$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: yAS18BKLJVscoFrt1fKuo+dyJtLjqAaUi3LK3XLIY2c= Subject key identifier: 70:6F:78:D2:0A:67:71:DA:B8:D9:31:86:7C:BC:DA:45:7C:9D:0E:C4 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: AB Signing time: Fri 17 Apr 2026 06:56:20 +0000 Manifest this update: Fri 17 Apr 2026 06:56:20 +0000 Manifest next update: Fri 24 Apr 2026 06:56:20 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: nqWqvsIeOwIKiHyk9BcYIy10juVaymeuQ+v5m6eNThk=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Apr 17 06:56:20 2026 GMT Not After : Apr 24 06:56:20 2026 GMT Subject: CN=69e1d994-23f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:c1:ac:28:65:3c:47:72:d9:17:fa:38:99: d1:72:33:0d:05:57:5e:e0:52:aa:95:f5:24:ca:0f: 9d:89:95:5e:68:33:8d:47:cf:24:14:bb:de:98:ae: 33:8a:bf:f9:01:d6:34:57:e7:9f:2f:b1:78:c4:5a: eb:12:5b:b5:86:4c:00:0f:ca:ee:71:0a:ff:1c:40: c3:b4:ae:48:d4:49:90:10:d5:6c:97:35:0b:85:30: 73:46:b3:83:25:b9:32:c6:20:77:a1:1b:6c:29:1f: 04:f5:73:40:c3:5f:25:3e:b9:8e:fb:b0:10:13:ce: 08:6b:60:e5:dc:bb:c8:af:0f:b8:61:f3:96:61:94: 94:85:90:e4:5d:6e:f5:17:f7:2a:6a:71:78:cf:5c: aa:a4:cd:ab:1a:e5:0d:97:d8:3d:9d:a6:18:3d:8b: 7f:22:bb:3e:7c:99:60:71:a8:30:85:72:4a:e0:8d: d1:aa:6c:38:70:05:93:90:03:6d:4b:66:b8:0d:5d: 07:2f:e8:16:cc:13:52:cd:91:b5:8d:a1:12:25:cd: 85:5c:9c:28:44:33:88:7f:52:2c:05:72:1c:4e:cf: 42:92:74:77:99:e9:2e:26:c2:80:6d:ad:2c:ab:dc: b4:a5:73:03:77:a1:b1:94:24:00:0e:48:6a:ae:9c: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6F:78:D2:0A:67:71:DA:B8:D9:31:86:7C:BC:DA:45:7C:9D:0E:C4 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cb:33:9d:34:0f:b3:66:cb:50:99:ea:29:b3:34:f4:36:29: de:05:be:5f:ab:fd:92:aa:21:50:b3:7e:1e:8c:db:48:e6:45: af:a2:f5:0f:a0:2f:46:e2:3d:f5:95:ba:15:39:a1:5b:f9:1c: 30:69:fe:70:a5:30:bd:63:a2:60:cd:68:ce:28:39:c7:bc:c3: 73:be:82:2c:7f:f6:33:1a:25:91:93:6a:12:5b:53:fa:33:ee: 37:89:08:e4:de:32:65:36:cc:45:09:80:f5:70:01:e4:df:a3: b4:b2:a1:58:da:57:17:fa:65:5d:bc:e2:3b:fe:4a:f5:38:a4: 5b:bf:00:c5:fb:9e:bd:42:17:df:50:36:5c:ec:fa:ff:49:e1: 3c:5f:60:12:31:a6:04:ee:ab:fb:a2:9c:dd:f7:0d:31:e9:78: 2a:92:05:43:46:5f:6a:4d:a2:28:ff:84:19:fd:3d:5d:52:0f: c5:3a:21:36:61:59:04:5c:04:b0:b1:cd:b8:00:d5:29:c6:a8: d8:2f:ea:ca:86:cb:e7:a5:27:60:89:5a:e6:a3:9f:2f:57:ac: ac:b0:74:05:8f:c1:45:c2:16:98:18:ab:06:70:f9:c1:cb:8b: f1:93:ee:2c:3e:8a:8a:58:b1:35:a2:2f:7e:b4:6c:d5:a3:a5: e2:e8:7a:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwNDE3MDY1NjIwWhcNMjYwNDI0MDY1NjIwWjAYMRYwFAYD VQQDEw02OWUxZDk5NC0yM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubXBrChlPEdy2Rf6OJnRcjMNBVde4FKqlfUkyg+diZVeaDONR88kFLvemK4z ir/5AdY0V+efL7F4xFrrElu1hkwAD8rucQr/HEDDtK5I1EmQENVslzULhTBzRrOD JbkyxiB3oRtsKR8E9XNAw18lPrmO+7AQE84Ia2Dl3LvIrw+4YfOWYZSUhZDkXW71 F/cqanF4z1yqpM2rGuUNl9g9naYYPYt/Irs+fJlgcagwhXJK4I3Rqmw4cAWTkANt S2a4DV0HL+gWzBNSzZG1jaESJc2FXJwoRDOIf1IsBXIcTs9CknR3mekuJsKAba0s q9y0pXMDd6GxlCQADkhqrpzYIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBveNIK Z3HauNkxhny82kV8nQ7EMB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD8sznTQPs2bLUJnqKbM09DYp3gW+X6v9kqohULN+HozbSOZFr6L1D6AvRuI9 9ZW6FTmhW/kcMGn+cKUwvWOiYM1ozig5x7zDc76CLH/2MxolkZNqEltT+jPuN4kI 5N4yZTbMRQmA9XAB5N+jtLKhWNpXF/plXbziO/5K9TikW78AxfuevUIX31A2XOz6 /0nhPF9gEjGmBO6r+6Kc3fcNMel4KpIFQ0Zfak2iKP+EGf09XVIPxTohNmFZBFwE sLHNuADVKcao2C/qyobL56UnYIla5qOfL1esrLB0BY/BRcIWmBirBnD5wcuL8ZPu LD6KilixNaIvfrRs1aOl4uh6MA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:10:52 2026 by rpki-client