$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: 0f1pKJigib/v9TJmQQKgs4rKJtUgBZebosuShaVx2t0= Subject key identifier: 21:14:7A:DA:F1:22:64:0F:99:4D:17:20:47:ED:A1:66:E0:EC:18:B3 Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 01B5 Signing time: Sun 05 Apr 2026 03:29:32 +0000 Manifest this update: Sun 05 Apr 2026 03:29:31 +0000 Manifest next update: Sun 12 Apr 2026 03:29:31 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: 30X19/f2FDfrDOTepihi6OEaUc5rBbpihAyPVxa16+M=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: alib+UnyJdcp5QK+xSWFYIjYS/kjVCRiqsWyoxYGVsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Apr 5 03:29:31 2026 GMT Not After : Apr 12 03:29:31 2026 GMT Subject: CN=69d1d71c-0586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:7c:f7:91:02:05:81:16:62:8e:01:ba:75: e3:a4:91:42:93:f3:58:cd:58:4f:19:08:06:a4:7a: db:33:15:77:5c:b4:62:91:c7:a0:d8:72:77:36:2a: c9:bc:43:ab:c4:5b:a9:50:47:94:d5:53:60:1a:e5: 87:b5:e3:89:0d:07:42:2c:b7:3b:a1:25:3b:ca:b7: 2d:d0:4c:d0:e4:81:cb:38:9d:8c:17:d7:8d:ea:67: dd:30:5e:e7:ca:61:61:03:0c:e3:9b:58:3a:ee:5a: 74:1d:23:6a:8d:82:bd:aa:5c:81:06:e0:2c:ec:16: b3:6a:96:f6:db:bd:31:d3:14:48:3f:9b:6e:8e:2d: 32:d6:83:d5:13:cb:69:18:2c:77:c9:9e:83:5f:f2: 39:8b:4b:0d:36:5c:39:b6:eb:57:98:fa:96:59:8e: 7a:58:50:d4:24:f6:f7:ee:4f:22:cf:f2:c4:41:2b: 4b:74:93:dd:57:dc:08:ac:b5:1c:ce:a5:a5:d0:c9: 68:eb:c1:56:c6:49:aa:22:09:70:73:aa:e3:06:fa: 5b:ae:89:9a:60:c8:2a:79:cd:00:85:84:c7:47:fe: b6:59:7a:d8:1d:0f:ea:ac:bb:16:71:56:a9:46:51: ff:0e:02:95:d1:4d:44:41:76:a5:b6:fe:88:b2:99: 9c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:14:7A:DA:F1:22:64:0F:99:4D:17:20:47:ED:A1:66:E0:EC:18:B3 X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:43:fd:1d:c1:0a:42:0b:b1:ec:3b:9b:cd:69:34:2a:86:f0: ea:af:23:d2:1b:59:39:ca:3e:cc:8b:5e:4c:98:9c:4a:dd:f9: 39:1a:e9:ba:f5:3d:61:00:dd:6e:f3:29:1a:06:4d:23:f6:e1: f0:e1:2c:cc:02:03:44:01:de:3b:9a:53:b2:17:9a:1b:45:9c: 47:88:47:c2:a9:8c:8d:1b:a5:99:5e:f9:5f:5f:64:af:12:32: 72:16:60:43:30:15:df:c0:f1:c9:f6:a6:5c:75:de:8e:ee:6d: f4:da:f4:04:1a:e3:58:e5:ce:a8:cc:c9:c0:6d:80:58:ba:7a: e8:51:01:e6:f5:3b:eb:29:b2:7f:43:ac:60:73:7d:9c:74:ec: 67:fa:ac:1b:d1:35:51:ad:83:07:9f:5c:68:81:a8:9c:84:6c: a7:96:32:92:f3:d6:27:7e:fa:5c:e9:3e:5b:0e:3b:0d:79:04: d8:4a:0f:56:5f:d1:3b:1a:ba:30:17:5b:a0:78:67:37:27:ef: 30:4c:f9:93:48:51:07:c0:5b:2d:b1:10:f9:be:54:04:27:5f: 2b:08:17:eb:ff:82:2b:b2:04:47:98:67:c6:e5:6f:75:b7:87: 85:cf:8c:05:8b:88:ab:d2:39:6a:b8:41:e4:22:9e:8c:ce:d7: c3:34:67:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjYwNDA1MDMyOTMxWhcNMjYwNDEyMDMyOTMxWjAYMRYwFAYD VQQDEw02OWQxZDcxYy0wNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf5895ECBYEWYo4BunXjpJFCk/NYzVhPGQgGpHrbMxV3XLRikceg2HJ3NirJ vEOrxFupUEeU1VNgGuWHteOJDQdCLLc7oSU7yrct0EzQ5IHLOJ2MF9eN6mfdMF7n ymFhAwzjm1g67lp0HSNqjYK9qlyBBuAs7Bazapb2270x0xRIP5tuji0y1oPVE8tp GCx3yZ6DX/I5i0sNNlw5tutXmPqWWY56WFDUJPb37k8iz/LEQStLdJPdV9wIrLUc zqWl0Mlo68FWxkmqIglwc6rjBvpbromaYMgqec0AhYTHR/62WXrYHQ/qrLsWcVap RlH/DgKV0U1EQXaltv6Ispmc3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCEUetrx ImQPmU0XIEftoWbg7BizMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZEP9HcEKQgux7DubzWk0Kobw6q8j0htZOco+zIteTJicSt35ORrpuvU9YQDd bvMpGgZNI/bh8OEszAIDRAHeO5pTsheaG0WcR4hHwqmMjRulmV75X19krxIychZg QzAV38DxyfamXHXeju5t9Nr0BBrjWOXOqMzJwG2AWLp66FEB5vU76ymyf0OsYHN9 nHTsZ/qsG9E1Ua2DB59caIGonIRsp5YykvPWJ376XOk+Ww47DXkE2EoPVl/ROxq6 MBdboHhnNyfvMEz5k0hRB8BbLbEQ+b5UBCdfKwgX6/+CK7IER5hnxuVvdbeHhc+M BYuIq9I5arhB5CKejM7XwzRn+w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:05 2026 by rpki-client