$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft File: XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json) Hash identifier: BPV1NQ4UCbBMes0bdU77ut8XqcbfNNPX5EIA5qq19k8= Subject key identifier: B3:27:A9:D4:51:C8:18:5D:27:16:5C:85:BA:59:98:60:1C:53:7F:D7 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 28BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft Manifest number: 25E1 Signing time: Tue 21 Apr 2026 08:23:22 +0000 Manifest this update: Tue 21 Apr 2026 08:23:21 +0000 Manifest next update: Tue 28 Apr 2026 08:23:21 +0000 Files and hashes: 1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: 0IxAOTb2aU790jbdhMnwFyByG8RiQUOdOcQ2ZkF/mdQ=) 2: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 5ldMM2cJXLvn3rFlQhmNWhHj8IBemlnHR9gxFxzEiLw=) 3: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: VtV1xShyMh9sjenS152zbiOl5v/xr19d8+vqjj03D0M=) 4: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: 9gIlVUVnVNmYm0bLzGl5b38yoqx/v/vATXeAALoSuAs=) 5: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: VJCnaf5Klg6jmYuqx2mGsqpPv1Kkhc3IprBxsydE49k=) 6: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: +ezEBpxkY8f4PY2reVhjPmzVyzhmj21Jd5Qr+MbJDt0=) 7: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: v18fC46MYs+2IjS6va5v9tqHDD2ALPl/gY1gvz9Tbm0=) 8: F04860C28C5611E792848B4AC4F9AE02.roa (hash: t1OURYtTlAtfNdWLrnHxkvZF4FFX+C17Jb19CIwfihg=) 9: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: aRK8QB1JQ1E7tEOryxg9vqmCGo1+++BBG/tSU9uGFOQ=) 10: F1475E928C5611E792848B4AC4F9AE02.roa (hash: 31VZpJVWKNF5mab4XZ5JTLuEycfyZELw3YTbEtHVoIE=) 11: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: lerl+S1eIB/OLEq2WHdkhDzv2oYfCjPkouNJFGcdWfk=) 12: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: yO9FNu/9OHp6I+wCsbe7slCX+CdTGzP0ftlr5EH77RY=) 13: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: kFQioVNwia+/qizEhlyCPhiOpzPpIkRHCfZvLOC7QmI=) 14: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: 9rwvDynWMk6qsy3E/KYOqtc0csn9No217jDY1XnUZzc=) 15: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 2dGdHKeMcuIvSTX7iFjfVdensV8pnXlc8bJBe8kDDVc=) 16: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: 38VxGKNTIqjI7WmYVTAs2Vk4XEsvNHdC+sfnVA/u1Zk=) 17: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: Bf1VexJZ8ePZKh8sXCKZqIgTsDNhulqFPVDnqdnEaj0=) 18: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: wnYTp3fsOW2HQITJ5FlOwfrkiKlWT5LLwinFPfnjQu0=) 19: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: 8hJseycbUR3zK2+zXkoIB6I2ViNeMkJgkdW6VsK7qO0=) 20: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: f0nSJ61GA5QPVsLKjddcC0wfT/tT/FK1nC1PrxX8MeQ=) 21: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: j51cLfGITBXR/xee14Rv6rfJpCWZzT3Rfl0VvL2R5/I=) 22: 543386248C5811E782F42951C4F9AE02.roa (hash: n3uqup7GQBgv1FQz4tcE6zqiYYLPHwkPhVC8sJy/BDw=) 23: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: aplTQ1mZqk0IhWSBqPegZKupecSP2f1cOieGPzwg1+U=) 24: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: UrzW/ghTReXDIIXXuUNwm0r5S8hfMJ1iOmM4g5cXqO0=) 25: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: sL6rlhwT2LpkTZEnGwa+sTT6+sRP4qeJqtLHhVBZMAA=) 26: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: qRXk9dzH9yzccBqYsDfVw2E8u5nyXXCoXpdl1ASSh24=) 27: 586845003D5B11F1BC7D03E3A9833773.roa (hash: bksTinMhSZQ6iaAs+xQLVJBbYxr1WgrHFBPOHrnAF48=) 28: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: tYH203EuDB6n9E6nUVPwIVfHVAXXBv2Io3OA+Ey8sS8=) 29: F688FE388C5611E792848B4AC4F9AE02.roa (hash: t6f1Kosop/CbP7AwXXw0yAnoWx86X0b95L/+s+Yi+WE=) 30: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: