$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: tmOcIGNboLZf3/uKtohy31bp554GUtZV8QHCeDakW8E= Subject key identifier: E8:EE:E7:60:95:E1:25:C0:44:05:E1:33:C1:66:55:72:A6:D5:9B:2F Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: E4 Signing time: Mon 27 Apr 2026 06:30:46 +0000 Manifest this update: Mon 27 Apr 2026 06:30:46 +0000 Manifest next update: Mon 04 May 2026 06:30:46 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: r1IQf1Xq0q6fWZIs9yUHIf+fi5df3wUUShUmJ+hJ1WY=) 2: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: e+Kx8yx39vD35NK5FmMiKiiW7Dize/nId4xxFjZxyI0=) 3: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: fvOW/E/H4txmKlUGL4qB5PT9I4APbJO6w4MS+iWEvcM=) 4: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: 5hXzmFr17jMpDBDwfAxIzSXfRZTLmAdnHnJCXCD80mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 06:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Apr 27 06:30:46 2026 GMT Not After : May 4 06:30:46 2026 GMT Subject: CN=69ef0296-b5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:df:6c:d1:a0:11:b6:d2:c2:bc:bc:17:27: 9d:72:f9:3f:28:24:f5:3f:61:eb:7e:25:1e:cd:a1: 0b:70:65:42:fd:96:af:f3:e4:d2:16:92:4f:44:14: d7:61:44:40:bb:8d:0c:0a:56:28:83:70:f2:a7:b4: eb:e8:9d:d6:20:ab:17:55:e4:87:01:05:16:19:bf: c7:93:67:1d:18:65:70:30:e7:92:5b:b3:a1:3e:c9: 04:49:20:f5:28:58:42:e1:33:02:5e:0a:9e:92:f2: 79:64:23:27:ae:f1:c4:77:cd:97:1f:01:45:18:18: 7b:8d:b8:8e:33:b6:a0:b8:43:f0:43:72:b8:12:90: 08:1b:0d:cb:26:9f:a9:20:1b:28:b3:39:1c:ed:f8: f2:b3:8e:52:7c:ac:4d:35:46:27:85:5e:86:d6:b1: 89:d6:b0:af:5c:7b:4c:c9:03:64:8d:61:80:8d:ac: 33:ee:ef:81:ac:30:d6:a7:89:4d:33:af:17:42:43: cf:29:20:84:f2:50:b6:f0:52:85:2c:a5:1f:cb:35: 6e:20:c3:cb:65:4f:03:35:02:9f:8e:89:74:60:a8: 51:36:5a:17:c6:af:e5:a1:44:d7:68:a3:31:12:15: 8c:c1:c9:17:37:6e:5f:8d:16:31:7a:dd:15:02:f3: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EE:E7:60:95:E1:25:C0:44:05:E1:33:C1:66:55:72:A6:D5:9B:2F X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a4:59:4d:21:0e:3a:d8:f0:21:9a:6f:be:68:30:6e:0d:bc: f9:d7:52:81:b7:7b:8c:1e:3f:56:00:4c:03:90:ea:c5:ca:06: 40:1d:34:a3:ac:12:cc:e0:c2:1d:1c:5d:e8:4f:82:da:8d:7d: 78:01:a9:88:17:cc:97:ca:f8:7d:a1:be:10:98:13:c2:24:19: f2:f6:7a:d1:43:56:09:bb:04:52:9d:57:d9:2c:42:b0:fe:af: a7:74:cb:c7:21:d4:f4:76:71:9b:e1:14:32:e3:2b:47:92:e8: 86:c0:a2:2c:66:5f:a8:79:0d:6a:e8:5f:87:6e:30:c3:f5:b6: 02:79:13:67:92:e8:85:fd:be:45:d5:6e:8d:9a:3e:97:4b:f3: 08:3b:ab:e4:86:cf:18:b9:38:ca:d4:5f:f9:77:93:c9:6b:ac: 8f:a8:58:6d:94:c6:95:49:b5:1e:63:73:62:1a:d9:bb:ad:69: 23:19:99:1f:bc:08:7d:ed:c4:3a:f9:63:62:ab:f3:06:46:95: 14:41:b7:ec:63:4a:d3:15:75:12:52:ef:c9:70:0b:d9:dc:0c: e4:5a:bc:8d:b5:7b:7a:46:c4:a3:2b:86:90:6b:fe:9b:80:23: ee:17:de:f6:49:97:58:22:90:6d:e2:90:85:35:66:dd:df:38: 5a:74:5d:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThERjUxMTAvBgNVBAUTKEM2Rjc1OEVDRERDNEM5QjBGNzJGMDY1QzM1QUQ1NDY5 NzQzMjcxMUIwHhcNMjYwNDI3MDYzMDQ2WhcNMjYwNTA0MDYzMDQ2WjAYMRYwFAYD VQQDEw02OWVmMDI5Ni1iNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzvfbNGgEbbSwry8Fyedcvk/KCT1P2HrfiUezaELcGVC/Zav8+TSFpJPRBTX YURAu40MClYog3Dyp7Tr6J3WIKsXVeSHAQUWGb/Hk2cdGGVwMOeSW7OhPskESSD1 KFhC4TMCXgqekvJ5ZCMnrvHEd82XHwFFGBh7jbiOM7aguEPwQ3K4EpAIGw3LJp+p IBsoszkc7fjys45SfKxNNUYnhV6G1rGJ1rCvXHtMyQNkjWGAjawz7u+BrDDWp4lN M68XQkPPKSCE8lC28FKFLKUfyzVuIMPLZU8DNQKfjol0YKhRNloXxq/loUTXaKMx EhWMwckXN25fjRYxet0VAvPIWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOju52CV 4SXARAXhM8FmVXKm1ZsvMB8GA1UdIwQYMBaAFMb3WOzdxMmw9y8GXDWtVGl0MnEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOERGNS8zMUUwRjE2QUY5 NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXliRDNMd1pjTmExVWFYUXlj UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OERGNS8zMUUwRjE2QUY5NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXli RDNMd1pjTmExVWFYUXljUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkKRZTSEOOtjwIZpvvmgwbg28+ddSgbd7jB4/VgBMA5DqxcoGQB00o6wSzODC HRxd6E+C2o19eAGpiBfMl8r4faG+EJgTwiQZ8vZ60UNWCbsEUp1X2SxCsP6vp3TL xyHU9HZxm+EUMuMrR5LohsCiLGZfqHkNauhfh24ww/W2AnkTZ5Lohf2+RdVujZo+ l0vzCDur5IbPGLk4ytRf+XeTyWusj6hYbZTGlUm1HmNzYhrZu61pIxmZH7wIfe3E OvljYqvzBkaVFEG37GNK0xV1ElLvyXAL2dwM5Fq8jbV7ekbEoyuGkGv+m4Aj7hfe 9kmXWCKQbeKQhTVm3d84WnRdsA== -----END CERTIFICATE-----Generated at Mon Apr 27 23:45:56 2026 by rpki-client