$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: IWq3lydoe/Ufl1IF2y4METemFl7bNw1LUbO2VJoKkDw= Subject key identifier: F5:56:4F:72:4B:14:83:4A:DD:0E:B7:95:95:44:37:C7:86:EC:4C:4B Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0D8B Signing time: Thu 16 Apr 2026 17:52:23 +0000 Manifest this update: Thu 16 Apr 2026 17:52:23 +0000 Manifest next update: Thu 23 Apr 2026 17:52:23 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: rh8HDqhg330j90ipVJqSH58Lk1W9yuWh4FvkqCAAR6g=) 2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: g7Y2fTPIrRGmI+yyaq93Q8oA6ahVmpPa/2gUU/U5QQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Apr 16 17:52:23 2026 GMT Not After : Apr 23 17:52:23 2026 GMT Subject: CN=69e121d7-d903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:28:ac:2c:ab:fe:84:8f:6d:23:01:aa:9b: 36:d1:15:1e:be:ee:fe:a2:14:13:11:ae:ae:8a:81: b7:1d:0e:5c:5e:2d:13:cf:5e:13:e5:2d:c1:7a:16: 7f:d2:fb:fd:08:b3:83:c9:5c:fd:81:00:c1:5a:2d: 0f:75:1b:c1:59:f6:1d:f8:58:85:01:cb:e8:81:31: b3:b8:d9:58:82:d7:ee:00:39:20:ff:8e:bb:97:24: a6:58:d5:f0:6f:aa:3e:2f:3e:ec:56:a3:f5:3b:ca: 31:47:98:5b:ad:8b:e5:e9:59:73:a9:99:fc:66:21: 2b:98:d7:39:b9:e8:00:80:41:b7:8f:07:5c:e8:59: 5a:41:b2:66:9f:e0:e6:6b:2f:15:69:c6:31:d9:c2: da:48:b1:28:e7:58:33:17:21:8e:a8:5e:5d:25:06: 13:8a:52:23:3d:6d:43:7f:25:6e:96:a6:18:89:42: be:d5:41:50:ca:00:22:91:ec:b2:5b:8c:39:82:57: 6a:ac:a7:12:d7:0c:cf:f1:5a:a0:36:fe:49:ff:8b: 28:7f:b0:2e:bb:aa:4f:b8:67:5c:4e:f5:75:b9:3b: 76:7e:ae:a1:5c:1e:ae:e2:1e:5e:3b:22:8b:19:fc: 86:fa:2c:a5:c0:33:f9:5f:42:14:ab:7e:e3:7c:2a: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:56:4F:72:4B:14:83:4A:DD:0E:B7:95:95:44:37:C7:86:EC:4C:4B X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:6a:b1:59:a9:23:b4:22:5f:79:31:0b:39:fb:e6:7e:5a:cc: dc:8a:d3:b1:c3:c6:36:c6:22:ba:fb:01:9f:d2:c5:4a:47:63: a6:b1:e5:9c:ac:ee:39:97:41:84:43:6b:73:a9:5b:37:e8:36: b7:43:3a:c4:1d:5d:17:e9:cf:56:dd:67:6f:f9:75:1e:ad:4f: 2d:50:3e:1f:1b:6f:4b:df:c0:79:e1:40:38:d5:a2:6b:b5:41: 16:79:23:ac:d9:38:19:0d:a8:55:16:2b:c3:d3:e3:52:8b:83: 79:a2:d5:e9:54:ef:1b:fb:00:73:9f:9a:ee:18:15:c2:af:7b: 24:4b:86:99:cc:65:f4:0c:b7:38:c7:1e:77:09:93:bd:dc:8b: 27:51:d2:c9:f5:40:08:7f:0e:e6:45:4a:26:3f:95:6c:fb:f4: 46:78:03:4d:c2:be:ee:1f:69:53:5d:40:e9:20:76:00:9a:b9: 5f:1a:6f:2b:b9:55:2a:e1:89:6b:e5:c8:35:56:aa:b7:78:60: 11:f7:49:83:cd:7d:67:00:5c:18:a6:aa:44:cc:63:66:f6:1b: db:40:f8:14:0d:98:c1:a3:bf:48:44:ed:1a:75:f4:c5:17:b9: 72:5c:58:48:59:2a:ec:8d:6d:cf:69:a7:2b:b3:b8:72:88:8d: 4e:ef:6d:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjYwNDE2MTc1MjIzWhcNMjYwNDIzMTc1MjIzWjAYMRYwFAYD VQQDEw02OWUxMjFkNy1kOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSoorCyr/oSPbSMBqps20RUevu7+ohQTEa6uioG3HQ5cXi0Tz14T5S3BehZ/ 0vv9CLODyVz9gQDBWi0PdRvBWfYd+FiFAcvogTGzuNlYgtfuADkg/467lySmWNXw b6o+Lz7sVqP1O8oxR5hbrYvl6VlzqZn8ZiErmNc5uegAgEG3jwdc6FlaQbJmn+Dm ay8VacYx2cLaSLEo51gzFyGOqF5dJQYTilIjPW1DfyVulqYYiUK+1UFQygAikeyy W4w5gldqrKcS1wzP8VqgNv5J/4sof7Auu6pPuGdcTvV1uTt2fq6hXB6u4h5eOyKL GfyG+iylwDP5X0IUq37jfCqqdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVWT3JL FINK3Q63lZVEN8eG7ExLMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARmqxWakjtCJfeTELOfvmflrM3IrTscPGNsYiuvsBn9LFSkdjprHlnKzuOZdB hENrc6lbN+g2t0M6xB1dF+nPVt1nb/l1Hq1PLVA+HxtvS9/AeeFAONWia7VBFnkj rNk4GQ2oVRYrw9PjUouDeaLV6VTvG/sAc5+a7hgVwq97JEuGmcxl9Ay3OMcedwmT vdyLJ1HSyfVACH8O5kVKJj+VbPv0RngDTcK+7h9pU11A6SB2AJq5XxpvK7lVKuGJ a+XINVaqt3hgEfdJg819ZwBcGKaqRMxjZvYb20D4FA2YwaO/SETtGnX0xRe5clxY SFkq7I1tz2mnK7O4coiNTu9tnw== -----END CERTIFICATE-----Generated at Sat Apr 18 04:43:53 2026 by rpki-client