$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: JV/h/tR1v16/EBp1gRZxQ6YwB6OsdmAJOfsf8KV6Ml8= Subject key identifier: BE:DB:FF:77:5F:A1:90:29:AA:F9:84:D6:E1:BC:E4:80:0F:19:06:F7 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 0229 Signing time: Sun 19 Apr 2026 02:30:32 +0000 Manifest this update: Sun 19 Apr 2026 02:30:31 +0000 Manifest next update: Sun 26 Apr 2026 02:30:31 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: CKWWynr6EIBFF7lYtxpqBOyixeWFXZvClZxVUc2+u+Y=) 2: 3474AD64FAD311ED9CEE0E29C4F9AE02.roa (hash: FBiK3jMFORAxcsSdpQP7q8Wx8eDul+Eyz34pvhVQP2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Apr 19 02:30:31 2026 GMT Not After : Apr 26 02:30:31 2026 GMT Subject: CN=69e43e48-a95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:aa:33:e0:ca:15:e5:40:98:b7:46:db:8b: 38:dd:7f:ea:b8:7f:dd:ff:2b:38:ed:17:88:2e:21: 08:f9:35:eb:7c:b8:47:eb:bc:15:66:96:70:e1:9c: 15:ca:fd:4e:b0:49:4e:b6:55:6c:76:d5:9c:22:a5: b8:4c:cc:a4:ad:01:10:5d:66:4d:06:94:cd:17:24: 48:ce:7f:19:dd:f9:1c:f1:66:4d:88:13:95:49:63: 4c:54:13:1e:8c:74:69:10:53:38:be:fc:eb:b8:60: b6:e0:80:ea:32:e2:d7:fc:53:fd:c8:92:7e:4e:75: 75:8b:c0:a0:0b:40:bb:45:64:83:91:44:37:e9:6a: 14:14:82:35:a9:ea:68:f4:f5:e3:ff:82:c9:d7:ec: 4f:e9:3c:f4:b6:8d:6f:70:b5:ae:f3:f8:62:83:bd: 6c:25:3e:3e:79:92:78:a0:c8:75:1e:dc:1e:ea:49: 65:f5:af:8a:c3:8b:aa:f4:6d:92:62:a8:44:a4:47: e7:53:29:8a:13:c6:80:f5:93:ba:82:5b:6f:32:af: b1:51:27:c8:01:b2:e8:39:00:6b:b2:7b:f2:5b:32: af:5d:5a:0e:d1:0d:4f:b6:2f:6d:c0:ef:1e:e3:d8: 59:9b:b3:1d:07:22:e9:4b:ab:4e:f6:c0:44:b4:07: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DB:FF:77:5F:A1:90:29:AA:F9:84:D6:E1:BC:E4:80:0F:19:06:F7 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:9e:40:53:77:db:b1:e0:9b:7e:9f:c0:1c:92:d3:a3:f9: 45:60:ba:2e:22:0a:40:16:ed:a5:ed:50:20:82:57:5e:c9:c6: 5f:ec:07:ef:7a:e4:aa:df:12:81:30:2c:70:03:ed:55:c7:26: 74:61:fd:4e:0c:23:04:cf:c4:38:da:7f:73:29:1f:68:5d:67: d2:4c:e1:d4:e5:b3:27:49:02:ed:de:a1:32:b4:6f:bb:79:eb: ab:48:8f:33:22:9a:10:d9:fd:be:91:f5:3b:07:19:1d:ed:f6: c2:a4:38:18:25:3a:5a:d4:f9:b2:2f:50:0f:ff:45:a7:96:43: d6:24:76:81:3f:cd:56:df:0c:42:aa:6a:27:68:8c:af:19:3e: e6:ec:95:c8:c9:17:88:0f:f2:0b:6c:ee:41:1d:cc:94:31:df: 9b:05:ad:e5:63:7b:b2:d7:e7:f2:4f:f3:6c:42:6d:31:e7:f0: 43:56:e3:fd:d8:98:dd:4e:b5:a7:a6:6c:44:26:b1:e1:bd:78: 36:d4:89:91:98:3b:fa:7e:de:58:98:51:a2:8a:17:c3:f0:41: 57:7f:50:97:b3:fb:71:4e:87:8f:a3:25:f7:33:d3:cf:70:a6: 39:93:bd:e2:90:de:d1:b2:f1:41:39:10:49:be:b3:50:29:83: 9e:27:8f:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYwNDE5MDIzMDMxWhcNMjYwNDI2MDIzMDMxWjAYMRYwFAYD VQQDEw02OWU0M2U0OC1hOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7SqM+DKFeVAmLdG24s43X/quH/d/ys47ReILiEI+TXrfLhH67wVZpZw4ZwV yv1OsElOtlVsdtWcIqW4TMykrQEQXWZNBpTNFyRIzn8Z3fkc8WZNiBOVSWNMVBMe jHRpEFM4vvzruGC24IDqMuLX/FP9yJJ+TnV1i8CgC0C7RWSDkUQ36WoUFII1qepo 9PXj/4LJ1+xP6Tz0to1vcLWu8/hig71sJT4+eZJ4oMh1Htwe6kll9a+Kw4uq9G2S YqhEpEfnUymKE8aA9ZO6gltvMq+xUSfIAbLoOQBrsnvyWzKvXVoO0Q1Pti9twO8e 49hZm7MdByLpS6tO9sBEtAfkxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7b/3df oZApqvmE1uG85IAPGQb3MB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaCueQFN327Hgm36fwByS06P5RWC6LiIKQBbtpe1QIIJXXsnGX+wH73rkqt8S gTAscAPtVccmdGH9TgwjBM/EONp/cykfaF1n0kzh1OWzJ0kC7d6hMrRvu3nrq0iP MyKaENn9vpH1OwcZHe32wqQ4GCU6WtT5si9QD/9Fp5ZD1iR2gT/NVt8MQqpqJ2iM rxk+5uyVyMkXiA/yC2zuQR3MlDHfmwWt5WN7stfn8k/zbEJtMefwQ1bj/diY3U61 p6ZsRCax4b14NtSJkZg7+n7eWJhRoooXw/BBV39Ql7P7cU6Hj6Ml9zPTz3CmOZO9 4pDe0bLxQTkQSb6zUCmDniePuA== -----END CERTIFICATE-----Generated at Sun Apr 19 10:15:03 2026 by rpki-client