$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: vx/l7ixXhRT9PyYU4Rd7ZwoJupRY7ajJLf5eYlgIuG0= Subject key identifier: 5D:43:A6:C2:8A:B5:BA:39:C4:7D:37:8B:99:FB:44:54:C7:7E:3B:E0 Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 14:30:43 +0000 Manifest this update: Fri 17 Apr 2026 14:30:42 +0000 Manifest next update: Fri 24 Apr 2026 14:30:42 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: Kd2Ow92aLPcBy3m+B4yMQqy5HkWim8uEnQXL2jdI+Dg=) 2: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) 3: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Apr 17 14:30:42 2026 GMT Not After : Apr 24 14:30:42 2026 GMT Subject: CN=69e24412-f0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:e1:8c:15:43:68:4d:12:1f:5b:aa:f0:3f: a7:ef:80:c6:1f:ca:2b:aa:83:3b:f1:99:c7:90:1e: 86:46:4b:58:66:68:98:e4:9c:4b:91:cc:47:f5:31: 76:61:5a:36:15:ee:00:06:96:4c:7c:54:23:97:71: 54:1d:f9:9b:82:8b:92:0a:8a:2a:34:31:44:4f:28: f9:27:87:f6:60:73:c1:f5:4f:c2:2c:e7:38:36:6e: 92:0e:d6:70:cf:2a:f5:84:a6:09:5c:06:5b:bf:cc: 5a:24:41:7c:4b:fb:66:52:9e:f0:f9:a2:a6:1d:33: 8c:2b:0e:3b:f5:2d:fd:ce:19:95:7c:d1:5c:e8:98: 70:b5:85:58:f6:50:69:92:c1:80:ca:da:ca:10:94: 02:3e:3e:75:cd:f8:9d:e2:00:8d:a0:db:60:01:c1: cd:b5:8c:a7:a9:b6:54:c5:c0:36:9f:74:43:ec:ed: 39:bb:b6:7f:2c:1e:79:9a:57:7f:79:8f:2b:a2:7d: d7:76:27:30:3f:63:32:b4:ca:0a:5d:ee:a1:ef:68: 51:dc:90:82:07:6a:af:0c:10:ac:3d:dc:b6:11:7e: 2a:6d:6a:a1:a9:bc:45:fa:4d:6d:e9:b4:cc:ec:11: cc:00:0b:21:3c:77:8d:9f:35:ae:28:f8:72:52:00: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:A6:C2:8A:B5:BA:39:C4:7D:37:8B:99:FB:44:54:C7:7E:3B:E0 X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5e:7f:b1:28:e0:cb:ce:62:af:49:ea:24:ee:06:e3:4f:c9: a9:18:d2:2f:53:e4:9d:9f:76:17:e6:10:73:08:88:65:7e:d3: cd:f1:40:0f:67:42:a5:5a:02:d3:21:71:d9:92:28:40:27:29: 95:8a:9e:71:64:41:ba:9a:98:7a:62:e8:bc:a6:06:82:de:c5: f8:c2:e1:a5:83:dc:d0:e0:85:0c:af:ac:22:32:71:4e:7e:a0: 0c:2e:26:25:39:98:1f:70:35:b6:c5:49:2e:93:6c:fb:32:07: a0:7c:88:77:9d:2c:ca:26:2c:87:7d:d7:86:a8:cf:63:5e:b5: be:a1:e3:df:82:ba:82:3c:8e:81:06:56:2f:dc:be:f1:ee:63: 05:59:5b:91:b3:78:49:2d:ce:d2:a0:e8:d2:7d:70:e8:6f:70: e9:39:7d:42:c9:77:54:58:5a:f4:aa:42:ce:c9:3e:17:a5:35: 95:c3:0d:55:aa:2b:85:39:3d:74:00:eb:6f:22:12:f2:f5:42: be:29:68:f9:38:7b:c9:a9:9a:e5:e9:ac:67:b3:fb:2c:8a:29: 9d:b4:cf:d5:f6:04:12:ac:cd:c1:a3:e0:97:4e:a7:7d:3a:79: a9:28:fa:01:d8:52:b2:e7:97:f4:89:8a:c3:b1:5d:60:55:67: 35:11:72:78 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA0MTcxNDMwNDJaFw0yNjA0MjQxNDMwNDJaMBgxFjAUBgNV BAMTDTY5ZTI0NDEyLWYwZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGOeGMFUNoTRIfW6rwP6fvgMYfyiuqgzvxmceQHoZGS1hmaJjknEuRzEf1MXZh WjYV7gAGlkx8VCOXcVQd+ZuCi5IKiio0MURPKPknh/Zgc8H1T8Is5zg2bpIO1nDP KvWEpglcBlu/zFokQXxL+2ZSnvD5oqYdM4wrDjv1Lf3OGZV80VzomHC1hVj2UGmS wYDK2soQlAI+PnXN+J3iAI2g22ABwc21jKeptlTFwDafdEPs7Tm7tn8sHnmaV395 jyuifdd2JzA/YzK0ygpd7qHvaFHckIIHaq8MEKw93LYRfiptaqGpvEX6TW3ptMzs EcwACyE8d42fNa4o+HJSAFXjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXUOmwoq1 ujnEfTeLmftEVMd+O+AwHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBGXn+xKODLzmKvSeok7gbjT8mpGNIvU+Sdn3YX5hBzCIhlftPN8UAPZ0KlWgLT IXHZkihAJymVip5xZEG6mph6Yui8pgaC3sX4wuGlg9zQ4IUMr6wiMnFOfqAMLiYl OZgfcDW2xUkuk2z7MgegfIh3nSzKJiyHfdeGqM9jXrW+oePfgrqCPI6BBlYv3L7x 7mMFWVuRs3hJLc7SoOjSfXDob3DpOX1CyXdUWFr0qkLOyT4XpTWVww1VqiuFOT10 AOtvIhLy9UK+KWj5OHvJqZrl6axns/ssiimdtM/V9gQSrM3Bo+CXTqd9OnmpKPoB 2FKy55f0iYrDsV1gVWc1EXJ4 -----END CERTIFICATE-----Generated at Fri Apr 17 16:11:54 2026 by rpki-client