$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: yUPc5PB0Mxs7nr7z2usvVdp9kVbAqA0N/0+LRzJ854M= Subject key identifier: A3:21:CF:57:75:31:8B:83:BC:6B:BB:53:27:6E:D5:7E:80:A0:39:5E Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0ABB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0AAF Signing time: Thu 16 Apr 2026 19:24:58 +0000 Manifest this update: Thu 16 Apr 2026 19:24:58 +0000 Manifest next update: Thu 23 Apr 2026 19:24:58 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: pXF1QQO0WThP4CQEh8g9LFOYS0tm02ry/JK+9GjbhYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2747 (0xabb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Apr 16 19:24:58 2026 GMT Not After : Apr 23 19:24:58 2026 GMT Subject: CN=69e1378a-83cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:fc:bc:76:48:cc:22:0f:95:2e:47:4d:e2: 91:8f:18:c9:7f:a6:e7:8b:37:73:9a:84:85:ac:8a: 31:94:21:1b:fe:d4:f7:a6:b8:18:88:f6:f2:43:6d: 81:83:29:af:db:27:1c:56:7a:71:af:4e:b5:c4:31: ff:c6:d4:8d:5b:f9:b9:1b:5b:51:ac:be:7f:6d:76: f5:5f:b9:1a:db:09:5f:22:7d:71:46:82:9d:28:72: 84:48:28:72:fe:b0:5e:eb:89:a1:ad:35:e0:ae:4c: ca:c6:ce:24:ef:32:ed:df:b1:bf:26:ac:1b:d7:5e: 98:e5:b4:6e:09:7a:54:db:2b:d6:dd:c6:14:b7:f8: cb:62:a2:3d:f4:c6:9e:c7:00:d4:eb:d3:ce:ee:5f: 00:ec:e0:23:6e:49:37:4e:c4:1d:4c:15:06:a0:9b: c4:93:29:54:b2:83:9f:86:bc:8a:77:15:b6:29:5d: 75:15:50:28:60:87:83:12:e3:95:cb:ec:40:23:67: 80:f9:48:95:0e:27:2f:bd:a6:e8:22:25:1d:56:8d: 27:ac:d2:2b:af:36:47:1f:cc:b1:1d:e0:3d:00:02: 85:a8:09:e6:f8:9d:cc:fb:24:9b:3c:b3:9d:34:2e: aa:3b:e3:1e:3b:53:7e:97:00:45:19:75:ed:3c:8c: dc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:CF:57:75:31:8B:83:BC:6B:BB:53:27:6E:D5:7E:80:A0:39:5E X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:11:f5:db:ec:e7:e9:70:61:25:71:7f:d7:52:41:ee:47:09: d5:26:85:09:86:7e:e8:f4:52:db:9d:e6:11:1f:c6:96:ff:d6: 68:2a:36:e0:40:0d:8b:75:a6:9e:d7:8d:4c:ec:8e:73:3f:bf: 4e:09:8b:59:83:61:4d:ed:ce:de:26:97:b3:2b:28:a1:c7:9d: 03:e2:f0:e4:c1:32:96:54:0f:d1:b1:ec:b2:5f:06:9e:4c:1b: 58:cf:00:f2:60:9b:4d:9e:ff:53:c9:0b:2d:9f:37:52:00:e9: 9e:61:bd:e8:ba:0f:fd:78:9b:b5:08:c8:dc:0b:e3:fc:8c:47: e3:04:8e:ee:08:04:65:ad:19:ec:39:74:d8:b4:4b:8d:07:3c: c2:ab:75:ed:1f:e3:1a:40:a4:1d:99:a7:99:a5:d1:c3:ea:9c: 17:38:d8:2d:3b:fd:d6:db:df:e6:69:0b:01:ee:8d:9c:2f:f2: e3:69:28:ec:ac:32:27:32:65:9b:84:92:ec:8a:76:78:91:0b: 0b:ab:29:61:08:7a:5d:34:4b:ce:79:dc:50:6d:59:33:1c:0f: e8:94:c6:9e:3b:a3:e0:8b:d0:5b:4f:21:4a:26:a9:d6:59:f4: cb:24:3e:2e:1a:2b:d8:cc:13:c6:96:98:83:70:0a:5f:78:16: 4f:ce:e5:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjYwNDE2MTkyNDU4WhcNMjYwNDIzMTkyNDU4WjAYMRYwFAYD VQQDEw02OWUxMzc4YS04M2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZ78vHZIzCIPlS5HTeKRjxjJf6bnizdzmoSFrIoxlCEb/tT3prgYiPbyQ22B gymv2yccVnpxr061xDH/xtSNW/m5G1tRrL5/bXb1X7ka2wlfIn1xRoKdKHKESChy /rBe64mhrTXgrkzKxs4k7zLt37G/Jqwb116Y5bRuCXpU2yvW3cYUt/jLYqI99Mae xwDU69PO7l8A7OAjbkk3TsQdTBUGoJvEkylUsoOfhryKdxW2KV11FVAoYIeDEuOV y+xAI2eA+UiVDicvvaboIiUdVo0nrNIrrzZHH8yxHeA9AAKFqAnm+J3M+ySbPLOd NC6qO+MeO1N+lwBFGXXtPIzcXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMhz1d1 MYuDvGu7Uydu1X6AoDleMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABRH12+zn6XBhJXF/11JB7kcJ1SaFCYZ+6PRS253mER/Glv/WaCo24EANi3Wm nteNTOyOcz+/TgmLWYNhTe3O3iaXsysoocedA+Lw5MEyllQP0bHssl8GnkwbWM8A 8mCbTZ7/U8kLLZ83UgDpnmG96LoP/XibtQjI3Avj/IxH4wSO7ggEZa0Z7Dl02LRL jQc8wqt17R/jGkCkHZmnmaXRw+qcFzjYLTv91tvf5mkLAe6NnC/y42ko7KwyJzJl m4SS7Ip2eJELC6spYQh6XTRLznncUG1ZMxwP6JTGnjuj4IvQW08hSiap1ln0yyQ+ Lhor2MwTxpaYg3AKX3gWT87loA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:37:23 2026 by rpki-client