$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: WMh6jkhqPldrpk0FuBLbNsK9CWC286gL5ai1+XSaX3g= Subject key identifier: 61:38:1E:D8:B9:B0:9A:FD:D5:05:43:8E:67:7A:EB:D3:53:D3:D0:86 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 01CA Signing time: Fri 17 Apr 2026 03:28:15 +0000 Manifest this update: Fri 17 Apr 2026 03:28:15 +0000 Manifest next update: Fri 24 Apr 2026 03:28:15 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: U6dyn34LJYjeGQsrVnEcJLnwQGUrr8Au/HlSeGijz54=) 2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: m2Uv3v7XUW3vXrCq6wyXHCyPqWh0u6BnyHOlUQ7XuZM=) 3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: 9nJcymyhJdyjosWxKF37Ye2GxMONKGYPO84iI01RFGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Apr 17 03:28:15 2026 GMT Not After : Apr 24 03:28:15 2026 GMT Subject: CN=69e1a8cf-4009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:42:89:b4:18:18:8c:8c:b5:2a:97:3d:d8: e5:df:d0:34:c3:50:0b:e0:5d:c5:b6:1a:7b:27:64: 10:65:61:6f:f3:2f:b8:d1:8b:70:4e:f0:1a:4b:07: c1:07:fb:89:55:b7:94:7d:ea:73:cb:56:0c:37:a6: 09:47:d2:30:ab:76:2e:4e:3b:51:ca:a9:fc:76:d9: ca:6a:ed:7b:d3:c8:f7:32:b2:93:2e:15:56:b5:59: 0c:30:9a:d9:d3:15:85:f8:0d:77:3f:35:ef:92:da: 72:30:d0:01:76:5e:23:4c:6f:24:54:63:47:d8:e3: ff:8c:74:b8:fc:ec:64:a4:03:95:df:24:7f:46:03: d5:e8:2f:fe:1b:30:b4:9e:4f:df:1d:00:c3:65:5f: f7:b9:c2:71:30:e5:7d:5f:15:9b:a8:d3:2b:ff:36: 3f:c3:16:84:72:8f:2f:60:46:3f:d7:2a:de:ae:66: d9:1a:1a:a8:6b:a1:4f:ca:9d:78:9e:91:54:52:2d: dc:50:e4:4f:c1:04:92:ac:6e:49:7b:7b:85:50:60: 87:d6:6a:10:98:d0:36:f4:38:b2:a7:27:c8:eb:68: 68:1f:39:da:c9:02:5c:28:ca:52:39:68:51:3c:41: 09:60:8d:06:8e:40:51:e5:c0:d9:0b:15:27:80:91: 9b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:38:1E:D8:B9:B0:9A:FD:D5:05:43:8E:67:7A:EB:D3:53:D3:D0:86 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:dc:e9:a4:92:8c:d9:81:7a:27:5c:1f:0e:ad:f4:6d:64:8b: fb:01:22:5e:38:f0:2c:20:a9:d7:68:08:57:f8:5b:5d:57:cf: 39:23:98:26:5d:a9:ca:f4:7d:a2:ec:4a:13:1f:bc:52:c0:0c: c6:26:84:08:f8:8e:48:4f:d5:3f:1c:a2:39:0e:df:41:6b:e6: 74:43:29:bb:90:23:58:9f:67:08:42:36:f8:f3:74:40:42:88: 05:be:5a:c5:8d:6a:08:42:5a:73:10:90:19:a7:b1:94:20:32: 67:6d:1a:88:87:2f:e1:56:36:58:32:3c:8f:8d:24:72:9c:8e: 48:07:80:91:96:7a:c1:b2:36:c2:c6:1c:8b:a5:67:d8:2b:a8: 7b:86:41:f7:2d:07:c0:3f:54:a6:12:ad:87:64:3d:2e:22:5e: b1:f3:2e:cd:c7:2c:8d:e0:f3:be:02:16:b3:b5:bd:17:5a:cf: d6:26:7b:95:12:9f:de:54:cf:ff:3a:80:56:55:87:19:ad:3b: 25:58:75:2b:9b:d5:f5:08:b7:20:ac:8e:78:71:79:77:e1:85: 28:f2:7c:d6:93:41:54:5c:f8:63:09:01:4a:60:53:ab:ab:d6: 38:a7:78:6e:d8:04:3f:4a:5e:e1:22:d5:28:b0:b7:0a:71:41: 82:bf:1b:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjYwNDE3MDMyODE1WhcNMjYwNDI0MDMyODE1WjAYMRYwFAYD VQQDEw02OWUxYThjZi00MDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUNCibQYGIyMtSqXPdjl39A0w1AL4F3Fthp7J2QQZWFv8y+40YtwTvAaSwfB B/uJVbeUfepzy1YMN6YJR9Iwq3YuTjtRyqn8dtnKau1708j3MrKTLhVWtVkMMJrZ 0xWF+A13PzXvktpyMNABdl4jTG8kVGNH2OP/jHS4/OxkpAOV3yR/RgPV6C/+GzC0 nk/fHQDDZV/3ucJxMOV9XxWbqNMr/zY/wxaEco8vYEY/1yrermbZGhqoa6FPyp14 npFUUi3cUORPwQSSrG5Je3uFUGCH1moQmNA29DiypyfI62hoHznayQJcKMpSOWhR PEEJYI0GjkBR5cDZCxUngJGbjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGE4Hti5 sJr91QVDjmd669NT09CGMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAftzppJKM2YF6J1wfDq30bWSL+wEiXjjwLCCp12gIV/hbXVfPOSOYJl2pyvR9 ouxKEx+8UsAMxiaECPiOSE/VPxyiOQ7fQWvmdEMpu5AjWJ9nCEI2+PN0QEKIBb5a xY1qCEJacxCQGaexlCAyZ20aiIcv4VY2WDI8j40kcpyOSAeAkZZ6wbI2wsYci6Vn 2Cuoe4ZB9y0HwD9UphKth2Q9LiJesfMuzccsjeDzvgIWs7W9F1rP1iZ7lRKf3lTP /zqAVlWHGa07JVh1K5vV9Qi3IKyOeHF5d+GFKPJ81pNBVFz4YwkBSmBTq6vWOKd4 btgEP0pe4SLVKLC3CnFBgr8bVQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:06:44 2026 by rpki-client