$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: jIzoWKwa9VNLzXI3RZZ+siS71VMwx6Pu2R54Mpdu80M= Subject key identifier: 22:CB:8E:8C:39:FA:2D:35:DD:F3:28:DB:88:7F:7A:6D:04:57:A6:52 Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0AB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0A78 Signing time: Sat 04 Apr 2026 19:28:09 +0000 Manifest this update: Sat 04 Apr 2026 19:28:09 +0000 Manifest next update: Sat 11 Apr 2026 19:28:09 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: P/z7hIW+zLjhtgCi/X/FVYqKKywTWM8Hv6KnOLMPYas=) 2: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=) 3: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=) 5: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=) 6: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2744 (0xab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Apr 4 19:28:09 2026 GMT Not After : Apr 11 19:28:09 2026 GMT Subject: CN=69d16649-629a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:ae:ba:17:c3:96:84:04:f0:95:43:d9:d2: b5:c9:b8:59:d9:cb:ab:38:6d:0d:f8:63:85:b5:91: 67:3f:fd:17:d4:d7:03:c0:64:f7:44:f6:46:b1:58: 85:19:ed:88:dc:10:48:f0:09:70:28:f7:33:f0:50: 14:fa:f0:62:3c:93:ec:63:dd:29:8c:8e:02:00:c1: 9c:58:33:c1:e8:7f:d3:23:08:6b:d6:90:c8:5c:3d: bd:be:2d:d2:71:22:94:9e:f5:e2:74:a8:8f:5e:c6: c5:4c:ea:0c:74:b7:6f:d3:db:67:c4:0c:26:25:19: 78:25:5a:ed:33:fd:6b:37:3a:af:f8:bf:99:b5:0a: 3d:8e:84:a0:dd:fa:b6:da:e1:a3:72:15:04:94:0b: 17:14:3d:e9:3c:da:ff:e1:ee:b4:b9:11:d7:ab:cb: 7f:3a:5d:7f:07:c4:00:dc:84:fb:7e:41:b3:21:e2: c2:16:72:c9:75:0f:cd:02:c4:24:0e:7b:80:03:2f: 7e:64:4e:95:08:52:9f:72:c8:27:dd:84:32:44:41: cb:e0:37:60:d5:31:38:1a:f5:8e:36:3f:81:60:51: a4:f8:1d:8e:dc:ff:5d:39:b3:51:0b:06:5a:ab:12: 59:3d:a3:1d:b4:c1:3e:7c:c7:7e:b1:6a:1a:3a:ff: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CB:8E:8C:39:FA:2D:35:DD:F3:28:DB:88:7F:7A:6D:04:57:A6:52 X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:4f:c1:d8:fa:79:a4:eb:0f:cc:f3:f6:a2:96:ae:d1:38:a4: 99:35:1f:cd:24:b4:ce:8b:b1:3c:59:ed:eb:b3:66:df:c5:53: 28:94:12:ed:1c:c2:27:cb:0d:77:b7:9f:7e:dc:3e:ac:cc:9a: eb:f5:78:c5:7d:c2:fc:c7:ac:d9:53:95:06:36:b8:27:e8:8c: c4:b0:93:0a:ca:e2:27:69:72:1d:51:21:e8:77:41:af:d1:e2: 17:80:f4:a5:74:16:f1:a7:3d:96:c0:d5:41:45:de:46:f2:36: 4a:11:87:15:d7:6e:30:b4:ee:36:46:ba:39:fc:3c:6e:61:2c: cf:6e:2b:f1:30:90:84:51:26:82:0d:7c:23:2b:11:2c:0a:82: fd:c9:f1:11:fa:6c:a0:33:49:f1:5c:75:cf:38:65:c4:ab:da: b7:62:3a:94:71:20:cc:c0:45:6f:94:c4:20:3a:0e:71:23:d7: b9:37:71:82:7b:66:89:64:18:bb:d1:18:41:91:01:d4:e9:ac: e3:79:8b:93:19:c4:82:aa:a2:70:1b:ea:9c:c2:6e:48:7e:63: 35:1e:47:c0:39:55:69:de:bf:8d:ef:4a:b9:13:95:e0:88:6b: fc:44:f2:52:3b:5f:d9:7a:9b:f9:14:fb:d6:b1:6d:de:e5:62: 7a:3b:9b:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjYwNDA0MTkyODA5WhcNMjYwNDExMTkyODA5WjAYMRYwFAYD VQQDEw02OWQxNjY0OS02MjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjyuuhfDloQE8JVD2dK1ybhZ2curOG0N+GOFtZFnP/0X1NcDwGT3RPZGsViF Ge2I3BBI8AlwKPcz8FAU+vBiPJPsY90pjI4CAMGcWDPB6H/TIwhr1pDIXD29vi3S cSKUnvXidKiPXsbFTOoMdLdv09tnxAwmJRl4JVrtM/1rNzqv+L+ZtQo9joSg3fq2 2uGjchUElAsXFD3pPNr/4e60uRHXq8t/Ol1/B8QA3IT7fkGzIeLCFnLJdQ/NAsQk DnuAAy9+ZE6VCFKfcsgn3YQyREHL4Ddg1TE4GvWONj+BYFGk+B2O3P9dObNRCwZa qxJZPaMdtME+fMd+sWoaOv/+HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLLjow5 +i013fMo24h/em0EV6ZSMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApk/B2Pp5pOsPzPP2opau0TikmTUfzSS0zouxPFnt67Nm38VTKJQS7RzCJ8sN d7efftw+rMya6/V4xX3C/Mes2VOVBja4J+iMxLCTCsriJ2lyHVEh6HdBr9HiF4D0 pXQW8ac9lsDVQUXeRvI2ShGHFdduMLTuNka6Ofw8bmEsz24r8TCQhFEmgg18IysR LAqC/cnxEfpsoDNJ8Vx1zzhlxKvat2I6lHEgzMBFb5TEIDoOcSPXuTdxgntmiWQY u9EYQZEB1Oms43mLkxnEgqqicBvqnMJuSH5jNR5HwDlVad6/je9KuROV4Ihr/ETy Ujtf2Xqb+RT71rFt3uViejubIQ== -----END CERTIFICATE-----Generated at Sun Apr 5 18:05:22 2026 by rpki-client