:3e:60:9d:72:7b:d8:ab: 29:8d:c5:b5:31:62:82:77:92:44:1a:4d:9a:7f:62: 6c:85:f1:ff:ad:4b:0c:5d:2f:cc:49:55:36:7f:d3: 7e:22:d8:03:87:19:44:98:77:93:ae:d2:11:4b:27: 05:06:af:1e:81:a0:7c:72:c0:2f:4d:15:db:97:01: 58:18:72:9c:80:7f:f9:9d:90:09:3c:22:3c:17:7a: ec:bc:55:e4:8e:f8:f8:8c:f1:35:36:66:c0:5b:63: 66:e2:f5:a7:9b:ef:00:42:ce:05:ab:ae:46:b6:9a: 9b:24:f2:b1:26:dc:be:a5:b2:48:6a:73:7b:0a:f7: ea:2c:28:8c:af:d8:49:2a:3f:b4:f0:93:ba:90:15: c0:17:d5:ea:ce:56:e0:80:ad:9b:4a:aa:cf:f4:8d: 32:2d:7b:df:b2:db:90:2e:58:b9:fb:82:6f:6e:fa: 43:7b:b3:f2:00:63:7e:a9:39:ae:b0:3b:f4:a2:2d: 23:6a:9b:7d:d5:0f:0e:cb:af:e4:6d:4b:88:ba:cd: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BD:94:C7:18:61:1B:2C:10:DC:A2:AE:70:2C:6A:CF:69:3A:9B:00 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b1:2a:7c:5a:f2:37:8f:33:bf:70:f8:2b:10:e9:c9:9d:15: 0f:7f:3f:70:08:d4:f1:ce:49:2d:47:7c:b0:cf:49:0b:2d:fc: d3:f5:72:22:11:ed:b2:2a:b3:d8:ec:35:64:fe:39:ea:7a:92: 03:3d:09:39:1b:4a:21:92:d7:db:fc:8a:f2:bb:2d:43:1d:7b: 24:83:1c:48:b6:05:15:ee:c5:c9:0e:40:c0:ce:c2:1e:9a:b4: 93:f6:cb:01:f9:23:30:fd:5c:28:cd:9b:dd:50:97:22:cb:ad: 71:eb:7f:05:b5:96:66:ee:ec:70:ac:87:dc:77:f6:ba:aa:df: 6b:79:10:5f:36:2c:aa:a6:e4:d1:17:f6:e2:bc:47:04:9e:f6: 7f:47:ce:24:a9:6e:9c:17:3d:6d:13:db:9a:6f:9b:e1:47:b1: 40:74:07:4a:c6:5e:3c:6e:40:0f:cb:cb:1c:f8:79:d5:3a:3e: f3:81:19:1f:61:2a:3c:62:dc:f6:ae:8b:f3:6e:e5:e4:a8:ca: f0:3c:f6:77:4c:ce:e8:a6:f1:1b:d0:9a:aa:7f:06:25:4e:2d: 2f:1a:c4:ea:54:82:51:5e:5d:2a:e6:73:05:c6:18:68:d1:13: c0:38:96:b3:da:ba:b0:13:7c:9b:59:eb:4e:02:1d:3e:0e:ab: d5:7b:f3:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjYwNDIwMTU0NjQ3WhcNMjYwNDI3MTU0NjQ3WjAYMRYwFAYD VQQDEw02OWU2NGE2Ny0wMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoo0J2frhh+3YRfCSegkpuktKCA8x+IXRyM9N5yRbNzln33YeuhBo05PjNMT/ fPz8CD7zmD5gnXJ72KspjcW1MWKCd5JEGk2af2JshfH/rUsMXS/MSVU2f9N+ItgD hxlEmHeTrtIRSycFBq8egaB8csAvTRXblwFYGHKcgH/5nZAJPCI8F3rsvFXkjvj4 jPE1NmbAW2Nm4vWnm+8AQs4Fq65GtpqbJPKxJty+pbJIanN7CvfqLCiMr9hJKj+0 8JO6kBXAF9XqzlbggK2bSqrP9I0yLXvfstuQLli5+4JvbvpDe7PyAGN+qTmusDv0 oi0japt91Q8Oy6/kbUuIus0XHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOm9lMcY YRssENyirnAsas9pOpsAMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ7EqfFryN48zv3D4KxDpyZ0VD38/cAjU8c5JLUd8sM9JCy380/VyIhHtsiqz 2Ow1ZP456nqSAz0JORtKIZLX2/yK8rstQx17JIMcSLYFFe7FyQ5AwM7CHpq0k/bL AfkjMP1cKM2b3VCXIsutcet/BbWWZu7scKyH3Hf2uqrfa3kQXzYsqqbk0Rf24rxH BJ72f0fOJKlunBc9bRPbmm+b4UexQHQHSsZePG5AD8vLHPh51To+84EZH2EqPGLc 9q6L827l5KjK8Dz2d0zO6KbxG9Caqn8GJU4tLxrE6lSCUV5dKuZzBcYYaNETwDiW s9q6sBN8m1nrTgIdPg6r1XvzDA== -----END CERTIFICATE-----Generated at Mon Apr 20 22:16:20 2026 by rpki-client