$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft File: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft (raw, json) Hash identifier: hqxZkTWQhso6FPzpX2G7MVqgKr+fF/YuA5XQBNgQ060= Subject key identifier: 84:DE:46:4D:30:67:12:3A:0D:42:04:2D:58:2C:81:5A:69:F5:EB:A7 Authority key identifier: 0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91 Certificate issuer: /CN=A91201F1/serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft Manifest number: 2A Signing time: Sun 19 Apr 2026 08:21:15 +0000 Manifest this update: Sun 19 Apr 2026 08:21:14 +0000 Manifest next update: Sun 26 Apr 2026 08:21:14 +0000 Files and hashes: 1: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl (hash: o8R2ZTdkA+38tfpOv37sUf1PiFAdsjCO9Vlxvf9Mnkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201F1, serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791 Validity Not Before: Apr 19 08:21:14 2026 GMT Not After : Apr 26 08:21:14 2026 GMT Subject: CN=69e4907a-9183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:4b:fc:8b:1a:b7:da:74:4d:64:3b:ae:42: d6:af:25:5f:88:57:7b:cb:33:34:12:79:21:42:0a: 1e:f1:71:9a:59:84:d6:42:fe:3a:5a:e6:20:ac:be: 7f:1e:27:8d:43:52:2c:45:21:81:08:ef:09:42:2e: ec:ed:be:12:78:10:29:4f:93:50:f5:9d:ef:7a:45: 94:59:54:55:11:a7:f7:0b:59:73:d1:4d:37:f6:d6: ec:fe:ef:39:f0:3f:9a:94:19:8d:88:63:91:04:7f: b0:6d:a6:5b:71:0f:d9:6a:b0:1c:7e:5b:08:fa:5f: 66:0a:7a:7e:3f:e4:fe:0e:f5:95:3c:1b:04:c7:22: d1:bf:16:d5:12:32:5e:7d:94:da:f6:2f:82:ab:e0: 81:2c:70:12:4a:ea:ec:53:06:10:b7:22:3d:d2:cc: 06:62:44:28:78:4a:c9:7d:73:db:e9:f8:c4:55:92: a1:d2:82:86:01:52:8c:95:4c:ad:df:09:fd:bf:c1: 67:6e:86:24:75:e5:43:41:3b:bc:3a:a1:27:d2:f7: 6d:69:48:73:1e:3d:32:df:4b:5c:13:bd:5d:0d:01: bb:10:2d:a2:d3:c5:11:dd:57:cb:4f:0a:11:dd:85: 71:df:6c:43:95:7a:61:53:66:22:b1:37:01:22:62: b9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DE:46:4D:30:67:12:3A:0D:42:04:2D:58:2C:81:5A:69:F5:EB:A7 X509v3 Authority Key Identifier: keyid:0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:60:10:ef:67:bc:ea:7a:e4:d8:e0:8d:78:40:a6:06:e0:e8: 28:68:42:44:a8:3d:c1:26:6d:e3:a2:df:c0:df:4b:03:33:5f: fe:3f:1f:47:43:ca:94:65:af:c1:38:26:01:6d:a6:4d:08:0f: c7:f7:b2:c2:c9:8b:a7:31:64:b9:74:b1:c6:1d:ca:97:68:4f: 84:90:75:66:50:c2:fe:f2:e3:63:0c:d3:d8:fb:f7:e6:97:ef: 0d:d9:1d:17:c2:05:e5:2f:bd:d6:37:5f:6c:40:6b:ea:60:26: 12:bb:ca:c9:54:68:dd:e2:24:04:89:47:63:01:31:91:b9:06: e7:94:e8:d1:2d:af:60:9c:4c:0c:2d:9e:09:d1:53:86:c4:f0: 52:f8:3c:c2:db:bc:bb:46:b9:9d:62:c3:40:7a:5e:a3:49:bd: f5:75:72:4f:40:16:14:10:7f:4d:39:ff:55:10:2b:92:62:f4: 50:7c:f6:cb:07:be:c3:53:6d:08:10:58:cb:15:d0:9b:e5:01: 8c:9f:9c:f0:80:0f:ed:5f:99:b7:4d:c5:4a:e8:3d:f3:36:af: 2a:e7:98:82:a7:cf:69:97:64:9c:6a:89:5b:45:7a:23:b1:4c: d7:9f:8f:e6:77:eb:5b:ca:5c:fd:0d:82:2a:45:e9:1c:0b:15: b6:c2:6b:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFGMTExMC8GA1UEBRMoMEIxNDEyRUYxMjZCRkQ4RjA4RkQ4NEEyRjYwMjRDODA2 QURCMTc5MTAeFw0yNjA0MTkwODIxMTRaFw0yNjA0MjYwODIxMTRaMBgxFjAUBgNV BAMTDTY5ZTQ5MDdhLTkxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVu0v8ixq32nRNZDuuQtavJV+IV3vLMzQSeSFCCh7xcZpZhNZC/jpa5iCsvn8e J41DUixFIYEI7wlCLuztvhJ4EClPk1D1ne96RZRZVFURp/cLWXPRTTf21uz+7znw P5qUGY2IY5EEf7BtpltxD9lqsBx+Wwj6X2YKen4/5P4O9ZU8GwTHItG/FtUSMl59 lNr2L4Kr4IEscBJK6uxTBhC3Ij3SzAZiRCh4Ssl9c9vp+MRVkqHSgoYBUoyVTK3f Cf2/wWduhiR15UNBO7w6oSfS921pSHMePTLfS1wTvV0NAbsQLaLTxRHdV8tPChHd hXHfbEOVemFTZiKxNwEiYrlrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhN5GTTBn EjoNQgQtWCyBWmn166cwHwYDVR0jBBgwFoAUCxQS7xJr/Y8I/YSi9gJMgGrbF5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUYxLzU4MkFEOTgwMDBE QTExRjFCRTNCNDIwNjc1NkY1NkJDL0N4UVM3eEpyX1k4SV9ZU2k5Z0pNZ0dyYkY1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3hRUzd4SnJfWThJX1lTaTlnSk1nR3JiRjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUYxLzU4MkFEOTgwMDBEQTExRjFCRTNCNDIwNjc1NkY1NkJDL0N4UVM3eEpyX1k4 SV9ZU2k5Z0pNZ0dyYkY1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVYBDvZ7zqeuTY4I14QKYG4OgoaEJEqD3BJm3jot/A30sDM1/+Px9HQ8qUZa/B OCYBbaZNCA/H97LCyYunMWS5dLHGHcqXaE+EkHVmUML+8uNjDNPY+/fml+8N2R0X wgXlL73WN19sQGvqYCYSu8rJVGjd4iQEiUdjATGRuQbnlOjRLa9gnEwMLZ4J0VOG xPBS+DzC27y7RrmdYsNAel6jSb31dXJPQBYUEH9NOf9VECuSYvRQfPbLB77DU20I EFjLFdCb5QGMn5zwgA/tX5m3TcVK6D3zNq8q55iCp89pl2ScaolbRXojsUzXn4/m d+tbylz9DYIqRekcCxW2wmse -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:50 2026 by rpki-client