$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: nMRDkklvdBKmzbolFv5h4103GcfGjhEol5LnEzTij4k= Subject key identifier: 86:2C:E3:FF:20:4F:12:D8:31:F6:B8:4B:C1:67:BF:57:F0:73:A9:87 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 028F Signing time: Fri 17 Apr 2026 01:30:49 +0000 Manifest this update: Fri 17 Apr 2026 01:30:48 +0000 Manifest next update: Fri 24 Apr 2026 01:30:48 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: hXHqH2r+g34c24pMhNn3knge3TG54hQkUUsNorJxyvk=) 2: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 0JBG3JjfF5NTvz1BrXwe7qxV2dsEYREu6KbN96r4FFw=) 3: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: SV+bZOpveaF6gRb1xTwAjvC4Ahc21Acwt2F034JPZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Apr 17 01:30:48 2026 GMT Not After : Apr 24 01:30:48 2026 GMT Subject: CN=69e18d48-c15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:dd:f7:05:4d:85:f8:0e:4e:57:2b:5e:21: f7:3e:c2:2e:67:e0:10:7d:c5:86:11:51:90:da:ce: 85:cd:c9:4f:66:74:9f:9a:af:b8:93:54:58:1f:22: b5:be:e9:4f:9b:a9:dc:81:e7:12:63:19:15:94:46: ec:0f:43:c4:dc:22:6b:c3:8b:7c:82:6c:3e:a8:c8: be:89:53:ab:16:7b:ce:bd:e8:dc:31:ce:7a:c7:4c: ef:fb:cd:c7:92:74:e2:f9:f9:87:11:77:dc:85:03: 6e:f7:7b:b5:d6:48:a3:c3:b1:1b:8d:69:a3:be:ae: 55:d1:d4:50:7e:30:5a:b4:04:d6:04:69:1f:22:6c: 03:9b:fc:af:4c:1c:0e:14:1a:74:88:82:6f:e6:e6: b5:e1:c0:d0:7d:2d:e9:e4:2d:06:82:ce:1f:ab:15: 36:49:0c:78:17:25:86:35:86:30:0f:39:8a:e1:aa: 61:d4:ea:52:cc:0c:63:53:ac:8a:cb:23:d8:82:e5: f3:6e:bd:8f:a1:b3:18:b3:39:03:28:70:df:2b:10: 9a:35:85:06:a1:4c:47:6b:dc:3e:cb:ee:97:f5:57: 9e:36:a1:e6:3b:8b:8f:02:49:b3:7e:c3:0f:7b:1f: 7a:7c:cc:36:81:e4:9f:b4:1d:6b:a1:59:71:b8:ec: ca:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2C:E3:FF:20:4F:12:D8:31:F6:B8:4B:C1:67:BF:57:F0:73:A9:87 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:80:86:14:10:ca:47:30:8f:20:06:b1:59:16:25:a7:17:11: f1:b8:43:11:26:b8:5d:e3:1f:02:14:f9:b4:ab:23:34:8a:27: ac:65:7f:6a:47:31:d9:58:4f:b2:e7:69:71:be:76:5e:22:7e: d5:5c:1a:a0:5d:97:d9:4e:4e:ab:5b:d4:e0:9b:a7:b7:a1:4c: 69:f4:6c:d6:90:6f:b9:a2:b2:fe:4b:88:43:46:38:f7:b3:89: 79:6d:41:9f:58:83:3f:6b:64:1c:1d:05:cf:07:c1:2d:a6:4e: 49:dc:ed:41:4c:af:29:ea:85:18:03:96:33:7f:4a:f1:e6:a8: 97:36:a8:5b:0d:ca:db:1a:37:9b:23:9d:e0:f2:49:47:53:09: 62:d9:6a:91:a8:72:9c:69:49:c9:8f:07:e9:33:9b:56:d7:fd: 7d:2c:1d:fb:75:e4:2b:b7:6e:8f:05:ad:e5:f1:68:d6:e2:bd: a6:41:98:2d:9a:c6:50:fd:fd:07:f9:e7:1a:22:8d:ae:cb:5a: 0b:8a:5d:11:60:df:4d:77:2e:95:4c:c7:60:a2:62:1f:a2:18: 09:a9:9f:1c:b4:c9:89:17:bd:8b:6f:09:3a:ea:ea:82:2c:ce: 4c:36:7a:30:c5:8e:94:bb:7d:0c:f1:b0:70:32:fa:27:72:f1: cd:b4:58:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjYwNDE3MDEzMDQ4WhcNMjYwNDI0MDEzMDQ4WjAYMRYwFAYD VQQDEw02OWUxOGQ0OC1jMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwvd9wVNhfgOTlcrXiH3PsIuZ+AQfcWGEVGQ2s6FzclPZnSfmq+4k1RYHyK1 vulPm6ncgecSYxkVlEbsD0PE3CJrw4t8gmw+qMi+iVOrFnvOvejcMc56x0zv+83H knTi+fmHEXfchQNu93u11kijw7EbjWmjvq5V0dRQfjBatATWBGkfImwDm/yvTBwO FBp0iIJv5ua14cDQfS3p5C0Ggs4fqxU2SQx4FyWGNYYwDzmK4aph1OpSzAxjU6yK yyPYguXzbr2PobMYszkDKHDfKxCaNYUGoUxHa9w+y+6X9VeeNqHmO4uPAkmzfsMP ex96fMw2geSftB1roVlxuOzK8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYs4/8g TxLYMfa4S8Fnv1fwc6mHMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS4CGFBDKRzCPIAaxWRYlpxcR8bhDESa4XeMfAhT5tKsjNIonrGV/akcx2VhP sudpcb52XiJ+1VwaoF2X2U5Oq1vU4Junt6FMafRs1pBvuaKy/kuIQ0Y497OJeW1B n1iDP2tkHB0FzwfBLaZOSdztQUyvKeqFGAOWM39K8eaolzaoWw3K2xo3myOd4PJJ R1MJYtlqkahynGlJyY8H6TObVtf9fSwd+3XkK7dujwWt5fFo1uK9pkGYLZrGUP39 B/nnGiKNrstaC4pdEWDfTXculUzHYKJiH6IYCamfHLTJiRe9i28JOurqgizOTDZ6 MMWOlLt9DPGwcDL6J3LxzbRYgA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:50:14 2026 by rpki-client