$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft File: XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json) Hash identifier: ilva85muSSbwj/limD6ORPmP9TpVgICMzFOJpxsld3I= Subject key identifier: B2:6D:9D:29:EB:8A:AB:7F:FB:51:79:4F:DA:6C:EB:FE:64:F2:C6:84 Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 Certificate issuer: /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft Manifest number: 49 Signing time: Sun 19 Apr 2026 07:57:42 +0000 Manifest this update: Sun 19 Apr 2026 07:57:42 +0000 Manifest next update: Sun 26 Apr 2026 07:57:42 +0000 Files and hashes: 1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: 3HhssfCjyZxS42PMwGOEwFm8P8jL+h2JTddMEGLFP0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Validity Not Before: Apr 19 07:57:42 2026 GMT Not After : Apr 26 07:57:42 2026 GMT Subject: CN=69e48af6-5c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:84:01:47:65:4d:fa:08:89:ea:ea:a9:26: 51:79:cf:a8:44:01:20:08:a1:53:b8:1b:d8:47:75: 58:4a:c2:3d:66:3f:8f:88:6e:b9:a8:74:56:e5:06: 8b:26:6d:46:98:61:a9:28:3b:7d:f3:45:df:b9:b2: 5a:75:15:6e:8d:16:8d:e5:d0:c7:b9:62:95:dc:64: 60:a1:bf:b7:93:1c:b4:d7:1c:c0:03:83:a1:f8:2e: 9a:ac:31:21:d7:7f:66:35:9f:a0:46:65:71:07:27: c2:32:ce:26:b9:68:e5:e2:49:b7:03:5d:54:08:32: a9:b3:4b:a3:95:3a:2b:0c:8f:22:10:8a:73:5d:ae: ee:08:1f:ec:14:a1:8b:8b:2c:3a:ef:37:28:d8:ad: ac:96:81:7b:00:b3:82:23:d0:33:d8:b7:76:db:b6: 3b:e2:df:bf:90:e7:e9:2a:de:9d:e3:ce:3e:86:48: 09:d9:f0:00:0e:7a:0d:6b:a2:43:68:02:8c:04:9d: 01:c8:67:a3:fd:99:aa:c8:a7:66:1a:f9:9c:e2:08: 32:2c:74:de:e5:0b:51:7b:af:a8:29:1f:c9:c5:73: e9:f4:c7:91:57:38:50:8b:1c:cb:0d:5c:45:05:3b: 7a:d9:69:05:51:6a:8d:f4:84:33:dd:3f:0b:72:b2: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6D:9D:29:EB:8A:AB:7F:FB:51:79:4F:DA:6C:EB:FE:64:F2:C6:84 X509v3 Authority Key Identifier: keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:08:cb:05:fa:e5:93:a8:1b:08:33:4f:d8:1a:b6:24:11:42: 7e:c3:ea:ea:72:16:45:15:e7:1a:1d:2a:05:7a:5a:94:36:29: 0b:07:4b:86:8e:41:a6:5a:ea:88:85:16:58:87:31:27:1a:81: 7f:6d:72:d9:0a:15:6b:a2:1e:fb:e9:fa:fd:9e:0a:44:5a:70: a9:4e:be:ba:a8:f8:1f:15:25:8d:e2:d8:18:2d:fd:20:4c:c7: bf:39:f3:f7:8e:45:3e:81:16:07:45:23:da:da:d5:ab:c8:46: 28:ed:13:6d:dc:7d:56:22:7a:90:6c:34:58:79:35:25:20:3e: a1:bf:3f:07:68:01:59:42:81:3b:3e:7a:df:b9:e9:7c:a0:77: 65:42:02:4e:9d:8c:42:77:16:f3:5b:c8:9b:2f:c7:cb:f2:01: cc:fd:07:29:ce:e6:c3:b5:49:24:7a:3f:35:99:99:3a:ef:b7: 59:e8:7f:58:21:1e:f3:03:38:da:0f:42:ab:b2:f4:28:cc:97: da:15:7e:00:6c:d9:33:10:eb:5c:3d:ca:17:b1:76:d3:25:90: f5:e4:09:80:ab:70:fd:24:e2:58:9e:1a:d3:72:b2:87:50:ac: a7:59:08:79:e6:ac:98:83:ca:72:8b:22:9c:34:c7:24:23:98: 60:c7:66:1b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NUY4QTExMC8GA1UEBRMoNUUyODhBMjg4MDRBRkZFRUZBMEU0NDQzMTA5NzlEN0NF RTk4RTQzMjAeFw0yNjA0MTkwNzU3NDJaFw0yNjA0MjYwNzU3NDJaMBgxFjAUBgNV BAMTDTY5ZTQ4YWY2LTVjM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXOIQBR2VN+giJ6uqpJlF5z6hEASAIoVO4G9hHdVhKwj1mP4+IbrmodFblBosm bUaYYakoO33zRd+5slp1FW6NFo3l0Me5YpXcZGChv7eTHLTXHMADg6H4LpqsMSHX f2Y1n6BGZXEHJ8Iyzia5aOXiSbcDXVQIMqmzS6OVOisMjyIQinNdru4IH+wUoYuL LDrvNyjYrayWgXsAs4Ij0DPYt3bbtjvi37+Q5+kq3p3jzj6GSAnZ8AAOeg1rokNo AowEnQHIZ6P9marIp2Ya+ZziCDIsdN7lC1F7r6gpH8nFc+n0x5FXOFCLHMsNXEUF O3rZaQVRao30hDPdPwtyspf3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsm2dKeuK q3/7UXlP2mzr/mTyxoQwHwYDVR0jBBgwFoAUXiiKKIBK/+76DkRDEJedfO6Y5DIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1RjhBL0Q2MTU2MTAwRDNE ODExRjBCNjRCRTY1MkM0RjlBRTAyL1hpaUtLSUJLXy03NkRrUkRFSmVkZk82WTVE SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlpS0tJQktfLTc2RGtSREVKZWRmTzZZNURJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 RjhBL0Q2MTU2MTAwRDNEODExRjBCNjRCRTY1MkM0RjlBRTAyL1hpaUtLSUJLXy03 NkRrUkRFSmVkZk82WTVESS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZCMsF+uWTqBsIM0/YGrYkEUJ+w+rqchZFFecaHSoFelqUNikLB0uGjkGmWuqI hRZYhzEnGoF/bXLZChVroh776fr9ngpEWnCpTr66qPgfFSWN4tgYLf0gTMe/OfP3 jkU+gRYHRSPa2tWryEYo7RNt3H1WInqQbDRYeTUlID6hvz8HaAFZQoE7Pnrfuel8 oHdlQgJOnYxCdxbzW8ibL8fL8gHM/QcpzubDtUkkej81mZk677dZ6H9YIR7zAzja D0KrsvQozJfaFX4AbNkzEOtcPcoXsXbTJZD15AmAq3D9JOJYnhrTcrKHUKynWQh5 5qyYg8pyiyKcNMckI5hgx2Yb -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:32 2026 by rpki-client