$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: ylsmVdSZOHEgw+W16eBHsux6L2zKC+ZsZKBKlU1eSME= Subject key identifier: 0F:4C:56:9C:F7:86:D2:12:DD:26:26:15:87:D9:23:8E:56:67:42:82 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 090A Signing time: Thu 16 Apr 2026 20:12:20 +0000 Manifest this update: Thu 16 Apr 2026 20:12:20 +0000 Manifest next update: Thu 23 Apr 2026 20:12:20 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: 41jKZVIhlq0YW9hOpAR49llW11s2x0eOFJgZLPzEWxA=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: cUXww9pLUmzXMLoFEIgXrShzexTLcuKYoU1Hg9CwYj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Apr 16 20:12:20 2026 GMT Not After : Apr 23 20:12:20 2026 GMT Subject: CN=69e142a4-ed52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:3b:f9:42:c9:3b:58:65:98:73:6c:b3:6b: 8a:23:56:57:bc:ec:39:4a:67:1b:23:85:40:9a:dd: e4:3f:53:9b:1e:48:d7:3e:ba:0c:9f:c3:7a:7a:1d: a9:0f:86:77:91:54:3f:25:aa:92:8f:68:f5:b5:6b: 6c:c9:a2:60:13:f0:f5:47:70:d7:39:2b:12:9c:82: 3b:03:2c:2c:2d:3f:a1:74:ed:d4:52:ae:1d:ac:e1: 69:b5:ba:9d:6a:40:8a:98:5b:30:37:99:65:b8:eb: 7b:7e:4b:b6:9d:32:76:47:ac:1f:bd:e4:f3:32:ba: e9:10:25:99:ee:4d:55:11:7d:a8:b6:d1:1d:71:db: b6:2f:9f:77:1e:5a:ff:75:51:41:be:4e:aa:87:08: 14:21:8a:9c:98:8d:29:e6:b8:97:6d:ee:27:cb:0e: 75:4e:db:df:4d:10:63:70:c3:9c:31:8b:2e:ab:4c: c8:05:21:03:46:ad:7f:7e:6b:c3:dd:67:d3:3a:f2: bd:94:a5:ed:1f:ae:90:4d:6d:cf:aa:97:0c:cd:30: 32:f0:0f:9a:60:d9:33:05:7c:cd:1c:7f:30:22:41: aa:c4:44:18:1a:ad:7e:af:8d:4d:6e:ed:98:e9:43: 99:cd:a6:74:56:7d:09:aa:76:3e:11:6b:73:6b:1a: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4C:56:9C:F7:86:D2:12:DD:26:26:15:87:D9:23:8E:56:67:42:82 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:81:19:6e:96:b7:7c:4e:48:27:dd:ea:62:e3:36:20:4a:c2: 5f:ce:a2:3c:39:1d:4c:e1:c5:ca:c2:52:f2:4b:16:57:83:87: 10:7b:24:f6:dc:65:73:a9:e1:a1:b1:24:dd:f8:6c:5a:c9:a6: 83:e7:0e:bc:e2:d6:e4:67:b1:1a:ca:d3:2c:9d:24:16:17:54: 08:32:08:d7:6b:4c:6b:bb:a4:09:2b:0d:fb:6a:11:c4:19:59: c6:c5:33:dc:c5:cc:12:26:3a:45:9c:83:76:32:22:3d:1d:3b: a5:a9:45:53:80:75:0a:90:58:c2:9c:0b:28:9e:81:8c:3d:8a: a5:38:c0:9d:c1:34:22:53:af:53:4a:6a:12:14:31:e3:8a:b4: ea:b4:71:4b:1e:45:de:72:04:5e:98:26:2b:a2:2a:a7:df:02: 96:42:b2:11:57:2f:7d:b5:04:6c:b1:f0:d6:bd:a1:fd:53:fb: 29:0c:3f:04:68:59:7b:6e:83:e4:91:93:1d:b1:dd:b4:3d:17: f7:d2:19:00:71:60:0f:8d:3e:69:05:46:e4:b3:c8:79:3e:3d: ef:bc:db:87:fa:9d:e9:9c:4d:7b:32:ae:a6:fb:1a:36:9f:46: a5:d6:4c:d1:68:ab:e2:ce:1b:e2:74:a1:a6:d9:47:ee:cb:f9: 4a:77:90:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjYwNDE2MjAxMjIwWhcNMjYwNDIzMjAxMjIwWjAYMRYwFAYD VQQDEw02OWUxNDJhNC1lZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshQ7+ULJO1hlmHNss2uKI1ZXvOw5SmcbI4VAmt3kP1ObHkjXProMn8N6eh2p D4Z3kVQ/JaqSj2j1tWtsyaJgE/D1R3DXOSsSnII7AywsLT+hdO3UUq4drOFptbqd akCKmFswN5lluOt7fku2nTJ2R6wfveTzMrrpECWZ7k1VEX2ottEdcdu2L593Hlr/ dVFBvk6qhwgUIYqcmI0p5riXbe4nyw51TtvfTRBjcMOcMYsuq0zIBSEDRq1/fmvD 3WfTOvK9lKXtH66QTW3PqpcMzTAy8A+aYNkzBXzNHH8wIkGqxEQYGq1+r41Nbu2Y 6UOZzaZ0Vn0JqnY+EWtzaxrvwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9MVpz3 htIS3SYmFYfZI45WZ0KCMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ4EZbpa3fE5IJ93qYuM2IErCX86iPDkdTOHFysJS8ksWV4OHEHsk9txlc6nh obEk3fhsWsmmg+cOvOLW5GexGsrTLJ0kFhdUCDII12tMa7ukCSsN+2oRxBlZxsUz 3MXMEiY6RZyDdjIiPR07palFU4B1CpBYwpwLKJ6BjD2KpTjAncE0IlOvU0pqEhQx 44q06rRxSx5F3nIEXpgmK6Iqp98ClkKyEVcvfbUEbLHw1r2h/VP7KQw/BGhZe26D 5JGTHbHdtD0X99IZAHFgD40+aQVG5LPIeT4977zbh/qd6ZxNezKupvsaNp9GpdZM 0Wir4s4b4nShptlH7sv5SneQXA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:22:33 2026 by rpki-client