$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: tFPFfAi0zJLrRaShZ558iPdXbz3SO5YQjEbpnqH6spE= Subject key identifier: D6:D9:5F:0D:CA:3A:F1:01:78:1C:75:88:2D:FB:15:73:A3:4D:AD:3D Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1D81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1D36 Signing time: Thu 16 Apr 2026 16:05:27 +0000 Manifest this update: Thu 16 Apr 2026 16:05:26 +0000 Manifest next update: Thu 23 Apr 2026 16:05:26 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: zI4ThQ/80gJG8g5iELmSfD+QlTCUuCbbpM80bZy/oXk=) 2: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: 1vekZfH5YPC346cj2UThTBYzXSPYL/qmo6xjKnBtyW0=) 3: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: ZbnDvziitm1Xd7r8Nlbv4tUyUgKPSLQSV5/M7lY224A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7553 (0x1d81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Apr 16 16:05:26 2026 GMT Not After : Apr 23 16:05:26 2026 GMT Subject: CN=69e108c7-6f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:b2:81:6a:eb:f3:c3:c6:20:6c:22:b5:03: 1a:03:dd:b9:6e:8d:23:19:18:01:5f:79:b1:78:74: 71:c2:9f:e8:a3:15:fe:94:d3:87:64:84:65:b5:f8: ae:0f:49:fc:33:e3:19:96:a5:85:eb:19:52:13:04: 42:9b:24:ac:4b:a6:15:0b:d1:fb:a6:90:7c:67:03: a9:08:2f:35:96:ca:3a:5f:1b:a1:c6:a1:b4:25:da: fa:d8:fa:80:e7:8d:b2:31:64:99:d7:8f:9d:d6:18: 33:87:c7:e1:de:4f:f9:99:85:0d:b7:ce:7f:d3:f7: 96:0b:3d:65:e5:40:b5:11:02:6a:41:de:c6:96:c0: 5d:22:8b:fc:e4:14:19:0d:50:e9:de:10:2e:75:cb: dd:23:ce:62:30:9c:f2:2d:55:d9:f3:58:70:a6:4e: bf:3e:ae:44:a5:87:2f:b2:cd:61:5a:4d:c8:b9:b8: 9d:b8:09:9d:02:a0:4d:95:6e:b0:b8:a8:15:13:f7: 5a:4b:69:2a:29:f0:4b:ea:8c:c2:24:43:7b:b4:a0: 0e:91:62:cf:73:af:8d:e0:18:d1:15:c2:d5:9c:fa: d6:ec:00:60:7f:99:88:c6:f0:4e:64:c6:47:fc:8c: c1:ab:33:11:ac:10:a1:a3:ea:61:86:57:45:cb:f3: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D9:5F:0D:CA:3A:F1:01:78:1C:75:88:2D:FB:15:73:A3:4D:AD:3D X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b0:59:e8:ca:a2:fc:54:a0:31:87:33:2e:3a:b6:3f:80:57: 8e:9e:33:88:bd:1f:86:d1:d5:05:ac:b5:72:f4:15:a1:ed:ec: 38:8f:75:18:c1:99:75:81:2a:1c:e2:cb:e2:bd:09:00:ba:4f: 45:39:8e:1b:8c:de:6f:55:f9:76:58:58:56:67:6d:aa:31:da: 64:26:96:f6:20:81:d8:02:5c:10:3a:a4:78:9a:66:64:d5:d5: fa:60:28:af:04:37:a8:02:38:dc:54:a3:72:a8:d0:3d:6a:80: 7a:42:b2:7b:e1:b2:a0:e3:06:04:60:0e:aa:67:7c:1c:b5:3d: 68:32:08:01:09:44:4a:fe:a5:8f:3a:89:99:3b:12:8e:b9:db: bd:97:fa:f9:66:54:2a:4d:47:cb:f8:b1:2c:b0:98:92:16:ec: 29:43:fe:35:df:07:1f:1b:f4:3f:0e:42:89:2a:2e:b2:f8:f1: 20:63:c7:0e:88:72:45:d9:81:ef:1c:8d:78:5a:cf:14:86:cd: 73:5a:7a:c0:d0:b9:f0:e6:d4:e2:e5:ae:03:c2:b9:bd:a2:6f: a4:38:62:18:ff:41:80:ad:b4:91:83:1f:c4:21:a1:61:72:b4: ad:eb:2f:3f:71:c8:66:f8:f1:0d:4c:3f:de:62:57:63:3e:87: f9:6e:8d:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjYwNDE2MTYwNTI2WhcNMjYwNDIzMTYwNTI2WjAYMRYwFAYD VQQDEw02OWUxMDhjNy02ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4qygWrr88PGIGwitQMaA925bo0jGRgBX3mxeHRxwp/ooxX+lNOHZIRltfiu D0n8M+MZlqWF6xlSEwRCmySsS6YVC9H7ppB8ZwOpCC81lso6XxuhxqG0Jdr62PqA 542yMWSZ14+d1hgzh8fh3k/5mYUNt85/0/eWCz1l5UC1EQJqQd7GlsBdIov85BQZ DVDp3hAudcvdI85iMJzyLVXZ81hwpk6/Pq5EpYcvss1hWk3IubiduAmdAqBNlW6w uKgVE/daS2kqKfBL6ozCJEN7tKAOkWLPc6+N4BjRFcLVnPrW7ABgf5mIxvBOZMZH /IzBqzMRrBCho+phhldFy/N/NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbZXw3K OvEBeBx1iC37FXOjTa09MB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGLBZ6Mqi/FSgMYczLjq2P4BXjp4ziL0fhtHVBay1cvQVoe3sOI91GMGZdYEq HOLL4r0JALpPRTmOG4zeb1X5dlhYVmdtqjHaZCaW9iCB2AJcEDqkeJpmZNXV+mAo rwQ3qAI43FSjcqjQPWqAekKye+GyoOMGBGAOqmd8HLU9aDIIAQlESv6ljzqJmTsS jrnbvZf6+WZUKk1Hy/ixLLCYkhbsKUP+Nd8HHxv0Pw5CiSousvjxIGPHDohyRdmB 7xyNeFrPFIbNc1p6wNC58ObU4uWuA8K5vaJvpDhiGP9BgK20kYMfxCGhYXK0resv P3HIZvjxDUw/3mJXYz6H+W6NMA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:30:38 2026 by rpki-client