$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: lkQIeTpozpm5k8KX74VVaSZv1p/7DPKqvTJJH4y0Gfc= Subject key identifier: 0E:2A:43:A1:2B:D3:37:2E:DD:5B:C6:25:86:34:0E:4E:E6:8D:21:83 Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 64 Signing time: Sun 19 Apr 2026 07:36:57 +0000 Manifest this update: Sun 19 Apr 2026 07:36:56 +0000 Manifest next update: Sun 26 Apr 2026 07:36:56 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: hQQRzT7QrhnXygsIHhAdxDOAp+rmpO2DJaqs6zOV/Eg=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Apr 19 07:36:56 2026 GMT Not After : Apr 26 07:36:56 2026 GMT Subject: CN=69e48619-b03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:74:62:4d:c3:8a:f2:71:32:15:dd:21:72: db:3b:87:d9:53:50:83:c7:d6:80:fb:fc:d6:6e:c7: 5d:4d:05:f2:f2:f4:35:5f:d5:1b:31:74:2e:18:d5: 48:1d:bc:f4:50:8c:7d:74:ff:4a:88:b1:af:f7:86: 4b:bd:5f:7d:25:72:eb:17:8b:37:64:32:00:dc:01: b5:c3:84:d5:8c:76:8e:96:c5:5b:08:60:1a:c0:96: 80:69:41:d3:5c:1d:4c:80:b8:00:b1:80:ab:4e:bd: 39:c4:f8:4d:f9:ad:8a:ad:a1:f8:75:48:42:41:85: 4b:d5:d4:b6:ad:5c:c2:5c:cc:8d:ce:f1:c0:06:2c: 02:7f:4d:93:8e:1d:3b:6f:05:9a:5e:7a:7e:33:22: fb:f2:83:f4:30:95:65:99:42:2a:e3:93:f6:1e:cb: 7a:2d:34:65:03:98:74:6f:70:0f:5a:dd:f8:88:b7: 9c:ec:07:a0:ee:54:48:81:35:1f:dc:48:95:0b:ba: 1e:63:13:a5:13:b9:08:20:63:e7:e3:52:85:fd:11: 38:2e:7e:ee:9f:6e:85:85:47:f5:77:ed:ec:0a:65: 75:70:41:1d:35:f2:ea:34:0d:fc:22:c9:44:f5:9e: e4:01:26:0a:0c:21:56:96:3f:0a:0f:9c:57:4f:39: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2A:43:A1:2B:D3:37:2E:DD:5B:C6:25:86:34:0E:4E:E6:8D:21:83 X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c3:d8:7f:19:a4:e7:ee:4b:b5:bd:fa:57:e1:03:6e:0f:06: 77:2e:a5:5c:a2:b3:df:34:b6:29:d5:1e:48:d0:3a:7c:e3:7c: 0c:6e:a8:da:76:75:92:9d:6e:14:44:69:cb:88:a4:53:3e:da: e8:a4:75:7e:8e:2b:75:30:c9:79:00:11:8a:be:a7:2c:03:b1: 4e:6f:05:1d:b0:74:1a:d7:1e:ce:ff:07:8e:cb:93:58:05:79: 7f:ad:5e:7d:a9:95:08:52:6a:1f:c5:16:dd:74:f4:47:f9:c4: f2:06:66:46:77:1c:ce:32:44:70:87:86:6a:f7:80:56:72:b7: e1:0a:08:64:99:5a:1d:fc:7b:57:c6:1c:8a:ae:33:fe:58:ac: 11:81:4e:03:3b:eb:a8:e2:6e:69:41:3a:79:89:76:e7:bc:6b: 27:0a:ac:ff:b1:af:4d:0f:86:6a:37:58:04:1e:75:8a:29:a0: 4d:27:df:e6:5b:94:68:43:ce:d4:45:7b:d3:10:ba:2e:fa:43: 29:2e:bc:5e:c4:3d:73:d6:df:a4:6b:f2:84:ba:f6:e1:8b:f2: 6f:2d:b8:88:95:81:6a:f7:0b:31:21:49:cd:95:7d:e4:f8:d2: 33:4d:52:34:40:a7:3a:5b:5b:15:9a:f6:28:9d:7e:90:1a:44: fd:bf:8b:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoNURERkREMzgzMTU2RkE1QjY1MzQxMTJFOUM4RTE1M0JC MjAwNTdDNjAeFw0yNjA0MTkwNzM2NTZaFw0yNjA0MjYwNzM2NTZaMBgxFjAUBgNV BAMTDTY5ZTQ4NjE5LWIwM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKjnRiTcOK8nEyFd0hcts7h9lTUIPH1oD7/NZux11NBfLy9DVf1RsxdC4Y1Ugd vPRQjH10/0qIsa/3hku9X30lcusXizdkMgDcAbXDhNWMdo6WxVsIYBrAloBpQdNc HUyAuACxgKtOvTnE+E35rYqtofh1SEJBhUvV1LatXMJczI3O8cAGLAJ/TZOOHTtv BZpeen4zIvvyg/QwlWWZQirjk/Yey3otNGUDmHRvcA9a3fiIt5zsB6DuVEiBNR/c SJULuh5jE6UTuQggY+fjUoX9ETgufu6fboWFR/V37ewKZXVwQR018uo0DfwiyUT1 nuQBJgoMIVaWPwoPnFdPOf2BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDipDoSvT Ny7dW8YlhjQOTuaNIYMwHwYDVR0jBBgwFoAUXd/dODFW+ltlNBEunI4VO7IAV8Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4L0Y5QjAyODg4QUVG RTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGRfZE9ERlctbHRsTkJFdW5JNFZPN0lBVjhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4L0Y5QjAyODg4QUVGRTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0 bE5CRXVuSTRWTzdJQVY4WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGw9h/GaTn7ku1vfpX4QNuDwZ3LqVcorPfNLYp1R5I0Dp843wMbqjadnWSnW4U RGnLiKRTPtropHV+jit1MMl5ABGKvqcsA7FObwUdsHQa1x7O/weOy5NYBXl/rV59 qZUIUmofxRbddPRH+cTyBmZGdxzOMkRwh4Zq94BWcrfhCghkmVod/HtXxhyKrjP+ WKwRgU4DO+uo4m5pQTp5iXbnvGsnCqz/sa9ND4ZqN1gEHnWKKaBNJ9/mW5RoQ87U RXvTELou+kMpLrxexD1z1t+ka/KEuvbhi/JvLbiIlYFq9wsxIUnNlX3k+NIzTVI0 QKc6W1sVmvYonX6QGkT9v4vR -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:18 2026 by rpki-client