$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: 6PmlvvZp5lUPryvcnFkUpWMQ/uN+xF/Nd6CthAiA+Hc= Subject key identifier: 94:02:1B:20:A5:F7:DB:78:DF:B7:E9:29:36:32:EA:EE:54:1E:C3:84 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0D89 Signing time: Thu 16 Apr 2026 17:54:49 +0000 Manifest this update: Thu 16 Apr 2026 17:54:49 +0000 Manifest next update: Thu 23 Apr 2026 17:54:49 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: +RanQ2IxpyMjtaFYm/YotukQZ0E6AFnfN7iI8YHmElc=) 2: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) 3: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) 4: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) 5: 762C16422E9811F1A14B442FB4833773.roa (hash: 6dVRqPwjNiBJWT/1IpcKvHD9YdgtV5RR7uiRlRvanfU=) 6: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) 7: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3526 (0xdc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Apr 16 17:54:49 2026 GMT Not After : Apr 23 17:54:49 2026 GMT Subject: CN=69e12269-e821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:dd:c4:fa:57:f2:51:50:e9:0e:11:a8:0f: fb:ae:4f:36:17:20:ef:b4:30:bb:6e:54:36:8d:01: bc:e7:49:3a:0f:73:11:bc:7c:05:e5:5b:70:83:7c: 45:ae:45:1a:c4:03:f9:30:96:23:05:d6:14:50:23: 0c:e9:12:a4:25:bc:66:0a:04:d6:16:d1:fe:1f:e2: d8:0e:0a:77:a9:55:41:ae:e6:13:e3:aa:15:44:03: 13:b0:c6:b5:90:f3:f1:3e:48:93:b5:83:28:db:78: 9a:7f:a5:e8:4a:7e:4e:55:e8:15:86:15:80:14:bd: fc:6f:c7:51:a8:ee:f8:0f:3a:cb:d0:49:a6:fc:ea: ef:5e:10:d7:2c:b1:b3:12:7a:b2:2e:94:d5:3f:10: f5:8c:10:86:5c:bd:33:46:e9:61:05:5e:d4:bc:e7: 95:5c:51:92:ef:fd:e7:b7:f5:b2:a6:6c:56:35:48: 8c:bf:f0:b8:88:23:78:c2:34:a0:e5:cd:6a:79:9a: 71:eb:7b:77:e7:77:d1:12:01:df:80:13:51:7c:32: 9a:fa:94:75:de:5b:6b:3a:69:83:b5:89:8d:93:20: f5:b0:6a:30:f2:ae:0a:2b:ff:ab:95:d3:74:33:b1: 82:3b:a3:24:b6:4e:2c:11:2e:90:ad:2d:75:27:1a: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:02:1B:20:A5:F7:DB:78:DF:B7:E9:29:36:32:EA:EE:54:1E:C3:84 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:02:2c:ff:c0:2c:f9:2a:05:7c:7a:14:e9:5e:3c:12:58:e3: 59:09:bd:bc:85:7c:37:19:4a:73:14:df:0f:43:d4:c2:be:15: ea:90:96:6f:8b:11:68:9d:c1:2b:0c:44:2c:60:7a:aa:22:97: 94:5c:27:97:88:15:d8:7a:21:07:0a:d0:f1:af:a2:da:ea:69: 03:f2:a2:c9:af:8f:52:3c:db:e7:3a:a3:7c:23:aa:a9:43:3a: 77:a0:3c:b7:46:b7:ef:0f:f2:88:81:46:59:0a:9a:fc:c7:55: 4b:3b:e4:cc:33:8f:27:dd:84:25:e4:e1:05:30:ee:53:e9:bc: 0a:70:6d:34:30:47:66:34:2f:07:72:fe:35:7b:5b:d6:24:53: ac:e7:5c:12:1d:66:ea:03:7e:d1:08:cd:7b:ee:38:9b:42:ad: 76:5d:f7:6e:42:64:54:2b:ae:c7:c8:c7:58:74:46:04:18:d0: 10:8a:75:14:b9:9a:50:72:26:22:5b:68:e3:b7:3d:91:09:cb: 6d:e6:d9:6b:6b:c4:ad:56:13:54:f6:a9:b3:27:3a:c7:ce:ae: fc:a7:1e:f9:70:16:bf:c2:e3:d0:39:c3:01:90:73:12:6f:f2: c8:0a:7d:62:ac:ab:77:76:f0:24:f0:ab:6c:c9:32:2e:03:9a: 7c:45:36:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwNDE2MTc1NDQ5WhcNMjYwNDIzMTc1NDQ5WjAYMRYwFAYD VQQDEw02OWUxMjI2OS1lODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4zdxPpX8lFQ6Q4RqA/7rk82FyDvtDC7blQ2jQG850k6D3MRvHwF5Vtwg3xF rkUaxAP5MJYjBdYUUCMM6RKkJbxmCgTWFtH+H+LYDgp3qVVBruYT46oVRAMTsMa1 kPPxPkiTtYMo23iaf6XoSn5OVegVhhWAFL38b8dRqO74DzrL0Emm/OrvXhDXLLGz EnqyLpTVPxD1jBCGXL0zRulhBV7UvOeVXFGS7/3nt/WypmxWNUiMv/C4iCN4wjSg 5c1qeZpx63t353fREgHfgBNRfDKa+pR13ltrOmmDtYmNkyD1sGow8q4KK/+rldN0 M7GCO6Mktk4sES6QrS11Jxo7RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQCGyCl 99t437fpKTYy6u5UHsOEMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbQIs/8As+SoFfHoU6V48EljjWQm9vIV8NxlKcxTfD0PUwr4V6pCWb4sRaJ3B KwxELGB6qiKXlFwnl4gV2HohBwrQ8a+i2uppA/Kiya+PUjzb5zqjfCOqqUM6d6A8 t0a37w/yiIFGWQqa/MdVSzvkzDOPJ92EJeThBTDuU+m8CnBtNDBHZjQvB3L+NXtb 1iRTrOdcEh1m6gN+0QjNe+44m0Ktdl33bkJkVCuux8jHWHRGBBjQEIp1FLmaUHIm Ilto47c9kQnLbebZa2vErVYTVPapsyc6x86u/Kce+XAWv8Lj0DnDAZBzEm/yyAp9 Yqyrd3bwJPCrbMkyLgOafEU2Uw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:10:46 2026 by rpki-client