$ rpki-client -vvf rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft File: XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft (raw, json) Hash identifier: LYVedmy0hYVYxZ+0+ijvPt/ukUUjCVYMrMx5zVqRq6U= Subject key identifier: 1E:42:9A:26:CF:E9:95:1B:0E:33:2B:43:DB:D1:3E:89:FD:7E:51:AF Authority key identifier: 5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67 Certificate issuer: /CN=A91230A3/serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft Manifest number: 2A Signing time: Sun 19 Apr 2026 08:23:54 +0000 Manifest this update: Sun 19 Apr 2026 08:23:53 +0000 Manifest next update: Sun 26 Apr 2026 08:23:53 +0000 Files and hashes: 1: XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl (hash: dw9KgWtK3r9oJV+IBBv3PKQpNdUcCxj9EgsL4EZqBlw=) 2: 16AC8742071011F19135264E253D8C67.roa (hash: Ho7coqEarWJ9BJhEvGox/ePOuY1nkqkaNGKMo78IrM4=) 3: 175E7E7A071011F19135264E253D8C67.roa (hash: yFSB05iQ3FLuwiQ0oQDl3ISNbrEcFFMS5/g24lUEvSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230A3, serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067 Validity Not Before: Apr 19 08:23:53 2026 GMT Not After : Apr 26 08:23:53 2026 GMT Subject: CN=69e4911a-aa22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:09:d6:45:36:bb:c9:d2:55:89:37:5a:eb: 04:9e:77:d1:f1:f7:09:ef:5d:f7:bc:f8:95:8f:a2: 5b:ca:51:dc:12:f5:cb:c0:d6:ac:2a:ab:54:f4:8e: 5a:00:a6:3a:d6:ef:7a:99:b6:62:db:ab:44:49:d9: 90:e9:cc:45:c6:80:81:22:88:00:b8:fe:70:be:90: 9a:f6:7b:b0:0b:4d:bb:27:79:02:90:9a:4d:7e:32: 6c:fd:e4:94:ab:31:f6:c4:e3:57:3f:7c:14:6a:08: f2:46:5a:d0:be:ea:0f:c7:30:99:87:bc:f8:7a:a0: 76:ec:f4:26:f0:69:ef:6f:74:83:f6:e8:0c:c2:a8: 30:36:02:9c:48:1c:68:50:10:74:33:5d:57:2b:87: 2b:9f:2d:5d:19:44:5d:c5:ec:e2:60:7c:00:1f:a6: bf:fe:7b:1f:83:21:d5:a7:99:e1:f2:e7:40:dc:e8: f9:0f:91:63:9a:71:9c:85:7a:e8:c7:f8:ab:c6:e7: 99:14:ba:0d:d0:d7:6c:17:1b:78:c2:05:8f:51:a0: 19:06:0f:1e:8d:ca:1f:4b:f2:5c:35:ac:e7:7c:02: 29:00:a1:8a:76:b5:28:e1:44:21:ea:df:d2:94:a9: a3:25:d7:24:5b:ed:c9:0a:43:08:4f:11:6d:90:39: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:42:9A:26:CF:E9:95:1B:0E:33:2B:43:DB:D1:3E:89:FD:7E:51:AF X509v3 Authority Key Identifier: keyid:5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dc:e6:f3:b0:4a:36:92:29:b7:e7:6f:0b:86:dd:19:80:89: 0e:42:c9:dd:38:6c:d5:b3:58:0d:f1:dd:aa:88:44:cd:64:2e: a0:ba:2f:76:5f:c0:63:04:50:1d:12:85:de:c3:f1:9e:ec:4f: e3:f4:fa:15:cc:3c:5b:21:83:45:cd:06:bd:4e:b8:00:1e:54: 8c:cd:b3:1f:04:bb:d1:79:c4:d8:14:4a:ca:e4:b0:05:7c:0f: d6:75:4b:b0:79:28:3e:f4:db:26:8f:be:fc:32:9d:0f:57:0e: a9:dd:a3:ad:a2:f4:11:98:76:dd:d9:75:c2:a4:a3:73:c8:fc: ba:09:5a:07:14:eb:0d:c2:dc:78:e3:b6:e6:f9:f1:7e:4f:67: 13:74:ef:9c:b8:4c:69:8e:8d:db:97:19:d7:56:e8:d1:ae:b6: 54:62:34:5d:b5:74:91:05:37:e4:10:bb:24:a5:ac:fc:d0:18: 30:5d:2a:5a:79:a1:bb:4e:bb:ab:67:90:85:48:32:a5:3f:3e: f2:83:c4:5c:bb:24:ac:f3:7c:15:5e:4c:07:62:13:8a:3d:b7: b7:f5:e9:8a:43:35:cf:ee:c6:93:df:3f:b1:e8:eb:79:13:1c: 9d:c6:8f:a5:8a:02:e8:11:50:39:45:81:c5:7d:82:5e:01:2c: 5d:8c:b7:a2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzBBMzExMC8GA1UEBRMoNUVGMkJDNzZGQ0MzRkRDOTc5NTc5RUIzNDE5RjgyMTg3 NEU5NjA2NzAeFw0yNjA0MTkwODIzNTNaFw0yNjA0MjYwODIzNTNaMBgxFjAUBgNV BAMTDTY5ZTQ5MTFhLWFhMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2wwnWRTa7ydJViTda6wSed9Hx9wnvXfe8+JWPolvKUdwS9cvA1qwqq1T0jloA pjrW73qZtmLbq0RJ2ZDpzEXGgIEiiAC4/nC+kJr2e7ALTbsneQKQmk1+Mmz95JSr MfbE41c/fBRqCPJGWtC+6g/HMJmHvPh6oHbs9Cbwae9vdIP26AzCqDA2ApxIHGhQ EHQzXVcrhyufLV0ZRF3F7OJgfAAfpr/+ex+DIdWnmeHy50Dc6PkPkWOacZyFeujH +KvG55kUug3Q12wXG3jCBY9RoBkGDx6Nyh9L8lw1rOd8AikAoYp2tSjhRCHq39KU qaMl1yRb7ckKQwhPEW2QOZF9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHkKaJs/p lRsOMytD29E+if1+Ua8wHwYDVR0jBBgwFoAUXvK8dvzD/cl5V56zQZ+CGHTpYGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMEEzL0ZCOTgwOUE2MDcw MzExRjFBODEwNUY1NTIyM0Q4QzY3L1h2SzhkdnpEX2NsNVY1NnpRWi1DR0hUcFlH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZLOGR2ekRfY2w1VjU2elFaLUNHSFRwWUdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MEEzL0ZCOTgwOUE2MDcwMzExRjFBODEwNUY1NTIyM0Q4QzY3L1h2SzhkdnpEX2Ns NVY1NnpRWi1DR0hUcFlHYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB63ObzsEo2kim3528Lht0ZgIkOQsndOGzVs1gN8d2qiETNZC6gui92X8BjBFAd EoXew/Ge7E/j9PoVzDxbIYNFzQa9TrgAHlSMzbMfBLvRecTYFErK5LAFfA/WdUuw eSg+9Nsmj778Mp0PVw6p3aOtovQRmHbd2XXCpKNzyPy6CVoHFOsNwtx447bm+fF+ T2cTdO+cuExpjo3blxnXVujRrrZUYjRdtXSRBTfkELskpaz80BgwXSpaeaG7Trur Z5CFSDKlPz7yg8RcuySs83wVXkwHYhOKPbe39emKQzXP7saT3z+x6Ot5Exydxo+l igLoEVA5RYHFfYJeASxdjLei -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:06 2026 by rpki-client