$ rpki-client -vvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft File: XDlbosoKv2WIhyaHTHgktpt4mZU.mft (raw, json) Hash identifier: gJj5qWgYg7Ld4wL1df87wj3URLVIpt9/3LmMopQrKCE= Subject key identifier: 8F:01:DF:FB:84:5A:5C:EC:3F:C3:E3:1B:37:CD:93:76:3A:A8:E3:36 Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Certificate serial: 0EF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft Manifest number: 0EE3 Signing time: Thu 16 Apr 2026 17:34:20 +0000 Manifest this update: Thu 16 Apr 2026 17:34:20 +0000 Manifest next update: Thu 23 Apr 2026 17:34:20 +0000 Files and hashes: 1: XDlbosoKv2WIhyaHTHgktpt4mZU.crl (hash: rNSJtqvT34s2ZJHKQGnU2YbuULWbO5lIJXgHtq/yTtg=) 2: AECDA1B0448F11EDACC30815C4F9AE02.roa (hash: Vv+ic3tuHHAEO62okYNeBPpK0SKMbTv6XBExdyT6xHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3826 (0xef2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Validity Not Before: Apr 16 17:34:20 2026 GMT Not After : Apr 23 17:34:20 2026 GMT Subject: CN=69e11d9c-f038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:98:50:3a:1f:d4:83:77:d6:51:c6:1d:5a:1b: 0f:90:dc:a1:c6:6e:fd:8d:bf:f4:b9:53:66:cc:fa: c3:96:81:cb:29:0b:e8:36:57:5f:8c:7a:c1:0e:b0: c8:47:a7:48:90:be:30:77:30:e5:56:56:60:6e:c1: 05:6c:66:1e:61:c8:9d:2a:96:c0:47:30:f4:5f:ea: b1:4d:83:56:3c:82:79:89:c6:da:81:74:94:b4:d1: fc:91:58:27:4e:13:57:78:36:d0:aa:a7:1c:1b:05: 65:03:af:37:05:aa:c6:21:eb:32:7b:46:df:7f:ca: ac:fb:bd:cc:03:e9:c7:28:7d:30:30:fe:14:09:24: 67:bc:0c:28:8e:87:74:cf:5b:ae:c4:f0:6d:f4:67: 18:56:ad:8f:11:20:4a:9c:98:27:ce:dd:bf:e5:c7: 13:69:17:6e:de:69:c0:f8:42:e2:06:42:65:e1:db: c8:f4:99:35:5f:8a:dc:76:67:ea:31:1f:a5:fa:dd: 3a:ad:b7:2f:39:a0:fc:f1:f3:39:8e:85:10:a1:19: 39:a7:75:f3:62:1c:f0:8a:01:ae:67:98:9d:35:64: 46:45:2d:46:5f:e9:58:c4:9c:98:58:88:85:b6:a5: 94:e4:78:cd:74:9d:9e:81:de:0f:eb:b9:fc:51:59: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:01:DF:FB:84:5A:5C:EC:3F:C3:E3:1B:37:CD:93:76:3A:A8:E3:36 X509v3 Authority Key Identifier: keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2f:65:16:6c:3e:87:c5:42:d0:20:f6:d0:21:cc:8e:a3:1e: 20:3a:f2:b5:9c:95:35:01:45:41:31:3c:49:7b:e6:24:d0:53: ed:2e:aa:d7:da:43:f0:d6:fe:58:86:59:e3:ba:21:f3:a9:77: 87:d2:9f:c4:35:d0:4b:ce:46:8a:bf:da:ec:1a:69:e5:0b:7b: 31:af:d0:67:5f:5a:7f:1a:1c:a6:10:79:23:3c:59:e3:92:ca: 05:a8:1b:6e:d0:1c:f3:9d:96:cc:07:be:c0:ef:bb:b9:28:3b: ce:57:44:30:07:c2:cc:b9:d5:29:ab:8d:ab:32:e9:7b:36:01: b5:de:62:d0:58:4b:4a:f9:3c:0d:80:78:68:5e:d3:6f:d6:71: 6c:66:2e:4f:f4:3c:38:d4:7d:9d:e2:45:f0:ef:ed:f7:e2:a9: 42:01:38:1c:41:3e:79:c9:de:e0:b0:5f:2d:85:0a:ad:1e:9d: 82:f2:2f:94:69:ac:42:04:22:59:e8:a1:e7:38:c5:31:57:b8: e0:87:d1:00:f1:97:80:97:c3:43:f7:22:2b:61:19:6c:5d:a3: be:69:59:e9:81:d4:7d:ab:76:1a:33:c3:9a:01:64:79:b0:78: 79:c2:97:f8:18:b9:c5:c2:51:5c:23:ea:c4:f5:fb:b8:8e:09: 0c:83:c2:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY2RTUxMTAvBgNVBAUTKDVDMzk1QkEyQ0EwQUJGNjU4ODg3MjY4NzRDNzgyNEI2 OUI3ODk5OTUwHhcNMjYwNDE2MTczNDIwWhcNMjYwNDIzMTczNDIwWjAYMRYwFAYD VQQDEw02OWUxMWQ5Yy1mMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25hQOh/Ug3fWUcYdWhsPkNyhxm79jb/0uVNmzPrDloHLKQvoNldfjHrBDrDI R6dIkL4wdzDlVlZgbsEFbGYeYcidKpbARzD0X+qxTYNWPIJ5icbagXSUtNH8kVgn ThNXeDbQqqccGwVlA683BarGIesye0bff8qs+73MA+nHKH0wMP4UCSRnvAwojod0 z1uuxPBt9GcYVq2PESBKnJgnzt2/5ccTaRdu3mnA+ELiBkJl4dvI9Jk1X4rcdmfq MR+l+t06rbcvOaD88fM5joUQoRk5p3XzYhzwigGuZ5idNWRGRS1GX+lYxJyYWIiF tqWU5HjNdJ2egd4P67n8UVlSGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8B3/uE WlzsP8PjGzfNk3Y6qOM2MB8GA1UdIwQYMBaAFFw5W6LKCr9liIcmh0x4JLabeJmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjZFNS81NjQzMDU4NkEy NzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3YyV0loeWFIVEhna3RwdDRt WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEbGJvc29LdjJXSWh5YUhUSGdrdHB0NG1aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjZFNS81NjQzMDU4NkEyNzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3Yy V0loeWFIVEhna3RwdDRtWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAS9lFmw+h8VC0CD20CHMjqMeIDrytZyVNQFFQTE8SXvmJNBT7S6q19pD8Nb+ WIZZ47oh86l3h9KfxDXQS85Gir/a7Bpp5Qt7Ma/QZ19afxocphB5IzxZ45LKBagb btAc852WzAe+wO+7uSg7zldEMAfCzLnVKauNqzLpezYBtd5i0FhLSvk8DYB4aF7T b9ZxbGYuT/Q8ONR9neJF8O/t9+KpQgE4HEE+ecne4LBfLYUKrR6dgvIvlGmsQgQi Weih5zjFMVe44IfRAPGXgJfDQ/ciK2EZbF2jvmlZ6YHUfat2GjPDmgFkebB4ecKX +Bi5xcJRXCPqxPX7uI4JDIPC1Q== -----END CERTIFICATE-----Generated at Fri Apr 17 11:09:46 2026 by rpki-client