$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: JRY6oxwWTjx3/qwCDhDD3nNr5T91eIH8zFPKaY8dCJg= Subject key identifier: 13:C1:49:2F:4E:DC:DB:E5:1D:32:C0:45:9D:12:77:1B:4E:27:3C:6E Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 356B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 3538 Signing time: Thu 16 Apr 2026 15:10:07 +0000 Manifest this update: Thu 16 Apr 2026 15:10:07 +0000 Manifest next update: Thu 23 Apr 2026 15:10:07 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: PHbzH2+4iiTp53J5xUGKgEJkqkiLyQl36a11GwMDSkU=) 2: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: 5cXLpNEPj2n6/HEGy8/26JkT8yzOfvZLJ/SaAIq5f84=) 3: AF01BDAE331211F1A2C10B79B1833773.roa (hash: +lp+LJ18Jwi0gflyPYkZccPDvT37HJQu97mBM2XRD3I=) 4: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: IHiT2JkC8madnsWfQDkJBYO++lG67IBJ1W4/S66TXLY=) 5: 504CB1588D3911F093856C71C4F9AE02.roa (hash: XbsPrmHsv3A3kJ0QH0nWqPm+aVwo38LG2afXIGK/eHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13675 (0x356b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Apr 16 15:10:07 2026 GMT Not After : Apr 23 15:10:07 2026 GMT Subject: CN=69e0fbcf-2b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:d8:ea:a6:fc:36:e9:a0:8c:41:ab:e9:47: 95:83:bb:89:ba:40:29:17:0b:84:99:61:77:f7:c6: a7:63:e2:3a:3a:ba:7d:c0:7d:ee:c9:87:8f:32:22: b8:4e:03:11:c2:f2:f8:1a:c0:55:f3:81:c6:9c:3e: 52:1b:f8:20:fd:04:a0:e4:cc:fc:ea:3b:05:d5:55: b3:57:78:60:42:80:37:59:98:fc:02:f0:41:84:5e: ae:b2:56:24:b3:e5:f7:f1:97:c9:c2:b9:a3:e4:bf: a1:fd:bd:46:f9:65:a6:42:aa:b2:46:31:94:b4:90: 3c:8f:11:6d:8d:59:69:0c:49:64:ef:4f:47:75:d0: 95:e6:06:b4:0f:94:9c:a3:41:28:3e:a9:a0:9c:fe: 09:a3:9b:c6:c8:1b:c6:28:ef:79:d0:97:11:be:35: 94:32:16:11:a1:83:46:b7:5a:2d:02:af:87:6d:97: 11:50:b1:e0:c3:e7:6e:a6:ca:48:4e:8f:34:de:4a: 1e:7b:bd:2e:45:06:7a:ff:8b:83:f7:c3:cb:ad:f6: ac:e5:80:85:fe:33:fa:cc:0b:0f:4e:b1:af:00:7d: 38:8c:4a:b5:fe:65:d3:77:a4:f6:b4:70:ef:8e:2c: bb:6d:15:d7:b8:19:e1:8b:77:2d:25:e6:51:08:aa: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:49:2F:4E:DC:DB:E5:1D:32:C0:45:9D:12:77:1B:4E:27:3C:6E X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:c1:d8:52:e4:7b:3b:29:e4:69:1f:cd:e7:43:5c:17:f1:d2: 7f:f5:66:ee:0c:79:b2:a3:a9:6f:91:b7:9c:cd:e4:fc:34:3e: f5:9d:78:b6:68:b2:92:23:8e:6d:44:b3:fa:65:5d:00:e2:ea: de:9b:07:ab:87:f2:e6:52:92:47:9c:5d:46:2a:b2:60:c5:7e: 11:61:dc:5b:72:77:76:e0:48:72:62:17:47:65:69:c3:c8:13: 80:ba:90:d4:58:cb:26:ed:cc:54:c0:6b:8d:3f:b0:61:4e:9c: 3f:bd:9f:8d:ee:50:6f:ef:f4:c0:49:8a:16:de:44:d0:6f:3f: c8:0d:a2:b6:eb:24:5d:cd:3c:d6:c2:44:fa:a3:a5:d9:73:5e: 98:a0:6a:44:88:b4:64:e4:d5:e8:63:97:40:62:32:34:22:8d: 21:1e:63:31:05:fc:2b:b0:c2:8c:ee:e3:d0:c2:6b:75:33:e8: 63:ae:18:ec:43:1e:ea:62:f6:4b:9c:c2:be:85:8d:43:8e:ce: 8c:a8:a2:62:ba:4a:ac:cd:48:81:68:9a:9a:7e:5e:06:1d:ac: c6:95:a1:4d:00:19:d9:dd:97:81:dc:d2:60:a4:df:4f:c3:d8: 32:b0:21:81:27:c6:b0:9e:71:80:f8:8b:6b:26:b4:24:c0:d2: a0:1e:eb:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjYwNDE2MTUxMDA3WhcNMjYwNDIzMTUxMDA3WjAYMRYwFAYD VQQDEw02OWUwZmJjZi0yYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzHY6qb8NumgjEGr6UeVg7uJukApFwuEmWF398anY+I6Orp9wH3uyYePMiK4 TgMRwvL4GsBV84HGnD5SG/gg/QSg5Mz86jsF1VWzV3hgQoA3WZj8AvBBhF6uslYk s+X38ZfJwrmj5L+h/b1G+WWmQqqyRjGUtJA8jxFtjVlpDElk709HddCV5ga0D5Sc o0EoPqmgnP4Jo5vGyBvGKO950JcRvjWUMhYRoYNGt1otAq+HbZcRULHgw+dupspI To803koee70uRQZ6/4uD98PLrfas5YCF/jP6zAsPTrGvAH04jEq1/mXTd6T2tHDv jiy7bRXXuBnhi3ctJeZRCKr/CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPBSS9O 3NvlHTLARZ0SdxtOJzxuMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApsHYUuR7OynkaR/N50NcF/HSf/Vm7gx5sqOpb5G3nM3k/DQ+9Z14tmiykiOO bUSz+mVdAOLq3psHq4fy5lKSR5xdRiqyYMV+EWHcW3J3duBIcmIXR2Vpw8gTgLqQ 1FjLJu3MVMBrjT+wYU6cP72fje5Qb+/0wEmKFt5E0G8/yA2ituskXc081sJE+qOl 2XNemKBqRIi0ZOTV6GOXQGIyNCKNIR5jMQX8K7DCjO7j0MJrdTPoY64Y7EMe6mL2 S5zCvoWNQ47OjKiiYrpKrM1IgWiamn5eBh2sxpWhTQAZ2d2XgdzSYKTfT8PYMrAh gSfGsJ5xgPiLaya0JMDSoB7rUA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:18 2026 by rpki-client