$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: X7x4LyP3eP08c8/OxRZMps9CaaBGcELL2eoTHtDxP4k= Subject key identifier: F3:FC:FB:7F:B6:82:CF:E6:9E:25:BC:69:78:66:A3:BB:BB:B9:C2:15 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 019E Signing time: Fri 17 Apr 2026 03:56:17 +0000 Manifest this update: Fri 17 Apr 2026 03:56:16 +0000 Manifest next update: Fri 24 Apr 2026 03:56:16 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: Vi5Bn1nSbiHCwKJaERnc4MpIpoi4SGzGWylusQ5L1o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Apr 17 03:56:16 2026 GMT Not After : Apr 24 03:56:16 2026 GMT Subject: CN=69e1af60-c028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:5e:b0:c9:c9:85:bf:cc:e0:b7:c3:f1:62: 5f:e7:3e:f9:e6:2a:87:e4:fa:db:aa:34:e1:fe:ff: fa:ab:40:17:d5:5a:33:53:19:d2:7c:39:db:c3:a3: 90:6b:ca:e5:ac:8a:25:ee:62:4f:cf:79:03:c8:46: 68:7c:07:70:96:5d:89:e7:08:54:46:ab:1e:1d:e8: a1:4c:7d:2b:fc:d7:65:3d:a6:16:63:98:81:93:6b: d2:88:08:d4:3e:12:22:bb:cb:93:54:c1:08:bf:b6: 07:97:74:16:b7:2d:5a:57:32:d8:6f:e9:62:42:b2: 94:0e:ff:7b:dc:0a:d4:fa:0b:ec:ed:7a:00:45:12: 78:60:7f:4a:15:cb:cc:b8:24:2a:16:69:84:4a:6e: 2b:c5:a0:ed:2a:dc:7d:dc:cf:b7:cd:5d:b9:de:17: 16:c5:2d:ba:0d:8b:b5:f9:25:f7:6a:34:48:ca:2b: fa:e1:1c:16:d5:42:c7:c3:27:65:ee:85:25:69:54: 01:22:b8:a4:dd:c2:f1:42:5f:56:b4:e9:c5:da:b3: e8:0e:6c:4d:f4:a7:00:70:48:80:9b:44:3c:42:d6: 7a:7c:e1:d6:ad:97:e1:64:cd:94:71:91:22:73:6a: 7b:5b:b5:bd:7d:ff:d0:86:29:db:ac:2d:b3:24:12: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:FB:7F:B6:82:CF:E6:9E:25:BC:69:78:66:A3:BB:BB:B9:C2:15 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d7:1c:a9:a2:38:d5:34:f7:03:6e:e0:d3:31:fa:ba:e6:70: 3e:eb:29:a1:a7:86:ff:b4:17:4e:15:ca:d3:be:dd:c6:c1:a5: 0c:64:87:57:44:db:79:c8:6c:ea:4c:c5:73:a0:4d:b2:cf:aa: 3d:c1:4b:1f:ca:f9:a7:23:fa:73:1e:cd:0d:7e:17:62:41:b4: 70:51:16:ff:25:36:09:0c:a4:5f:37:d1:d2:6b:93:31:b9:fc: af:9c:f6:fb:b6:18:6c:a9:ca:26:30:cf:a6:23:80:dc:c9:6e: 10:eb:a9:3e:58:49:12:8d:0c:9f:ff:59:fe:f5:f6:86:89:96: 3f:ad:b4:ba:c8:ca:cf:90:7f:97:80:b3:d6:f1:39:95:79:87: 4f:39:d4:ed:e4:f9:f9:51:a1:5e:b7:f7:d7:af:1e:6d:22:93: c8:68:1a:90:d3:8b:c5:7e:1c:c7:a9:3e:78:74:dc:77:ea:3b: 5d:e7:5e:87:a1:9f:0f:ff:a2:a0:9c:58:e4:c3:ab:6c:88:e7: 25:19:a1:d7:8b:21:a5:48:b7:67:a7:b8:d2:86:00:64:19:1a: d0:7b:65:ad:02:78:1d:31:e0:98:88:0d:05:8a:67:2f:c8:54: 28:50:86:79:9a:e8:09:2d:30:d1:52:bd:20:d8:0e:0b:75:86: b7:61:a3:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjYwNDE3MDM1NjE2WhcNMjYwNDI0MDM1NjE2WjAYMRYwFAYD VQQDEw02OWUxYWY2MC1jMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwxesMnJhb/M4LfD8WJf5z755iqH5PrbqjTh/v/6q0AX1VozUxnSfDnbw6OQ a8rlrIol7mJPz3kDyEZofAdwll2J5whURqseHeihTH0r/NdlPaYWY5iBk2vSiAjU PhIiu8uTVMEIv7YHl3QWty1aVzLYb+liQrKUDv973ArU+gvs7XoARRJ4YH9KFcvM uCQqFmmESm4rxaDtKtx93M+3zV253hcWxS26DYu1+SX3ajRIyiv64RwW1ULHwydl 7oUlaVQBIrik3cLxQl9WtOnF2rPoDmxN9KcAcEiAm0Q8QtZ6fOHWrZfhZM2UcZEi c2p7W7W9ff/QhinbrC2zJBLzGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPP8+3+2 gs/mniW8aXhmo7u7ucIVMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWdccqaI41TT3A27g0zH6uuZwPuspoaeG/7QXThXK077dxsGlDGSHV0Tbechs 6kzFc6BNss+qPcFLH8r5pyP6cx7NDX4XYkG0cFEW/yU2CQykXzfR0muTMbn8r5z2 +7YYbKnKJjDPpiOA3MluEOupPlhJEo0Mn/9Z/vX2homWP620usjKz5B/l4Cz1vE5 lXmHTznU7eT5+VGhXrf3168ebSKTyGgakNOLxX4cx6k+eHTcd+o7Xedeh6GfD/+i oJxY5MOrbIjnJRmh14shpUi3Z6e40oYAZBka0HtlrQJ4HTHgmIgNBYpnL8hUKFCG eZroCS0w0VK9INgOC3WGt2GjBQ== -----END CERTIFICATE-----Generated at Sat Apr 18 06:05:44 2026 by rpki-client