$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: OhY+lgZsOhVvmHBLE8ixQyZM7iFOyuUVkiDFRUo6wgI= Subject key identifier: 36:48:90:F7:B5:90:53:3F:98:13:91:DD:1C:F2:41:BA:24:6C:77:EF Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 01C1 Signing time: Sun 05 Apr 2026 03:27:31 +0000 Manifest this update: Sun 05 Apr 2026 03:27:30 +0000 Manifest next update: Sun 12 Apr 2026 03:27:30 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: 6KcFnhd6OlTRu3sEdbaMgT7beg79ShQv0UeMFjluNEc=) 2: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=) 3: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: 8Zjr1WgOShA7cM7tZeJ9/4PwccXNDdvVhhKT+N3GxmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Apr 5 03:27:30 2026 GMT Not After : Apr 12 03:27:30 2026 GMT Subject: CN=69d1d6a3-88a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:31:1a:75:13:fb:f3:56:83:4e:27:94:1a:dd: ae:d2:1c:c9:9d:34:4b:d1:92:27:d5:f8:c1:d8:ec: 39:47:f5:a4:73:a6:9d:05:07:e8:f5:eb:a3:3d:9b: 56:65:3d:54:51:ea:90:ba:70:c7:f3:7f:3e:df:2a: 57:6d:d3:b9:1d:c5:f4:cd:da:78:61:29:cb:72:f7: 27:9f:d0:27:aa:19:3a:9d:d5:01:ea:06:7e:c0:95: d6:b7:62:b3:4c:05:45:b7:c9:8b:15:cc:16:eb:9f: af:34:7b:78:dd:8d:7f:4b:a3:3c:5d:7f:2f:d0:dd: e4:9c:a7:66:90:26:6a:51:a7:89:a7:de:5b:03:3d: 32:6e:ab:a0:5b:5b:cf:49:a3:57:93:af:95:07:bf: c5:df:59:5f:55:6f:ba:25:1f:6e:10:67:a8:c8:3e: 15:9b:50:29:bc:c3:a1:f2:ee:66:06:b5:0f:87:d8: d9:05:16:c5:a9:42:02:6e:86:37:3d:99:7d:e6:9e: 6a:59:bd:8e:04:8e:35:51:2b:1a:81:c8:25:ac:3a: c7:34:98:57:c0:91:43:43:96:c8:55:ee:80:fc:7e: 16:61:ec:51:46:94:00:e3:f4:34:d2:4b:46:57:ce: 88:e6:ca:9b:1b:f4:22:b5:ec:a1:c0:78:6e:52:26: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:48:90:F7:B5:90:53:3F:98:13:91:DD:1C:F2:41:BA:24:6C:77:EF X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e9:56:3e:68:58:f1:44:f2:01:1b:ce:c6:35:d5:cc:91:09: 13:38:55:b2:5c:d7:77:b6:76:f9:c0:b4:57:dd:ad:cb:1c:7e: 51:9d:2c:7f:4a:8d:ff:89:14:af:09:67:5c:51:75:32:93:e5: 9e:e0:d6:bd:c7:85:79:fe:9a:ce:a7:7d:3b:47:24:88:07:ff: 6d:bb:94:5d:d2:fa:a4:36:93:23:b4:e5:a4:e4:76:7e:8a:36: f4:21:b0:a8:95:fd:85:9b:56:a2:b4:47:e4:aa:e2:03:76:8f: 81:e2:20:4d:b7:7b:a7:bf:e2:8c:bd:bc:a2:64:dd:81:fc:9f: ef:c7:f3:5e:86:7c:73:24:2e:e1:f2:17:75:e2:25:72:0d:93: 92:ac:0f:06:ec:2f:d6:a8:f0:4c:68:ba:f8:3c:27:a1:9b:28: 3a:27:95:3e:fb:d0:35:7f:32:80:9f:66:8d:f4:5c:3b:8a:59: 28:99:71:e9:68:ba:91:bc:3b:a7:4c:4a:7f:95:a8:7f:c8:09: 19:66:83:fa:a9:fe:c8:7e:0c:e0:ae:11:ba:ff:da:3e:a3:0d: db:28:f5:e7:bf:51:bb:6b:e0:db:6a:95:e1:7b:54:d4:0e:a6: 8a:d5:1f:5a:83:ba:25:e6:4e:4b:d0:3f:0d:36:41:55:62:87: 09:dc:dc:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjYwNDA1MDMyNzMwWhcNMjYwNDEyMDMyNzMwWjAYMRYwFAYD VQQDEw02OWQxZDZhMy04OGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzEadRP781aDTieUGt2u0hzJnTRL0ZIn1fjB2Ow5R/Wkc6adBQfo9eujPZtW ZT1UUeqQunDH838+3ypXbdO5HcX0zdp4YSnLcvcnn9Anqhk6ndUB6gZ+wJXWt2Kz TAVFt8mLFcwW65+vNHt43Y1/S6M8XX8v0N3knKdmkCZqUaeJp95bAz0ybqugW1vP SaNXk6+VB7/F31lfVW+6JR9uEGeoyD4Vm1ApvMOh8u5mBrUPh9jZBRbFqUICboY3 PZl95p5qWb2OBI41USsagcglrDrHNJhXwJFDQ5bIVe6A/H4WYexRRpQA4/Q00ktG V86I5sqbG/QiteyhwHhuUiZ/1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZIkPe1 kFM/mBOR3RzyQbokbHfvMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS+lWPmhY8UTyARvOxjXVzJEJEzhVslzXd7Z2+cC0V92tyxx+UZ0sf0qN/4kU rwlnXFF1MpPlnuDWvceFef6azqd9O0ckiAf/bbuUXdL6pDaTI7TlpOR2foo29CGw qJX9hZtWorRH5KriA3aPgeIgTbd7p7/ijL28omTdgfyf78fzXoZ8cyQu4fIXdeIl cg2TkqwPBuwv1qjwTGi6+DwnoZsoOieVPvvQNX8ygJ9mjfRcO4pZKJlx6Wi6kbw7 p0xKf5Wof8gJGWaD+qn+yH4M4K4Ruv/aPqMN2yj1579Ru2vg22qV4XtU1A6mitUf WoO6JeZOS9A/DTZBVWKHCdzcUQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:40 2026 by rpki-client