$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: ET9k1tOtZacBMSHptAn8qP06OS8W1ZiAZrXDbzJwyKE= Subject key identifier: 21:07:55:71:06:BC:20:90:90:FE:70:C1:5C:6D:9C:EE:95:9D:E7:3E Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1FC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1FBA Signing time: Thu 16 Apr 2026 15:56:43 +0000 Manifest this update: Thu 16 Apr 2026 15:56:43 +0000 Manifest next update: Thu 23 Apr 2026 15:56:43 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: jewSMS43Ec3gIzQJ3LtDCLmXGTLcxC15ipVY09pVb38=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: W76e9AIVTyaTFBKFcxkBKNy/Y9c3O96EbBTxmYrNiiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8137 (0x1fc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Apr 16 15:56:43 2026 GMT Not After : Apr 23 15:56:43 2026 GMT Subject: CN=69e106bb-0cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:82:b0:94:58:dc:4f:6f:81:47:c8:e9:c2: e5:46:fb:46:e3:69:88:4a:24:3f:cf:49:4c:19:2a: 7e:40:8b:f4:c1:54:c0:35:8f:89:fb:4e:f2:1c:1e: 98:b8:51:5f:20:4a:48:d5:38:d1:61:42:88:58:87: 91:a8:3e:b6:2a:9f:65:b0:26:0a:88:0d:27:64:e3: 2b:c7:78:74:89:80:9f:cd:68:33:d4:e2:5a:c4:9c: 3f:44:f7:82:9c:25:eb:3b:23:23:53:7c:e1:84:79: 92:1e:1e:49:de:48:5f:34:30:f9:9e:34:52:ab:7f: 9d:89:fa:27:19:11:5e:85:f9:c5:e7:46:1d:57:02: d4:1d:a5:c9:ca:2e:21:94:44:57:b9:6a:59:f5:cc: fa:54:3b:8f:e7:37:00:7b:78:b9:c3:4d:4d:ed:d7: 7b:8d:70:59:d9:9d:a0:6f:17:2b:e6:6d:26:39:00: 3c:e7:ef:1c:df:79:4c:2e:98:25:99:41:f2:19:b4: 20:a9:b1:6a:62:4d:53:3d:d3:bb:dc:d3:f5:4a:ed: 32:d1:76:bf:00:e7:6b:9c:07:10:d7:27:cb:32:16: 28:43:d9:87:94:53:f0:50:97:f5:67:70:6a:23:d3: 07:38:fa:46:76:1a:ee:f8:ed:ae:37:09:28:db:ca: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:07:55:71:06:BC:20:90:90:FE:70:C1:5C:6D:9C:EE:95:9D:E7:3E X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f7:e2:01:95:a1:c5:9d:ff:56:c3:95:82:97:26:dc:43:87: c1:80:a3:b2:62:0e:99:ca:14:25:bc:63:65:d8:fd:f6:d4:de: a5:a4:8c:f8:3d:2c:09:df:ed:f7:71:ea:5e:37:de:56:02:2b: 4e:87:cf:f7:80:d9:3d:6b:e1:81:c5:dd:f8:08:1a:c1:f1:d5: 66:fa:a4:69:fe:a2:04:2a:5b:56:dd:98:bb:2c:2d:f2:8f:9a: c2:14:68:95:30:7c:75:84:d8:90:a5:3f:d1:e1:78:46:ca:18: 7b:8e:6e:41:73:04:54:ad:1a:85:75:9b:75:e4:a9:15:d3:a0: 2a:4e:d7:70:7d:96:1d:ec:01:0a:58:a6:43:c6:c4:11:71:9a: 25:ed:84:51:cb:91:28:d0:5b:de:5e:02:49:3c:ab:ab:58:d5: 48:3e:eb:2b:a5:a4:38:be:95:a7:2a:d0:d9:ce:7c:69:c7:e1: 8a:ac:13:6b:0a:32:b2:da:6c:f0:ab:00:f6:ae:c2:9a:d3:1d: d0:f1:65:e6:b8:dd:dc:5a:ff:48:0d:f4:a6:6c:a4:25:58:df: 6f:13:3d:98:38:0c:2b:e1:4a:b0:67:06:5f:36:72:82:cd:c0: 14:5c:c0:05:35:00:a5:c9:62:f6:2f:5c:f7:b7:97:c5:f2:10: 3e:ed:62:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjYwNDE2MTU1NjQzWhcNMjYwNDIzMTU1NjQzWjAYMRYwFAYD VQQDEw02OWUxMDZiYi0wY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWOCsJRY3E9vgUfI6cLlRvtG42mISiQ/z0lMGSp+QIv0wVTANY+J+07yHB6Y uFFfIEpI1TjRYUKIWIeRqD62Kp9lsCYKiA0nZOMrx3h0iYCfzWgz1OJaxJw/RPeC nCXrOyMjU3zhhHmSHh5J3khfNDD5njRSq3+difonGRFehfnF50YdVwLUHaXJyi4h lERXuWpZ9cz6VDuP5zcAe3i5w01N7dd7jXBZ2Z2gbxcr5m0mOQA85+8c33lMLpgl mUHyGbQgqbFqYk1TPdO73NP1Su0y0Xa/AOdrnAcQ1yfLMhYoQ9mHlFPwUJf1Z3Bq I9MHOPpGdhru+O2uNwko28rnrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCEHVXEG vCCQkP5wwVxtnO6Vnec+MB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFffiAZWhxZ3/VsOVgpcm3EOHwYCjsmIOmcoUJbxjZdj99tTepaSM+D0sCd/t 93HqXjfeVgIrTofP94DZPWvhgcXd+AgawfHVZvqkaf6iBCpbVt2Yuywt8o+awhRo lTB8dYTYkKU/0eF4RsoYe45uQXMEVK0ahXWbdeSpFdOgKk7XcH2WHewBClimQ8bE EXGaJe2EUcuRKNBb3l4CSTyrq1jVSD7rK6WkOL6VpyrQ2c58acfhiqwTawoystps 8KsA9q7CmtMd0PFl5rjd3Fr/SA30pmykJVjfbxM9mDgMK+FKsGcGXzZygs3AFFzA BTUApcli9i9c97eXxfIQPu1iVA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:56:16 2026 by rpki-client