$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft File: Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json) Hash identifier: c5dBvgt6GHcIwMWDVu49dXK+NZjBw2njavhmbfg8vP0= Subject key identifier: 30:81:09:7C:34:24:EB:74:84:7E:0D:84:2B:C3:64:89:57:CE:65:D7 Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE Certificate issuer: /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft Manifest number: 044D Signing time: Sun 19 Apr 2026 00:08:49 +0000 Manifest this update: Sun 19 Apr 2026 00:08:48 +0000 Manifest next update: Sun 26 Apr 2026 00:08:48 +0000 Files and hashes: 1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: Focjz99VIKVeQXqZ7WwdAI/XJTUbvL8q/1pJP2tSc1M=) 2: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: JHvS1f6jdKLwIeNTGazWPjS7qbi1eE+mp2wF3npKP1k=) 3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: D6LiWMFH6d2ytAEKNZQXXNvSijIWaNdo5eD9rEi5mZA=) 4: 728139D62FA311F0A9129814C4F9AE02.roa (hash: eWlYnOj+XzRjYM0rC0+ZAzd4ERRZ2swjPOnqLD6EJ/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 00:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE Validity Not Before: Apr 19 00:08:48 2026 GMT Not After : Apr 26 00:08:48 2026 GMT Subject: CN=69e41d11-d2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:12:fa:58:bb:f5:61:5d:5f:47:36:4a:7c: 41:ad:8f:c2:ad:a3:13:99:b1:8b:40:dd:61:a3:51: d8:4b:8a:b5:8a:88:cc:de:af:ed:fe:d7:b3:a8:56: 32:de:48:50:ba:0b:71:49:ef:74:d9:80:e6:70:3a: cc:c8:74:56:75:7d:0f:74:ce:5a:8c:e8:02:86:42: c1:54:ab:b3:8d:46:a8:05:d0:ef:32:80:fb:0c:47: bf:bc:0f:48:7e:72:9d:9d:3f:ab:04:f8:6b:de:a3: 98:62:aa:ff:0f:ea:d7:da:51:5e:04:c7:89:54:37: e5:e6:cf:3c:c3:54:8b:6a:66:0d:5a:6e:f9:23:e0: 57:e4:18:c0:2d:89:db:93:7f:09:34:04:c9:b6:f7: 23:57:c7:9f:f6:0e:08:f4:f3:c8:16:9b:56:13:cd: 19:e1:a5:98:55:5e:a6:4e:8d:45:03:a8:65:6a:40: 2b:c8:40:06:3f:f8:b4:87:df:05:7a:b6:2c:65:5b: 5d:2c:c6:db:5e:e2:00:c9:fe:fc:3b:f8:47:d4:ff: da:50:e3:65:24:a3:fe:99:d8:55:c2:cf:14:27:aa: c9:61:1c:94:77:a0:f9:2e:73:05:9e:cb:a7:2f:c2: 50:7b:73:4a:aa:dc:d2:18:e1:5a:6d:58:d3:f1:f8: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:09:7C:34:24:EB:74:84:7E:0D:84:2B:C3:64:89:57:CE:65:D7 X509v3 Authority Key Identifier: keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:02:ab:aa:e4:0a:e6:21:c5:ff:71:05:21:a5:53:9a:91:09: d7:4d:b3:2b:9a:61:e4:e3:6d:2c:fa:7d:58:a3:34:a6:a9:47: 03:b7:dc:31:84:5d:d9:f8:43:b2:74:ab:2e:43:43:1f:0b:4b: 94:fe:27:e8:c9:a1:9c:2e:1f:df:15:06:66:ee:ac:e9:15:d9: d4:15:10:d1:76:78:59:5f:05:48:a8:c4:54:4d:e9:78:54:f2: 00:d4:31:41:3a:d0:f5:41:d3:de:e1:5c:0c:f9:62:37:24:30: 22:f2:b3:e1:a6:94:3a:b4:bf:b9:c5:ac:16:ce:14:55:54:55: f2:0a:50:3c:5b:2f:ed:92:86:12:0b:6d:6a:89:89:98:41:38: 87:39:f1:af:eb:4c:3b:3f:d1:5d:7d:26:b0:81:fe:4f:d1:0e: fc:d4:a3:bb:fe:58:a9:d3:d1:09:1d:50:a8:bb:93:69:5e:d8: 04:f5:3f:d4:ef:92:9d:ad:64:47:81:90:9e:19:92:e0:96:33: b0:dd:b1:19:e6:ec:23:cb:fb:ff:6d:e4:01:83:cb:a1:25:7a: e3:ca:2a:9d:29:31:da:1f:a6:86:a5:9e:26:40:66:f0:35:e7: cc:62:6d:5f:1b:be:18:54:f4:eb:7a:46:e3:a0:69:6e:a7:20: fb:16:55:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI4RDkxMTAvBgNVBAUTKDVFQ0VFRjVGMjhGMkYzNjUwNTNERkI4Q0VGQ0QxNkUx QzNERTg0QUUwHhcNMjYwNDE5MDAwODQ4WhcNMjYwNDI2MDAwODQ4WjAYMRYwFAYD VQQDEw02OWU0MWQxMS1kMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqQS+li79WFdX0c2SnxBrY/CraMTmbGLQN1ho1HYS4q1iojM3q/t/tezqFYy 3khQugtxSe902YDmcDrMyHRWdX0PdM5ajOgChkLBVKuzjUaoBdDvMoD7DEe/vA9I fnKdnT+rBPhr3qOYYqr/D+rX2lFeBMeJVDfl5s88w1SLamYNWm75I+BX5BjALYnb k38JNATJtvcjV8ef9g4I9PPIFptWE80Z4aWYVV6mTo1FA6hlakAryEAGP/i0h98F erYsZVtdLMbbXuIAyf78O/hH1P/aUONlJKP+mdhVws8UJ6rJYRyUd6D5LnMFnsun L8JQe3NKqtzSGOFabVjT8fjcNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCBCXw0 JOt0hH4NhCvDZIlXzmXXMB8GA1UdIwQYMBaAFF7O718o8vNlBT37jO/NFuHD3oSu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjhEOS84QjAwMjM3NjlB MDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgyVUZQZnVNNzgwVzRjUGVo SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzN3ZYeWp5ODJVRlBmdU03ODBXNGNQZWhLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjhEOS84QjAwMjM3NjlBMDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgy VUZQZnVNNzgwVzRjUGVoSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASwKrquQK5iHF/3EFIaVTmpEJ102zK5ph5ONtLPp9WKM0pqlHA7fcMYRd2fhD snSrLkNDHwtLlP4n6MmhnC4f3xUGZu6s6RXZ1BUQ0XZ4WV8FSKjEVE3peFTyANQx QTrQ9UHT3uFcDPliNyQwIvKz4aaUOrS/ucWsFs4UVVRV8gpQPFsv7ZKGEgttaomJ mEE4hznxr+tMOz/RXX0msIH+T9EO/NSju/5YqdPRCR1QqLuTaV7YBPU/1O+Sna1k R4GQnhmS4JYzsN2xGebsI8v7/23kAYPLoSV648oqnSkx2h+mhqWeJkBm8DXnzGJt Xxu+GFT063pG46Bpbqcg+xZVaw== -----END CERTIFICATE-----Generated at Mon Apr 20 06:48:28 2026 by rpki-client