$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: /RlYA5YJTDt52rwcIqRlRLpAbMOdUqtmvNQWqItX2s8= Subject key identifier: 0C:D7:2F:A3:5B:2F:F0:A5:92:23:F4:04:DE:DD:98:38:58:F3:3C:11 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 01C9 Signing time: Fri 17 Apr 2026 03:38:09 +0000 Manifest this update: Fri 17 Apr 2026 03:38:08 +0000 Manifest next update: Fri 24 Apr 2026 03:38:08 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: dMlH+JBN5D6CrV4ZBYvmUvvazg4KHDvDLeoLGLHuM20=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Apr 17 03:38:08 2026 GMT Not After : Apr 24 03:38:08 2026 GMT Subject: CN=69e1ab21-fdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:21:ed:41:69:6a:45:cf:17:92:0b:c1:1d:73: 06:f7:5c:01:9e:58:74:e7:8f:6f:03:d4:d4:5e:bb: 50:ee:2d:c6:20:0b:53:a4:13:d1:f9:b7:bd:92:12: 8d:10:e2:e0:09:15:f5:03:05:ac:7c:d4:6c:a7:7d: 3d:63:da:48:38:02:f1:43:74:4b:bc:8e:9e:bf:c0: f7:fa:5f:11:af:de:ce:62:b9:3d:fd:f2:83:5f:95: 90:8a:55:1e:ee:11:52:67:b5:1f:2f:72:22:25:74: e9:52:94:7f:16:f5:81:d3:68:6e:23:c9:e4:7c:17: 53:e0:d5:ef:94:a2:b5:ad:64:15:5d:06:68:87:1d: 01:9f:11:43:1a:b1:65:21:2b:81:6e:05:ee:b9:ee: b0:f6:9d:15:d0:f5:39:45:eb:e6:8f:04:6c:66:21: 40:aa:27:17:a5:42:c3:da:57:7b:ba:b5:de:6a:ed: a2:0b:39:c7:0b:b9:64:65:51:57:88:a8:4e:03:96: 6f:18:a5:61:04:10:a6:0a:6a:4a:0d:bc:58:4b:de: 6a:a0:2b:24:dc:bc:59:17:c7:73:49:60:65:a9:f6: 7b:48:1f:d8:df:fb:74:94:d9:18:74:dc:ea:13:b8: 53:7d:5c:5c:8b:6e:6a:28:3e:3e:80:17:82:52:d9: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D7:2F:A3:5B:2F:F0:A5:92:23:F4:04:DE:DD:98:38:58:F3:3C:11 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c5:88:f9:53:9f:74:8c:35:36:f6:d1:7d:60:9f:94:f6:9f: e4:b7:01:48:fe:1d:24:ea:bc:9d:dd:c4:de:95:f6:54:08:80: 93:dc:4f:25:5e:03:ed:3f:26:1f:56:ca:72:dc:ea:b7:c1:e9: df:01:43:74:d4:40:2a:07:6e:19:11:1e:40:22:13:bd:54:8e: 95:6f:04:b2:04:13:db:8b:07:c4:b5:71:fb:c7:7c:b9:65:09: 31:7c:c8:9c:e0:03:45:97:71:ef:e1:cb:ec:20:45:62:33:f2: 85:8c:f3:d1:34:21:b2:70:54:98:60:71:47:4f:d0:c3:d0:38: ef:af:ad:a0:71:b2:6d:ee:ef:fb:5d:ad:b4:0f:a6:01:4f:2d: ba:09:de:1b:6e:23:51:ab:c5:20:c5:7d:ca:36:3a:5f:95:17: 69:9a:21:46:87:a9:9b:d8:f4:3e:56:04:2c:58:33:89:e1:7b: c9:db:59:13:e5:a7:63:36:a6:be:eb:8e:89:fc:c7:64:d9:7d: 78:fe:c0:1c:6b:ef:71:89:3d:3f:4a:5d:4f:9d:a0:f6:78:c0: cd:bb:aa:81:3d:10:40:f9:99:d1:f8:18:9c:65:4c:60:d6:37: 61:a1:a8:e5:15:fb:d7:71:51:80:04:e0:51:9a:4a:4f:42:bd: aa:c0:cf:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjYwNDE3MDMzODA4WhcNMjYwNDI0MDMzODA4WjAYMRYwFAYD VQQDEw02OWUxYWIyMS1mZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyHtQWlqRc8XkgvBHXMG91wBnlh0549vA9TUXrtQ7i3GIAtTpBPR+be9khKN EOLgCRX1AwWsfNRsp309Y9pIOALxQ3RLvI6ev8D3+l8Rr97OYrk9/fKDX5WQilUe 7hFSZ7UfL3IiJXTpUpR/FvWB02huI8nkfBdT4NXvlKK1rWQVXQZohx0BnxFDGrFl ISuBbgXuue6w9p0V0PU5RevmjwRsZiFAqicXpULD2ld7urXeau2iCznHC7lkZVFX iKhOA5ZvGKVhBBCmCmpKDbxYS95qoCsk3LxZF8dzSWBlqfZ7SB/Y3/t0lNkYdNzq E7hTfVxci25qKD4+gBeCUtn9PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzXL6Nb L/ClkiP0BN7dmDhY8zwRMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbMWI+VOfdIw1NvbRfWCflPaf5LcBSP4dJOq8nd3E3pX2VAiAk9xPJV4D7T8m H1bKctzqt8Hp3wFDdNRAKgduGREeQCITvVSOlW8EsgQT24sHxLVx+8d8uWUJMXzI nOADRZdx7+HL7CBFYjPyhYzz0TQhsnBUmGBxR0/Qw9A476+toHGybe7v+12ttA+m AU8tugneG24jUavFIMV9yjY6X5UXaZohRoepm9j0PlYELFgzieF7ydtZE+WnYzam vuuOifzHZNl9eP7AHGvvcYk9P0pdT52g9njAzbuqgT0QQPmZ0fgYnGVMYNY3YaGo 5RX713FRgATgUZpKT0K9qsDP6Q== -----END CERTIFICATE-----Generated at Sat Apr 18 01:53:19 2026 by rpki-client