$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json) Hash identifier: b/EgEJOQsW32vPSeo8+gURhqnp3YWYnWPyLBfDr/3a8= Subject key identifier: 11:6B:3A:D5:30:DB:19:D2:59:AD:48:07:7C:7C:5D:90:04:3A:78:76 Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft Manifest number: 0D3C Signing time: Thu 16 Apr 2026 19:28:09 +0000 Manifest this update: Thu 16 Apr 2026 19:28:08 +0000 Manifest next update: Thu 23 Apr 2026 19:28:08 +0000 Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: DDrs9ki9mPsLjYXDzDlMce+6HL2TQm99ZrPlHTAu6Uk=) 2: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: wkggX/6qysF9Egk0xQyYTUInBulm7AKxdFFCyBP8GUk=) 3: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: HcqMW++sZJHjGMxO2JSw3bS/+sZh101Hrd0Zjhq70t8=) 4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: ls1HDtDX8ZrpUxCkm4TRRKjqrY+zASGFi8PHUEE3XHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Validity Not Before: Apr 16 19:28:08 2026 GMT Not After : Apr 23 19:28:08 2026 GMT Subject: CN=69e13849-b6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:c6:9f:c8:75:e4:69:c2:b9:b8:c2:94:fb: eb:c1:96:de:2e:bf:2a:75:1e:22:66:e5:ae:24:4d: 49:18:fc:c3:de:58:8e:8c:90:10:04:29:6d:09:59: 91:a5:25:16:c0:96:e4:9d:d2:a0:ed:44:9f:6d:47: f2:76:ba:3c:7d:a8:0f:e3:84:b7:db:5b:8c:05:01: b1:49:8c:f5:de:10:db:aa:f1:76:df:18:28:7d:93: 99:47:b7:59:bf:33:07:82:de:d4:99:c6:33:04:5b: ba:da:ea:9d:70:e1:24:8d:f6:1d:a6:5f:88:6a:a6: 88:94:50:5e:39:f7:27:e1:05:af:26:6b:17:c6:0b: 19:7e:d5:de:97:77:d4:ef:91:84:18:df:b3:90:91: ad:9e:44:9b:af:dd:41:eb:22:29:3f:83:7c:e4:1e: 58:4e:10:b0:13:41:f8:14:a9:af:a5:96:39:1e:04: 95:ed:d8:bf:f2:00:99:b5:fa:bd:85:62:57:cd:29: 07:6a:4d:40:9e:57:27:7e:62:4f:ff:8f:b4:8a:ad: 32:42:3c:d0:79:31:69:2f:5b:95:27:31:b0:77:47: e7:21:e3:34:8c:62:10:cc:b1:39:24:bb:98:53:7f: 1f:d6:01:b6:0f:13:05:61:02:df:9b:ea:50:4c:5e: 89:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:3A:D5:30:DB:19:D2:59:AD:48:07:7C:7C:5D:90:04:3A:78:76 X509v3 Authority Key Identifier: keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:5e:9e:a4:a3:62:98:99:9d:6e:20:66:d4:42:cd:7d:15:18: c8:31:af:aa:ab:28:6a:ea:98:66:d6:0a:5b:f1:16:70:7f:f8: 3c:34:1b:e2:f8:a9:63:08:83:d3:ad:6c:16:4f:ec:6c:72:01: b7:d6:97:ce:99:f4:d8:25:57:cb:b1:24:e0:82:bc:b1:2e:db: 68:57:67:06:a7:b5:51:15:24:dc:22:b6:ea:97:01:73:43:22: 2b:2a:ec:17:63:2a:fc:ba:75:de:b8:82:9a:ff:1c:1f:3c:08: f6:c2:5a:df:e8:30:64:a6:12:65:3d:55:2e:10:83:5d:ac:9c: 00:37:13:73:bd:54:af:d0:7d:9b:94:fe:ac:14:80:89:3a:d6: da:d5:2c:7b:be:1c:47:29:6f:d0:b0:cc:2e:99:eb:67:ee:10: 7f:37:c6:c1:86:c6:ce:6f:77:8f:25:8d:88:1e:04:25:46:a8: 60:40:25:d4:97:a3:24:d2:df:10:f6:57:60:e3:c0:23:ad:84: dc:ab:fe:5e:0b:ee:32:b9:28:7e:d8:35:f5:5c:76:11:c3:af: 17:d5:cb:3a:d5:b9:11:6f:7e:85:e8:9d:57:69:38:79:1a:cf: f6:0f:7b:41:fd:91:38:ea:62:90:48:af:f8:fb:49:ec:c1:e8: d3:70:f9:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC RTJDQUIxRTYwHhcNMjYwNDE2MTkyODA4WhcNMjYwNDIzMTkyODA4WjAYMRYwFAYD VQQDEw02OWUxMzg0OS1iNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtd/Gn8h15GnCubjClPvrwZbeLr8qdR4iZuWuJE1JGPzD3liOjJAQBCltCVmR pSUWwJbkndKg7USfbUfydro8fagP44S321uMBQGxSYz13hDbqvF23xgofZOZR7dZ vzMHgt7UmcYzBFu62uqdcOEkjfYdpl+IaqaIlFBeOfcn4QWvJmsXxgsZftXel3fU 75GEGN+zkJGtnkSbr91B6yIpP4N85B5YThCwE0H4FKmvpZY5HgSV7di/8gCZtfq9 hWJXzSkHak1AnlcnfmJP/4+0iq0yQjzQeTFpL1uVJzGwd0fnIeM0jGIQzLE5JLuY U38f1gG2DxMFYQLfm+pQTF6JGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFrOtUw 2xnSWa1IB3x8XZAEOnh2MB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3 MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZL QVNBQkIybVI5WnEtTEtzZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEF6epKNimJmdbiBm1ELNfRUYyDGvqqsoauqYZtYKW/EWcH/4PDQb4vipYwiD 061sFk/sbHIBt9aXzpn02CVXy7Ek4IK8sS7baFdnBqe1URUk3CK26pcBc0MiKyrs F2Mq/Lp13riCmv8cHzwI9sJa3+gwZKYSZT1VLhCDXaycADcTc71Ur9B9m5T+rBSA iTrW2tUse74cRylv0LDMLpnrZ+4QfzfGwYbGzm93jyWNiB4EJUaoYEAl1JejJNLf EPZXYOPAI62E3Kv+XgvuMrkoftg19Vx2EcOvF9XLOtW5EW9+heidV2k4eRrP9g97 Qf2ROOpikEiv+PtJ7MHo03D5pg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:49:39 2026 by rpki-client