$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: DP7LKaSAzhCr6F2Gu+knmCIPwLtjWht3YlEDTRJIBrE= Subject key identifier: 1E:40:69:FC:DF:39:E4:A8:5E:19:E4:F0:2F:DF:50:FB:6B:8E:ED:90 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 0159 Signing time: Fri 17 Apr 2026 04:45:36 +0000 Manifest this update: Fri 17 Apr 2026 04:45:36 +0000 Manifest next update: Fri 24 Apr 2026 04:45:36 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: pWI7ax61ibE1WADY97nI+gvOVTN1G6x2mxVm5H7fndA=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Apr 17 04:45:36 2026 GMT Not After : Apr 24 04:45:36 2026 GMT Subject: CN=69e1baf0-437b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:81:60:a1:45:14:19:8f:d6:c2:46:47:24: c5:94:72:da:d8:4b:c6:77:ab:0e:46:f9:a7:90:1f: 45:d5:7f:1a:3c:84:1c:9a:ef:bb:a1:53:62:26:f2: 9c:dc:1e:9b:4b:2f:03:36:14:f8:82:24:c2:c3:c7: ae:95:f3:b0:91:fd:15:55:ad:ff:63:8e:c5:c3:11: e2:0d:59:84:13:ab:a0:a0:f2:a6:7d:40:6b:e2:44: 1f:cd:23:82:f5:0c:5b:7e:16:ab:41:77:3d:bc:d3: 9f:4b:cb:ff:a7:61:fa:df:cb:74:b3:7f:8b:8d:ea: 4a:d4:ae:a4:82:ea:0e:32:af:97:e4:ef:19:9f:fe: 3a:71:19:f9:db:ee:a6:7b:b9:b9:78:ad:a7:43:98: 08:87:0b:bd:c8:b1:dc:c1:ca:ce:a3:ae:98:39:45: 0f:b0:2f:b4:c1:a3:10:45:f1:92:72:e1:c0:74:f5: d4:33:bf:f5:ba:bd:2c:da:d5:6d:84:88:7f:3f:86: 14:98:8e:d0:cd:fc:51:d9:24:11:2f:38:17:ef:d8: 00:f9:08:e3:af:cd:f4:21:38:8c:ce:16:33:0b:37: 03:31:80:26:fa:a0:88:3a:8e:d8:71:83:c3:4b:e6: 41:ae:cf:68:9e:ec:06:c0:df:38:ed:7f:69:d1:78: ee:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:40:69:FC:DF:39:E4:A8:5E:19:E4:F0:2F:DF:50:FB:6B:8E:ED:90 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:6c:77:68:64:5d:c6:65:5b:88:21:5a:fc:a4:eb:25:d9:ab: 38:19:bc:2d:6f:61:a9:00:65:e2:99:3d:d0:b0:92:27:dd:2b: 08:dd:60:c7:48:8a:24:26:d1:c3:8d:be:19:67:96:a7:3e:84: 79:96:01:27:e5:3a:e9:08:4d:55:7b:d6:15:33:66:5a:83:49: 7b:32:6c:b8:e9:a1:8a:e3:78:2c:2c:1d:3d:0d:5c:7e:0d:ff: 99:c1:1b:a8:de:ec:00:fd:1f:d3:a9:a3:84:72:12:74:52:46: ee:9b:5b:16:34:99:bb:7d:d5:a9:73:f0:d0:be:a8:a9:92:14: 1c:2d:f5:8a:7c:7f:76:69:2b:a6:3c:b2:f4:c6:e8:28:cb:5b: e1:ed:9e:6f:cc:cd:a7:ca:98:42:db:16:3f:03:57:c4:8f:22: 6c:54:09:2d:21:61:c4:11:46:7f:6d:5b:5c:fb:44:9c:89:5d: da:82:22:f4:ed:9c:84:85:e5:90:2f:d0:e9:c2:bc:58:a4:85: 33:d5:3b:4d:b9:b7:81:28:f7:f8:ed:5a:c1:5f:38:e1:8f:3d: 80:81:3d:05:3a:b3:16:49:fd:bc:61:a6:a8:91:84:89:a4:20: 48:a0:64:74:68:cf:d3:7a:4f:7c:d5:a7:f8:82:be:d3:b6:87: 81:02:63:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjYwNDE3MDQ0NTM2WhcNMjYwNDI0MDQ0NTM2WjAYMRYwFAYD VQQDEw02OWUxYmFmMC00MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA89GBYKFFFBmP1sJGRyTFlHLa2EvGd6sORvmnkB9F1X8aPIQcmu+7oVNiJvKc 3B6bSy8DNhT4giTCw8eulfOwkf0VVa3/Y47FwxHiDVmEE6ugoPKmfUBr4kQfzSOC 9QxbfharQXc9vNOfS8v/p2H638t0s3+LjepK1K6kguoOMq+X5O8Zn/46cRn52+6m e7m5eK2nQ5gIhwu9yLHcwcrOo66YOUUPsC+0waMQRfGScuHAdPXUM7/1ur0s2tVt hIh/P4YUmI7QzfxR2SQRLzgX79gA+Qjjr830ITiMzhYzCzcDMYAm+qCIOo7YcYPD S+ZBrs9onuwGwN847X9p0XjuMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5Aafzf OeSoXhnk8C/fUPtrju2QMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0mx3aGRdxmVbiCFa/KTrJdmrOBm8LW9hqQBl4pk90LCSJ90rCN1gx0iKJCbR w42+GWeWpz6EeZYBJ+U66QhNVXvWFTNmWoNJezJsuOmhiuN4LCwdPQ1cfg3/mcEb qN7sAP0f06mjhHISdFJG7ptbFjSZu33VqXPw0L6oqZIUHC31inx/dmkrpjyy9Mbo KMtb4e2eb8zNp8qYQtsWPwNXxI8ibFQJLSFhxBFGf21bXPtEnIld2oIi9O2chIXl kC/Q6cK8WKSFM9U7Tbm3gSj3+O1awV844Y89gIE9BTqzFkn9vGGmqJGEiaQgSKBk dGjP03pPfNWn+IK+07aHgQJjyA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:21:35 2026 by rpki-client