$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft File: XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json) Hash identifier: 1T2NCPR4ARKO9NbZjijmyXVEphjwe/+kRWtOJk7uUB0= Subject key identifier: 32:86:4D:60:52:1E:FB:F6:3B:D3:EC:BC:78:A6:56:80:27:6A:F4:6E Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB Certificate issuer: /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft Manifest number: 40 Signing time: Wed 15 Apr 2026 08:03:12 +0000 Manifest this update: Wed 15 Apr 2026 08:03:11 +0000 Manifest next update: Wed 22 Apr 2026 08:03:11 +0000 Files and hashes: 1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: H1SgueCwkfltV+6wRkryE298ue64EzzgtIBz1Ul0iXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB Validity Not Before: Apr 15 08:03:11 2026 GMT Not After : Apr 22 08:03:11 2026 GMT Subject: CN=69df4640-f834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:5c:65:e1:5e:c1:54:39:88:a0:56:4d:05: f2:ae:b4:af:57:4f:f9:7a:4b:72:3c:d9:ea:dc:26: ad:6b:27:84:e0:53:5c:5a:64:9c:10:fc:dd:27:8b: d0:28:a5:75:af:b7:3e:62:84:0e:c6:77:86:3e:04: b5:4e:af:b0:56:f2:f2:87:a4:b8:b9:86:1a:70:ce: 5f:9d:fc:66:17:31:20:0a:7f:12:a7:9c:fa:0f:3b: de:4d:9e:97:08:b1:75:4f:9d:5f:a4:5d:fc:2c:94: 8f:99:67:3f:71:04:eb:e7:ad:db:e8:d0:63:48:2b: 32:f7:1a:f4:91:ff:26:c4:27:ff:ef:a4:10:d2:f4: 8f:27:bf:7f:da:10:ad:52:f7:51:dd:39:54:b6:e7: ec:82:61:07:33:5d:23:c7:0b:1f:8b:f8:87:5a:f3: a4:f7:f5:ab:56:7d:a1:5b:72:ca:83:c8:5b:73:fa: d6:da:04:da:ab:14:b1:30:87:f6:01:85:41:c2:6d: af:e8:0c:c8:db:79:64:20:31:46:e1:35:ea:63:d4: 69:a2:94:3c:e9:18:b4:35:1c:88:85:03:b0:61:3a: 2b:31:e4:2b:27:e4:23:0d:44:d7:58:c6:dc:5f:96: 7f:3c:89:0f:1b:8d:ba:49:32:a5:94:30:53:f7:b5: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:4D:60:52:1E:FB:F6:3B:D3:EC:BC:78:A6:56:80:27:6A:F4:6E X509v3 Authority Key Identifier: keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3f:07:17:7c:40:65:03:7a:d3:ce:e0:14:ae:d5:c3:da:bd: a4:bd:40:71:c1:4a:98:22:7f:cd:dd:3c:6b:6f:ae:bf:3d:82: 90:c1:75:e6:3b:7c:44:b1:2a:23:79:b9:90:68:31:c2:e2:81: 6e:bc:64:db:02:6a:7d:23:64:41:94:61:dc:87:24:93:a1:99: f9:3e:67:50:44:7b:c1:9a:e1:eb:1c:a7:e3:59:c1:9c:5d:ee: c6:49:45:08:2e:74:55:90:0c:9b:7a:b6:f8:69:a2:7e:58:25: 15:5e:b1:cb:5a:da:27:a1:d1:31:db:47:86:bc:57:3d:9a:85: 87:b5:2a:c9:32:af:08:02:12:5f:3b:aa:86:cf:6b:f9:d5:17: 1c:f6:3f:d4:04:63:a8:5f:db:3b:48:45:0c:aa:97:16:81:d1: 0b:0e:42:ee:7e:94:ae:11:43:7f:b7:ed:6d:ba:a1:90:2e:31: 6b:cd:09:73:f1:a4:78:ea:95:3b:97:eb:95:35:92:a4:c8:4d: 3c:73:96:d4:74:00:30:4b:6b:a9:a3:21:02:9f:c8:17:b3:9f: 76:6e:3e:75:b9:c6:ad:a2:0d:91:f2:76:80:95:07:6c:6b:b0: 83:93:64:1e:6f:41:fa:38:89:ac:06:d2:a5:9f:0c:3b:8f:a4: b4:ff:8f:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MkI5ODExMC8GA1UEBRMoNUMwM0M2QzlDNzI2RkYzRDIwMjc0NzBBMThBMEM4ODIy MkVDNjZGQjAeFw0yNjA0MTUwODAzMTFaFw0yNjA0MjIwODAzMTFaMBgxFjAUBgNV BAMTDTY5ZGY0NjQwLWY4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK81xl4V7BVDmIoFZNBfKutK9XT/l6S3I82ercJq1rJ4TgU1xaZJwQ/N0ni9Ao pXWvtz5ihA7Gd4Y+BLVOr7BW8vKHpLi5hhpwzl+d/GYXMSAKfxKnnPoPO95NnpcI sXVPnV+kXfwslI+ZZz9xBOvnrdvo0GNIKzL3GvSR/ybEJ//vpBDS9I8nv3/aEK1S 91HdOVS25+yCYQczXSPHCx+L+Ida86T39atWfaFbcsqDyFtz+tbaBNqrFLEwh/YB hUHCba/oDMjbeWQgMUbhNepj1GmilDzpGLQ1HIiFA7BhOisx5Csn5CMNRNdYxtxf ln88iQ8bjbpJMqWUMFP3tQOdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMoZNYFIe +/Y70+y8eKZWgCdq9G4wHwYDVR0jBBgwFoAUXAPGyccm/z0gJ0cKGKDIgiLsZvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyQjk4LzIzOUNBMjBFREM5 MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3owZ0owY0tHS0RJZ2lMc1p2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEFQR3ljY21fejBnSjBjS0dLRElnaUxzWnZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy Qjk4LzIzOUNBMjBFREM5MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3ow Z0owY0tHS0RJZ2lMc1p2cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBlPwcXfEBlA3rTzuAUrtXD2r2kvUBxwUqYIn/N3Txrb66/PYKQwXXmO3xEsSoj ebmQaDHC4oFuvGTbAmp9I2RBlGHchySToZn5PmdQRHvBmuHrHKfjWcGcXe7GSUUI LnRVkAyberb4aaJ+WCUVXrHLWtonodEx20eGvFc9moWHtSrJMq8IAhJfO6qGz2v5 1Rcc9j/UBGOoX9s7SEUMqpcWgdELDkLufpSuEUN/t+1tuqGQLjFrzQlz8aR46pU7 l+uVNZKkyE08c5bUdAAwS2upoyECn8gXs592bj51ucatog2R8naAlQdsa7CDk2Qe b0H6OImsBtKlnww7j6S0/49b -----END CERTIFICATE-----Generated at Fri Apr 17 04:19:44 2026 by rpki-client