$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: eHAXkHnlTQqYFM+1pZsatpzj/0TiD/bMM0cfBM4vYM0= Subject key identifier: 36:47:63:17:F0:E7:31:53:DC:22:77:97:15:E2:E0:61:7E:78:A9:51 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0BA6 Signing time: Thu 16 Apr 2026 19:01:41 +0000 Manifest this update: Thu 16 Apr 2026 19:01:40 +0000 Manifest next update: Thu 23 Apr 2026 19:01:40 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: I953BsIyQB6Hc3/9LMSi1Xrp42188/6s1ax8c+VqycM=) 2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 92685NiysBbrtWZSw0HVcicqfMgScx//nGEoHRhDw1w=) 3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: jgODBf90PLIekmliPOAF3OzdEJpw9Z8/WZ9KJk+7ktg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Apr 16 19:01:40 2026 GMT Not After : Apr 23 19:01:40 2026 GMT Subject: CN=69e13215-23f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:9c:1a:02:e9:b3:c4:73:30:6f:c1:67:cc: b4:33:bf:1a:07:03:d4:6a:39:40:55:20:5e:89:61: 82:fe:f8:f4:15:39:31:5e:53:ba:97:79:be:fe:c2: 26:a3:f1:b5:22:d1:c6:b7:c2:c5:cd:95:c4:04:fa: 2b:34:e2:94:cc:05:a7:ca:b8:f7:14:cb:67:d6:7a: d2:f4:47:d2:9b:3c:02:7d:b9:a1:88:a7:78:75:d0: c1:c5:1e:72:78:bc:5e:ed:df:b2:0f:93:ea:f1:44: 31:8f:2e:bc:16:e5:9a:87:23:27:db:95:f7:01:25: c0:83:db:e5:17:53:9d:d2:45:b7:97:f2:a8:b1:74: 1b:be:21:cd:73:63:60:40:26:9e:f9:15:f9:b5:a1: 6a:45:7d:d7:64:81:06:30:65:e6:01:67:a3:66:fd: e0:d5:cd:4b:5d:27:76:c5:fb:f1:ab:81:b2:da:32: c4:b5:b7:ca:ee:e3:49:2a:5b:c1:f2:59:28:e9:13: e4:65:d7:68:24:f8:a0:9a:95:3d:89:d1:00:20:5e: a9:41:1c:55:db:64:1d:19:db:c7:96:1c:0a:dd:10: 6d:91:21:29:2c:0e:42:cf:bf:14:c3:66:6c:19:ef: 14:06:94:72:57:bc:ed:7a:f2:c1:1c:1f:e1:bf:08: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:47:63:17:F0:E7:31:53:DC:22:77:97:15:E2:E0:61:7E:78:A9:51 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:19:ae:41:c6:27:2b:dc:4b:8b:49:aa:56:1d:06:2c:13:a3: b6:68:28:18:f7:5b:02:84:c0:5e:76:e8:15:0e:ad:d3:15:0c: 1a:13:2c:d1:4d:25:94:cd:05:8a:e5:f3:fe:e2:f5:1b:38:9d: 3b:c4:b6:96:05:21:25:a2:1a:21:25:e3:66:62:ec:76:4c:2a: 95:99:e1:b1:47:e9:e0:48:10:f2:9a:cc:15:c8:64:c2:cb:3d: bc:66:3a:a9:2a:ef:a2:03:f2:d6:66:2b:29:40:1a:6f:ac:b2: e9:3b:6d:57:6a:35:a8:e4:3d:a9:55:24:4d:ef:ba:17:c2:3c: 45:80:05:c7:7a:95:f6:e8:a6:2e:80:84:ef:c1:58:d0:54:b4: fa:63:95:19:af:e4:10:e0:6a:a5:0f:0f:71:30:75:1e:33:c4: 96:e2:88:28:4d:48:bf:55:cf:b3:c4:f5:0e:b3:f3:e9:1b:71: 2d:23:43:c1:59:e1:ef:01:74:ac:88:b1:69:ed:ec:5f:dc:73: 1c:e0:97:1d:46:a8:81:4f:f2:46:20:e7:6a:43:d1:99:36:fe: dd:68:df:b4:ab:ac:89:8d:0f:2e:bd:a5:93:ae:c7:d1:c2:da: c0:31:4b:71:3a:67:4c:fc:b0:22:06:9e:67:3d:98:58:b2:3b: 6c:e9:d1:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjYwNDE2MTkwMTQwWhcNMjYwNDIzMTkwMTQwWjAYMRYwFAYD VQQDEw02OWUxMzIxNS0yM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkWycGgLps8RzMG/BZ8y0M78aBwPUajlAVSBeiWGC/vj0FTkxXlO6l3m+/sIm o/G1ItHGt8LFzZXEBPorNOKUzAWnyrj3FMtn1nrS9EfSmzwCfbmhiKd4ddDBxR5y eLxe7d+yD5Pq8UQxjy68FuWahyMn25X3ASXAg9vlF1Od0kW3l/KosXQbviHNc2Ng QCae+RX5taFqRX3XZIEGMGXmAWejZv3g1c1LXSd2xfvxq4Gy2jLEtbfK7uNJKlvB 8lko6RPkZddoJPigmpU9idEAIF6pQRxV22QdGdvHlhwK3RBtkSEpLA5Cz78Uw2Zs Ge8UBpRyV7ztevLBHB/hvwgswQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZHYxfw 5zFT3CJ3lxXi4GF+eKlRMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmBmuQcYnK9xLi0mqVh0GLBOjtmgoGPdbAoTAXnboFQ6t0xUMGhMs0U0llM0F iuXz/uL1GzidO8S2lgUhJaIaISXjZmLsdkwqlZnhsUfp4EgQ8prMFchkwss9vGY6 qSrvogPy1mYrKUAab6yy6TttV2o1qOQ9qVUkTe+6F8I8RYAFx3qV9uimLoCE78FY 0FS0+mOVGa/kEOBqpQ8PcTB1HjPEluKIKE1Iv1XPs8T1DrPz6RtxLSNDwVnh7wF0 rIixae3sX9xzHOCXHUaogU/yRiDnakPRmTb+3WjftKusiY0PLr2lk67H0cLawDFL cTpnTPywIgaeZz2YWLI7bOnR8Q== -----END CERTIFICATE-----Generated at Fri Apr 17 13:41:20 2026 by rpki-client