$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: SlioFl3FXybs43OgQpfEjUKasKeYQSSczOlzwN5S9tg= Subject key identifier: 58:F5:A5:B5:29:ED:7E:25:AD:86:1A:BC:2D:4E:F9:99:9F:4F:7D:C5 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 029D Signing time: Fri 17 Apr 2026 01:43:46 +0000 Manifest this update: Fri 17 Apr 2026 01:43:45 +0000 Manifest next update: Fri 24 Apr 2026 01:43:45 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: nEceshnetTtIW/sff1x8O5iyBeuXYDgCdYRAWjZO0Io=) 2: 8A537D0CEB8811F09D1C7947556F56BC.roa (hash: HXOczdbG3jBtr/wzTx6ipHvHkHT1tt95ne5sa0eRBf8=) 3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: DoI1H5cBVDVpM0o3Z6TBBwhDvf1Ij5PjDVqCV737dgA=) 4: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: EqT4x+M1dS0lAoKnprnpqiEWavrDyHejbJDUqIhSKBc=) 5: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: DxSoqS3b+Y/gdSbATN2rSyfLU8qRKds7oUL0VnUHIkU=) 6: 01A55FE8EB8811F09418252C556F56BC.roa (hash: cFB/8Vgkj4i8BlW9emUOHcyZlqasNRUOsxhp6QEZNAo=) 7: 6121C23230AC11F08C150767C4F9AE02.roa (hash: yFAyH86XSQnek6ohQ/lpmbhrJ7zT+NkCgAJN/G3hbEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Apr 17 01:43:45 2026 GMT Not After : Apr 24 01:43:45 2026 GMT Subject: CN=69e19052-7714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:0e:7d:b5:2e:dc:29:fc:51:cc:dc:c0:fc: 92:98:71:a7:9e:c7:86:82:35:e9:07:23:ab:d2:2a: 9c:c5:d4:4b:94:70:fe:f5:dc:ed:c3:ef:aa:f5:b9: 00:86:39:d7:e6:1b:0b:73:91:2a:9a:4c:15:45:c9: 20:8a:40:02:72:4f:ab:6a:79:04:f5:01:b8:51:c6: 88:0d:d6:8e:63:d6:88:b1:2c:ae:fd:eb:2f:04:32: 28:64:2d:dd:25:cb:7a:1c:8e:34:59:70:a6:60:e8: 07:a1:7a:7d:f2:93:bf:ff:0b:c2:97:19:ee:d3:1a: 06:26:79:24:fb:19:a0:88:fc:45:76:99:ad:26:cb: 26:fb:86:ee:c8:8f:64:78:e2:05:b4:dd:b4:46:08: e0:2f:0e:95:49:44:ca:1b:a3:f8:89:98:74:4c:0c: e0:31:f7:2c:39:db:3b:64:3a:9e:82:41:ea:e6:23: d9:f9:03:ff:b2:5b:af:78:25:15:e1:06:42:97:95: ee:6a:98:a4:63:46:5d:1c:23:3e:70:b3:3e:08:e2: 42:00:3c:86:5f:40:f6:66:c1:c0:39:fb:b9:aa:37: d2:a2:6b:d5:da:5d:da:bb:4a:cf:61:cf:a1:25:9c: d2:eb:c8:ec:78:ce:d2:bd:78:1c:00:99:e5:30:24: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F5:A5:B5:29:ED:7E:25:AD:86:1A:BC:2D:4E:F9:99:9F:4F:7D:C5 X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:16:c1:d2:62:c0:f7:44:a9:03:13:d3:38:86:08:e2:95:35: 79:e3:63:c6:0c:2f:ea:a4:66:dc:49:66:71:1d:b7:c4:e2:cd: ba:fb:f9:8e:fc:7b:be:cc:f0:0c:c2:9f:30:a8:67:04:56:4f: 2a:49:24:55:96:50:92:e5:c2:7c:f1:5a:87:ef:b6:24:1e:81: d0:88:44:01:49:ee:a5:b1:e3:e7:24:e5:81:eb:91:10:8b:0c: a3:84:01:b4:52:2b:3c:4a:47:cc:40:d4:fa:7f:22:8b:00:64: b5:de:47:0d:7e:86:e5:05:fb:59:ea:16:72:36:94:60:f5:99: d1:2e:56:b1:72:b4:d2:31:81:be:94:93:bd:58:25:69:40:27: 80:0c:ef:5e:df:79:17:4d:c7:bc:28:bd:e0:8f:9a:bf:59:63: 62:be:74:b1:0f:bf:f3:c9:d6:e0:52:49:f4:63:b3:44:b5:ec: ec:2b:c1:d8:7d:cb:1f:22:95:e5:21:3b:0d:0b:77:14:ae:ff: d0:77:b2:b9:c0:b8:03:78:4b:02:60:34:d5:1b:eb:3c:ed:0e: 2c:b6:06:62:15:bc:88:8f:4c:d1:9d:c2:33:19:e1:0f:a0:9f: a3:5e:c8:13:33:41:a8:bf:5d:01:96:3c:05:a6:cb:d1:a7:cc: 4e:53:a2:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjYwNDE3MDE0MzQ1WhcNMjYwNDI0MDE0MzQ1WjAYMRYwFAYD VQQDEw02OWUxOTA1Mi03NzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDIOfbUu3Cn8UczcwPySmHGnnseGgjXpByOr0iqcxdRLlHD+9dztw++q9bkA hjnX5hsLc5EqmkwVRckgikACck+rankE9QG4UcaIDdaOY9aIsSyu/esvBDIoZC3d Jct6HI40WXCmYOgHoXp98pO//wvClxnu0xoGJnkk+xmgiPxFdpmtJssm+4buyI9k eOIFtN20RgjgLw6VSUTKG6P4iZh0TAzgMfcsOds7ZDqegkHq5iPZ+QP/sluveCUV 4QZCl5XuapikY0ZdHCM+cLM+COJCADyGX0D2ZsHAOfu5qjfSomvV2l3au0rPYc+h JZzS68jseM7SvXgcAJnlMCRqEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFj1pbUp 7X4lrYYavC1O+ZmfT33FMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWhbB0mLA90SpAxPTOIYI4pU1eeNjxgwv6qRm3ElmcR23xOLNuvv5jvx7vszw DMKfMKhnBFZPKkkkVZZQkuXCfPFah++2JB6B0IhEAUnupbHj5yTlgeuREIsMo4QB tFIrPEpHzEDU+n8iiwBktd5HDX6G5QX7WeoWcjaUYPWZ0S5WsXK00jGBvpSTvVgl aUAngAzvXt95F03HvCi94I+av1ljYr50sQ+/88nW4FJJ9GOzRLXs7CvB2H3LHyKV 5SE7DQt3FK7/0HeyucC4A3hLAmA01RvrPO0OLLYGYhW8iI9M0Z3CMxnhD6Cfo17I EzNBqL9dAZY8BabL0afMTlOiTg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:03:56 2026 by rpki-client