$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft File: xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json) Hash identifier: p+vj4nVBfukWw257vHlFQwWKZ1A0pqB1g/UyrCipELA= Subject key identifier: FA:EA:CD:16:B9:9B:9C:EF:73:7C:86:EA:EA:74:98:77:7F:EB:6F:3A Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 Certificate issuer: /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft Manifest number: 42 Signing time: Fri 17 Apr 2026 08:11:12 +0000 Manifest this update: Fri 17 Apr 2026 08:11:11 +0000 Manifest next update: Fri 24 Apr 2026 08:11:11 +0000 Files and hashes: 1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: IUPBWevI/Rpah6svXr4EcUsqW/ggp6S/oM6ZwCgPhGs=) 2: A9AB917CDF2A11F092E976D2656F56BC.roa (hash: kuT3hzLOfufh+qfp/dHjjRBlh3boTBfy77wXj5OCKW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Validity Not Before: Apr 17 08:11:11 2026 GMT Not After : Apr 24 08:11:11 2026 GMT Subject: CN=69e1eb1f-59b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:51:09:e6:b9:1b:72:e7:fa:10:ad:79:ea: 48:5c:dc:f3:8a:d6:ba:da:2f:58:f5:1f:1a:9a:bf: b8:e6:65:c0:89:4e:3a:43:e7:b7:db:43:c3:5c:07: 34:e4:b4:49:94:ba:2b:85:8e:3b:ce:7b:da:91:2f: f2:21:3b:59:d9:96:43:07:84:fd:68:1b:f8:03:29: 5d:ff:25:58:8f:a5:9b:0f:c6:33:99:45:88:8d:ae: 75:21:21:5c:80:35:9b:c1:1b:bb:83:be:9c:30:10: 30:9b:ed:1a:3b:29:df:83:76:3d:03:1d:f3:e6:05: 7e:c7:41:fe:88:4f:b6:9e:c0:5e:2a:80:2d:69:99: 27:e7:e5:a9:cb:e3:dc:6a:89:9c:b8:34:df:b4:ed: e0:8f:8c:f9:5e:eb:5c:e8:94:f1:37:93:d9:3b:2e: 52:f0:a1:6d:99:6b:fd:64:09:6b:ac:0c:65:05:b8: 94:bb:f5:77:77:bb:0d:fd:9d:58:f1:34:c4:a6:7f: a8:c5:af:a2:b2:00:17:69:70:36:2f:d3:c6:1e:3a: f2:c1:ff:d4:6a:01:01:03:a1:34:81:41:27:fe:ff: 79:f1:77:94:a4:ee:b7:93:d4:33:e9:d3:0a:a6:aa: cf:6f:59:28:2e:c4:03:78:cf:32:c7:de:9e:9c:18: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EA:CD:16:B9:9B:9C:EF:73:7C:86:EA:EA:74:98:77:7F:EB:6F:3A X509v3 Authority Key Identifier: keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:df:e9:b6:d0:c8:2c:48:32:d3:e3:55:99:e8:e3:eb:5b:7c: 48:99:6e:70:51:4f:cd:13:35:c8:6e:f0:27:63:58:ed:56:aa: c1:3e:6d:83:e8:49:ab:d6:7d:64:50:48:26:74:32:7c:01:43: 2b:cf:5f:b5:74:ff:60:5a:fb:ca:7f:0f:6a:b5:49:34:7d:58: 97:b8:d6:39:54:c4:be:59:fa:25:d4:4f:59:15:b6:1f:13:f9: a2:b8:d4:08:26:db:b0:d6:d3:db:ba:10:bd:bf:96:8e:fa:df: ab:7e:5d:e6:73:5d:0a:82:4b:36:8c:13:08:32:20:2d:e5:ac: 5a:07:94:2b:6f:06:88:05:eb:5f:37:b7:54:f4:23:dd:b0:a8: 7e:55:7c:bd:74:6d:4e:0c:b0:90:42:4e:01:bc:9a:1c:95:ce: 7c:2d:2a:8c:a3:1b:f1:0f:2a:e8:77:11:fe:68:d2:2f:1d:95: ec:82:c2:f6:b5:a1:50:b8:f4:04:5d:09:9d:3b:f2:17:d2:11: d5:05:5b:0d:9a:8f:ee:48:de:7c:0a:3c:51:f2:d3:70:f8:52: 62:6e:97:68:1f:0d:f6:7f:65:7e:21:d4:e6:2f:fc:14:ce:6e: d8:b3:a5:01:e3:03:87:58:20:2e:18:4f:e0:a1:04:05:20:7f: 36:36:eb:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjFBOTExMC8GA1UEBRMoQzQ3MjM5RkZGNUNGNzg4NTIxN0ZDNkNBOTAxQjdBMzI3 ODA4MzFGMDAeFw0yNjA0MTcwODExMTFaFw0yNjA0MjQwODExMTFaMBgxFjAUBgNV BAMTDTY5ZTFlYjFmLTU5YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0DFEJ5rkbcuf6EK156khc3POK1rraL1j1Hxqav7jmZcCJTjpD57fbQ8NcBzTk tEmUuiuFjjvOe9qRL/IhO1nZlkMHhP1oG/gDKV3/JViPpZsPxjOZRYiNrnUhIVyA NZvBG7uDvpwwEDCb7Ro7Kd+Ddj0DHfPmBX7HQf6IT7aewF4qgC1pmSfn5anL49xq iZy4NN+07eCPjPle61zolPE3k9k7LlLwoW2Za/1kCWusDGUFuJS79Xd3uw39nVjx NMSmf6jFr6KyABdpcDYv08YeOvLB/9RqAQEDoTSBQSf+/3nxd5Sk7reT1DPp0wqm qs9vWSguxAN4zzLH3p6cGCxtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+urNFrmb nO9zfIbq6nSYd3/rbzowHwYDVR0jBBgwFoAUxHI5//XPeIUhf8bKkBt6MngIMfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MUE5Lzc1MjhCM0IwREYy NzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlVaGY4YktrQnQ2TW5nSU1m QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEhJNV9fWFBlSVVoZjhiS2tCdDZNbmdJTWZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MUE5Lzc1MjhCM0IwREYyNzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlV aGY4YktrQnQ2TW5nSU1mQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBF3+m20MgsSDLT41WZ6OPrW3xImW5wUU/NEzXIbvAnY1jtVqrBPm2D6Emr1n1k UEgmdDJ8AUMrz1+1dP9gWvvKfw9qtUk0fViXuNY5VMS+Wfol1E9ZFbYfE/miuNQI Jtuw1tPbuhC9v5aO+t+rfl3mc10Kgks2jBMIMiAt5axaB5QrbwaIBetfN7dU9CPd sKh+VXy9dG1ODLCQQk4BvJoclc58LSqMoxvxDyrodxH+aNIvHZXsgsL2taFQuPQE XQmdO/IX0hHVBVsNmo/uSN58CjxR8tNw+FJibpdoHw32f2V+IdTmL/wUzm7Ys6UB 4wOHWCAuGE/goQQFIH82Nus5 -----END CERTIFICATE-----Generated at Fri Apr 17 10:11:45 2026 by rpki-client