$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: P/dUN94y1SrwwwSFE0VtPlsymWtFYgj0UN6o6DYuIKw= Subject key identifier: C1:28:DB:F4:B4:58:BE:4F:67:68:06:43:DD:5A:36:CE:13:50:B1:68 Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 0571 Signing time: Thu 16 Apr 2026 23:13:56 +0000 Manifest this update: Thu 16 Apr 2026 23:13:55 +0000 Manifest next update: Thu 23 Apr 2026 23:13:55 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: rnVa/9ANW7kkE3i8nF3x5EGvcd2llhRiQ9Ub82lQag4=) 2: 308E4138CF7911F081AD0016C4F9AE02.roa (hash: Qe0QBeQXxDexEGZWCVceFBZ0omw7zxCKTPm8MWRJOG0=) 3: 3108D830CF7911F0861E0016C4F9AE02.roa (hash: 0gEebnFcx96IWAD0Qo+4/3MnsrXoHBiI9ORKhrPhb3Q=) 4: 7A88B1FCB44311F09019B577C4F9AE02.roa (hash: GVEQA+3eqIkzA9/ZGe521NeAxe7jSsSWSid0hUiNJOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: Apr 16 23:13:55 2026 GMT Not After : Apr 23 23:13:55 2026 GMT Subject: CN=69e16d34-b767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:c5:f6:6d:81:d8:da:cb:bf:13:50:af:ce: 27:c4:93:aa:f8:33:10:91:77:7c:2b:30:93:3a:f1: df:9c:56:53:9e:60:b7:75:a6:66:4a:5f:d8:50:5d: 0c:31:ce:40:e2:56:b3:46:00:01:ae:13:43:bb:99: 16:ac:76:20:6b:d5:19:6f:07:02:7c:e0:f7:59:7e: b1:1a:52:64:08:88:83:42:ba:81:68:1a:e4:d1:68: 7c:95:38:a2:96:cb:34:67:86:69:e5:56:cd:5c:5c: 1c:38:87:36:bc:e7:82:b9:da:86:a3:4b:f2:24:53: 7b:5a:57:5c:68:76:ed:3a:ec:cc:c7:81:f7:5b:f9: af:00:7f:44:a1:16:b1:7c:bc:91:77:4b:38:23:22: d7:e3:e2:75:e5:62:0b:5d:92:ba:b1:31:b6:b4:11: 71:93:0d:53:75:3f:5b:6e:b0:05:cc:40:f3:66:ca: ec:2c:92:06:71:61:f7:1c:27:70:0d:22:6c:b8:33: 61:80:bf:06:9b:25:4d:83:34:4c:5f:e4:c1:79:a0: c9:31:79:49:f5:02:b9:60:26:dd:ba:72:7e:e0:a3: 51:76:8f:a2:f8:82:36:19:5f:c1:f6:99:68:d3:6e: 81:68:ed:27:f5:b9:ff:0e:de:84:be:5e:56:23:6c: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:28:DB:F4:B4:58:BE:4F:67:68:06:43:DD:5A:36:CE:13:50:B1:68 X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:08:76:5c:1b:98:46:2a:ab:e8:42:94:3f:3c:63:11:b8:42: db:9b:02:25:89:14:29:bd:c8:4b:c5:ff:26:65:60:e2:fc:a0: f1:2f:38:a1:73:96:c0:4f:34:c7:e8:01:0e:49:32:8e:d4:e6: 92:dc:bf:4e:67:2a:91:5b:e2:12:e8:e6:c1:49:78:5c:64:49: 00:e0:01:54:a2:50:42:c1:0e:bd:62:82:a5:19:df:ca:cd:e1: 62:16:b2:8d:f8:86:2b:5c:61:46:e0:e1:48:a9:b4:fe:d4:b6: 35:cb:8e:e0:3e:6f:1f:99:5d:c4:a6:83:29:c9:67:e1:0a:83: dd:b6:ab:98:80:36:f9:c9:b1:53:c6:9f:b8:6b:7c:1f:0b:90: 37:61:0a:fb:fc:51:1e:4a:f2:73:7a:51:16:30:c2:18:ad:6a: 4b:ee:fd:9f:b0:c7:74:db:96:81:ec:4b:f4:d1:71:b5:63:7b: ac:af:5a:68:4a:35:90:f6:f8:1d:fe:79:73:94:01:92:6c:06: 28:f2:31:47:d7:28:9b:ef:cb:9b:bf:81:f0:f6:e0:2c:4d:bc: 5e:9a:27:a1:87:0a:4f:d0:8d:1f:8f:4d:a2:08:b7:27:93:b8: c7:31:43:d6:fa:d2:19:e2:f1:b2:4d:f1:96:1a:7b:c1:24:da: 43:9d:5d:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjYwNDE2MjMxMzU1WhcNMjYwNDIzMjMxMzU1WjAYMRYwFAYD VQQDEw02OWUxNmQzNC1iNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZfF9m2B2NrLvxNQr84nxJOq+DMQkXd8KzCTOvHfnFZTnmC3daZmSl/YUF0M Mc5A4lazRgABrhNDu5kWrHYga9UZbwcCfOD3WX6xGlJkCIiDQrqBaBrk0Wh8lTii lss0Z4Zp5VbNXFwcOIc2vOeCudqGo0vyJFN7WldcaHbtOuzMx4H3W/mvAH9EoRax fLyRd0s4IyLX4+J15WILXZK6sTG2tBFxkw1TdT9bbrAFzEDzZsrsLJIGcWH3HCdw DSJsuDNhgL8GmyVNgzRMX+TBeaDJMXlJ9QK5YCbdunJ+4KNRdo+i+II2GV/B9plo 026BaO0n9bn/Dt6Evl5WI2xXvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEo2/S0 WL5PZ2gGQ91aNs4TULFoMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAgh2XBuYRiqr6EKUPzxjEbhC25sCJYkUKb3IS8X/JmVg4vyg8S84oXOWwE80 x+gBDkkyjtTmkty/TmcqkVviEujmwUl4XGRJAOABVKJQQsEOvWKCpRnfys3hYhay jfiGK1xhRuDhSKm0/tS2NcuO4D5vH5ldxKaDKcln4QqD3barmIA2+cmxU8afuGt8 HwuQN2EK+/xRHkryc3pRFjDCGK1qS+79n7DHdNuWgexL9NFxtWN7rK9aaEo1kPb4 Hf55c5QBkmwGKPIxR9com+/Lm7+B8PbgLE28XponoYcKT9CNH49Nogi3J5O4xzFD 1vrSGeLxsk3xlhp7wSTaQ51dtg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:16 2026 by rpki-client