$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: DT1KgtaU8CyZohbc6ldEota26GlWlYPxSaBQHGgKHV4= Subject key identifier: 2D:8F:A9:3F:F2:E2:99:51:74:B4:B2:8C:89:A6:DF:BA:E0:AA:AD:BF Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 0A43 Signing time: Sun 26 Apr 2026 19:36:36 +0000 Manifest this update: Sun 26 Apr 2026 19:36:36 +0000 Manifest next update: Sun 03 May 2026 19:36:36 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: 2FFdl+PWFxvF50ECMKyoEc+uWHb7w8w69h8bpU32oj4=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: Apr 26 19:36:36 2026 GMT Not After : May 3 19:36:36 2026 GMT Subject: CN=69ee6944-3764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:f7:24:54:a5:5c:7a:f5:f2:84:1f:99:77: 86:51:8d:d4:01:23:cc:cc:12:24:19:c8:ea:1e:a0: ae:67:04:28:64:6c:b9:3e:80:ce:42:e3:96:f8:1a: 36:98:1c:04:39:cc:6a:db:cd:fd:e5:39:42:b5:dc: 24:34:94:d5:a2:ac:04:3c:db:34:86:34:cd:55:ea: b7:24:dc:34:01:42:a5:2c:da:5b:75:80:d7:e0:b6: e0:bd:47:a0:3a:2f:1f:92:0e:09:b2:6a:cc:59:10: d7:00:08:7c:86:2a:ff:34:7d:6e:fe:42:75:23:13: 17:16:35:34:da:cc:1a:d1:01:4d:48:36:83:cf:d0: 5e:43:01:5c:2d:36:83:54:36:de:de:76:3e:33:a1: a6:56:f2:bf:35:b5:66:45:f2:42:26:39:80:97:52: cb:8b:01:0a:92:79:38:cb:f0:ff:8b:61:e8:59:02: 97:d7:27:52:65:a7:79:65:70:dd:d4:01:4d:30:f7: 7f:7c:16:10:95:08:56:c3:63:41:d3:c1:7c:c2:fa: d7:e4:af:8a:78:13:9f:cf:24:98:f8:c8:15:53:93: 11:de:66:44:11:d9:63:d1:5c:6e:2e:5e:bf:91:5f: 60:07:56:84:9e:fd:c2:24:d6:1f:7b:9b:b6:6e:55: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8F:A9:3F:F2:E2:99:51:74:B4:B2:8C:89:A6:DF:BA:E0:AA:AD:BF X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:09:0e:1e:53:dd:72:29:0c:e4:4c:48:14:13:bb:1f:5d:8f: 6c:31:99:6f:6d:0d:c6:74:1a:70:9c:68:09:c0:dc:61:db:1e: 58:9b:46:c6:91:90:e9:99:3b:b7:98:43:16:3e:f4:f2:fe:96: 10:ac:fc:14:31:c6:cf:64:02:aa:f3:79:dd:80:ea:24:7b:7f: ec:69:1f:4e:fb:c3:b4:6c:f7:0f:75:f0:49:4e:fd:3c:b5:78: f6:ce:d5:20:81:3e:73:3f:76:cf:2c:12:ee:4d:22:32:70:87: 1f:71:02:19:a8:2a:09:1b:78:fb:f6:b5:19:40:04:06:9f:1d: bb:f0:0e:c2:48:17:c6:a6:48:18:1a:30:45:2c:2c:e6:ee:18: 42:1f:3d:95:fe:76:1c:a7:9e:59:4c:c4:b8:a1:1e:31:f0:9f: b2:7c:1b:1d:7b:68:1d:bb:62:00:1c:ad:06:49:47:d5:fb:b1: 54:33:e6:65:34:ec:cc:38:07:23:3a:ba:36:ba:1a:f5:98:e6: 8b:2d:62:bf:f9:59:24:0f:db:74:5b:73:47:fe:6d:bf:9f:f3: 51:73:0a:eb:96:26:40:c2:5e:a4:c4:fc:5d:91:1f:08:3c:2d: 05:f8:50:c8:de:a6:93:4c:cc:2e:df:db:34:ba:a9:fa:fa:b6: 2d:34:a9:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjYwNDI2MTkzNjM2WhcNMjYwNTAzMTkzNjM2WjAYMRYwFAYD VQQDEw02OWVlNjk0NC0zNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjrf3JFSlXHr18oQfmXeGUY3UASPMzBIkGcjqHqCuZwQoZGy5PoDOQuOW+Bo2 mBwEOcxq28395TlCtdwkNJTVoqwEPNs0hjTNVeq3JNw0AUKlLNpbdYDX4LbgvUeg Oi8fkg4JsmrMWRDXAAh8hir/NH1u/kJ1IxMXFjU02swa0QFNSDaDz9BeQwFcLTaD VDbe3nY+M6GmVvK/NbVmRfJCJjmAl1LLiwEKknk4y/D/i2HoWQKX1ydSZad5ZXDd 1AFNMPd/fBYQlQhWw2NB08F8wvrX5K+KeBOfzySY+MgVU5MR3mZEEdlj0VxuLl6/ kV9gB1aEnv3CJNYfe5u2blUW2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2PqT/y 4plRdLSyjImm37rgqq2/MB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACQkOHlPdcikM5ExIFBO7H12PbDGZb20NxnQacJxoCcDcYdseWJtGxpGQ6Zk7 t5hDFj708v6WEKz8FDHGz2QCqvN53YDqJHt/7GkfTvvDtGz3D3XwSU79PLV49s7V IIE+cz92zywS7k0iMnCHH3ECGagqCRt4+/a1GUAEBp8du/AOwkgXxqZIGBowRSws 5u4YQh89lf52HKeeWUzEuKEeMfCfsnwbHXtoHbtiABytBklH1fuxVDPmZTTszDgH Izq6Nroa9Zjmiy1iv/lZJA/bdFtzR/5tv5/zUXMK65YmQMJepMT8XZEfCDwtBfhQ yN6mk0zMLt/bNLqp+vq2LTSpPg== -----END CERTIFICATE-----Generated at Tue Apr 28 13:11:42 2026 by rpki-client