$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: /72cK3JogUIyiAgI7vGPcFEfeZM1sdbxBhsg9xYGVIw= Subject key identifier: A6:BA:AA:8B:D5:36:72:5D:A5:FD:17:A4:38:E2:34:57:C9:84:99:7F Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 01C8 Signing time: Mon 27 Apr 2026 03:59:57 +0000 Manifest this update: Mon 27 Apr 2026 03:59:56 +0000 Manifest next update: Mon 04 May 2026 03:59:56 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: Kvt5aNOz/ISkbOXcWtvmqCrZK7JDagc4a/h71HnE+/0=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: A2+Rc3xoTrncaTR95Sq9MBAmQnYMit+OOLZAoM52Nuk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: xo/EJ3CaHdIPdWdGQ1WzSAADuENiwShLJFxclFWUKsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Apr 27 03:59:56 2026 GMT Not After : May 4 03:59:56 2026 GMT Subject: CN=69eedf3c-56cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:b4:7c:c6:f5:27:ed:30:98:53:ce:d9:7a: 17:e4:02:2b:86:1d:74:e2:f2:b5:45:79:48:11:f7: 14:5f:b1:90:ed:ff:cb:d4:30:f0:af:bd:36:6c:43: 41:94:84:35:a7:d8:7b:ed:88:64:e7:78:28:de:c0: 37:37:ff:e1:7b:7c:49:2f:58:e6:44:89:43:7c:bf: ce:5e:9d:36:d6:0b:2d:d1:4e:fc:e2:07:af:32:60: e1:16:ea:f1:5c:34:d0:55:c7:57:14:bc:7d:2e:0a: ea:a3:07:c8:26:37:3e:be:48:a9:a8:f3:87:f6:f9: 6b:d6:8d:45:7e:cb:62:a5:3b:12:c3:41:1f:8c:84: 08:f8:86:57:8f:3b:81:6b:72:f2:b3:4f:03:d2:28: 91:74:3d:3e:75:86:3c:bd:c3:92:5b:11:ff:c4:af: eb:d1:bb:d6:28:55:b5:50:8a:4c:2b:c9:4e:34:f8: 6d:4a:eb:f1:bc:74:c3:29:09:3f:84:cb:59:72:8a: bb:06:19:be:be:19:99:10:df:c1:ea:15:8e:a9:7f: a2:90:28:3d:94:fe:95:18:b3:14:0e:6c:97:9e:70: e0:6c:0e:35:ac:2d:9c:67:28:0f:64:50:50:df:9a: 72:da:70:5a:5e:00:f7:e5:d8:1f:b9:61:db:a0:2f: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BA:AA:8B:D5:36:72:5D:A5:FD:17:A4:38:E2:34:57:C9:84:99:7F X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:dd:4b:26:16:68:28:37:b1:cd:d6:b9:c5:6a:7a:d2:72:7e: d3:22:57:da:cc:95:2c:ef:1a:ee:85:68:da:99:e2:e3:88:5b: da:5e:18:a2:b5:d1:b3:50:3c:a3:40:6b:27:a7:ef:89:5a:5d: 6f:66:9d:b8:4f:6c:6e:fc:98:89:df:8e:74:ab:4f:dc:e6:f6: 0a:95:e8:97:8b:04:a1:50:95:7e:25:93:32:45:df:b1:93:63: 24:d4:83:dc:c2:48:aa:17:63:3f:d2:5c:a1:e7:2e:af:87:fe: e0:9c:f5:53:b1:04:36:83:42:72:6a:94:de:fc:86:be:61:78: a1:f1:93:3a:78:33:27:bc:7a:ab:96:ad:64:ea:e0:24:31:40: 52:7a:ab:eb:0d:0b:d4:25:2e:2a:14:6a:91:5b:cd:79:62:c6: 61:51:9b:a8:be:13:d0:2f:43:a1:22:9f:64:b7:53:e5:c4:e3: 57:0c:2a:f2:e0:cf:3d:79:4e:ff:05:06:87:69:3f:53:87:c4: 6a:15:a4:7a:7f:59:5e:c0:31:d7:44:4f:f3:9d:f5:0d:7a:56: 1d:18:ee:bd:b9:2e:d4:2d:55:2d:80:bf:39:e6:06:a9:89:d5: 6a:e8:da:da:b5:af:fd:ed:35:08:1e:8a:9c:2c:51:b9:32:31: 39:68:ed:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjYwNDI3MDM1OTU2WhcNMjYwNTA0MDM1OTU2WjAYMRYwFAYD VQQDEw02OWVlZGYzYy01NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnS0fMb1J+0wmFPO2XoX5AIrhh104vK1RXlIEfcUX7GQ7f/L1DDwr702bENB lIQ1p9h77Yhk53go3sA3N//he3xJL1jmRIlDfL/OXp021gst0U784gevMmDhFurx XDTQVcdXFLx9LgrqowfIJjc+vkipqPOH9vlr1o1FfstipTsSw0EfjIQI+IZXjzuB a3Lys08D0iiRdD0+dYY8vcOSWxH/xK/r0bvWKFW1UIpMK8lONPhtSuvxvHTDKQk/ hMtZcoq7Bhm+vhmZEN/B6hWOqX+ikCg9lP6VGLMUDmyXnnDgbA41rC2cZygPZFBQ 35py2nBaXgD35dgfuWHboC/yGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKa6qovV NnJdpf0XpDjiNFfJhJl/MB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr91LJhZoKDexzda5xWp60nJ+0yJX2syVLO8a7oVo2pni44hb2l4YorXRs1A8 o0BrJ6fviVpdb2aduE9sbvyYid+OdKtP3Ob2CpXol4sEoVCVfiWTMkXfsZNjJNSD 3MJIqhdjP9Jcoecur4f+4Jz1U7EENoNCcmqU3vyGvmF4ofGTOngzJ7x6q5atZOrg JDFAUnqr6w0L1CUuKhRqkVvNeWLGYVGbqL4T0C9DoSKfZLdT5cTjVwwq8uDPPXlO /wUGh2k/U4fEahWken9ZXsAx10RP8531DXpWHRjuvbku1C1VLYC/OeYGqYnVauja 2rWv/e01CB6KnCxRuTIxOWjtfg== -----END CERTIFICATE-----Generated at Tue Apr 28 12:44:52 2026 by rpki-client