$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json) Hash identifier: WlzcOzy7rfXa5SDlTmGccHzGnit67eMvCMdJZbBXR2Y= Subject key identifier: 3F:31:3A:B7:87:CE:0D:F6:0D:C9:7D:3E:37:C1:65:AF:1E:41:F4:A3 Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft Manifest number: 033E Signing time: Fri 17 Apr 2026 00:55:20 +0000 Manifest this update: Fri 17 Apr 2026 00:55:19 +0000 Manifest next update: Fri 24 Apr 2026 00:55:19 +0000 Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: jPI2i5WM0ljrXqzzF6TnDPYSSPvwIb3gHlbXXDBZjUY=) 2: 94584738031A11ED934E3D58C4F9AE02.roa (hash: OaWwFBJ2VuraLrnztPga6D3zvzu6QrQ5pOtTXqQFSQI=) 3: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: Jhz4r7a7iCxB4QnIuBoSZs0NvgYjtq+Y2BQvYiRhg6E=) 4: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ZTRqgNwjBkeuivQjU7gcegMWDfuZgfLXOKzQP0Bh2cg=) 5: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: oqSNYumQsq3ZDteZzV5l2Z7zpv8vOsyYUQUAq+amOrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: Apr 17 00:55:19 2026 GMT Not After : Apr 24 00:55:19 2026 GMT Subject: CN=69e184f7-412b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:50:0b:32:c0:39:78:ba:ec:ab:fd:5f:e3: c8:c3:ec:1e:71:a9:fc:fc:8b:a2:d9:76:d5:5d:1c: 7a:15:90:bc:fa:b5:e3:e3:ad:3c:53:c4:6d:ba:78: c6:c8:1a:7d:08:57:36:89:ac:e2:e5:4f:cd:a7:f1: 4e:0c:c9:ba:b5:a6:2d:ea:a6:84:9a:40:1f:80:61: df:aa:34:65:da:1f:6f:eb:80:25:b8:8c:02:b5:f7: 15:de:ec:cd:d8:ea:f4:90:97:35:64:29:06:63:96: 4e:08:0d:45:4e:14:f8:ad:93:64:e7:2f:b1:ca:3f: 17:39:40:4f:ed:1a:d8:ba:c2:e8:03:b1:ac:31:9c: 82:08:e9:71:8e:2f:94:35:c1:ab:da:ff:09:2d:67: 29:9d:24:ab:45:de:9e:66:ce:65:9b:4d:ce:c9:fc: d1:19:e2:68:8f:8c:7e:60:95:dd:ee:3c:c5:68:1d: 1e:81:b1:f5:c3:92:75:e0:9f:f0:11:ba:78:02:83: 4c:53:6e:dd:68:da:d9:6a:6d:b5:b4:cb:f5:24:ad: 84:98:19:0f:ef:37:a3:f6:7e:8e:c0:9f:f4:90:74: a5:1d:7d:64:5a:e4:17:f4:8e:f3:77:45:c2:a2:18: 48:04:6e:1f:25:42:a0:78:84:6c:26:f9:11:b4:e8: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:31:3A:B7:87:CE:0D:F6:0D:C9:7D:3E:37:C1:65:AF:1E:41:F4:A3 X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:43:58:2b:da:0e:94:50:f2:9c:79:ad:4b:18:f8:fa:54:f6: 65:1c:14:6e:79:55:03:ea:20:34:1f:76:d4:a4:0b:7d:ac:2a: c6:91:39:25:7e:b1:e0:1b:b7:58:28:0c:9f:bd:bd:7b:f9:9a: 28:16:9b:2d:3c:33:34:c7:df:c6:97:04:a4:c6:dd:63:d7:49: e8:f5:e7:b0:5b:e7:5d:eb:05:6b:a3:c1:b9:cd:40:6a:9c:32: ce:d5:7f:cb:17:13:18:8e:2e:b6:75:55:10:53:6e:f3:7e:a5: 39:2e:4b:0f:a4:bd:8d:47:e5:ef:46:58:17:9d:ee:96:27:03: 60:53:ed:63:c7:21:1a:8e:b1:77:50:8a:b3:ad:13:0f:66:88: 25:95:c6:4e:4b:69:ac:a1:27:bf:55:4b:7b:f6:21:d7:37:df: 17:57:cf:e9:c2:c1:db:c4:5f:e9:31:84:bc:c0:f5:1d:84:67: 00:69:41:6f:ed:84:89:05:ec:1c:90:66:41:17:e6:eb:47:9d: e6:7e:75:16:52:d1:a9:1d:a5:7b:08:67:f0:73:2d:cf:9b:b8: c0:ee:cf:8c:0b:55:26:11:16:87:3f:5a:98:71:84:f9:98:46: 36:7a:1f:28:dd:d4:3c:60:0c:97:40:5d:50:09:e9:8a:a2:37: 2d:44:ad:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjYwNDE3MDA1NTE5WhcNMjYwNDI0MDA1NTE5WjAYMRYwFAYD VQQDEw02OWUxODRmNy00MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMRQCzLAOXi67Kv9X+PIw+wecan8/Iui2XbVXRx6FZC8+rXj4608U8RtunjG yBp9CFc2iazi5U/Np/FODMm6taYt6qaEmkAfgGHfqjRl2h9v64AluIwCtfcV3uzN 2Or0kJc1ZCkGY5ZOCA1FThT4rZNk5y+xyj8XOUBP7RrYusLoA7GsMZyCCOlxji+U NcGr2v8JLWcpnSSrRd6eZs5lm03OyfzRGeJoj4x+YJXd7jzFaB0egbH1w5J14J/w Ebp4AoNMU27daNrZam21tMv1JK2EmBkP7zej9n6OwJ/0kHSlHX1kWuQX9I7zd0XC ohhIBG4fJUKgeIRsJvkRtOi31wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8xOreH zg32Dcl9PjfBZa8eQfSjMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho RXh2TV9xSDN0NnZUVWRJeTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqkNYK9oOlFDynHmtSxj4+lT2ZRwUbnlVA+ogNB921KQLfawqxpE5JX6x4Bu3 WCgMn729e/maKBabLTwzNMffxpcEpMbdY9dJ6PXnsFvnXesFa6PBuc1AapwyztV/ yxcTGI4utnVVEFNu836lOS5LD6S9jUfl70ZYF53ulicDYFPtY8chGo6xd1CKs60T D2aIJZXGTktprKEnv1VLe/Yh1zffF1fP6cLB28Rf6TGEvMD1HYRnAGlBb+2EiQXs HJBmQRfm60ed5n51FlLRqR2lewhn8HMtz5u4wO7PjAtVJhEWhz9amHGE+ZhGNnof KN3UPGAMl0BdUAnpiqI3LUSt3A== -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:58 2026 by rpki-client