$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json) Hash identifier: o27A1XrW0mQlHHlxPOGxkPbtqpCST7aelVhd9nmGwpY= Subject key identifier: 5B:D1:0E:17:E7:30:2C:D1:27:2B:27:54:B9:FF:85:9A:34:5A:AC:F5 Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft Manifest number: 0602 Signing time: Thu 16 Apr 2026 22:48:53 +0000 Manifest this update: Thu 16 Apr 2026 22:48:53 +0000 Manifest next update: Thu 23 Apr 2026 22:48:53 +0000 Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: EXpjmVk47k0af0OOoDJ2eL9ByT9bqcNa1MxbNALSGq0=) 2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: 3VA1KwUIIhxyT4ghxT229oTXXd7seGOOX/95PCsXUZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Validity Not Before: Apr 16 22:48:53 2026 GMT Not After : Apr 23 22:48:53 2026 GMT Subject: CN=69e16755-71ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:18:9a:87:a6:7a:03:7f:6e:f9:61:a5:ed: a6:92:06:f2:a6:ee:c8:13:66:9f:98:ad:e8:64:47: 7d:70:7b:a8:8d:0e:38:03:23:1b:89:e9:cd:b9:34: 27:bc:dd:87:e1:ff:46:c1:70:5e:78:44:5f:5e:1c: 81:40:de:5d:b4:8e:1d:12:d8:2c:2a:a1:23:0b:9a: c8:6c:c6:29:32:64:02:ae:8f:ed:eb:cb:16:90:4e: 42:57:1e:d1:cb:e5:7a:af:11:d6:87:4a:11:0f:f6: f6:f7:1e:55:3a:45:82:7a:77:3f:d5:c2:8a:20:13: b6:d1:dd:02:15:a1:69:dd:79:41:c8:8c:77:2e:53: cb:90:98:98:96:00:76:a4:27:6b:7f:16:fc:6d:01: ea:65:43:09:b6:4a:7d:f5:06:3c:25:62:56:c3:d1: 20:55:95:0d:61:6f:26:50:81:42:cf:e2:af:3b:64: 54:8b:f1:e7:59:42:fe:b4:2d:b3:97:56:ab:85:ae: b4:4d:f2:d7:84:d4:45:fc:04:19:f2:7a:0b:b4:d7: eb:c3:f3:b4:dd:d6:5f:ac:3a:62:34:7f:5a:84:b1: 6b:3c:4f:60:4c:c6:3c:5e:f7:04:62:c3:61:87:87: 1e:d7:05:ef:29:8f:92:10:d7:05:a5:d7:e7:52:ac: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:0E:17:E7:30:2C:D1:27:2B:27:54:B9:FF:85:9A:34:5A:AC:F5 X509v3 Authority Key Identifier: keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:bf:97:26:a4:65:34:f1:dd:14:ea:ae:59:46:7a:e9:48:88: 6d:ba:95:70:29:04:b6:4c:b7:45:0c:87:95:46:53:c5:bd:f1: 86:6b:d4:81:97:e4:02:b7:07:6f:d9:52:05:70:ef:57:da:60: 98:22:e0:40:8f:f8:6a:1c:f5:15:2a:4b:10:1f:0f:4d:9c:23: d5:9d:57:a2:d2:fe:8e:2b:0d:a4:e4:be:4b:34:8d:c7:13:86: 51:dd:04:2c:67:a8:7d:fc:e5:54:9c:5d:08:31:40:da:17:26: e8:e1:51:84:05:2b:9d:7f:85:80:3a:dc:0e:94:d9:2d:d7:aa: cc:c4:7b:5e:6d:c8:65:c7:4d:37:64:e8:6c:bb:14:7b:1b:93: af:e0:21:35:b2:24:92:e5:5c:1e:f7:a3:e8:a2:f5:5a:4c:5e: 4b:2c:a9:74:d6:be:ea:2d:64:dd:5d:c7:79:57:a7:a2:4c:37: c6:98:ac:23:1e:4e:3e:12:c1:ae:2a:e8:8d:e2:28:ea:e2:f1: 3b:ae:90:a1:ba:64:a3:c1:0e:a7:26:12:52:3c:7d:36:6f:77: e6:63:2b:38:aa:5a:2d:96:0b:81:2d:db:61:3b:f4:da:07:42: a1:4a:74:51:8d:f3:3e:b0:be:1a:29:f8:2a:0e:e3:dd:aa:39: 48:a6:71:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2 NDMwMTlCNUUwHhcNMjYwNDE2MjI0ODUzWhcNMjYwNDIzMjI0ODUzWjAYMRYwFAYD VQQDEw02OWUxNjc1NS03MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqYYmoemegN/bvlhpe2mkgbypu7IE2afmK3oZEd9cHuojQ44AyMbienNuTQn vN2H4f9GwXBeeERfXhyBQN5dtI4dEtgsKqEjC5rIbMYpMmQCro/t68sWkE5CVx7R y+V6rxHWh0oRD/b29x5VOkWCenc/1cKKIBO20d0CFaFp3XlByIx3LlPLkJiYlgB2 pCdrfxb8bQHqZUMJtkp99QY8JWJWw9EgVZUNYW8mUIFCz+KvO2RUi/HnWUL+tC2z l1arha60TfLXhNRF/AQZ8noLtNfrw/O03dZfrDpiNH9ahLFrPE9gTMY8XvcEYsNh h4ce1wXvKY+SENcFpdfnUqy9WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvRDhfn MCzRJysnVLn/hZo0Wqz1MB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFQi83NzE0OEFDNkVCMDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZP ZmJnZDFYRXd2VTFrTUJtMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIL+XJqRlNPHdFOquWUZ66UiIbbqVcCkEtky3RQyHlUZTxb3xhmvUgZfkArcH b9lSBXDvV9pgmCLgQI/4ahz1FSpLEB8PTZwj1Z1XotL+jisNpOS+SzSNxxOGUd0E LGeoffzlVJxdCDFA2hcm6OFRhAUrnX+FgDrcDpTZLdeqzMR7Xm3IZcdNN2TobLsU exuTr+AhNbIkkuVcHvej6KL1WkxeSyypdNa+6i1k3V3HeVenokw3xpisIx5OPhLB rirojeIo6uLxO66Qobpko8EOpyYSUjx9Nm935mMrOKpaLZYLgS3bYTv02gdCoUp0 UY3zPrC+Gin4Kg7j3ao5SKZxsg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:06:59 2026 by rpki-client