$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json) Hash identifier: JXzxYmrceUa0Mvmzd4zj3eSorqdyJl6popb2QgzmJRc= Subject key identifier: AA:A2:80:77:37:E8:7C:A6:6F:F3:02:67:59:8C:52:56:C4:58:68:2A Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft Manifest number: 0293 Signing time: Fri 17 Apr 2026 01:37:21 +0000 Manifest this update: Fri 17 Apr 2026 01:37:21 +0000 Manifest next update: Fri 24 Apr 2026 01:37:21 +0000 Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: 5GsRpzutduYTudb8lBSvPxzSv7zv/8jbu4IPWeYCTd8=) 2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: 9NOA2GTvOZu45DJO8iVx216gsk/ZwT1Y1rufuhTNiUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: Apr 17 01:37:21 2026 GMT Not After : Apr 24 01:37:21 2026 GMT Subject: CN=69e18ed1-8435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:2a:76:91:28:4a:f1:76:4c:db:37:0b:ac: 4e:95:6c:78:2b:7d:0a:a1:45:e8:09:82:1c:97:9a: ec:1a:f3:d0:a6:1f:a6:8d:4c:39:25:29:85:96:7b: 0a:0e:32:4d:be:19:f3:b8:16:bb:5a:f0:cf:c7:2a: d6:da:49:9a:11:33:f8:25:6d:35:ad:18:07:3d:e9: ef:24:f4:d1:23:22:ea:90:8c:5f:c5:9c:72:2c:b1: d7:8f:79:ba:83:cf:c2:30:c0:b7:d5:26:aa:60:89: a0:7d:e8:16:eb:74:64:ac:25:09:97:46:f9:7b:84: b9:da:f9:95:18:3f:3a:92:0f:c4:48:21:61:24:7c: 53:44:0c:2d:db:1e:5b:43:45:55:88:6d:e4:ac:21: bd:e8:9a:1a:bd:19:fa:8a:0c:63:e7:3a:f4:01:6f: b1:e9:69:05:8f:1b:57:7a:5d:07:1d:f4:85:53:a7: 68:ff:81:50:d3:a3:ce:90:95:e4:8b:10:f5:1d:e3: 22:ee:c5:65:29:85:3f:71:6b:33:d1:0a:8c:c5:9e: 57:11:90:45:e6:be:ff:5d:46:33:1b:9e:7b:2c:64: 32:ab:ab:ea:20:6a:c3:5f:9b:d7:18:46:23:04:c7: 75:0e:0a:aa:3b:8d:a9:5c:18:8b:2f:30:8c:69:0f: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A2:80:77:37:E8:7C:A6:6F:F3:02:67:59:8C:52:56:C4:58:68:2A X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a9:d8:e7:b1:71:4d:de:e2:35:af:d8:4a:d5:41:2f:70:42: 46:d2:27:a6:b9:c4:6d:27:22:46:08:be:ec:12:df:46:ab:e2: 1a:ee:de:64:3d:63:76:72:92:98:10:a7:4e:79:fa:1e:9d:d8: 78:28:07:de:2e:49:09:dd:9e:62:fe:70:25:70:85:82:96:ca: 4e:42:ac:8b:2e:df:a0:b1:b4:5b:d3:14:d8:40:0f:d1:4b:1b: fd:ad:7b:6e:1a:c9:7d:a2:05:24:c6:14:3d:32:07:a5:0d:b4: 22:32:18:11:8f:1d:cc:35:ed:ef:31:1c:79:d8:d4:f6:6c:b2: 0a:63:86:3f:c6:73:0d:ac:fa:6e:b1:56:6a:e1:4f:d2:fc:51: bc:08:cd:97:63:d2:0e:41:b9:e7:fb:cb:f2:e3:78:b1:45:0d: 92:82:4f:07:3f:91:ca:75:e6:84:9d:1f:62:6f:94:47:bd:d4: 5c:de:2f:05:54:f6:8d:d9:c4:21:db:d3:23:eb:84:f2:4d:93: f7:7e:cc:bc:df:a4:79:63:b1:74:12:5e:1d:77:a4:fd:3c:df: 51:e5:29:e5:a6:54:19:e5:ba:d0:73:62:35:fc:8c:a0:7b:69: db:de:07:4b:63:9e:c8:68:22:9d:a3:6a:70:69:dc:bc:b8:d5: 6b:f2:ee:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjYwNDE3MDEzNzIxWhcNMjYwNDI0MDEzNzIxWjAYMRYwFAYD VQQDEw02OWUxOGVkMS04NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LoqdpEoSvF2TNs3C6xOlWx4K30KoUXoCYIcl5rsGvPQph+mjUw5JSmFlnsK DjJNvhnzuBa7WvDPxyrW2kmaETP4JW01rRgHPenvJPTRIyLqkIxfxZxyLLHXj3m6 g8/CMMC31SaqYImgfegW63RkrCUJl0b5e4S52vmVGD86kg/ESCFhJHxTRAwt2x5b Q0VViG3krCG96JoavRn6igxj5zr0AW+x6WkFjxtXel0HHfSFU6do/4FQ06POkJXk ixD1HeMi7sVlKYU/cWsz0QqMxZ5XEZBF5r7/XUYzG557LGQyq6vqIGrDX5vXGEYj BMd1DgqqO42pXBiLLzCMaQ8r7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqigHc3 6Hymb/MCZ1mMUlbEWGgqMB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH6nY57FxTd7iNa/YStVBL3BCRtInprnEbSciRgi+7BLfRqviGu7eZD1jdnKS mBCnTnn6Hp3YeCgH3i5JCd2eYv5wJXCFgpbKTkKsiy7foLG0W9MU2EAP0Usb/a17 bhrJfaIFJMYUPTIHpQ20IjIYEY8dzDXt7zEcedjU9myyCmOGP8ZzDaz6brFWauFP 0vxRvAjNl2PSDkG55/vL8uN4sUUNkoJPBz+RynXmhJ0fYm+UR73UXN4vBVT2jdnE IdvTI+uE8k2T937MvN+keWOxdBJeHXek/TzfUeUp5aZUGeW60HNiNfyMoHtp294H S2OeyGginaNqcGncvLjVa/Lumw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:51:10 2026 by rpki-client