$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: Wuhqw9cvaudz+0zzjlCnyD9ubSFycZbd1u2Y+3pgd64= Subject key identifier: A0:F8:87:21:C4:58:9C:30:36:05:BC:4E:5F:3D:CF:14:0E:53:80:3D Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 0A Signing time: Tue 21 Apr 2026 08:57:14 +0000 Manifest this update: Tue 21 Apr 2026 08:57:14 +0000 Manifest next update: Tue 28 Apr 2026 08:57:14 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: 9M2YL+9+5Kn5lfKu/YSXH99NVAwFTt2yySMNxhJTh6I=) 2: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) 3: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Apr 21 08:57:14 2026 GMT Not After : Apr 28 08:57:14 2026 GMT Subject: CN=69e73bea-f12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:cf:a3:f5:8a:2c:26:59:26:1d:92:dd:20: eb:fe:64:d2:b9:fa:69:03:9d:a0:02:73:88:8f:3e: 46:f3:7c:99:54:7f:14:b0:0e:f8:7a:03:84:db:79: e4:d2:d8:47:23:45:83:c1:b1:a2:ab:22:d5:f3:37: 5e:98:8c:3b:72:ba:73:ad:a2:1b:e7:e6:f4:fa:12: 7d:07:b6:56:51:1c:5b:00:a4:00:7b:be:03:73:19: 5a:80:ad:4b:0e:10:d6:06:d8:97:7a:7e:53:a4:76: c9:01:b6:29:c7:bc:48:89:35:16:e4:1f:d6:87:bb: 89:13:f8:72:39:ef:9e:0e:05:87:d4:92:30:1c:b4: a5:93:fa:12:69:e0:2e:cd:41:52:20:0c:f2:56:ad: bf:be:52:35:7c:3a:ff:ba:5b:c5:f5:f0:57:c4:4c: 16:76:ca:19:b3:c7:d1:5f:9b:8c:b3:30:89:68:c5: e4:5b:0b:71:5c:f1:14:fc:68:00:42:85:28:0f:83: eb:4e:1b:e0:f7:93:92:3a:41:ff:f3:c3:49:d0:0c: 54:df:a5:00:f3:81:b4:1d:fc:dd:88:9d:1e:3c:96: 5e:9a:27:30:50:b6:4e:bf:75:f1:c6:ce:6a:d7:1e: a1:9f:6b:fb:22:d5:81:5e:3d:d6:ee:7c:e4:38:f7: d3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F8:87:21:C4:58:9C:30:36:05:BC:4E:5F:3D:CF:14:0E:53:80:3D X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4b:d7:a1:f2:02:78:6d:4f:78:94:2c:c9:35:10:9a:a7:17: 5a:f1:48:f0:e3:64:84:ef:b6:a6:2e:7f:72:70:c2:51:5d:07: b3:1d:22:4b:35:f6:11:e2:37:02:19:9b:6b:a6:4a:f8:2b:c8: 23:a2:62:c3:1b:c3:40:4d:bc:66:1f:ff:94:b3:e0:80:64:6a: f0:39:56:41:62:a7:b7:fe:61:0d:0f:59:97:b6:41:8f:87:e2: 57:0e:aa:14:8d:9a:2e:e8:6c:7e:2a:e6:e1:ba:cf:17:ac:ac: 8a:b3:9f:41:7f:51:f2:47:83:92:5a:8a:f3:48:4d:f1:c5:31: 5f:36:ec:4e:2d:52:f8:6e:ed:e7:a0:eb:85:6c:fe:40:99:d9: db:a1:c6:8f:97:d6:49:69:1f:c4:c3:c1:15:a4:bc:f9:3b:dc: 95:99:88:db:51:85:19:4a:3e:08:ee:07:13:a4:2d:89:09:c9: 33:ab:83:1d:52:1c:25:d9:1a:de:28:37:e2:79:5e:b1:2f:09: 8a:6b:20:50:a8:a0:21:e8:7e:03:c8:ce:51:c9:d0:dd:89:63: c8:40:7d:a2:1f:c6:ed:55:59:77:66:1a:26:9a:20:82:06:7b: 80:24:34:0f:59:16:0a:9a:cb:6b:ff:e0:59:27:3e:87:9c:6c: e7:f7:78:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA0MjEwODU3MTRaFw0yNjA0MjgwODU3MTRaMBgxFjAUBgNV BAMTDTY5ZTczYmVhLWYxMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUEc+j9YosJlkmHZLdIOv+ZNK5+mkDnaACc4iPPkbzfJlUfxSwDvh6A4TbeeTS 2EcjRYPBsaKrItXzN16YjDtyunOtohvn5vT6En0HtlZRHFsApAB7vgNzGVqArUsO ENYG2Jd6flOkdskBtinHvEiJNRbkH9aHu4kT+HI5754OBYfUkjActKWT+hJp4C7N QVIgDPJWrb++UjV8Ov+6W8X18FfETBZ2yhmzx9Ffm4yzMIloxeRbC3Fc8RT8aABC hSgPg+tOG+D3k5I6Qf/zw0nQDFTfpQDzgbQd/N2InR48ll6aJzBQtk6/dfHGzmrX HqGfa/si1YFePdbufOQ499O9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoPiHIcRY nDA2BbxOXz3PFA5TgD0wHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcS9eh8gJ4bU94lCzJNRCapxda8Ujw42SE77amLn9ycMJRXQezHSJLNfYR4jcC GZtrpkr4K8gjomLDG8NATbxmH/+Us+CAZGrwOVZBYqe3/mEND1mXtkGPh+JXDqoU jZou6Gx+Kubhus8XrKyKs59Bf1HyR4OSWorzSE3xxTFfNuxOLVL4bu3noOuFbP5A mdnbocaPl9ZJaR/Ew8EVpLz5O9yVmYjbUYUZSj4I7gcTpC2JCckzq4MdUhwl2Rre KDfieV6xLwmKayBQqKAh6H4DyM5RydDdiWPIQH2iH8btVVl3ZhommiCCBnuAJDQP WRYKmstr/+BZJz6HnGzn93jn -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:03 2026 by rpki-client