$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: vWfB4tzWy9DSQtpR77F7Zcnya6/xxvfR3ImfBRDSqxY= Subject key identifier: E0:9B:AD:E8:4E:A2:8B:16:24:AB:CB:26:0C:C5:80:6A:FF:5B:29:A2 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 0240 Signing time: Fri 17 Apr 2026 02:15:34 +0000 Manifest this update: Fri 17 Apr 2026 02:15:33 +0000 Manifest next update: Fri 24 Apr 2026 02:15:33 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: CNSYjnkMVZRU+EDujX04rGLNmM2elc81hjZwXTw/lqI=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: YiM67MBOQyQiFAZiHKZnFOav4WykQTG7bAqQs/W9ABA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Apr 17 02:15:33 2026 GMT Not After : Apr 24 02:15:33 2026 GMT Subject: CN=69e197c5-06cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:36:96:57:a6:19:e3:d9:c5:93:63:13:bd: e1:c4:76:c0:a6:c5:3a:97:68:ad:6e:be:9b:41:b1: 16:b2:20:89:79:ae:ad:bc:48:90:ee:61:d6:ba:b7: ef:55:fd:fb:cc:6e:1e:26:b6:67:d9:35:3e:ff:24: 44:63:99:ea:eb:fe:0d:45:5b:82:48:1c:b7:2c:b3: 9b:aa:b2:42:87:8f:9b:0b:e7:e8:45:3f:b4:35:07: 9d:9f:dd:b2:67:8d:7c:95:13:5d:5d:08:01:a7:c7: 26:cf:e1:e5:8e:cc:fc:89:f7:96:8a:17:69:5f:ba: f2:91:28:79:a1:b0:40:aa:fa:5a:10:13:d4:79:32: 99:ca:26:d1:cc:a5:b3:df:be:ac:e8:55:e4:ec:53: 39:af:b3:c5:3c:52:ef:9b:09:57:8c:05:3d:aa:16: 0b:43:d9:68:cb:dc:c2:16:24:92:da:20:19:70:a3: 81:fa:78:86:81:60:7f:3e:af:a8:0d:8d:1a:2f:bd: 39:01:af:3b:17:06:57:5e:42:83:6f:b4:45:8b:8a: 07:65:b6:c4:07:9f:ec:d3:26:2d:08:68:1a:c4:1c: 84:f8:59:0a:7b:59:97:72:9e:93:f8:d0:06:e5:2a: 50:f0:c6:c5:be:4d:59:fe:96:2e:fa:8a:c0:2d:9e: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9B:AD:E8:4E:A2:8B:16:24:AB:CB:26:0C:C5:80:6A:FF:5B:29:A2 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:c1:9c:7e:f0:e5:81:cc:d6:70:15:89:28:df:c6:41:27:b1: 5d:88:f6:fc:31:06:64:53:94:d0:63:1b:17:16:7a:8c:36:12: 45:e7:f9:b7:ea:92:71:9c:b4:9f:e6:d5:ab:4f:dd:ad:d6:5e: c1:b1:4f:09:4b:cd:94:df:95:60:6a:2a:81:46:77:e5:0d:c6: 34:0f:7b:ba:5d:ea:4d:23:dc:c4:4e:c0:93:ca:1f:50:72:e0: 8c:6e:91:66:94:9b:3e:de:84:29:69:8b:98:17:3b:9c:fb:2b: 71:47:0a:4f:75:9d:2c:ba:25:bc:3f:72:51:bd:f9:ca:4f:d4: 1a:47:e5:14:05:46:2f:99:1f:c1:12:f9:20:30:db:09:49:0f: dc:1d:a4:bb:51:b3:c6:43:5b:1c:30:01:13:dd:f2:11:9c:a1: 82:c8:38:bf:e8:ef:3e:94:a5:75:5d:8a:c5:40:45:76:73:e8: 94:2b:70:36:2c:43:84:be:35:58:e6:f9:7b:78:99:f2:a6:10: 3e:fc:a6:c1:1b:9d:87:20:82:c1:07:57:bd:1a:ef:8a:53:3f: e7:1e:38:62:f9:33:3b:59:c0:e1:38:f1:f9:50:28:4f:8e:bf: 03:df:72:3c:2a:af:50:04:eb:d1:ea:61:6c:11:08:6f:68:37: 4f:cb:5a:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjYwNDE3MDIxNTMzWhcNMjYwNDI0MDIxNTMzWjAYMRYwFAYD VQQDEw02OWUxOTdjNS0wNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyg2llemGePZxZNjE73hxHbApsU6l2itbr6bQbEWsiCJea6tvEiQ7mHWurfv Vf37zG4eJrZn2TU+/yREY5nq6/4NRVuCSBy3LLObqrJCh4+bC+foRT+0NQedn92y Z418lRNdXQgBp8cmz+Hljsz8ifeWihdpX7rykSh5obBAqvpaEBPUeTKZyibRzKWz 376s6FXk7FM5r7PFPFLvmwlXjAU9qhYLQ9loy9zCFiSS2iAZcKOB+niGgWB/Pq+o DY0aL705Aa87FwZXXkKDb7RFi4oHZbbEB5/s0yYtCGgaxByE+FkKe1mXcp6T+NAG 5SpQ8MbFvk1Z/pYu+orALZ6GbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCbrehO oosWJKvLJgzFgGr/WymiMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtMGcfvDlgczWcBWJKN/GQSexXYj2/DEGZFOU0GMbFxZ6jDYSRef5t+qScZy0 n+bVq0/drdZewbFPCUvNlN+VYGoqgUZ35Q3GNA97ul3qTSPcxE7Ak8ofUHLgjG6R ZpSbPt6EKWmLmBc7nPsrcUcKT3WdLLolvD9yUb35yk/UGkflFAVGL5kfwRL5IDDb CUkP3B2ku1GzxkNbHDABE93yEZyhgsg4v+jvPpSldV2KxUBFdnPolCtwNixDhL41 WOb5e3iZ8qYQPvymwRudhyCCwQdXvRrvilM/5x44YvkzO1nA4Tjx+VAoT46/A99y PCqvUATr0ephbBEIb2g3T8taKA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:32:40 2026 by rpki-client