$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: Tdp1EttQbAl8e3jqqukul4Hs0QTyocxtxFlYcLhbbvc= Subject key identifier: 4C:97:D7:1F:4E:87:3E:01:15:8A:25:AF:B0:7A:1A:4F:32:6D:97:AD Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: 01AD Signing time: Fri 17 Apr 2026 03:56:24 +0000 Manifest this update: Fri 17 Apr 2026 03:56:23 +0000 Manifest next update: Fri 24 Apr 2026 03:56:23 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: /MJJ0XaYu+mHu23EoaiTnrvkgNBuvyJaEpoHMKwSVpw=) 2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: eKVOlBNn+5WuwNFphnK/oDxQ3aByduRE2UhfBxYvHBw=) 3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: X6aIaG1zQqgDiSqMFiuqRqeQ5WZkrDJTEHFLzyOj2LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: Apr 17 03:56:23 2026 GMT Not After : Apr 24 03:56:23 2026 GMT Subject: CN=69e1af68-837c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:93:ec:86:16:35:5d:d4:c6:72:87:b2:1d: 71:b6:8b:79:27:08:a9:0d:75:67:39:da:f4:63:07: a7:2c:38:6d:d4:8f:e5:51:ec:e0:1d:e3:15:df:bf: 18:65:58:99:77:64:b7:5c:67:ca:ad:d2:21:11:46: 91:4f:0e:a0:64:7f:f3:34:06:5c:4d:00:20:95:53: d8:24:a2:a1:4c:09:00:85:2a:2e:88:92:e4:66:c4: 77:33:e7:05:df:01:7f:19:20:2c:ee:e3:cc:2f:2f: be:0a:23:bb:a6:4e:1a:4f:84:af:bc:12:16:fb:09: 24:4c:3b:ce:e2:b2:b3:82:67:6b:b8:79:41:8e:00: ef:fb:3e:2e:a1:bf:13:f6:7c:17:be:5f:35:60:50: 43:45:09:b6:4d:09:f8:ad:53:c2:03:95:95:4e:2a: b9:6f:7b:a2:e8:20:54:14:6c:90:19:ee:31:b2:1b: 6d:2e:a0:59:a6:e8:71:13:3e:ca:02:0f:6e:73:73: 20:eb:5b:ff:24:25:c1:f8:36:53:da:33:03:5c:2c: f6:eb:81:8d:65:22:cb:d5:72:fb:35:58:3b:51:33: c6:99:2c:58:37:31:5c:0f:a0:03:d3:c2:09:2e:c0: 53:a5:92:82:dd:ae:00:a1:a2:24:f6:01:fa:73:6d: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:97:D7:1F:4E:87:3E:01:15:8A:25:AF:B0:7A:1A:4F:32:6D:97:AD X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d2:f8:76:9f:8b:7a:6e:bd:14:78:98:45:97:89:f6:b9:fb: 5e:a0:d0:30:04:8d:8b:d8:99:fb:81:20:91:5c:d2:4c:6d:98: df:fb:94:a1:e4:ee:b2:2f:bd:13:e4:87:cb:c0:74:7d:75:35: 50:82:1a:18:b7:38:0f:58:53:d9:bd:45:a0:08:47:7e:da:38: e1:30:69:ee:21:f5:f9:0d:a6:f5:c4:b0:aa:51:f1:80:f2:0e: aa:72:a7:92:ba:42:fe:fd:44:d7:b9:a6:9c:e9:0c:65:b9:3a: 7e:12:ca:0f:84:34:a3:be:2b:61:cf:51:cf:17:12:e8:3c:28: a6:49:32:53:cf:53:02:76:e3:27:a0:13:41:fb:80:47:f3:8b: 87:0c:55:11:e9:b5:b9:42:a9:5b:e5:b1:9d:8b:8e:84:e0:82: 28:b4:c8:e6:4c:22:a9:81:f7:c7:81:4f:ec:18:36:8d:70:b3: b7:41:30:8e:c3:5e:86:cb:88:dd:ef:33:2c:3f:64:b1:3a:15: 15:f0:03:32:35:60:7d:5f:a0:15:94:5b:88:f7:c6:45:64:a7: 19:ed:b0:52:d4:d9:0b:62:76:cb:20:ee:69:c0:ef:49:12:aa: 43:e1:59:f1:1a:57:cb:bb:af:28:dc:d8:2b:80:b2:e5:41:02: 21:c0:c4:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjYwNDE3MDM1NjIzWhcNMjYwNDI0MDM1NjIzWjAYMRYwFAYD VQQDEw02OWUxYWY2OC04MzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvGT7IYWNV3UxnKHsh1xtot5JwipDXVnOdr0YwenLDht1I/lUezgHeMV378Y ZViZd2S3XGfKrdIhEUaRTw6gZH/zNAZcTQAglVPYJKKhTAkAhSouiJLkZsR3M+cF 3wF/GSAs7uPMLy++CiO7pk4aT4SvvBIW+wkkTDvO4rKzgmdruHlBjgDv+z4uob8T 9nwXvl81YFBDRQm2TQn4rVPCA5WVTiq5b3ui6CBUFGyQGe4xshttLqBZpuhxEz7K Ag9uc3Mg61v/JCXB+DZT2jMDXCz264GNZSLL1XL7NVg7UTPGmSxYNzFcD6AD08IJ LsBTpZKC3a4AoaIk9gH6c22SxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyX1x9O hz4BFYolr7B6Gk8ybZetMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0 a21JcjViZTR2dV9vem5pS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABtL4dp+Lem69FHiYRZeJ9rn7XqDQMASNi9iZ+4EgkVzSTG2Y3/uUoeTusi+9 E+SHy8B0fXU1UIIaGLc4D1hT2b1FoAhHfto44TBp7iH1+Q2m9cSwqlHxgPIOqnKn krpC/v1E17mmnOkMZbk6fhLKD4Q0o74rYc9RzxcS6DwopkkyU89TAnbjJ6ATQfuA R/OLhwxVEem1uUKpW+WxnYuOhOCCKLTI5kwiqYH3x4FP7Bg2jXCzt0EwjsNehsuI 3e8zLD9ksToVFfADMjVgfV+gFZRbiPfGRWSnGe2wUtTZC2J2yyDuacDvSRKqQ+FZ 8RpXy7uvKNzYK4Cy5UECIcDEPw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:02:43 2026 by rpki-client