$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: LnpQFDNAaJibaK8mJAy1WluLw8NAqrJaOHDqfCA24KE= Subject key identifier: E1:D6:10:AE:DB:B6:5F:BD:6C:03:F2:30:32:60:D6:B2:66:9A:AD:72 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 08E1 Signing time: Sat 04 Apr 2026 20:09:57 +0000 Manifest this update: Sat 04 Apr 2026 20:09:56 +0000 Manifest next update: Sat 11 Apr 2026 20:09:56 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: HABvGMPA/ZNiRVgzY2f7VQ22Z3qWIgg8g6odj+WcGh4=) 2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: qZ3PJo0PmY9ezmHmQvTDErn7qslnxEuobh+f3U89VNI=) 3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: x5+raeLBFBsuJLXzYfMJr0ORy85GDM9eQZw+pvlyKEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Apr 4 20:09:56 2026 GMT Not After : Apr 11 20:09:56 2026 GMT Subject: CN=69d17015-3b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:9d:eb:c5:c8:63:29:3b:cb:f3:b6:4c:5f: 1f:39:70:aa:c4:24:69:38:9b:36:2c:9e:79:a5:07: 72:e1:62:2c:3d:f0:cc:2f:f2:fc:b4:e0:f8:fc:94: 1d:9e:2f:12:48:4c:bd:00:d2:da:21:a5:e9:7f:e4: 2a:1f:3b:18:77:b4:2e:c6:51:31:b0:72:9d:ea:fb: 79:94:b5:0d:f7:bc:21:94:cb:c4:d5:92:41:04:43: 14:87:4f:50:37:33:e6:6f:9b:36:84:55:e1:99:fd: 47:ed:8e:a1:4b:c5:45:1c:a2:23:86:95:1a:d3:7c: 8c:ca:82:b0:31:8a:96:6b:87:6b:0a:bd:e6:36:fe: 62:a9:4f:08:ae:26:fa:f2:8b:39:99:51:7b:a6:44: 1a:ba:4b:c8:4c:c0:0c:3a:6a:f1:19:0a:c4:3a:6a: 72:0e:ab:58:1d:66:0c:ec:b3:9d:b7:61:2f:01:3c: b7:41:7a:1a:2c:d8:a4:b0:37:d9:e5:ec:59:60:5c: 46:ae:79:fa:ab:51:bd:db:e2:83:c5:1c:d3:ca:98: 26:51:c4:2f:80:74:d3:94:06:ae:2b:ba:97:67:1f: ff:fa:e7:8c:6e:06:25:cd:3a:3a:88:12:48:b9:a9: 1b:f1:b8:55:21:05:09:02:3d:01:69:73:93:7d:dd: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:10:AE:DB:B6:5F:BD:6C:03:F2:30:32:60:D6:B2:66:9A:AD:72 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:38:c3:69:b7:e0:14:b7:48:61:d6:4e:10:a7:76:a6:e7:7b: 5f:2d:3a:2c:19:cb:3b:49:38:a1:60:bc:bf:c8:79:a6:51:c7: 85:96:8d:4d:9f:ae:bf:19:0d:dc:cb:f2:9d:9c:49:b3:53:e2: 48:8d:6e:66:42:1e:88:73:0b:04:f9:76:ee:9f:01:e6:28:29: 3a:4d:0c:a5:fb:20:84:a1:b9:45:d2:b8:af:90:d7:86:2b:50: f5:f0:b5:07:1e:ef:df:c5:c0:c2:76:64:47:a8:4f:9f:c7:81: 55:51:56:5b:77:48:56:92:b3:52:98:3a:25:ab:53:eb:3b:1b: 3f:7c:91:5f:26:40:14:f8:4f:99:71:53:e8:87:dd:f4:aa:4b: 90:b1:b0:94:c9:9f:9a:bc:52:fc:8c:b3:5b:62:30:8c:bf:4c: af:fe:e6:07:ab:9f:af:d5:88:8f:d5:7d:c1:c4:5b:d8:3c:8a: c4:a6:68:5b:1f:99:f8:87:ef:ff:59:19:98:48:fb:9a:57:3a: ae:8c:21:4e:ac:56:f6:23:99:0b:85:d3:9f:88:ac:bf:f1:84: 10:14:f5:8a:5f:dc:7a:29:2a:c4:73:d4:7e:d1:58:0a:3f:95: 37:5e:0e:98:3d:67:b9:92:2c:58:ca:79:e1:96:46:08:bb:fc: b8:c9:17:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjYwNDA0MjAwOTU2WhcNMjYwNDExMjAwOTU2WjAYMRYwFAYD VQQDEw02OWQxNzAxNS0zYjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgyd68XIYyk7y/O2TF8fOXCqxCRpOJs2LJ55pQdy4WIsPfDML/L8tOD4/JQd ni8SSEy9ANLaIaXpf+QqHzsYd7QuxlExsHKd6vt5lLUN97whlMvE1ZJBBEMUh09Q NzPmb5s2hFXhmf1H7Y6hS8VFHKIjhpUa03yMyoKwMYqWa4drCr3mNv5iqU8Irib6 8os5mVF7pkQaukvITMAMOmrxGQrEOmpyDqtYHWYM7LOdt2EvATy3QXoaLNiksDfZ 5exZYFxGrnn6q1G92+KDxRzTypgmUcQvgHTTlAauK7qXZx//+ueMbgYlzTo6iBJI uakb8bhVIQUJAj0BaXOTfd3tnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHWEK7b tl+9bAPyMDJg1rJmmq1yMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZjjDabfgFLdIYdZOEKd2pud7Xy06LBnLO0k4oWC8v8h5plHHhZaNTZ+uvxkN 3MvynZxJs1PiSI1uZkIeiHMLBPl27p8B5igpOk0MpfsghKG5RdK4r5DXhitQ9fC1 Bx7v38XAwnZkR6hPn8eBVVFWW3dIVpKzUpg6JatT6zsbP3yRXyZAFPhPmXFT6Ifd 9KpLkLGwlMmfmrxS/IyzW2IwjL9Mr/7mB6ufr9WIj9V9wcRb2DyKxKZoWx+Z+Ifv /1kZmEj7mlc6rowhTqxW9iOZC4XTn4isv/GEEBT1il/ceikqxHPUftFYCj+VN14O mD1nuZIsWMp54ZZGCLv8uMkXkg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:06 2026 by rpki-client