$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: 3U8fPBjf45/DcZXB822WHpQo4kDYmb0t+OON7P64MmM= Subject key identifier: C2:07:DB:55:36:73:88:1A:DE:25:AC:B7:B8:3F:F3:7A:60:74:20:EB Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 09E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 09D8 Signing time: Thu 16 Apr 2026 19:48:02 +0000 Manifest this update: Thu 16 Apr 2026 19:48:01 +0000 Manifest next update: Thu 23 Apr 2026 19:48:01 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: c9BgfeNuhgGkHEerhZOrEjKXu/6ulxRp/LdPaxIgbYE=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: lDb01SzRr4flIC0mr35RR7fbVzd2VcHd4sFXDjKyy5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2530 (0x9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Apr 16 19:48:01 2026 GMT Not After : Apr 23 19:48:01 2026 GMT Subject: CN=69e13cf2-0b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:9c:c6:87:0b:e9:4d:f9:72:08:db:30:0c: 6b:ee:e8:c4:2c:52:5f:e6:56:88:5f:d0:a4:03:54: 8b:02:86:51:5e:6f:a2:f7:cc:a1:65:75:6c:81:85: e8:13:3f:e2:d3:19:da:23:e9:35:69:52:35:ef:f7: 9f:29:cd:63:08:06:36:2c:dc:14:b6:f8:f9:5d:a4: fd:9f:b7:fb:50:f1:b5:31:ea:cd:98:60:d2:2f:41: 45:32:03:84:5c:83:30:8c:46:f7:dd:5c:eb:37:be: fa:b2:f3:1d:02:0d:9e:15:6d:f8:cb:ee:2c:10:83: 77:25:23:0a:4c:aa:00:c7:08:98:1a:da:31:fc:0e: 3d:25:8e:25:64:99:15:83:61:4e:ee:03:40:b7:52: 34:9d:99:ba:89:36:e3:ab:1a:02:5a:49:aa:a5:1d: 60:ef:86:81:fd:dc:32:39:e6:82:27:a9:b2:55:29: b3:5d:9c:76:d8:de:ca:99:cf:76:13:2b:9e:ac:fb: ba:31:26:0b:cd:b4:68:03:0c:13:c1:e2:4b:05:1f: 16:df:d5:f6:ca:c7:7e:71:f7:e6:b1:c1:20:26:d9: d1:8d:53:16:0a:11:6a:81:c1:20:90:98:cc:21:83: da:91:cb:2f:75:71:ba:43:96:7a:8b:fb:7d:eb:6a: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:07:DB:55:36:73:88:1A:DE:25:AC:B7:B8:3F:F3:7A:60:74:20:EB X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f4:c1:a5:a8:de:c7:41:c0:59:ca:49:39:61:d0:bd:27:fd: 60:ca:af:a5:2f:02:0d:ec:69:cc:6c:87:12:5e:29:ca:84:a5: 9d:44:df:92:ca:c0:ff:e1:69:1a:b5:ab:63:be:77:05:cf:6e: fb:b4:3c:2d:dd:59:02:bd:e3:8b:fa:17:b4:f3:a1:83:e9:32: 34:0c:6d:c0:aa:0d:1f:72:a5:0c:d9:b1:f2:83:ed:3e:ec:59: ab:54:4a:0d:57:65:1d:e6:f5:8a:eb:70:ae:eb:5b:0e:44:1a: 0e:32:dc:ac:64:ba:d8:80:0b:9e:0e:dd:ab:0c:40:8d:23:59: 35:02:87:55:f0:c6:f5:f0:35:cc:c0:12:a1:2f:c1:95:62:6d: db:64:ba:5f:00:8a:d9:3c:ce:42:a5:be:aa:73:95:6d:4a:d2: f6:de:f8:4b:f1:8f:20:7d:45:ac:53:49:52:3c:24:a3:59:f9: 9d:fc:0b:01:4b:cb:69:ad:ce:08:38:86:78:40:75:01:d3:5d: ff:f0:38:65:d8:a6:36:ab:3d:9b:94:77:1f:82:55:db:a0:42: be:94:25:bd:24:fc:78:0e:bf:c3:5c:f8:96:18:05:41:66:25: 7c:13:6a:19:c1:19:cb:a1:5d:76:f8:b8:38:11:00:8e:2d:3b: 57:8e:6f:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjYwNDE2MTk0ODAxWhcNMjYwNDIzMTk0ODAxWjAYMRYwFAYD VQQDEw02OWUxM2NmMi0wYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLCcxocL6U35cgjbMAxr7ujELFJf5laIX9CkA1SLAoZRXm+i98yhZXVsgYXo Ez/i0xnaI+k1aVI17/efKc1jCAY2LNwUtvj5XaT9n7f7UPG1MerNmGDSL0FFMgOE XIMwjEb33VzrN776svMdAg2eFW34y+4sEIN3JSMKTKoAxwiYGtox/A49JY4lZJkV g2FO7gNAt1I0nZm6iTbjqxoCWkmqpR1g74aB/dwyOeaCJ6myVSmzXZx22N7Kmc92 EyuerPu6MSYLzbRoAwwTweJLBR8W39X2ysd+cffmscEgJtnRjVMWChFqgcEgkJjM IYPakcsvdXG6Q5Z6i/t962ppdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIH21U2 c4ga3iWst7g/83pgdCDrMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVfTBpajex0HAWcpJOWHQvSf9YMqvpS8CDexpzGyHEl4pyoSlnUTfksrA/+Fp GrWrY753Bc9u+7Q8Ld1ZAr3ji/oXtPOhg+kyNAxtwKoNH3KlDNmx8oPtPuxZq1RK DVdlHeb1iutwrutbDkQaDjLcrGS62IALng7dqwxAjSNZNQKHVfDG9fA1zMASoS/B lWJt22S6XwCK2TzOQqW+qnOVbUrS9t74S/GPIH1FrFNJUjwko1n5nfwLAUvLaa3O CDiGeEB1AdNd//A4ZdimNqs9m5R3H4JV26BCvpQlvST8eA6/w1z4lhgFQWYlfBNq GcEZy6Fddvi4OBEAji07V45vvw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:21 2026 by rpki-client