$ rpki-client -vvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft File: xh7aKdRphAjI5WdDhpTVNnJaEn0.mft (raw, json) Hash identifier: Q3c+/3pU7OKNcyvQTMIDdC9UxM69itcI2g6SZFRDZhk= Subject key identifier: 1D:B3:E6:72:90:6B:26:C1:A5:3F:5F:DE:3E:32:1F:A5:BF:9B:0D:FD Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D Certificate issuer: /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft Manifest number: 25 Signing time: Fri 17 Apr 2026 08:31:57 +0000 Manifest this update: Fri 17 Apr 2026 08:31:56 +0000 Manifest next update: Fri 24 Apr 2026 08:31:56 +0000 Files and hashes: 1: xh7aKdRphAjI5WdDhpTVNnJaEn0.crl (hash: Ht3JSW+oFbXgjB7Fx3z3/yspe4LdUSdqz0khjTKLqoc=) 2: 7FA6A66E072511F18DD83FDE2B3D8C67.roa (hash: Yle2np8VHG9XuuKa/Zf8owqSx1f8Kx45AoedIOUz9Gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D Validity Not Before: Apr 17 08:31:56 2026 GMT Not After : Apr 24 08:31:56 2026 GMT Subject: CN=69e1effc-36bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:0b:36:d9:34:4b:50:2f:aa:58:ec:59:80: 8c:54:ce:63:c6:0c:17:5f:e0:ab:17:31:b6:39:8e: 0d:0e:60:7e:12:4b:d7:a3:6b:a0:fc:d2:62:d0:44: 21:18:cb:2f:45:5f:95:1c:61:20:1f:31:c0:b3:0b: b0:74:b0:df:0d:5b:07:03:4c:c4:b3:6d:c8:55:24: 74:bf:46:31:41:1b:26:02:6f:53:64:2c:3d:3e:fa: 67:5d:3d:ad:8d:f9:1b:9b:45:d1:34:2d:c3:8f:f5: 41:21:12:43:3c:7a:1c:2e:59:f3:7b:f7:09:a6:f2: 53:ec:0d:c4:86:8e:34:bb:56:01:ea:05:de:62:26: bd:88:9f:1a:40:ce:09:45:06:75:1c:5f:04:d8:23: 4e:d5:d3:33:9e:2c:6b:77:80:c9:3d:5e:97:36:1f: 00:4b:7b:51:98:d2:78:e0:5b:77:fb:44:23:8e:17: 99:d9:03:74:dc:16:e5:3b:bc:c0:53:af:ca:58:91: cf:a2:65:39:c3:06:0c:16:9d:c9:7b:e5:b0:ba:3f: 38:f5:be:f2:aa:e1:33:5f:91:84:e9:a0:3e:5d:f0: cc:77:b4:0d:8e:b6:ab:b7:5a:ae:4d:cb:31:bb:db: a7:6e:c2:b9:b9:63:e1:06:46:da:de:8e:f4:28:be: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B3:E6:72:90:6B:26:C1:A5:3F:5F:DE:3E:32:1F:A5:BF:9B:0D:FD X509v3 Authority Key Identifier: keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f8:d1:ec:55:d4:9b:62:b7:55:e8:c6:98:63:2a:1f:5b:65: 37:4b:ea:04:b2:d9:88:12:4b:46:ba:d2:79:9b:bb:98:8b:a8: 6d:55:29:77:14:34:13:69:c8:f0:ed:21:ea:af:dc:c3:a8:77: e8:87:ae:49:b7:33:fa:ce:56:e3:83:6c:b2:42:6f:3e:cd:a4: 0b:54:75:6c:41:95:e3:92:59:80:3b:20:0b:36:33:d2:6a:f1: 3e:c4:66:59:88:82:90:11:39:e7:b4:23:3a:9d:6f:e3:4b:00: af:b1:df:e9:c4:9f:b0:90:6f:4a:90:e9:4b:7b:a1:a1:b4:db: 64:a1:55:4f:9e:93:06:36:7f:f7:29:72:0c:c6:5f:b6:73:db: 4a:3c:2a:1b:68:63:cc:f3:30:8c:12:5e:e8:01:ed:16:a9:aa: 98:41:14:b0:49:6d:0e:02:b3:6f:b8:fc:ed:d0:19:29:0e:55: 8f:8d:f0:e9:33:75:dd:58:d1:3b:7f:a1:83:a1:f3:0c:3c:02: bd:4a:6d:bf:e7:16:a3:88:af:e9:c2:33:5c:48:31:8e:24:5b: 2e:fe:d0:69:8f:a6:34:f1:88:22:c9:2b:87:81:11:b3:0a:d4: 91:c9:f0:5e:19:a5:c4:a0:38:98:09:8d:de:ed:c1:80:84:3b: f4:ec:da:90 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTY2RjExMC8GA1UEBRMoQzYxRURBMjlENDY5ODQwOEM4RTU2NzQzODY5NEQ1MzY3 MjVBMTI3RDAeFw0yNjA0MTcwODMxNTZaFw0yNjA0MjQwODMxNTZaMBgxFjAUBgNV BAMTDTY5ZTFlZmZjLTM2YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiMAs22TRLUC+qWOxZgIxUzmPGDBdf4KsXMbY5jg0OYH4SS9eja6D80mLQRCEY yy9FX5UcYSAfMcCzC7B0sN8NWwcDTMSzbchVJHS/RjFBGyYCb1NkLD0++mddPa2N +RubRdE0LcOP9UEhEkM8ehwuWfN79wmm8lPsDcSGjjS7VgHqBd5iJr2InxpAzglF BnUcXwTYI07V0zOeLGt3gMk9Xpc2HwBLe1GY0njgW3f7RCOOF5nZA3TcFuU7vMBT r8pYkc+iZTnDBgwWncl75bC6Pzj1vvKq4TNfkYTpoD5d8Mx3tA2Otqu3Wq5NyzG7 26duwrm5Y+EGRtrejvQovqf7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHbPmcpBr JsGlP1/ePjIfpb+bDf0wHwYDVR0jBBgwFoAUxh7aKdRphAjI5WdDhpTVNnJaEn0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjZGLzdFMjI5MDE2MDcy MzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFqSTVXZERocFRWTm5KYUVu MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveGg3YUtkUnBoQWpJNVdkRGhwVFZObkphRW4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 NjZGLzdFMjI5MDE2MDcyMzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFq STVXZERocFRWTm5KYUVuMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBz+NHsVdSbYrdV6MaYYyofW2U3S+oEstmIEktGutJ5m7uYi6htVSl3FDQTacjw 7SHqr9zDqHfoh65JtzP6zlbjg2yyQm8+zaQLVHVsQZXjklmAOyALNjPSavE+xGZZ iIKQETnntCM6nW/jSwCvsd/pxJ+wkG9KkOlLe6GhtNtkoVVPnpMGNn/3KXIMxl+2 c9tKPCobaGPM8zCMEl7oAe0WqaqYQRSwSW0OArNvuPzt0BkpDlWPjfDpM3XdWNE7 f6GDofMMPAK9Sm2/5xajiK/pwjNcSDGOJFsu/tBpj6Y08YgiySuHgRGzCtSRyfBe GaXEoDiYCY3e7cGAhDv07NqQ -----END CERTIFICATE-----Generated at Fri Apr 17 18:10:08 2026 by rpki-client