$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: VaphrCfzXjDGPxDgpg2IDQUrp2te0A34W12rCoJlhEE= Subject key identifier: BE:58:33:C9:40:F9:49:FF:62:3B:AC:97:E6:7E:C2:1C:5A:CA:8B:9B Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 0141 Signing time: Fri 17 Apr 2026 04:58:57 +0000 Manifest this update: Fri 17 Apr 2026 04:58:56 +0000 Manifest next update: Fri 24 Apr 2026 04:58:56 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: 9YMOf+iUKqLO71O8Yt+zhAJcM4tt324gT8I7kLS8bwg=) 2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: ittpt4A7ySbEBupt94ZQJgIOH62PTtCbBsA64tVVFU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Apr 17 04:58:56 2026 GMT Not After : Apr 24 04:58:56 2026 GMT Subject: CN=69e1be11-97a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:98:10:fd:4c:f2:8b:26:a7:4c:89:c6:3a: d4:01:c8:b5:2c:a2:53:c3:02:4e:21:71:68:73:5b: c3:e9:33:67:9f:cf:e8:c5:30:94:56:7e:84:12:cc: cd:06:36:09:c6:15:74:f9:2d:c8:04:a3:3c:7d:51: 86:e1:95:fe:aa:f8:2b:66:60:43:16:3e:72:a3:18: a6:8d:ab:9e:bd:e4:4a:d8:b3:0d:ae:ad:f4:07:c4: ae:00:57:87:52:99:c8:2a:25:ef:12:90:a1:02:63: ee:a3:b2:ab:03:37:8c:d1:45:97:b9:01:ee:00:11: 75:e1:7f:3a:f7:45:a5:11:56:28:7f:f0:f7:a6:05: cd:69:7a:c4:d6:26:b1:ad:56:39:37:aa:ea:61:b8: 9f:66:b9:a2:cc:9f:cc:21:8c:95:6f:08:13:e0:ec: af:86:3e:55:7c:52:21:c0:fc:54:e8:bf:d9:97:dc: 08:11:b3:d8:a7:90:7d:dc:1d:41:79:63:32:37:7a: 90:99:4e:ff:de:7d:15:c8:07:4f:13:10:0b:2a:13: 84:5a:54:a2:d7:0e:8b:33:d2:4d:41:92:1c:cb:54: a9:bc:22:dc:00:2b:41:6f:d7:4f:85:2c:d2:33:da: 89:0c:80:c7:ec:19:7c:1a:e6:cc:c7:c9:3a:ce:87: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:58:33:C9:40:F9:49:FF:62:3B:AC:97:E6:7E:C2:1C:5A:CA:8B:9B X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0b:c4:b7:3a:c9:85:8b:0c:1b:90:a5:af:82:5b:2b:b3:1a: 79:d7:73:0e:a7:96:e7:22:31:f2:0e:70:97:41:d8:6b:20:05: c6:23:73:78:3e:5d:40:bd:35:8e:9d:f4:3c:1e:8b:f2:44:9d: 94:ac:bd:e5:5b:8d:ea:73:ba:77:c3:82:4c:37:c6:2a:14:ae: c7:e1:00:a5:d2:b7:16:5f:53:79:8f:3b:41:b7:e8:07:5a:1e: a5:26:27:c7:44:85:22:31:92:58:f2:7e:31:e2:24:96:0a:00: 27:bc:47:0a:13:4b:12:e8:be:99:90:ed:60:33:d0:2a:7e:cd: 43:59:93:2b:e5:d1:81:a5:fc:5d:a1:93:0a:62:2b:ed:d2:fc: ce:4d:c1:3c:9f:10:40:a4:78:d2:6e:a3:b7:57:64:cd:c4:80: ad:8b:67:fd:37:17:e3:3e:2e:25:2c:94:17:25:a6:49:e4:fd: bd:ff:1e:16:4f:42:4d:54:93:7c:a4:8a:68:c6:46:b8:83:0d: 60:ae:65:09:14:99:b1:b3:41:2d:4c:41:c8:a0:ea:42:f3:c5: 46:39:c5:11:58:ac:a3:dd:24:96:b2:3d:0e:e9:b3:6e:25:5f: d8:34:ca:4e:08:76:59:c9:b6:85:ca:77:63:90:b5:fd:e8:1f: f4:cc:46:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjYwNDE3MDQ1ODU2WhcNMjYwNDI0MDQ1ODU2WjAYMRYwFAYD VQQDEw02OWUxYmUxMS05N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XqYEP1M8osmp0yJxjrUAci1LKJTwwJOIXFoc1vD6TNnn8/oxTCUVn6EEszN BjYJxhV0+S3IBKM8fVGG4ZX+qvgrZmBDFj5yoximjaueveRK2LMNrq30B8SuAFeH UpnIKiXvEpChAmPuo7KrAzeM0UWXuQHuABF14X8690WlEVYof/D3pgXNaXrE1iax rVY5N6rqYbifZrmizJ/MIYyVbwgT4Oyvhj5VfFIhwPxU6L/Zl9wIEbPYp5B93B1B eWMyN3qQmU7/3n0VyAdPExALKhOEWlSi1w6LM9JNQZIcy1SpvCLcACtBb9dPhSzS M9qJDIDH7Bl8GubMx8k6zoey1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5YM8lA +Un/Yjusl+Z+whxayoubMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANgvEtzrJhYsMG5Clr4JbK7MaeddzDqeW5yIx8g5wl0HYayAFxiNzeD5dQL01 jp30PB6L8kSdlKy95VuN6nO6d8OCTDfGKhSux+EApdK3Fl9TeY87QbfoB1oepSYn x0SFIjGSWPJ+MeIklgoAJ7xHChNLEui+mZDtYDPQKn7NQ1mTK+XRgaX8XaGTCmIr 7dL8zk3BPJ8QQKR40m6jt1dkzcSArYtn/TcX4z4uJSyUFyWmSeT9vf8eFk9CTVST fKSKaMZGuIMNYK5lCRSZsbNBLUxByKDqQvPFRjnFEViso90klrI9DumzbiVf2DTK Tgh2Wcm2hcp3Y5C1/egf9MxG9g== -----END CERTIFICATE-----Generated at Fri Apr 17 18:06:13 2026 by rpki-client