$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: KUbI9AjndiS2tmGcfNIcuwz5KoJn9i9U/VkeXHEFoCw= Subject key identifier: 89:F9:9A:C7:B9:32:9C:4C:D9:7C:FE:2A:BB:6A:E3:8F:27:13:E2:FA Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: EB Signing time: Sun 05 Apr 2026 05:46:56 +0000 Manifest this update: Sun 05 Apr 2026 05:46:55 +0000 Manifest next update: Sun 12 Apr 2026 05:46:55 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: 1cm3+HBbdJ3kYAN0D+2Ke8wYz7YcLiOlc5sGKccC7T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Apr 5 05:46:55 2026 GMT Not After : Apr 12 05:46:55 2026 GMT Subject: CN=69d1f74f-1374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:7b:0f:31:20:c3:5e:9c:51:68:00:a7:06: c6:07:64:32:52:7f:b1:1b:2f:a8:42:c3:02:e2:fe: a2:0e:4d:f7:73:34:14:3e:00:c1:99:94:2a:e5:37: 5d:66:a4:ed:47:66:af:67:e2:e4:5b:f9:e6:c1:99: f0:ea:d1:31:c9:a9:bd:77:ef:2e:11:e9:4b:24:b8: eb:7f:02:20:67:eb:0b:99:1c:0b:b1:ec:4f:3a:6b: 8a:5b:ae:8f:01:31:02:0a:d0:4f:4b:7d:89:74:b6: b8:5a:0e:6b:32:ae:e8:3f:66:07:71:9b:73:6d:06: c5:ba:45:d0:d1:c1:08:7a:b1:c5:d1:fa:74:1e:88: 80:4a:25:b5:c9:55:7d:bb:99:a6:dc:61:41:29:d8: 2b:ee:5c:3f:88:c1:19:49:a3:51:15:ca:60:a6:2c: 87:2b:b5:cc:fe:cc:cc:5a:85:7c:63:b9:c5:d4:7c: 30:bc:c8:54:bc:a8:25:d1:ac:69:b1:d9:61:90:ae: 2b:a8:f5:e9:07:83:da:29:5d:53:3a:9f:ec:45:dc: 16:8f:cd:19:91:ef:57:d1:96:9d:25:f5:f1:61:a4: 07:e1:90:a7:ad:45:bf:c7:f3:37:67:de:a6:c6:4a: cc:42:fd:65:0e:47:2f:64:e0:28:9f:68:bb:4f:e6: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:9A:C7:B9:32:9C:4C:D9:7C:FE:2A:BB:6A:E3:8F:27:13:E2:FA X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a6:fc:4d:df:05:b4:17:bd:ca:f6:1a:14:2b:bc:51:00:80: a9:bc:c5:b1:5f:5f:8a:e4:92:9b:57:74:5b:32:37:42:78:eb: bd:cc:35:39:d1:34:67:9f:67:09:d6:48:2b:f7:54:40:1b:c7: e0:bc:13:9a:8c:be:8a:a3:46:e0:0d:94:e3:5e:13:e1:6d:9c: 11:55:43:30:3a:fd:e9:c9:64:5f:14:57:75:4e:6b:8a:27:a1: 31:17:c2:c5:27:87:01:ee:16:bb:29:71:80:ee:b3:a5:da:ec: 67:95:b7:20:7e:27:cc:45:6e:de:4c:d8:c7:35:b0:9d:4f:e7: c0:ef:05:13:d8:01:89:94:6f:89:46:f7:24:16:ea:b6:8a:bf: f0:4a:f9:a8:b1:2e:87:ae:bd:fa:bb:d5:e8:69:02:6a:79:9e: 14:28:00:2b:0f:a1:65:11:06:7a:a0:2a:4f:73:eb:a6:dc:fd: a1:9d:75:71:95:15:16:33:6b:ed:92:ae:0d:e9:03:c2:32:d0: b4:96:5d:4e:ea:25:4b:c9:78:5f:6f:b1:b9:a4:ea:1c:f1:74: 39:53:11:ca:52:73:27:c8:60:86:2f:bf:10:6b:06:99:eb:27: 06:0a:a3:7a:7e:4d:a8:31:d6:dc:65:1a:4c:36:2b:31:2a:d3: 04:f9:01:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG NUUxOUNBRTgwHhcNMjYwNDA1MDU0NjU1WhcNMjYwNDEyMDU0NjU1WjAYMRYwFAYD VQQDEw02OWQxZjc0Zi0xMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWx7DzEgw16cUWgApwbGB2QyUn+xGy+oQsMC4v6iDk33czQUPgDBmZQq5Tdd ZqTtR2avZ+LkW/nmwZnw6tExyam9d+8uEelLJLjrfwIgZ+sLmRwLsexPOmuKW66P ATECCtBPS32JdLa4Wg5rMq7oP2YHcZtzbQbFukXQ0cEIerHF0fp0HoiASiW1yVV9 u5mm3GFBKdgr7lw/iMEZSaNRFcpgpiyHK7XM/szMWoV8Y7nF1HwwvMhUvKgl0axp sdlhkK4rqPXpB4PaKV1TOp/sRdwWj80Zke9X0ZadJfXxYaQH4ZCnrUW/x/M3Z96m xkrMQv1lDkcvZOAon2i7T+byOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIn5mse5 MpxM2Xz+Krtq448nE+L6MB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3 Qm5HUkdUdER1YkwxNFp5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb6b8Td8FtBe9yvYaFCu8UQCAqbzFsV9fiuSSm1d0WzI3Qnjrvcw1OdE0Z59n CdZIK/dUQBvH4LwTmoy+iqNG4A2U414T4W2cEVVDMDr96clkXxRXdU5riiehMRfC xSeHAe4WuylxgO6zpdrsZ5W3IH4nzEVu3kzYxzWwnU/nwO8FE9gBiZRviUb3JBbq toq/8Er5qLEuh669+rvV6GkCanmeFCgAKw+hZREGeqAqT3Prptz9oZ11cZUVFjNr 7ZKuDekDwjLQtJZdTuolS8l4X2+xuaTqHPF0OVMRylJzJ8hghi+/EGsGmesnBgqj en5NqDHW3GUaTDYrMSrTBPkBqw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:52 2026 by rpki-client