$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: iaXtzz6cMqhf0qKFTxn8eDuMUl9L2Dqnhj/7faPj6iY= Subject key identifier: 5F:41:1C:B5:28:2A:65:31:40:53:AB:FC:12:5C:45:95:BB:01:7C:42 Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 09C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 0995 Signing time: Thu 16 Apr 2026 19:57:03 +0000 Manifest this update: Thu 16 Apr 2026 19:57:03 +0000 Manifest next update: Thu 23 Apr 2026 19:57:03 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: 1qFbUFUm/EHXzXjjuA6yuDPAlCXU7YCKKWRmifFYbUM=) 2: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: 95lSl7vVPRfDQ24xYlePTZRf3aCd1VmR4GdHAdsIHtU=) 3: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: rC7/cLhAbtNiKypXkgnC2P4P5so5I+YnfNchz84YMA0=) 4: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: soe5Moz4gQVVes64vfH27mxJAWxDV9xSP3vrYYcdBj8=) 5: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: +RYGeu7uX4uBBcHWusqQhkXqLpcB4R1AKfIKops3PNA=) 6: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: 7NcbnhD/HJ8NBFUu7bu5fda+cHjTW1crabfldM6QJwo=) 7: 7B3252CC014911F1B56055C9516F56BC.roa (hash: Q4zhbv5IYafCWF+cKZ+N5EqVvhygYSFdunW/fgxR9Ms=) 8: 03706138786411EC8624EB12C4F9AE02.roa (hash: BrG7Q3Tkykmo9xilseoxsNjwLBVZ7ijytYCkK61f/ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2496 (0x9c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Apr 16 19:57:03 2026 GMT Not After : Apr 23 19:57:03 2026 GMT Subject: CN=69e13f0f-8556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:6f:e6:bb:4e:f4:19:79:f8:87:14:80:17: f8:ef:e1:27:f7:f3:28:21:7e:03:9c:60:3a:29:94: bf:4b:09:0f:30:c8:fe:c4:39:8e:67:d9:0c:db:3b: 25:61:f7:60:41:3e:f0:fd:fa:c8:a9:52:4f:fc:b1: cc:b4:6a:49:48:24:3a:da:22:73:71:7e:83:eb:2c: c2:9b:fc:12:d7:86:e7:8b:82:2f:d7:9f:fe:9b:80: 06:ea:3c:ae:11:1b:52:49:49:cc:ae:79:4a:91:82: 65:b1:3f:be:f6:ff:6a:52:a9:b7:f2:f1:86:41:da: 24:0a:63:93:f3:2f:7a:80:5d:6e:6e:b0:68:d8:51: 25:98:30:a9:39:73:83:09:f9:9f:f4:67:4c:b9:b6: c9:b3:e6:15:d9:cf:01:34:92:49:88:0d:9b:77:63: 2c:15:93:9e:e3:d3:0a:28:5f:4b:3e:47:7f:fd:5f: 75:88:a2:62:67:28:ca:88:25:f9:7b:e5:0e:50:48: 58:f7:c4:d9:e6:35:1c:fd:2d:4c:1b:24:ff:d9:79: f4:cb:9c:e8:bf:47:0c:9b:46:2f:65:a4:c7:fd:ef: ca:51:fd:34:76:fc:de:70:19:1b:38:ee:cb:95:bb: 68:35:12:66:c4:9d:43:44:ca:ce:e2:86:be:b6:1c: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:1C:B5:28:2A:65:31:40:53:AB:FC:12:5C:45:95:BB:01:7C:42 X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:78:73:a3:06:7d:75:20:07:34:fe:e7:0f:78:57:74:01:4c: b5:80:6c:a0:59:a5:f2:2e:c1:c8:0a:2f:e7:b5:69:00:df:63: b1:d6:df:0b:a6:77:1d:cc:9a:ab:29:cf:6f:9d:16:8a:c4:c1: d4:f9:b5:71:a6:0d:3a:d7:d0:28:a3:bf:69:ee:62:fd:a4:66: 07:c2:29:51:04:ff:0b:5f:57:8c:72:9d:f1:bc:04:be:1e:72: f1:da:8b:84:13:e8:68:5c:ad:d6:b6:be:45:8e:40:5b:15:d5: 67:d5:04:94:86:a3:7d:30:5c:f9:ed:6e:25:04:e4:11:3c:3f: 3e:3e:a0:db:ba:04:dd:ed:4f:0d:40:28:89:b2:0d:a4:4d:cf: 0a:a0:a5:d1:e3:79:2c:c9:ad:0b:29:72:6a:3c:d2:07:fe:c6: a6:91:93:d0:a5:3f:54:fa:ec:36:28:a2:65:4a:36:bd:b6:ab: d8:04:31:66:fc:6c:9a:8a:18:6f:0c:03:fc:45:f8:29:a0:35: 1e:cf:52:76:6c:18:e6:56:55:9b:c2:5a:48:96:20:be:43:b9: 56:e6:10:e8:46:4d:4f:26:45:a2:2e:89:63:4e:a0:fe:64:12: 63:a0:88:f7:b4:c2:9d:ba:fc:0b:b0:67:b1:b5:c0:bc:cb:8e: 39:4d:21:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjYwNDE2MTk1NzAzWhcNMjYwNDIzMTk1NzAzWjAYMRYwFAYD VQQDEw02OWUxM2YwZi04NTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NBv5rtO9Bl5+IcUgBf47+En9/MoIX4DnGA6KZS/SwkPMMj+xDmOZ9kM2zsl YfdgQT7w/frIqVJP/LHMtGpJSCQ62iJzcX6D6yzCm/wS14bni4Iv15/+m4AG6jyu ERtSSUnMrnlKkYJlsT++9v9qUqm38vGGQdokCmOT8y96gF1ubrBo2FElmDCpOXOD Cfmf9GdMubbJs+YV2c8BNJJJiA2bd2MsFZOe49MKKF9LPkd//V91iKJiZyjKiCX5 e+UOUEhY98TZ5jUc/S1MGyT/2Xn0y5zov0cMm0YvZaTH/e/KUf00dvzecBkbOO7L lbtoNRJmxJ1DRMrO4oa+thx3xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9BHLUo KmUxQFOr/BJcRZW7AXxCMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeHhzowZ9dSAHNP7nD3hXdAFMtYBsoFml8i7ByAov57VpAN9jsdbfC6Z3Hcya qynPb50WisTB1Pm1caYNOtfQKKO/ae5i/aRmB8IpUQT/C19XjHKd8bwEvh5y8dqL hBPoaFyt1ra+RY5AWxXVZ9UElIajfTBc+e1uJQTkETw/Pj6g27oE3e1PDUAoibIN pE3PCqCl0eN5LMmtCylyajzSB/7GppGT0KU/VPrsNiiiZUo2vbar2AQxZvxsmooY bwwD/EX4KaA1Hs9SdmwY5lZVm8JaSJYgvkO5VuYQ6EZNTyZFoi6JY06g/mQSY6CI 97TCnbr8C7BnsbXAvMuOOU0hbA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:52:02 2026 by rpki-client