$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft File: XK9B9ks3Umh5jipdqgwUAADNdHM.mft (raw, json) Hash identifier: xC/amqQNEZtR6n4aFOwqnfbIt8V8AW789LX0GNYVjok= Subject key identifier: 26:D2:B2:3C:F8:88:35:B6:CB:23:96:B8:29:6E:93:FA:12:04:E3:BB Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73 Certificate issuer: /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473 Certificate serial: 14A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft Manifest number: 147C Signing time: Sat 04 Apr 2026 16:46:07 +0000 Manifest this update: Sat 04 Apr 2026 16:46:07 +0000 Manifest next update: Sat 11 Apr 2026 16:46:07 +0000 Files and hashes: 1: XK9B9ks3Umh5jipdqgwUAADNdHM.crl (hash: v4xGovdzb6NMh4qos8DaiJTW28REXmvY6GxFHW/mKUQ=) 2: 1983150A3BB911EEB0CA4809C4F9AE02.roa (hash: 5RNyMR+3G/bk8qvZSiyds5uiwVr/sSQ5ExXQPxGSzo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5286 (0x14a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED73E, serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473 Validity Not Before: Apr 4 16:46:07 2026 GMT Not After : Apr 11 16:46:07 2026 GMT Subject: CN=69d1404f-5694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:28:b7:b1:2f:42:08:b8:6d:26:ba:3d:5c: 33:c2:6b:bb:fb:cc:88:03:2e:46:c8:21:2c:05:52: 95:8d:67:45:0d:30:42:94:e9:d6:5e:f3:e9:46:8e: 5a:b2:3a:e2:c3:29:8b:e1:36:66:f4:90:c3:ab:f4: 19:76:d9:31:b2:6f:04:99:fb:13:2a:34:50:2e:2b: 1e:a7:a6:d7:3c:bb:c4:af:21:f9:93:28:c5:bb:75: 57:35:14:bf:47:f9:f1:b6:de:4e:2b:30:4e:d3:a6: 7b:f9:6e:81:68:44:2f:0c:e0:26:fe:66:9b:68:00: bf:01:b6:fb:d4:8c:2a:f1:76:08:0c:7a:cb:bf:9b: 00:a7:be:8f:b1:92:00:bd:00:4d:48:9f:0a:ec:33: a1:36:7b:d7:c8:75:4c:8c:31:49:72:52:80:68:ae: 3e:0b:0f:13:c2:65:13:ad:e3:22:bc:41:a4:a8:59: cc:3a:af:e0:ed:bc:11:36:9e:17:ec:3a:ba:6d:bc: b1:79:43:fd:08:d6:d5:60:61:d8:05:f7:ba:09:5f: f3:06:41:9c:36:79:9d:38:60:09:3b:1a:d3:bb:6f: 1b:5e:62:ed:49:06:2f:3e:fa:ac:f6:59:b2:d8:e2: 54:fe:8a:40:9e:e7:e5:4b:38:2c:c2:2a:f6:25:a1: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D2:B2:3C:F8:88:35:B6:CB:23:96:B8:29:6E:93:FA:12:04:E3:BB X509v3 Authority Key Identifier: keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:22:b2:0b:42:ad:da:e6:db:91:f9:9b:3c:c5:38:3e:98:56: 73:97:7c:e3:83:fc:81:f0:f9:85:76:b2:48:46:fb:4f:1a:e6: 18:d4:93:4c:fa:39:20:6c:84:e5:ec:2c:0e:da:3e:49:54:df: a8:b2:5d:1a:df:6b:20:4d:d6:9f:15:84:a4:bc:6a:34:4e:12: 30:14:da:8c:72:3f:50:30:85:27:6e:34:5d:8f:e1:10:44:d4: 5c:13:ce:d0:73:ce:2c:70:ef:e8:64:c7:16:24:b1:12:c2:40: 3f:d4:6c:c9:cd:75:b2:7f:05:c3:94:05:ab:99:55:54:98:cb: 20:b5:a5:d4:73:6e:69:d7:17:16:89:e5:d6:76:b4:e3:07:d5: a2:be:7b:6c:38:37:68:69:f4:77:7c:cf:33:62:95:2c:9c:f6: bb:8c:8b:a5:3d:7e:8d:73:0f:55:fd:9c:bd:a4:6b:5f:d3:0c: 2d:40:dc:cd:4b:f6:ec:68:a4:6b:34:a8:4d:06:f2:1c:9d:ef: 00:97:8c:68:cf:d7:d4:00:52:2c:82:56:1c:d0:58:6d:02:4d: ae:85:b9:0f:54:09:81:2a:f0:7d:24:e1:77:f6:ef:01:7d:94: 15:b9:dd:43:5a:84:cd:ac:0f:4b:b1:40:a0:0d:6a:c9:e9:8c: 5f:39:64:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ3M0UxMTAvBgNVBAUTKDVDQUY0MUY2NEIzNzUyNjg3OThFMkE1REFBMEMxNDAw MDBDRDc0NzMwHhcNMjYwNDA0MTY0NjA3WhcNMjYwNDExMTY0NjA3WjAYMRYwFAYD VQQDEw02OWQxNDA0Zi01Njk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sIot7EvQgi4bSa6PVwzwmu7+8yIAy5GyCEsBVKVjWdFDTBClOnWXvPpRo5a sjriwymL4TZm9JDDq/QZdtkxsm8EmfsTKjRQLisep6bXPLvEryH5kyjFu3VXNRS/ R/nxtt5OKzBO06Z7+W6BaEQvDOAm/mabaAC/Abb71Iwq8XYIDHrLv5sAp76PsZIA vQBNSJ8K7DOhNnvXyHVMjDFJclKAaK4+Cw8TwmUTreMivEGkqFnMOq/g7bwRNp4X 7Dq6bbyxeUP9CNbVYGHYBfe6CV/zBkGcNnmdOGAJOxrTu28bXmLtSQYvPvqs9lmy 2OJU/opAnuflSzgswir2JaEcMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbSsjz4 iDW2yyOWuCluk/oSBOO7MB8GA1UdIwQYMBaAFFyvQfZLN1JoeY4qXaoMFAAAzXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDczRS8wMUI4MjEwQTg5 ODkxMUU4Qjk4QkVDM0FDNEY5QUUwMi9YSzlCOWtzM1VtaDVqaXBkcWd3VUFBRE5k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLOUI5a3MzVW1oNWppcGRxZ3dVQUFETmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDczRS8wMUI4MjEwQTg5ODkxMUU4Qjk4QkVDM0FDNEY5QUUwMi9YSzlCOWtzM1Vt aDVqaXBkcWd3VUFBRE5kSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZiKyC0Kt2ubbkfmbPMU4PphWc5d844P8gfD5hXaySEb7TxrmGNSTTPo5IGyE 5ewsDto+SVTfqLJdGt9rIE3WnxWEpLxqNE4SMBTajHI/UDCFJ240XY/hEETUXBPO 0HPOLHDv6GTHFiSxEsJAP9Rsyc11sn8Fw5QFq5lVVJjLILWl1HNuadcXFonl1na0 4wfVor57bDg3aGn0d3zPM2KVLJz2u4yLpT1+jXMPVf2cvaRrX9MMLUDczUv27Gik azSoTQbyHJ3vAJeMaM/X1ABSLIJWHNBYbQJNroW5D1QJgSrwfSThd/bvAX2UFbnd Q1qEzawPS7FAoA1qyemMXzlkCA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:50 2026 by rpki-client