$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: 5VuIg8/OU5Z0wuHlZmoNWhejf4Hnb2znISMIJ9oHm+0= Subject key identifier: 97:68:0B:19:06:EF:BF:D7:3A:45:D2:CD:AF:F4:FE:C5:1C:0F:5E:6E Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0CEA Signing time: Thu 16 Apr 2026 18:11:24 +0000 Manifest this update: Thu 16 Apr 2026 18:11:24 +0000 Manifest next update: Thu 23 Apr 2026 18:11:24 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: KkWDqY3dxR6tlKuZYSxAG6/Ey3JGY3OvWwhMg/pAFQQ=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: DyvlHpc+Y3k78Xna4wfmukjiR2XTaIl+kDH030UpDGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Apr 16 18:11:24 2026 GMT Not After : Apr 23 18:11:24 2026 GMT Subject: CN=69e1264c-8ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:fd:66:09:19:6f:ed:01:87:12:de:fc:d9: 57:3c:54:45:71:ef:4f:0c:7c:cd:99:cb:bc:de:28: be:9d:66:07:6a:17:20:76:f6:3f:11:21:2f:ea:4d: 6a:68:d5:59:3b:ea:9c:b9:ab:ea:37:6a:2b:97:03: d6:6a:b0:af:3d:88:84:b9:a7:4b:4a:7d:5a:5d:d8: 45:bf:5b:72:7d:f8:6b:2a:f5:a4:80:4d:54:80:25: 9a:2d:d9:b8:16:72:bb:85:a7:45:fe:4d:ef:27:ce: 98:1f:90:29:5a:dc:06:39:35:af:d7:0f:9d:1c:32: a2:2f:98:58:ff:cb:e5:50:e2:23:d3:e5:17:dd:6c: fd:c8:4a:46:2a:f6:55:bb:00:7b:5b:f1:44:dc:2a: 84:6d:80:67:6e:45:60:aa:b9:d3:45:40:62:51:1f: 48:3d:c5:13:2b:9e:e9:7c:f7:19:3a:e3:11:47:b9: 5d:11:81:3d:a3:07:eb:6a:ab:16:4d:cc:29:fe:4d: fb:35:89:f3:b3:a2:3b:8c:7c:cc:93:ec:4a:d4:a4: 71:7a:3a:45:8f:04:88:00:3f:bc:80:98:cc:c2:11: 94:a0:3c:56:0d:8b:82:58:c2:61:6c:a0:a3:39:62: 1f:d4:30:a8:3d:19:1a:56:bc:8d:cf:6f:7f:58:12: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:68:0B:19:06:EF:BF:D7:3A:45:D2:CD:AF:F4:FE:C5:1C:0F:5E:6E X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:4e:36:48:5d:17:91:7c:54:06:4e:43:66:19:62:4e:84:58: 0c:ba:22:26:92:f2:c7:9f:a4:1c:93:e3:4d:e5:ea:84:6a:9b: e7:09:b3:75:56:37:c7:68:7c:35:e9:33:c6:48:df:f6:34:69: 59:85:c5:6a:76:50:41:fe:ca:58:ef:b0:4a:4d:72:64:41:04: 3d:ba:6c:89:e1:e3:0c:28:0e:49:54:56:f0:8e:e5:35:81:24: e2:e0:35:69:9e:f6:62:4b:54:4f:55:ec:7b:2c:d9:35:e7:ec: 64:d7:20:35:72:c0:27:fd:a8:ab:af:87:2b:c4:e1:83:4a:1b: 41:a5:25:2a:4f:b8:71:fe:b5:75:a6:f5:d0:2b:60:ea:93:28: 33:da:09:02:84:e0:41:17:59:46:42:6a:d8:bc:8a:11:24:f3: 6b:62:4f:b4:04:7e:c7:cf:15:52:ae:de:12:b0:77:0b:36:e6: 30:c9:af:ba:e2:1f:14:3c:5d:3a:6c:d5:13:40:36:89:44:a0: 21:98:ea:36:95:50:a5:ef:79:cf:22:a1:85:c1:38:a5:81:05: 6b:57:48:98:26:95:d3:c6:08:8e:05:3c:7c:18:9c:27:47:9e: f0:e8:b4:48:17:28:dc:4a:4b:bf:ef:5d:47:c9:f2:16:6f:d0: ea:57:38:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjYwNDE2MTgxMTI0WhcNMjYwNDIzMTgxMTI0WjAYMRYwFAYD VQQDEw02OWUxMjY0Yy04ZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiX9ZgkZb+0BhxLe/NlXPFRFce9PDHzNmcu83ii+nWYHahcgdvY/ESEv6k1q aNVZO+qcuavqN2orlwPWarCvPYiEuadLSn1aXdhFv1tyffhrKvWkgE1UgCWaLdm4 FnK7hadF/k3vJ86YH5ApWtwGOTWv1w+dHDKiL5hY/8vlUOIj0+UX3Wz9yEpGKvZV uwB7W/FE3CqEbYBnbkVgqrnTRUBiUR9IPcUTK57pfPcZOuMRR7ldEYE9owfraqsW Tcwp/k37NYnzs6I7jHzMk+xK1KRxejpFjwSIAD+8gJjMwhGUoDxWDYuCWMJhbKCj OWIf1DCoPRkaVryNz29/WBLwawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdoCxkG 77/XOkXSza/0/sUcD15uMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsk42SF0XkXxUBk5DZhliToRYDLoiJpLyx5+kHJPjTeXqhGqb5wmzdVY3x2h8 Nekzxkjf9jRpWYXFanZQQf7KWO+wSk1yZEEEPbpsieHjDCgOSVRW8I7lNYEk4uA1 aZ72YktUT1XseyzZNefsZNcgNXLAJ/2oq6+HK8Thg0obQaUlKk+4cf61dab10Ctg 6pMoM9oJAoTgQRdZRkJq2LyKESTza2JPtAR+x88VUq7eErB3CzbmMMmvuuIfFDxd OmzVE0A2iUSgIZjqNpVQpe95zyKhhcE4pYEFa1dImCaV08YIjgU8fBicJ0ee8Oi0 SBco3EpLv+9dR8nyFm/Q6lc4lA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:04:20 2026 by rpki-client