$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json) Hash identifier: 8lthDM3PbSyeuWIyYdI62xQmJYSjFXAc+ORyAD8OXvk= Subject key identifier: B7:8C:21:00:CB:9F:4E:A9:9B:D2:AF:FB:A0:3C:C3:40:6C:86:A8:CE Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 0A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft Manifest number: 0A15 Signing time: Thu 16 Apr 2026 19:43:31 +0000 Manifest this update: Thu 16 Apr 2026 19:43:30 +0000 Manifest next update: Thu 23 Apr 2026 19:43:30 +0000 Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: CLhqFwuRpH13CfST2BLKKX02LVVwa8XiIltpdJKSxAE=) 2: 7AEEA290829E11F0975FC440C4F9AE02.roa (hash: ffwoJq84kOy2tG4k/aN3n6ozf9LlqpCjd9uK2ZJO1BM=) 3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: v6k0jsddCRTxnduBCevo9h7oXXgJAgW/4ikmMahgMvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2601 (0xa29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: Apr 16 19:43:30 2026 GMT Not After : Apr 23 19:43:30 2026 GMT Subject: CN=69e13be2-ac41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:49:65:7d:5d:d2:d7:38:3f:15:a6:fb:11: 7f:6a:b2:6d:52:97:12:ab:88:86:ad:1b:ce:48:2a: 00:dd:98:7d:fa:31:30:4b:75:ef:d0:4a:62:45:da: be:12:18:21:d5:a0:a4:fa:9b:db:7d:09:8f:35:97: d2:5a:8f:42:a1:2c:a6:ef:91:07:63:12:43:8c:04: de:43:24:60:38:3d:e6:3d:cd:b9:50:f1:31:4d:73: e1:d8:81:be:3e:82:38:b8:22:61:b7:5e:71:61:38: fd:63:a0:1d:7f:ef:b9:4f:25:e6:4e:ec:58:26:1e: e7:f9:d2:0a:8d:5e:22:fb:f0:91:d4:4f:f1:4d:5e: da:51:ea:16:61:28:95:13:be:3a:cd:16:02:7b:55: 8d:82:b6:fd:f6:58:5c:d9:c3:e4:d8:e3:ee:a0:f4: d5:e9:74:af:7b:98:ab:c0:2f:5d:da:04:9e:7c:62: ee:66:84:1d:de:be:e8:2f:8c:cf:d4:96:15:1e:fc: e9:15:99:2b:0d:5a:64:7a:e9:77:54:02:f4:8b:7a: 12:5e:e8:dd:1e:40:ce:7a:cd:0d:e7:e6:62:a7:b1: 51:b1:e2:21:3f:cf:6e:5f:43:da:4f:69:03:61:87: 97:ef:16:d6:ae:90:08:b0:db:48:92:8a:52:96:ea: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8C:21:00:CB:9F:4E:A9:9B:D2:AF:FB:A0:3C:C3:40:6C:86:A8:CE X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4c:19:8e:42:cd:a5:9b:2c:e1:4c:90:fa:be:2e:7f:b6:f1: b2:d5:e0:22:15:1c:53:29:ec:37:81:df:fe:83:52:1f:cf:6e: 12:34:d7:8e:75:02:4b:2f:5d:99:65:d4:a0:23:03:90:ce:6a: 3a:d2:8f:28:74:7c:ec:9b:7a:f1:26:93:18:56:9b:15:31:3b: f3:13:1f:9b:e7:e0:8f:2c:e2:2e:ba:c0:55:2a:3d:b1:60:f2: f4:10:da:c8:c8:37:5c:46:8d:74:5b:e1:5b:28:7f:71:66:87: 71:e2:c2:bc:6c:47:f1:9a:99:46:3c:ec:ed:e6:21:c1:a4:80: 87:9c:6b:1f:47:41:e9:02:9c:7e:f5:c7:53:fa:58:c3:78:30: 68:89:b2:8b:36:0f:d8:03:fe:54:a0:93:6e:dd:79:60:cd:8c: 1f:50:64:31:a3:63:87:6b:e3:11:4a:3c:73:4d:c6:a7:81:be: 8c:91:5a:79:52:2d:4d:a4:f8:46:05:a4:f0:bb:a3:bd:d3:8d: cc:1e:91:59:26:f4:e5:d7:cf:b8:1f:e0:c7:4d:a0:5e:d4:ed: b2:75:2a:9e:3a:1f:a3:4c:b2:9b:70:e0:f0:6b:56:e6:d3:bd: b4:81:8a:ef:e2:d4:d9:67:99:7d:28:dc:c5:3c:c8:8c:69:fa: db:13:7a:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjYwNDE2MTk0MzMwWhcNMjYwNDIzMTk0MzMwWjAYMRYwFAYD VQQDEw02OWUxM2JlMi1hYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMhJZX1d0tc4PxWm+xF/arJtUpcSq4iGrRvOSCoA3Zh9+jEwS3Xv0EpiRdq+ Ehgh1aCk+pvbfQmPNZfSWo9CoSym75EHYxJDjATeQyRgOD3mPc25UPExTXPh2IG+ PoI4uCJht15xYTj9Y6Adf++5TyXmTuxYJh7n+dIKjV4i+/CR1E/xTV7aUeoWYSiV E746zRYCe1WNgrb99lhc2cPk2OPuoPTV6XSve5irwC9d2gSefGLuZoQd3r7oL4zP 1JYVHvzpFZkrDVpkeul3VAL0i3oSXujdHkDOes0N5+Zip7FRseIhP89uX0PaT2kD YYeX7xbWrpAIsNtIkopSlurG/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeMIQDL n06pm9Kv+6A8w0BshqjOMB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H THRqaFRYY0duMGROZzh5UFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWUwZjkLNpZss4UyQ+r4uf7bxstXgIhUcUynsN4Hf/oNSH89uEjTXjnUCSy9d mWXUoCMDkM5qOtKPKHR87Jt68SaTGFabFTE78xMfm+fgjyziLrrAVSo9sWDy9BDa yMg3XEaNdFvhWyh/cWaHceLCvGxH8ZqZRjzs7eYhwaSAh5xrH0dB6QKcfvXHU/pY w3gwaImyizYP2AP+VKCTbt15YM2MH1BkMaNjh2vjEUo8c03Gp4G+jJFaeVItTaT4 RgWk8LujvdONzB6RWSb05dfPuB/gx02gXtTtsnUqnjofo0yym3Dg8GtW5tO9tIGK 7+LU2WeZfSjcxTzIjGn62xN6sA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:12:35 2026 by rpki-client