$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json) Hash identifier: wezZQgeq3gUFRaXT6ahOQc7jkXNmbAY5Ms4F7/jbWuw= Subject key identifier: A0:48:AC:82:C6:5C:DA:CA:44:BE:14:D7:EC:E5:55:D5:60:8B:1D:CF Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft Manifest number: 071E Signing time: Thu 16 Apr 2026 21:46:25 +0000 Manifest this update: Thu 16 Apr 2026 21:46:24 +0000 Manifest next update: Thu 23 Apr 2026 21:46:24 +0000 Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: e38hD5mk4G4QEPTlz1ZLWrj/DYyjlyu8W/Ytu9w8Z4I=) 2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: LQ6rMhZDzAY8FPwtfGTf2Oca3RZNu+bmDyNVPU27Ec0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Validity Not Before: Apr 16 21:46:24 2026 GMT Not After : Apr 23 21:46:24 2026 GMT Subject: CN=69e158b0-4239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:53:33:a4:b0:a5:1d:05:e4:73:d1:e5:87: ad:b6:d9:13:62:28:14:dd:90:9d:ca:89:9f:31:c4: d6:9a:11:b7:6c:08:8f:e3:f4:51:bc:31:6e:f0:4e: c4:9e:09:34:16:7b:f9:67:05:96:db:af:47:fc:04: 9d:6b:8c:0a:ca:ed:e6:6a:33:57:53:c5:d9:47:ca: f5:55:66:cf:95:17:60:f4:4b:49:21:2e:a6:34:2c: 1e:d9:df:0a:8a:9f:27:e6:4a:2b:d2:0f:69:92:cb: 12:ee:27:38:49:f3:da:dc:9e:34:1b:6a:a0:24:6f: ea:64:82:ed:1a:2e:65:55:5a:45:15:c2:51:68:71: e9:a4:d6:38:b9:fe:5d:37:ba:ca:52:33:13:70:e5: 36:a8:d9:00:ee:6c:c8:67:af:66:60:13:78:30:a9: d4:ec:09:d0:be:e1:d1:c8:c4:ea:97:7f:2d:72:d4: ea:70:92:b1:1d:99:0d:20:93:0c:69:0f:b8:a6:df: 19:a4:23:ce:8e:1b:9d:7d:b9:78:66:14:aa:4c:2b: 17:29:b2:eb:7f:fa:df:54:fa:35:fe:16:3c:ad:a7: 05:78:3a:92:c1:e6:26:ba:b4:f6:fd:f8:26:90:f6: fd:d4:48:0d:25:6a:ba:d6:c9:ad:a9:10:9d:c9:5a: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:48:AC:82:C6:5C:DA:CA:44:BE:14:D7:EC:E5:55:D5:60:8B:1D:CF X509v3 Authority Key Identifier: keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6c:60:0f:82:d0:39:a6:96:57:7b:4a:9f:d2:9a:7d:6f:51: b2:69:9d:f8:87:c8:e7:b2:da:b6:e3:6f:98:b5:49:5c:9b:78: ae:5f:c4:7d:4e:75:ef:4e:ea:90:c6:dd:3c:7d:ec:8e:74:3b: 09:eb:b6:6f:aa:90:be:d8:f5:a8:ee:b0:a0:bc:28:47:ca:e2: 59:26:bb:96:f4:33:10:5d:22:38:e3:52:10:c9:0f:c4:9f:a3: ef:e1:df:b7:ba:ad:28:20:25:65:6c:ec:d7:cc:67:3e:10:f4: 5f:3e:ae:40:e4:67:e3:b4:20:e1:6a:f0:33:5a:32:b7:ca:e8: 6e:cd:e8:4a:6e:5e:7d:a1:15:bc:19:77:74:95:5c:d5:73:0e: cd:02:27:45:91:32:7b:ae:7f:62:81:77:5a:aa:90:3d:88:a1: 0a:f0:90:da:b7:de:e9:7d:d5:92:15:b9:eb:dd:15:93:74:2b: f0:48:d4:73:d2:f0:28:da:06:03:e0:ea:49:de:47:bf:00:0d: 6c:91:51:70:dd:b2:20:47:3a:59:dc:06:2a:62:89:8c:c1:44: 54:9e:90:1e:d1:07:89:88:13:2a:79:33:77:c0:a6:2a:b9:3c: c8:b2:f9:f9:81:e2:21:07:cf:e7:66:04:29:7a:96:1f:c0:a6: b2:d2:cb:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz QjFBREY2QTEwHhcNMjYwNDE2MjE0NjI0WhcNMjYwNDIzMjE0NjI0WjAYMRYwFAYD VQQDEw02OWUxNThiMC00MjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkRTM6SwpR0F5HPR5YetttkTYigU3ZCdyomfMcTWmhG3bAiP4/RRvDFu8E7E ngk0Fnv5ZwWW269H/ASda4wKyu3majNXU8XZR8r1VWbPlRdg9EtJIS6mNCwe2d8K ip8n5kor0g9pkssS7ic4SfPa3J40G2qgJG/qZILtGi5lVVpFFcJRaHHppNY4uf5d N7rKUjMTcOU2qNkA7mzIZ69mYBN4MKnU7AnQvuHRyMTql38tctTqcJKxHZkNIJMM aQ+4pt8ZpCPOjhudfbl4ZhSqTCsXKbLrf/rfVPo1/hY8racFeDqSweYmurT2/fgm kPb91EgNJWq61smtqRCdyVrXBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBIrILG XNrKRL4U1+zlVdVgix3PMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKGxgD4LQOaaWV3tKn9KafW9Rsmmd+IfI57LatuNvmLVJXJt4rl/EfU51707q kMbdPH3sjnQ7Ceu2b6qQvtj1qO6woLwoR8riWSa7lvQzEF0iOONSEMkPxJ+j7+Hf t7qtKCAlZWzs18xnPhD0Xz6uQORn47Qg4WrwM1oyt8robs3oSm5efaEVvBl3dJVc 1XMOzQInRZEye65/YoF3WqqQPYihCvCQ2rfe6X3VkhW5690Vk3Qr8EjUc9LwKNoG A+DqSd5HvwANbJFRcN2yIEc6WdwGKmKJjMFEVJ6QHtEHiYgTKnkzd8CmKrk8yLL5 +YHiIQfP52YEKXqWH8CmstLLyw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:20 2026 by rpki-client