$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: Dcakv+PUNgDwS474Rk6MDkdc1dVojfiZj2yio9O6qRA= Subject key identifier: 81:8A:FA:64:35:67:8B:0B:99:23:79:65:18:17:D0:E0:88:F9:87:47 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CFF Signing time: Thu 16 Apr 2026 18:16:40 +0000 Manifest this update: Thu 16 Apr 2026 18:16:40 +0000 Manifest next update: Thu 23 Apr 2026 18:16:40 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: 4w+Nw0adXP2qyux3JLnckEMQLGSzeaJ5l4nicIxcd3U=) 2: F0202A84B36311F082F02072C4F9AE02.roa (hash: rVfs6LGzrLN0wWbbQ4d7gHO9mKYMBzycz9A93jxHPEY=) 3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3377 (0xd31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Apr 16 18:16:40 2026 GMT Not After : Apr 23 18:16:40 2026 GMT Subject: CN=69e12788-2ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:f8:08:58:a9:d5:7f:f7:1c:6e:d7:25:4e: 1a:96:5d:96:ab:df:53:8b:b7:64:c5:4e:89:aa:7b: 85:de:43:ba:50:1d:cc:ba:04:ca:47:5e:65:68:84: cf:3f:24:2e:e4:f4:e4:e4:6f:51:8f:99:73:be:6c: 94:a6:61:a1:a9:c5:88:3d:ec:1f:b5:a7:34:ee:3e: 2e:c4:08:36:54:1a:bf:c1:67:78:e9:3f:68:99:80: f9:a2:1b:8f:40:67:b9:88:e4:24:98:51:16:ec:c5: 28:15:bd:fc:d6:43:2c:22:43:7e:64:d4:82:da:40: c5:ad:3b:33:b1:2d:16:11:ac:86:a1:b0:16:24:ca: 74:df:ab:7f:40:34:3e:80:9e:c9:d1:08:e0:e4:5b: 6d:74:95:ab:d6:ad:e7:1b:ca:a0:c2:78:82:07:49: 65:ec:2d:ca:b4:ba:21:be:be:2e:1a:74:5e:56:40: d9:af:53:9b:3b:4c:53:65:61:16:8a:23:4b:5d:08: 8f:d1:45:93:6a:9a:01:3d:86:d7:9b:df:d2:97:22: 83:b5:a0:9b:78:93:ac:ed:a2:fb:1b:72:0d:2b:65: ae:4a:85:b2:3b:e9:7a:c0:65:53:29:e4:9e:97:56: d3:c6:56:16:0f:a9:6f:53:5e:ca:8f:8a:60:2c:3d: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8A:FA:64:35:67:8B:0B:99:23:79:65:18:17:D0:E0:88:F9:87:47 X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f7:6a:40:cc:b9:2a:28:16:a2:bf:e2:80:77:f3:96:fb:1b: 71:30:d2:c1:05:0c:58:ea:18:58:76:56:b1:32:25:5b:c0:c0: 93:dd:72:2d:e7:40:47:57:29:bf:91:12:20:85:e7:35:90:53: fa:78:d3:d5:3e:d8:ba:79:89:c2:3a:9e:e3:77:40:89:fe:56: 95:1b:a2:60:e1:5e:b0:38:19:a6:92:26:e6:88:93:da:64:4c: ff:a2:e2:16:f6:bb:6b:df:d8:7d:0c:94:04:86:bc:e4:43:0a: 33:ee:d1:aa:9a:77:d8:72:83:5b:7c:b2:eb:d4:d6:87:38:ed: ac:69:37:ac:e6:b0:b7:72:da:75:77:66:ee:42:12:89:12:69: 09:03:94:da:f2:9e:33:36:06:25:3d:9a:54:5d:0b:cd:c0:54: 09:4d:b5:4b:fe:19:ec:19:64:38:be:15:65:14:df:c7:b5:f4: ee:73:75:27:91:1b:aa:39:6a:7b:86:f9:1a:4d:73:ba:be:4f: 0b:08:94:26:e3:54:d4:7a:5b:21:27:2c:ee:32:00:47:9f:e4: 60:d7:7b:4f:ed:a0:c2:f6:2a:35:6b:ba:b1:6c:cc:ef:a5:0c: d8:da:41:01:81:ee:ce:97:22:d0:a5:b8:0b:86:40:fa:24:4b: 6d:8c:45:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjYwNDE2MTgxNjQwWhcNMjYwNDIzMTgxNjQwWjAYMRYwFAYD VQQDEw02OWUxMjc4OC0yZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjo34CFip1X/3HG7XJU4all2Wq99Ti7dkxU6JqnuF3kO6UB3MugTKR15laITP PyQu5PTk5G9Rj5lzvmyUpmGhqcWIPewftac07j4uxAg2VBq/wWd46T9omYD5ohuP QGe5iOQkmFEW7MUoFb381kMsIkN+ZNSC2kDFrTszsS0WEayGobAWJMp036t/QDQ+ gJ7J0Qjg5FttdJWr1q3nG8qgwniCB0ll7C3KtLohvr4uGnReVkDZr1ObO0xTZWEW iiNLXQiP0UWTapoBPYbXm9/SlyKDtaCbeJOs7aL7G3INK2WuSoWyO+l6wGVTKeSe l1bTxlYWD6lvU17Kj4pgLD38lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGK+mQ1 Z4sLmSN5ZRgX0OCI+YdHMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa/dqQMy5KigWor/igHfzlvsbcTDSwQUMWOoYWHZWsTIlW8DAk91yLedAR1cp v5ESIIXnNZBT+njT1T7YunmJwjqe43dAif5WlRuiYOFesDgZppIm5oiT2mRM/6Li Fva7a9/YfQyUBIa85EMKM+7Rqpp32HKDW3yy69TWhzjtrGk3rOawt3LadXdm7kIS iRJpCQOU2vKeMzYGJT2aVF0LzcBUCU21S/4Z7BlkOL4VZRTfx7X07nN1J5Ebqjlq e4b5Gk1zur5PCwiUJuNU1HpbIScs7jIAR5/kYNd7T+2gwvYqNWu6sWzM76UM2NpB AYHuzpci0KW4C4ZA+iRLbYxF+w== -----END CERTIFICATE-----Generated at Fri Apr 17 15:21:00 2026 by rpki-client