$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json) Hash identifier: yLGgaPnJDmgWadWtLjRglfG1WLK0lQqA8uFKjyTCd6A= Subject key identifier: D2:3A:1F:BA:D7:E2:D8:17:62:76:A4:FA:83:90:30:EF:26:9B:00:6F Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft Manifest number: 4F Signing time: Fri 17 Apr 2026 07:56:04 +0000 Manifest this update: Fri 17 Apr 2026 07:56:04 +0000 Manifest next update: Fri 24 Apr 2026 07:56:04 +0000 Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: LFoc5aVeUG4zTMzvInYNPIsU5hg1Vi0glYONQh+6sxM=) 2: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wK4ZUFHP7svDczy0YCkmOX/r2Vqw7guLhrYQg+0Ja2I=) 3: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: vM2NU/PkWzUmY2ujZBzsjC1mzDOV/eoIUaPwXnbjazI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Validity Not Before: Apr 17 07:56:04 2026 GMT Not After : Apr 24 07:56:04 2026 GMT Subject: CN=69e1e794-ac89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:96:d0:1d:9c:fb:4c:6c:ed:34:70:8f:f0: 89:ff:2b:cd:a9:b5:0e:89:2b:ac:e8:0f:00:6c:67: 3f:0c:dd:65:3f:fb:39:e7:73:34:63:f7:24:40:33: 5b:3e:79:28:c9:31:54:fe:6b:e5:8a:ec:e2:34:0f: 4a:36:a8:a7:4c:71:c2:e2:1d:00:2f:f0:e0:61:38: 93:13:49:72:67:5d:20:3a:7c:63:ab:49:cd:55:a5: 69:77:59:27:6a:86:b3:30:f3:0a:40:d0:e5:36:e1: 80:f4:85:28:72:63:3b:fb:bb:a5:7a:02:0e:5d:e5: 7c:ae:64:74:b2:63:0f:b7:b3:12:95:9d:98:20:49: c2:69:97:cf:f3:88:b2:e6:a4:26:e0:14:df:70:d0: 94:20:db:9a:c9:5e:8a:a5:9f:87:e0:c9:50:4f:76: 4b:82:98:b7:d2:22:e6:60:a2:40:05:c0:e8:09:2c: 20:f2:16:f5:6a:17:b2:3b:73:75:70:2f:07:66:6b: 55:ad:b2:61:a8:d3:9c:6a:a0:ee:20:e3:b9:a6:61: 5d:9c:af:77:15:92:cf:e8:d2:8a:29:9c:e3:a1:28: 02:d5:f3:73:12:a1:fa:fa:4c:e1:61:b0:11:07:e7: 44:be:66:eb:3d:e0:99:87:60:45:00:69:4e:90:26: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3A:1F:BA:D7:E2:D8:17:62:76:A4:FA:83:90:30:EF:26:9B:00:6F X509v3 Authority Key Identifier: keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ef:ee:ed:ed:6d:37:1b:3a:20:12:ea:28:d9:f7:ec:de:f2: d2:63:bd:51:6d:d7:06:c7:77:7c:fb:00:4d:e8:67:eb:80:61: 66:80:f2:be:ad:4e:f1:0b:8e:69:8a:21:6f:5a:6d:ea:37:45: a8:9a:92:9e:c4:27:10:24:04:93:26:6b:d9:dc:ba:16:19:f7: 13:43:bb:fa:07:30:a7:92:9e:3f:04:6e:c7:0e:50:70:56:46: f1:25:71:1a:4c:26:87:9a:42:31:a1:d5:55:ed:6c:b1:27:3c: 53:3c:c6:18:d3:e0:95:51:c8:ec:84:84:67:32:b5:c4:15:80: 8e:76:d4:15:d7:0a:19:2b:cd:77:53:23:80:25:29:d5:ba:8f: 61:c0:ed:cb:fe:49:2c:5d:6e:31:fe:dd:18:a2:28:31:af:79: 02:d8:51:3b:88:b3:46:01:8b:cb:ee:a1:87:f0:7f:17:89:8b: 70:86:4a:2f:77:d5:08:f6:e4:38:f6:6b:72:6e:f2:58:f5:bc: a0:d0:89:ae:25:83:90:d5:42:ad:0f:91:d8:de:ad:b2:46:7b: 0e:c4:cc:ec:2a:fd:5b:fa:e6:52:76:a2:05:eb:7f:64:e2:b1: 3d:b7:2b:9b:11:e8:0d:fa:d2:0d:98:71:1a:72:f2:4e:e5:92: dc:b6:83:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0ZDNTExMC8GA1UEBRMoNUNDQTk4Rjg3OEM5MjQwMkUyRjEwNEUyQjhCREFCODE5 MEIxRkFBMjAeFw0yNjA0MTcwNzU2MDRaFw0yNjA0MjQwNzU2MDRaMBgxFjAUBgNV BAMTDTY5ZTFlNzk0LWFjODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4RZbQHZz7TGztNHCP8In/K82ptQ6JK6zoDwBsZz8M3WU/+znnczRj9yRAM1s+ eSjJMVT+a+WK7OI0D0o2qKdMccLiHQAv8OBhOJMTSXJnXSA6fGOrSc1VpWl3WSdq hrMw8wpA0OU24YD0hShyYzv7u6V6Ag5d5XyuZHSyYw+3sxKVnZggScJpl8/ziLLm pCbgFN9w0JQg25rJXoqln4fgyVBPdkuCmLfSIuZgokAFwOgJLCDyFvVqF7I7c3Vw Lwdma1WtsmGo05xqoO4g47mmYV2cr3cVks/o0oopnOOhKALV83MSofr6TOFhsBEH 50S+Zus94JmHYEUAaU6QJtQdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0jofutfi 2BdidqT6g5Aw7yabAG8wHwYDVR0jBBgwFoAUXMqY+HjJJALi8QTiuL2rgZCx+qIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDRkM1Lzk5OUYwMjQ4QzVB QjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1x SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWE1xWS1IakpKQUxpOFFUaXVMMnJnWkN4LXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD RkM1Lzk5OUYwMjQ4QzVBQjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFM aThRVGl1TDJyZ1pDeC1xSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAF7+7t7W03GzogEuoo2ffs3vLSY71RbdcGx3d8+wBN6GfrgGFmgPK+rU7xC45p iiFvWm3qN0WompKexCcQJASTJmvZ3LoWGfcTQ7v6BzCnkp4/BG7HDlBwVkbxJXEa TCaHmkIxodVV7WyxJzxTPMYY0+CVUcjshIRnMrXEFYCOdtQV1woZK813UyOAJSnV uo9hwO3L/kksXW4x/t0Yoigxr3kC2FE7iLNGAYvL7qGH8H8XiYtwhkovd9UI9uQ4 9mtybvJY9byg0ImuJYOQ1UKtD5HY3q2yRnsOxMzsKv1b+uZSdqIF639k4rE9tyub EegN+tINmHEacvJO5ZLctoPo -----END CERTIFICATE-----Generated at Fri Apr 17 12:51:01 2026 by rpki-client