$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: 4QyWSB9X/uhRVhYyN8oiZdNvPbRs21OOoqS7txa2CRg= Subject key identifier: 46:50:9C:46:E2:C3:40:75:73:A6:B1:25:23:B4:33:7D:BB:A4:D2:E5 Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 086B Signing time: Thu 16 Apr 2026 20:38:37 +0000 Manifest this update: Thu 16 Apr 2026 20:38:36 +0000 Manifest next update: Thu 23 Apr 2026 20:38:36 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: fkooEgFGdT2XsHzTJrEgLiXfs1bWs2S3ulNqLohG7pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Apr 16 20:38:36 2026 GMT Not After : Apr 23 20:38:36 2026 GMT Subject: CN=69e148cd-4096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c7:e5:25:b1:b9:42:27:91:cf:4b:f7:37:9e: 4f:9d:32:99:83:1f:91:e9:d3:46:65:ce:3d:36:7e: 32:95:cb:48:a1:13:71:a4:f3:75:ff:95:64:30:9e: 4c:0b:59:60:cf:22:a9:01:ab:90:1b:bd:83:a8:71: b3:9e:ed:5f:d5:3b:68:d3:41:7c:ff:68:5f:a9:ba: 2e:f4:b0:11:33:fc:b9:3d:f4:11:bf:2c:1f:2a:8a: be:0c:db:72:a6:0a:b7:8f:19:06:06:78:3f:37:72: ea:09:3e:2e:1c:76:6b:62:d9:4e:e3:db:da:78:ca: 0a:39:e6:07:41:df:5c:e3:9c:74:bf:b0:65:af:6a: c6:78:5a:74:c8:0a:fe:cb:46:8d:68:b5:9d:ec:dc: 0f:1b:f8:a3:9e:9b:98:af:16:88:fa:3f:a3:de:db: 12:06:b5:98:e8:e3:a8:1a:37:a1:41:b4:49:af:e3: bf:75:e3:94:7e:c9:f3:7f:07:66:84:79:4c:6e:1c: 4d:43:fc:78:8c:40:d3:91:d7:c6:4b:48:60:af:65: 7c:6d:fa:46:cf:d9:57:63:bc:0b:15:b5:ba:44:24: 73:a6:dc:20:ef:d4:25:99:43:d5:15:2b:6a:df:5b: f9:28:81:c4:b7:e2:96:df:30:fe:f4:a9:cf:df:ab: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:50:9C:46:E2:C3:40:75:73:A6:B1:25:23:B4:33:7D:BB:A4:D2:E5 X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:62:03:6b:52:5e:27:21:38:60:5f:33:91:81:21:1d:04:50: 5d:d2:93:6c:9d:56:d6:bd:78:78:eb:7c:82:e9:ab:b0:0c:82: ad:7f:c1:21:07:b7:e9:27:19:63:be:d9:04:af:8d:4e:79:75: 5e:53:3e:c9:de:3d:f4:8e:c3:e5:dc:23:73:db:07:7b:c0:59: 0e:e6:ba:10:3a:e4:8a:1c:a5:6a:f3:01:8c:cb:f9:5c:4e:d5: 80:38:96:b1:21:07:1f:0d:e7:c7:1b:a6:3f:ec:10:f2:40:c2: e6:60:25:aa:0e:67:67:21:83:2c:9f:4a:e6:0f:66:b9:73:42: 73:08:18:e7:4d:fa:c6:04:91:76:ef:c8:08:43:af:0c:a4:d9: 2f:63:b1:90:54:1c:11:81:0b:27:5b:11:8c:ea:34:f8:af:72: 8e:c3:1d:a4:06:9e:53:ed:10:9f:f4:e7:83:97:be:a4:17:70: 28:05:2b:a7:43:88:9c:f0:d2:ca:2e:5f:c6:19:ec:48:22:69: 6c:e7:48:05:47:3e:5a:80:ff:ef:85:37:25:54:c0:a8:3c:e4: 95:c7:d8:2e:96:16:ac:d8:94:97:02:90:2b:38:bf:cf:ae:ea: b9:0d:2c:c0:d6:3a:e5:fb:af:f5:31:45:b5:30:1b:06:04:6d: b6:e7:bd:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjYwNDE2MjAzODM2WhcNMjYwNDIzMjAzODM2WjAYMRYwFAYD VQQDEw02OWUxNDhjZC00MDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8flJbG5QieRz0v3N55PnTKZgx+R6dNGZc49Nn4ylctIoRNxpPN1/5VkMJ5M C1lgzyKpAauQG72DqHGznu1f1Tto00F8/2hfqbou9LARM/y5PfQRvywfKoq+DNty pgq3jxkGBng/N3LqCT4uHHZrYtlO49vaeMoKOeYHQd9c45x0v7Blr2rGeFp0yAr+ y0aNaLWd7NwPG/ijnpuYrxaI+j+j3tsSBrWY6OOoGjehQbRJr+O/deOUfsnzfwdm hHlMbhxNQ/x4jEDTkdfGS0hgr2V8bfpGz9lXY7wLFbW6RCRzptwg79QlmUPVFStq 31v5KIHEt+KW3zD+9KnP36vohQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZQnEbi w0B1c6axJSO0M327pNLlMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfGIDa1JeJyE4YF8zkYEhHQRQXdKTbJ1W1r14eOt8gumrsAyCrX/BIQe36ScZ Y77ZBK+NTnl1XlM+yd499I7D5dwjc9sHe8BZDua6EDrkihylavMBjMv5XE7VgDiW sSEHHw3nxxumP+wQ8kDC5mAlqg5nZyGDLJ9K5g9muXNCcwgY5036xgSRdu/ICEOv DKTZL2OxkFQcEYELJ1sRjOo0+K9yjsMdpAaeU+0Qn/Tng5e+pBdwKAUrp0OInPDS yi5fxhnsSCJpbOdIBUc+WoD/74U3JVTAqDzklcfYLpYWrNiUlwKQKzi/z67quQ0s wNY65fuv9TFFtTAbBgRttue9Ww== -----END CERTIFICATE-----Generated at Fri Apr 17 07:09:15 2026 by rpki-client