TgloTHCWPURsO/1k0p40DWKdaGHNBtdJOfoMLcQC4gA=) 31: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: V0Bxe9pvCdmpHFNAup44+kDyfw/tamlGcA2MYQmUsO0=) 32: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: sgw4Va5xBAbvxEnA80g+uDGNNw3JilHTbxgmChJswfI=) 33: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: X4W8KPzkD6jrY8LiA2LHjxX8s0fpYowcQUXXGe2/Dfo=) 34: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: QMEMNFl/Jl1WfdjUzvj9WgadU2H5AGalIKmrTUa6R+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10429 (0x28bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 21 08:23:21 2026 GMT Not After : Apr 28 08:23:21 2026 GMT Subject: CN=69e733fa-7df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:af:79:a9:31:5a:31:3a:17:00:3d:f2:2a:38: 61:1f:09:b9:33:fd:39:21:b9:fe:25:b2:d9:99:52: 7e:ae:cb:ce:a9:de:c2:52:1c:50:3f:b1:4b:1a:26: b1:5e:3f:5f:84:eb:60:66:98:d6:e8:d0:e2:3c:7f: a6:b4:87:2d:05:09:8a:9b:f6:54:f6:4f:68:ba:0f: d8:fb:c5:27:69:9e:c1:f9:01:4c:ac:31:0d:cd:cf: bd:d0:6f:61:39:15:66:a6:59:9d:23:52:e3:a0:a6: 98:59:14:90:51:05:37:7a:9c:e0:bb:03:e0:11:59: 87:cd:64:f5:23:18:94:50:1d:9f:df:65:3b:83:16: b0:e0:fc:6b:4b:4b:29:00:a8:7c:7c:f2:b8:c7:6e: 86:d6:b2:fb:aa:07:a0:20:fe:00:16:c0:5d:95:a7: 0c:27:99:1e:68:e3:51:51:03:ef:30:95:83:3c:1c: 95:aa:93:cb:0c:39:af:9d:10:4e:09:f6:74:04:c3: 4d:f2:8e:52:02:39:f6:f6:6a:f1:7d:b1:3f:2f:28: 15:a4:7a:59:52:58:4c:36:98:15:3d:33:87:fa:8b: be:cf:68:df:2b:77:83:a1:6b:42:2e:78:43:1a:0a: 19:3f:75:5d:2e:f3:60:60:90:a0:1f:7c:0e:55:d6: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:27:A9:D4:51:C8:18:5D:27:16:5C:85:BA:59:98:60:1C:53:7F:D7 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:09:f3:92:93:86:98:8c:45:c7:56:70:3f:18:b4:6f:7d:90: ec:eb:3d:5e:3f:7f:b0:e0:39:9e:d9:fd:5a:34:97:0b:ce:4d: 45:55:f3:48:d8:e6:7c:64:3f:f6:73:c5:e6:06:73:64:be:f5: 4b:86:e4:f0:22:77:71:40:dd:54:43:e6:81:5a:23:be:2a:be: 8d:8a:7b:90:f4:ec:fa:b1:42:97:5f:9b:e6:99:f6:03:e6:e8: 71:73:36:6d:2d:cb:cd:be:3f:a6:be:4a:31:55:32:ff:c0:37: c6:a3:bc:94:76:6f:74:50:bf:8b:68:71:e9:ab:00:a4:bb:49: b8:2f:f4:f2:37:44:95:71:60:db:0a:e1:26:15:77:b8:b0:fd: 72:00:78:4f:c5:b7:fc:b2:7a:b7:d8:e6:f0:62:a8:43:72:8a: 31:62:ac:fc:cc:2f:e3:a1:5f:bc:d7:7f:e8:04:2f:0b:f5:51: 3c:92:83:2a:a6:41:5d:07:19:f5:8e:4a:8a:57:8e:c8:b5:71: 51:1a:e0:78:36:81:3f:71:27:99:82:33:dc:f1:11:22:58:50: c5:9d:65:5a:fa:2e:c8:e1:2c:72:35:09:79:4a:d0:ce:b0:91: 6f:38:b2:43:d7:9e:34:ed:25:79:bb:f9:b4:fd:25:e8:2c:60: 55:d5:cc:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjYwNDIxMDgyMzIxWhcNMjYwNDI4MDgyMzIxWjAYMRYwFAYD VQQDEw02OWU3MzNmYS03ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8K95qTFaMToXAD3yKjhhHwm5M/05Ibn+JbLZmVJ+rsvOqd7CUhxQP7FLGiax Xj9fhOtgZpjW6NDiPH+mtIctBQmKm/ZU9k9oug/Y+8UnaZ7B+QFMrDENzc+90G9h ORVmplmdI1LjoKaYWRSQUQU3epzguwPgEVmHzWT1IxiUUB2f32U7gxaw4PxrS0sp AKh8fPK4x26G1rL7qgegIP4AFsBdlacMJ5keaONRUQPvMJWDPByVqpPLDDmvnRBO CfZ0BMNN8o5SAjn29mrxfbE/LygVpHpZUlhMNpgVPTOH+ou+z2jfK3eDoWtCLnhD GgoZP3VdLvNgYJCgH3wOVdbNNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMnqdRR yBhdJxZchbpZmGAcU3/XMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo LTNoc1VtMjk3eHNFV1NpcmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFAnzkpOGmIxFx1ZwPxi0b32Q7Os9Xj9/sOA5ntn9WjSXC85NRVXzSNjmfGQ/ 9nPF5gZzZL71S4bk8CJ3cUDdVEPmgVojviq+jYp7kPTs+rFCl1+b5pn2A+bocXM2 bS3Lzb4/pr5KMVUy/8A3xqO8lHZvdFC/i2hx6asApLtJuC/08jdElXFg2wrhJhV3 uLD9cgB4T8W3/LJ6t9jm8GKoQ3KKMWKs/Mwv46FfvNd/6AQvC/VRPJKDKqZBXQcZ 9Y5KileOyLVxURrgeDaBP3EnmYIz3PERIlhQxZ1lWvouyOEscjUJeUrQzrCRbziy Q9eeNO0lebv5tP0l6CxgVdXMAw== -----END CERTIFICATE-----Generated at Wed Apr 22 05:16:44 2026 by rpki-client