$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json) Hash identifier: q6viong2o5wfK478Gq3VkK7szKslOaMYTTfVdus4mBM= Subject key identifier: 2A:47:E0:33:85:A8:69:C9:F2:8B:37:66:FE:67:8A:76:36:C4:0B:EA Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft Manifest number: 0903 Signing time: Thu 16 Apr 2026 20:31:00 +0000 Manifest this update: Thu 16 Apr 2026 20:30:59 +0000 Manifest next update: Thu 23 Apr 2026 20:30:59 +0000 Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: dMNk/W+ebBMJXHHDY8DF8ssm1EO+HltWJfd/sWNJED0=) 2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: jIvecyaNUKHM1Z6so6WtYRHY+CV5901LNEJc6GLn6Zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Validity Not Before: Apr 16 20:30:59 2026 GMT Not After : Apr 23 20:30:59 2026 GMT Subject: CN=69e14703-801a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:8c:1e:80:24:31:d1:40:83:94:da:1a:63: 4f:bc:62:7e:6d:a4:f2:5d:6f:cc:fb:35:52:ee:1d: 86:9e:78:65:13:f9:a9:a0:09:89:54:8a:1c:ba:7d: 1f:39:27:0f:5c:81:bc:19:a1:db:fd:55:36:46:eb: 8d:e8:af:c3:12:77:d0:5f:e1:e3:4a:84:4d:d9:f7: 26:25:df:2f:f1:59:78:d4:d0:e7:36:31:2f:3f:37: 45:7a:73:18:fb:c5:28:c3:38:ec:6f:d0:84:0c:81: a6:ee:5f:86:51:6d:8b:d9:f8:3e:2a:69:b1:ad:83: 63:e4:ad:b3:b0:a8:1d:ab:42:bb:9d:cc:f5:d7:2b: 48:aa:e1:ae:5a:85:67:36:53:01:9d:25:9e:d0:6e: 51:2b:51:d8:ec:ec:da:25:33:87:01:8d:5c:6a:62: f1:18:63:fe:ce:46:c9:9b:98:87:fd:c3:48:32:12: 00:68:d7:11:80:81:1a:7d:e5:ef:f9:26:f7:e8:fc: 1e:25:52:10:69:e5:a6:46:92:be:67:20:c3:50:90: a3:63:63:74:24:70:e6:97:90:0e:9f:be:bf:2b:61: 76:7d:e6:c5:cf:76:78:3f:71:c7:2e:35:a7:c6:48: 16:2c:84:42:a8:da:ab:95:0b:75:ef:ad:09:76:af: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:47:E0:33:85:A8:69:C9:F2:8B:37:66:FE:67:8A:76:36:C4:0B:EA X509v3 Authority Key Identifier: keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d5:3c:49:b1:c2:f5:e1:61:94:c6:62:4c:85:05:8e:f1:34: d9:09:eb:ec:84:ab:a0:50:c0:8e:67:98:62:96:fc:dd:88:46: 6c:81:37:70:29:ce:a0:dd:17:03:9e:ac:c2:66:69:56:86:39: eb:d1:36:91:4a:cc:02:6e:a6:c4:25:ff:41:a8:9a:67:c3:eb: d6:be:c0:30:ef:fd:ea:39:85:de:c3:1c:d1:f2:fd:a1:8f:eb: df:c1:13:c5:8c:cc:4f:94:3c:b2:45:65:14:a4:ca:44:ce:57: af:1d:68:af:9f:75:5a:20:39:07:ce:f8:51:99:28:9d:36:aa: 43:5c:13:61:f6:67:22:53:7f:d2:6a:ad:af:bf:4d:33:96:1a: 7a:b4:b6:77:09:f3:eb:bc:f0:99:1e:08:34:38:1f:e6:27:43: 98:4e:a7:a9:2c:5c:cf:b6:42:a9:fe:ed:86:ab:4d:be:0a:4d: be:4a:01:7c:62:6e:ee:a3:ef:83:be:48:fd:a1:26:20:a4:a1: d0:eb:96:fd:6e:c6:0a:0d:23:2d:f2:2a:5d:a6:75:12:1e:36: e2:ce:0b:91:c0:45:fd:6f:62:2a:b9:9b:0e:b0:fa:bd:f1:be: d3:67:7f:a6:4e:9c:0f:4b:13:1f:ef:09:32:ba:15:d3:2f:36: 7e:80:38:df -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0MxNjExMC8GA1UEBRMoQzY4QUFFMDZDOEEwNjhGMjIyMTIzMTMzMkRDRDRERjFB RjJGMDc5NDAeFw0yNjA0MTYyMDMwNTlaFw0yNjA0MjMyMDMwNTlaMBgxFjAUBgNV BAMTDTY5ZTE0NzAzLTgwMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQvYwegCQx0UCDlNoaY0+8Yn5tpPJdb8z7NVLuHYaeeGUT+amgCYlUihy6fR85 Jw9cgbwZodv9VTZG643or8MSd9Bf4eNKhE3Z9yYl3y/xWXjU0Oc2MS8/N0V6cxj7 xSjDOOxv0IQMgabuX4ZRbYvZ+D4qabGtg2PkrbOwqB2rQrudzPXXK0iq4a5ahWc2 UwGdJZ7QblErUdjs7NolM4cBjVxqYvEYY/7ORsmbmIf9w0gyEgBo1xGAgRp95e/5 Jvfo/B4lUhBp5aZGkr5nIMNQkKNjY3QkcOaXkA6fvr8rYXZ95sXPdng/cccuNafG SBYshEKo2quVC3XvrQl2r1VDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKkfgM4Wo acnyizdm/meKdjbEC+owHwYDVR0jBBgwFoAUxoquBsigaPIiEjEzLc1N8a8vB5Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQzE2LzI0RDM5RDYyRjA4 MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJaUVqRXpMYzFOOGE4dkI1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveG9xdUJzaWdhUElpRWpFekxjMU44YTh2QjVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD QzE2LzI0RDM5RDYyRjA4MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJ aUVqRXpMYzFOOGE4dkI1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA51TxJscL14WGUxmJMhQWO8TTZCevshKugUMCOZ5hilvzdiEZsgTdwKc6g3RcD nqzCZmlWhjnr0TaRSswCbqbEJf9BqJpnw+vWvsAw7/3qOYXewxzR8v2hj+vfwRPF jMxPlDyyRWUUpMpEzlevHWivn3VaIDkHzvhRmSidNqpDXBNh9mciU3/Saq2vv00z lhp6tLZ3CfPrvPCZHgg0OB/mJ0OYTqepLFzPtkKp/u2Gq02+Ck2+SgF8Ym7uo++D vkj9oSYgpKHQ65b9bsYKDSMt8ipdpnUSHjbizguRwEX9b2IquZsOsPq98b7TZ3+m TpwPSxMf7wkyuhXTLzZ+gDjf -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:54 2026 by rpki-client