$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: EBaMxKd2ygWANsyHu/PJ/FIQKW+4Muj20DVfBS3Y834= Subject key identifier: C8:A0:98:97:61:BF:89:9A:D6:9D:8E:A5:19:77:57:28:8D:E4:4C:CC Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 0524 Signing time: Fri 17 Apr 2026 01:06:28 +0000 Manifest this update: Fri 17 Apr 2026 01:06:27 +0000 Manifest next update: Fri 24 Apr 2026 01:06:27 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: Vq76tqwKMPJLOot8NU+AFezh1G3qy74Ok5SeyFjdAkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Apr 17 01:06:27 2026 GMT Not After : Apr 24 01:06:27 2026 GMT Subject: CN=69e18794-7d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:16:c4:2a:f2:c2:3c:5d:ce:52:2c:50:e8: 51:1a:26:7c:ed:7e:7e:e9:a3:f7:c5:24:73:2c:0b: d3:de:8b:c9:e6:e8:8c:4b:0c:eb:fd:95:4f:c1:ad: 6b:6b:b7:e5:a7:0f:15:e0:76:8c:d7:55:4e:8c:c9: 8d:d1:a3:7b:f5:bf:47:93:d3:b8:14:5e:a7:1e:76: 57:35:77:0b:c2:46:ac:9e:6c:c4:05:b1:9d:4b:74: 58:97:39:0b:61:17:b5:b5:4b:40:d3:22:29:57:80: 3f:bd:40:fb:23:2e:09:2f:54:f3:19:47:a3:94:c3: 88:13:48:de:1f:b8:4a:b5:1e:c5:41:f3:45:61:6f: 5a:49:65:5a:92:0d:6d:ba:38:d9:4c:9f:84:b4:b4: 84:aa:6a:b2:57:37:fc:4c:fd:f6:f1:5c:25:45:c9: 37:6b:29:e6:02:90:d1:99:93:00:f4:b0:d9:bf:f7: d3:a8:ad:1d:d0:bd:d8:bb:5a:bd:fa:71:de:1d:c0: 8d:5b:22:6e:0d:4d:10:68:37:68:2f:b1:59:84:2b: 4f:c2:17:35:a0:0c:a5:87:b2:b2:79:b4:a3:ac:12: 93:c3:43:af:06:87:bb:53:7a:b4:b7:51:04:af:a8: ac:d4:d3:d8:e4:e1:c1:a0:83:09:02:97:06:0e:61: aa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:98:97:61:BF:89:9A:D6:9D:8E:A5:19:77:57:28:8D:E4:4C:CC X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2e:f2:a6:fe:86:16:c0:72:d7:d6:cf:42:07:78:85:99:30: 82:a7:e2:4e:e3:ec:51:88:77:55:4a:4c:db:9f:51:32:6a:f1: 91:d8:a7:5c:d6:3c:05:6c:b3:c1:ea:2d:bb:6c:ab:ad:72:6a: ae:2f:7d:95:28:be:f9:88:38:4d:f2:e8:f1:6d:04:bd:7d:2c: 49:1f:6e:e0:74:22:61:31:51:a7:c2:14:53:d1:7b:17:fb:a3: f9:06:1d:72:a3:16:77:3f:1b:7f:d2:85:64:65:87:1a:d9:e8: ed:d7:39:b4:77:da:cd:60:f4:fe:73:d7:57:87:b5:4f:e3:29: f8:23:08:17:30:38:c8:00:38:94:ab:f3:e0:13:9a:75:bc:cc: b2:7b:57:06:81:c0:e1:f7:fc:f5:eb:bd:c6:bd:6b:34:d8:da: c7:60:2e:d6:37:98:e0:1f:58:b2:78:dd:82:54:05:03:b4:34: 08:31:d4:28:7d:f5:d5:8e:12:62:be:be:21:b5:23:ce:78:bc: d7:8a:d5:c7:4e:c7:99:72:fb:40:7b:75:78:c2:77:0b:9e:1b: b6:87:b4:a8:a8:0e:0c:55:3e:d9:ee:20:0b:f0:8e:f2:ee:01: 21:29:e1:b7:1f:7d:2b:c3:db:7d:50:55:4a:16:9a:3d:9b:21: b7:1c:67:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjYwNDE3MDEwNjI3WhcNMjYwNDI0MDEwNjI3WjAYMRYwFAYD VQQDEw02OWUxODc5NC03ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDMWxCrywjxdzlIsUOhRGiZ87X5+6aP3xSRzLAvT3ovJ5uiMSwzr/ZVPwa1r a7flpw8V4HaM11VOjMmN0aN79b9Hk9O4FF6nHnZXNXcLwkasnmzEBbGdS3RYlzkL YRe1tUtA0yIpV4A/vUD7Iy4JL1TzGUejlMOIE0jeH7hKtR7FQfNFYW9aSWVakg1t ujjZTJ+EtLSEqmqyVzf8TP328VwlRck3aynmApDRmZMA9LDZv/fTqK0d0L3Yu1q9 +nHeHcCNWyJuDU0QaDdoL7FZhCtPwhc1oAylh7KyebSjrBKTw0OvBoe7U3q0t1EE r6is1NPY5OHBoIMJApcGDmGqbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMigmJdh v4ma1p2OpRl3VyiN5EzMMB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIS7ypv6GFsBy19bPQgd4hZkwgqfiTuPsUYh3VUpM259RMmrxkdinXNY8BWyz weotu2yrrXJqri99lSi++Yg4TfLo8W0EvX0sSR9u4HQiYTFRp8IUU9F7F/uj+QYd cqMWdz8bf9KFZGWHGtno7dc5tHfazWD0/nPXV4e1T+Mp+CMIFzA4yAA4lKvz4BOa dbzMsntXBoHA4ff89eu9xr1rNNjax2Au1jeY4B9YsnjdglQFA7Q0CDHUKH311Y4S Yr6+IbUjzni814rVx07HmXL7QHt1eMJ3C54btoe0qKgODFU+2e4gC/CO8u4BISnh tx99K8PbfVBVShaaPZshtxxnkQ== -----END CERTIFICATE-----Generated at Fri Apr 17 13:39:58 2026 by rpki-client