$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: YzVq2sEjFzLSjJh+y7cA/A0XHdLR10GTmiD8/L9nGJ8= Subject key identifier: CF:B3:BC:08:77:B5:71:7B:2D:4B:AF:71:F3:2F:6D:31:91:F1:CC:0A Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 0515 Signing time: Thu 16 Apr 2026 23:31:40 +0000 Manifest this update: Thu 16 Apr 2026 23:31:40 +0000 Manifest next update: Thu 23 Apr 2026 23:31:40 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: 6Nw5hH4ga2yDrWItHdYiq+ZF+UIACGsVFzmHWxFd/xU=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: Apr 16 23:31:40 2026 GMT Not After : Apr 23 23:31:40 2026 GMT Subject: CN=69e1715c-2cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:63:4a:d5:9f:66:84:63:5b:a9:56:d0:4f: 86:6c:08:74:7b:81:d3:89:a8:1d:07:50:0e:64:62: eb:c4:ef:50:7e:f4:b8:f7:90:99:ec:c2:2c:3e:f8: a0:df:a8:64:09:d3:9c:e6:66:94:f4:fb:f1:eb:e8: 34:3a:18:11:18:a6:fc:cc:a1:7e:c6:e7:e0:67:15: c4:55:80:6f:2a:bf:0b:1c:73:35:b9:a7:59:39:81: 19:5b:24:b3:16:a8:86:24:40:dd:44:2a:20:59:61: fa:3d:f0:38:de:f4:32:04:1e:c2:e2:3a:83:ba:29: 91:ad:b8:e1:e1:dd:5b:fc:cc:c1:1c:91:50:b7:30: 06:a4:f9:14:20:6f:49:7b:fb:0b:b4:51:b7:21:15: 7d:06:09:21:2c:89:e4:e6:a9:2f:63:c4:8c:11:c8: 1e:5f:58:24:ca:6b:b1:3d:4b:12:f4:b6:5b:6a:aa: bb:8f:13:b2:4f:ed:64:78:0b:1d:8c:a1:58:65:04: 8c:f8:85:22:28:f8:e2:50:83:6d:02:40:42:26:b9: c5:0b:18:7e:5b:85:d0:30:15:32:81:bb:16:74:5d: 6f:0f:b1:70:e2:05:b0:82:77:ee:19:65:6a:5c:b9: 95:bd:18:f2:ea:8f:33:a3:42:48:5a:12:6e:59:1b: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B3:BC:08:77:B5:71:7B:2D:4B:AF:71:F3:2F:6D:31:91:F1:CC:0A X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:44:82:89:c7:f7:a4:6f:6c:11:78:14:a6:dd:1a:b8:d5:c2: 62:9e:7d:66:bd:c7:a8:eb:82:57:59:0b:1e:29:7b:8c:44:99: b3:83:78:a0:7d:e9:b4:54:a7:9d:3d:54:f4:35:85:85:cf:09: 3f:00:97:08:43:89:89:ce:6b:47:c5:01:7d:b4:d4:11:cc:e4: 6d:15:3a:a9:b4:66:e7:cd:e0:6f:49:bd:3e:af:c1:e9:0c:42: 56:1e:a7:2e:29:5b:cc:a9:8f:11:bc:d6:3f:41:41:49:2e:c8: 65:fb:b6:2c:11:86:5f:d3:ce:82:88:40:50:bf:c1:26:03:d0: a4:7b:f0:36:04:1d:6c:13:c5:6e:4f:61:75:b3:cb:91:c2:fd: 8e:ee:92:f8:b0:5d:28:a6:3f:b2:a6:b4:2c:64:aa:e4:65:46: ec:00:ad:89:7e:b8:14:de:6f:97:fb:1a:f6:45:28:45:60:2a: d4:42:a7:b1:a1:e6:59:3d:e4:17:2e:bf:d4:ef:e3:c7:2d:63: b0:fd:a9:01:1a:5f:e4:43:71:06:ff:d9:8f:02:48:60:75:eb: 5f:bb:4e:43:97:a7:8e:09:3c:a3:41:13:91:da:f6:3c:cb:f5: d7:d4:5e:30:bf:5b:6f:3f:a0:98:cd:42:a0:88:2d:b2:e6:6e: 4d:1d:53:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjYwNDE2MjMzMTQwWhcNMjYwNDIzMjMzMTQwWjAYMRYwFAYD VQQDEw02OWUxNzE1Yy0yY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uxjStWfZoRjW6lW0E+GbAh0e4HTiagdB1AOZGLrxO9QfvS495CZ7MIsPvig 36hkCdOc5maU9Pvx6+g0OhgRGKb8zKF+xufgZxXEVYBvKr8LHHM1uadZOYEZWySz FqiGJEDdRCogWWH6PfA43vQyBB7C4jqDuimRrbjh4d1b/MzBHJFQtzAGpPkUIG9J e/sLtFG3IRV9BgkhLInk5qkvY8SMEcgeX1gkymuxPUsS9LZbaqq7jxOyT+1keAsd jKFYZQSM+IUiKPjiUINtAkBCJrnFCxh+W4XQMBUygbsWdF1vD7Fw4gWwgnfuGWVq XLmVvRjy6o8zo0JIWhJuWRt2aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+zvAh3 tXF7LUuvcfMvbTGR8cwKMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVkSCicf3pG9sEXgUpt0auNXCYp59Zr3HqOuCV1kLHil7jESZs4N4oH3ptFSn nT1U9DWFhc8JPwCXCEOJic5rR8UBfbTUEczkbRU6qbRm583gb0m9Pq/B6QxCVh6n LilbzKmPEbzWP0FBSS7IZfu2LBGGX9POgohAUL/BJgPQpHvwNgQdbBPFbk9hdbPL kcL9ju6S+LBdKKY/sqa0LGSq5GVG7ACtiX64FN5vl/sa9kUoRWAq1EKnsaHmWT3k Fy6/1O/jxy1jsP2pARpf5ENxBv/ZjwJIYHXrX7tOQ5enjgk8o0ETkdr2PMv119Re ML9bbz+gmM1CoIgtsuZuTR1TlQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:51 2026 by rpki-client