$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json) Hash identifier: ojJqQ/VHJgHXjG0wMffw37leQWsMbA3/Dv+7gfWEX3k= Subject key identifier: FD:A5:36:95:EB:DC:6A:41:95:EB:64:53:8F:D4:71:55:C2:5A:95:00 Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft Manifest number: 0C87 Signing time: Thu 16 Apr 2026 18:28:36 +0000 Manifest this update: Thu 16 Apr 2026 18:28:35 +0000 Manifest next update: Thu 23 Apr 2026 18:28:35 +0000 Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: PAXRB3ZRlya2/r9ck/f5SEjbPIApNT3hX5nvPxZyhKk=) 2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: jEP65BxvqOk8vKVC/3/YzXiqk8d1hNdREg1GZzlOXko=) 3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: 6+5b1CfcZTuiHBvdAxqJb6CWPbZsPji1n33pmOP0SN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Validity Not Before: Apr 16 18:28:35 2026 GMT Not After : Apr 23 18:28:35 2026 GMT Subject: CN=69e12a54-5e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:0b:37:3a:eb:7b:2e:be:4e:5c:f1:b5:31: 09:43:db:75:cf:2c:be:02:fc:7c:93:0c:92:93:de: 0f:ef:bb:b9:4e:68:bb:01:fd:64:b5:9e:4d:c3:c4: 09:23:18:c1:26:3e:9f:83:be:15:f7:7c:6e:cb:01: be:8f:b3:ad:be:74:ee:63:05:ef:34:1e:96:44:0c: e6:eb:57:80:0c:ed:3b:1a:f8:c2:ae:d1:88:b2:0e: cc:a0:44:85:5b:7e:86:80:04:47:11:0d:63:ee:b0: a1:a7:73:32:26:9a:69:e3:26:77:9d:dd:d7:3a:45: 5e:28:81:75:dc:b5:9e:52:ea:6b:68:ea:c0:c9:23: 8b:92:01:0f:c8:a8:ad:8d:94:af:c6:a3:d6:b3:90: 8c:25:06:ed:dd:8e:17:10:1e:6c:db:c2:b9:75:ab: f9:b8:cc:a9:63:e8:d3:52:88:31:45:bb:17:75:e2: 26:71:f0:b8:ea:b3:41:ba:6d:b3:d6:81:08:ac:9a: 46:21:a0:f2:a3:59:ff:6f:22:35:c8:7b:15:fd:4b: 87:81:e0:09:54:7a:e3:18:3a:79:e7:ae:00:b2:e1: 3c:cb:34:4f:ff:27:35:a3:d4:0f:c5:29:22:86:e7: a0:f7:9b:90:25:0d:c4:ab:fe:bc:de:45:6e:ec:16: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A5:36:95:EB:DC:6A:41:95:EB:64:53:8F:D4:71:55:C2:5A:95:00 X509v3 Authority Key Identifier: keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:dd:fb:34:1c:70:26:fd:63:34:c3:fb:94:ac:ff:cd:ef:6e: 61:99:be:b0:d5:42:8b:15:0f:6d:b3:31:2c:44:39:95:80:69: 91:15:1c:34:7a:82:63:7c:fb:91:b2:3d:88:04:ea:0e:fa:ae: 4e:05:a5:b0:c5:94:23:05:a4:45:9a:07:ba:22:27:2d:d3:f5: ea:b9:d8:dc:86:d9:71:f0:79:86:de:af:f5:6c:bf:b7:f6:f5: 37:fb:e8:84:00:43:52:a9:4a:b4:09:a0:ce:e8:e4:c4:9b:4f: 08:5c:5f:af:15:d7:9f:74:fe:df:c2:1d:ca:63:32:6f:d8:63: 92:74:d1:ac:80:58:4e:ef:b1:cf:5e:ef:c1:1f:93:65:ae:f5: 47:cb:a7:ce:bd:23:80:b9:bf:e8:75:5b:5b:d6:04:1b:24:29: dd:26:b0:02:a1:a0:a5:bc:e5:4e:63:07:13:da:e9:f6:97:d8: a1:ca:50:fa:26:2a:81:87:5e:8a:ee:12:7e:1f:4b:02:6d:7d: cf:b8:10:61:c4:d0:07:e8:a7:6c:7b:16:9b:f4:20:7b:ec:a1: 78:8e:1d:63:2b:a5:05:b8:e9:36:73:9a:54:6e:79:4f:de:11: db:79:bc:06:0b:15:34:00:1c:27:74:ac:b3:cb:fa:63:86:51: bf:95:5f:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND OEZEODU5MzkwHhcNMjYwNDE2MTgyODM1WhcNMjYwNDIzMTgyODM1WjAYMRYwFAYD VQQDEw02OWUxMmE1NC01ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16ALNzrrey6+TlzxtTEJQ9t1zyy+Avx8kwySk94P77u5Tmi7Af1ktZ5Nw8QJ IxjBJj6fg74V93xuywG+j7OtvnTuYwXvNB6WRAzm61eADO07GvjCrtGIsg7MoESF W36GgARHEQ1j7rChp3MyJppp4yZ3nd3XOkVeKIF13LWeUupraOrAySOLkgEPyKit jZSvxqPWs5CMJQbt3Y4XEB5s28K5dav5uMypY+jTUogxRbsXdeImcfC46rNBum2z 1oEIrJpGIaDyo1n/byI1yHsV/UuHgeAJVHrjGDp5564AsuE8yzRP/yc1o9QPxSki hueg95uQJQ3Eq/683kVu7BayIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2lNpXr 3GpBletkU4/UcVXCWpUAMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ OWJaUi1HU1RKZlBJX1lXVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsN37NBxwJv1jNMP7lKz/ze9uYZm+sNVCixUPbbMxLEQ5lYBpkRUcNHqCY3z7 kbI9iATqDvquTgWlsMWUIwWkRZoHuiInLdP16rnY3IbZcfB5ht6v9Wy/t/b1N/vo hABDUqlKtAmgzujkxJtPCFxfrxXXn3T+38IdymMyb9hjknTRrIBYTu+xz17vwR+T Za71R8unzr0jgLm/6HVbW9YEGyQp3SawAqGgpbzlTmMHE9rp9pfYocpQ+iYqgYde iu4Sfh9LAm19z7gQYcTQB+inbHsWm/Qge+yheI4dYyulBbjpNnOaVG55T94R23m8 BgsVNAAcJ3Sss8v6Y4ZRv5VfrA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:02 2026 by rpki-client