$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: UWpHwEPeo88nQYrulV67Qjo29MeGWL+zTY8+/rNb7js= Subject key identifier: 9E:F1:FA:C1:ED:A7:13:91:4B:19:BC:E7:58:0E:2A:77:EC:7F:F3:4B Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 138D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 48F6 Signing time: Tue 14 Apr 2026 14:21:06 +0000 Manifest this update: Tue 14 Apr 2026 14:21:05 +0000 Manifest next update: Tue 21 Apr 2026 14:21:05 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: pVC/GcP5j4452HlQ77tB2BWjGc2OixtTokl+nkJR6SU=) 2: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: 8j8UggU/cOGDsFTMUgNVbsmPDrBcfc9iBtV2U1i4LIQ=) 3: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: r6K9sT4xz4xltrfN6WopOwvbBDeZ2oXDfmgdeeL8nwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5005 (0x138d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Apr 14 14:21:05 2026 GMT Not After : Apr 21 14:21:05 2026 GMT Subject: CN=69de4d51-ce9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:c4:20:ee:af:73:0c:54:5c:9b:91:7f:d6: 20:cc:80:90:a7:88:b4:94:c2:61:50:fb:2e:da:da: 0d:3c:df:8b:ff:a5:6e:12:db:d3:b1:e9:ff:c8:d8: 5a:4e:49:cc:8a:ea:d9:91:a0:75:3f:f4:40:38:a2: 42:ff:c7:f6:89:b1:8b:45:12:f7:55:18:ec:3f:b0: 89:3d:e2:24:21:31:e5:15:7d:57:c8:bc:ff:6b:06: e7:1e:00:9d:3f:d8:7b:70:6e:68:fd:5c:6e:2d:30: 8c:64:08:aa:f2:70:02:d7:95:53:0c:94:b6:1f:60: 4c:5b:38:6c:d0:a6:24:d2:b1:ef:d4:b4:93:7b:1e: 12:dc:e9:74:11:19:e0:43:56:32:ee:80:1c:41:15: 0d:3b:89:9d:e8:ad:d9:f5:c3:60:c9:84:0c:1b:d7: 22:49:15:65:54:ac:0a:c4:5b:41:91:2b:a9:72:93: b3:b3:b3:a3:05:7c:16:72:c3:89:3a:67:91:16:4e: 75:8c:46:f3:b3:6f:bf:3e:73:91:4e:7f:4e:b2:95: e9:61:b0:e8:67:bc:0e:8c:22:a6:80:61:cf:26:05: 1f:f7:19:58:78:49:bc:28:1c:c5:fa:a1:f7:26:cd: c7:16:9c:0b:72:51:b7:dc:49:43:0d:96:87:ce:4b: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F1:FA:C1:ED:A7:13:91:4B:19:BC:E7:58:0E:2A:77:EC:7F:F3:4B X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:7d:05:f3:1a:9a:29:4f:ce:92:91:ab:7f:ee:86:8f:02:16: 79:c0:98:d1:e7:64:95:aa:9e:de:26:6a:f3:05:80:55:03:85: 2d:86:5d:37:f7:35:96:49:a8:d5:fa:e1:fa:1c:19:ff:db:44: 0b:ba:f1:f6:69:22:d4:2c:74:d6:f8:f0:b6:76:23:10:f6:c2: 7c:fb:a8:a0:3d:36:e6:40:a2:ee:6b:96:51:5b:d9:6a:73:2c: ad:aa:05:01:4b:ce:c1:e2:b9:11:53:28:eb:1a:d9:81:50:8a: 69:56:1f:59:01:59:48:8e:0a:92:48:97:09:fc:af:6f:a5:46: 51:8a:c6:d5:9b:fa:34:d9:4c:a4:2c:f4:41:0a:42:34:01:92: 90:fc:2a:1f:fc:8f:ee:a6:af:a0:c8:6c:7c:da:55:ae:fd:17: ac:89:c3:78:e2:d2:14:88:0d:93:c7:4b:3f:ec:75:75:64:b0: 86:31:2b:d4:e6:a7:f3:0c:39:7d:da:b6:19:f3:d3:8b:d7:68: 81:91:b2:97:87:56:f0:17:4e:46:c4:74:ee:12:66:1e:ab:f4: d3:65:24:59:e6:13:80:0d:f3:01:c7:6b:f7:a6:de:15:4f:f7: 9a:60:f2:16:ea:41:c1:59:74:80:64:d7:7c:61:55:36:c1:f6: a4:fd:a0:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjYwNDE0MTQyMTA1WhcNMjYwNDIxMTQyMTA1WjAYMRYwFAYD VQQDEw02OWRlNGQ1MS1jZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJnEIO6vcwxUXJuRf9YgzICQp4i0lMJhUPsu2toNPN+L/6VuEtvTsen/yNha TknMiurZkaB1P/RAOKJC/8f2ibGLRRL3VRjsP7CJPeIkITHlFX1XyLz/awbnHgCd P9h7cG5o/VxuLTCMZAiq8nAC15VTDJS2H2BMWzhs0KYk0rHv1LSTex4S3Ol0ERng Q1Yy7oAcQRUNO4md6K3Z9cNgyYQMG9ciSRVlVKwKxFtBkSupcpOzs7OjBXwWcsOJ OmeRFk51jEbzs2+/PnORTn9OspXpYbDoZ7wOjCKmgGHPJgUf9xlYeEm8KBzF+qH3 Js3HFpwLclG33ElDDZaHzkulXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7x+sHt pxORSxm851gOKnfsf/NLMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdX0F8xqaKU/OkpGrf+6GjwIWecCY0edklaqe3iZq8wWAVQOFLYZdN/c1lkmo 1frh+hwZ/9tEC7rx9mki1Cx01vjwtnYjEPbCfPuooD025kCi7muWUVvZanMsraoF AUvOweK5EVMo6xrZgVCKaVYfWQFZSI4KkkiXCfyvb6VGUYrG1Zv6NNlMpCz0QQpC NAGSkPwqH/yP7qavoMhsfNpVrv0XrInDeOLSFIgNk8dLP+x1dWSwhjEr1Oan8ww5 fdq2GfPTi9dogZGyl4dW8BdORsR07hJmHqv002UkWeYTgA3zAcdr96beFU/3mmDy FupBwVl0gGTXfGFVNsH2pP2gxg== -----END CERTIFICATE-----Generated at Thu Apr 16 09:17:18 2026 by rpki-client