$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: 9vjOw+72HjPeACCTd8isOUfy5qzgbp4xwKIzS+8Hcr8= Subject key identifier: 0C:EE:4C:8A:96:17:BF:5D:1D:19:31:AF:B3:B5:68:D7:1A:B3:41:3A Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 06E3 Signing time: Thu 16 Apr 2026 22:06:07 +0000 Manifest this update: Thu 16 Apr 2026 22:06:06 +0000 Manifest next update: Thu 23 Apr 2026 22:06:06 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: OQ0qTQc/QdjQE1aDSDchiY5prAhB/lDpk6V7UYCHdbE=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: aDPXdcJkf4Q3bEJLDiYToXTVljTbQsc9tq+SGxeE8gY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Apr 16 22:06:06 2026 GMT Not After : Apr 23 22:06:06 2026 GMT Subject: CN=69e15d4f-dd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:d3:4e:40:6a:03:e2:e1:6a:0e:58:c1:d2: 2b:1e:a9:d8:7e:5e:c8:2b:5b:24:d5:ab:c3:fe:49: ca:5b:a5:21:aa:6c:15:db:36:88:5b:95:f5:c6:07: 46:f9:2e:91:fe:75:5a:65:d9:4d:52:ef:f6:64:ab: 14:c3:45:2e:9c:21:06:6e:4a:59:9d:9e:b1:f8:d8: 5c:a1:ab:3f:ec:9d:3b:b1:9e:3d:a1:2a:4c:ae:cb: 21:c2:a2:7b:32:f2:3f:5c:43:61:cc:92:3c:99:76: c5:3d:52:84:54:5b:07:6b:d7:b0:00:79:88:03:54: e0:8a:37:24:68:0f:47:e9:b8:31:50:2e:96:50:dd: 71:0c:40:c4:5e:cd:03:5c:fd:59:f9:38:3c:8f:b7: 4a:66:66:97:d7:e7:39:8d:1d:97:b9:28:8c:42:d5: 31:d7:06:74:60:93:30:8f:f4:a1:d4:5b:15:dd:25: f6:03:2c:ed:e5:2e:2b:0e:62:45:83:57:36:d9:fa: 0c:5b:0e:e8:14:0c:9e:64:0e:7d:3b:11:52:d2:80: 73:37:c5:46:42:06:f8:20:82:6e:6d:52:bd:05:a1: 37:16:1b:80:27:a7:8f:1b:91:2d:43:7e:23:7d:00: bb:3b:b5:39:b2:ae:c7:e2:b5:cd:07:62:92:df:fb: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EE:4C:8A:96:17:BF:5D:1D:19:31:AF:B3:B5:68:D7:1A:B3:41:3A X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b6:9b:fa:38:78:4c:a4:d6:3a:78:fb:61:f8:3d:1c:2c:6f: 86:77:ed:bb:c0:3f:af:ad:79:22:db:5b:51:b7:d4:ca:ff:ec: 31:61:d9:7b:2f:64:4b:64:c5:b1:4b:8c:b7:ff:db:af:ac:5a: 8f:5d:b2:ec:95:c5:a3:dd:38:64:0b:bc:6b:f3:12:20:9b:4e: 16:3f:74:33:81:37:80:0d:9e:6d:4f:e0:79:39:80:fb:44:1e: 03:53:f4:d1:35:a6:23:c7:bf:a1:46:01:28:42:3d:05:da:b1: 94:9f:e6:8d:77:dc:e9:00:b2:88:0e:5e:2d:ca:d0:0c:ff:44: 50:e3:18:d8:8d:99:27:b7:d0:fe:b0:11:3b:5e:78:2f:0c:d2: 21:ec:87:1f:d0:26:c6:a0:f5:3c:db:40:87:f4:99:09:ac:9b: 49:28:9c:f9:24:29:8f:bf:ff:11:1a:72:67:b5:47:0f:60:f8: 2c:1f:aa:a7:62:da:12:a2:4d:5f:b3:c3:14:18:a9:ef:6c:57: 02:22:8b:66:20:4e:ac:db:86:fd:6e:32:b8:65:c0:bf:12:e4: d9:ed:d4:73:22:77:cb:c2:91:99:08:c8:2e:a1:4d:12:57:33: 92:53:c0:5e:27:b5:b4:2e:31:8d:ec:4d:a7:b2:ed:a4:60:a5: c9:32:16:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjYwNDE2MjIwNjA2WhcNMjYwNDIzMjIwNjA2WjAYMRYwFAYD VQQDEw02OWUxNWQ0Zi1kZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1fTTkBqA+Lhag5YwdIrHqnYfl7IK1sk1avD/knKW6UhqmwV2zaIW5X1xgdG +S6R/nVaZdlNUu/2ZKsUw0UunCEGbkpZnZ6x+Nhcoas/7J07sZ49oSpMrsshwqJ7 MvI/XENhzJI8mXbFPVKEVFsHa9ewAHmIA1TgijckaA9H6bgxUC6WUN1xDEDEXs0D XP1Z+Tg8j7dKZmaX1+c5jR2XuSiMQtUx1wZ0YJMwj/Sh1FsV3SX2Ayzt5S4rDmJF g1c22foMWw7oFAyeZA59OxFS0oBzN8VGQgb4IIJubVK9BaE3FhuAJ6ePG5EtQ34j fQC7O7U5sq7H4rXNB2KS3/tZrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzuTIqW F79dHRkxr7O1aNcas0E6MB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANbab+jh4TKTWOnj7Yfg9HCxvhnftu8A/r615IttbUbfUyv/sMWHZey9kS2TF sUuMt//br6xaj12y7JXFo904ZAu8a/MSIJtOFj90M4E3gA2ebU/geTmA+0QeA1P0 0TWmI8e/oUYBKEI9BdqxlJ/mjXfc6QCyiA5eLcrQDP9EUOMY2I2ZJ7fQ/rARO154 LwzSIeyHH9AmxqD1PNtAh/SZCaybSSic+SQpj7//ERpyZ7VHD2D4LB+qp2LaEqJN X7PDFBip72xXAiKLZiBOrNuG/W4yuGXAvxLk2e3UcyJ3y8KRmQjILqFNElczklPA Xie1tC4xjexNp7LtpGClyTIWjQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:21:21 2026 by rpki-client