$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: ogy51JwhDHeNTMPN5IJ7lcUsOBkynA6obEInTQOwjFA= Subject key identifier: B5:6C:37:2B:51:C8:17:D5:2B:74:BA:E8:E8:F7:06:A0:68:C8:D4:4F Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 150B Signing time: Sat 18 Apr 2026 18:58:44 +0000 Manifest this update: Sat 18 Apr 2026 18:58:43 +0000 Manifest next update: Sat 25 Apr 2026 18:58:43 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: 8M92wKRfa8zXSF0zhfPtHFM6i7F7ulEsqCTIv5uGVdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Apr 18 18:58:43 2026 GMT Not After : Apr 25 18:58:43 2026 GMT Subject: CN=69e3d464-cb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0b:7b:7e:bb:8a:c7:06:41:e2:89:32:8e:78: 02:fb:6d:6e:cd:43:ab:3a:4f:81:ca:7d:1b:6f:2c: b1:2c:9a:f2:1c:2b:09:59:a5:88:7e:6f:af:36:00: 56:6b:1e:5a:03:5d:b2:a5:9a:cf:be:a9:9a:8f:50: 12:0c:ce:6b:e9:a2:45:4f:d3:6b:27:73:8e:77:98: 2b:12:f5:f7:08:b3:4a:21:09:ee:56:4b:d1:91:1a: 9f:f8:ee:93:3c:ae:d8:03:e1:20:00:d2:8a:8c:54: 9f:f4:41:fd:cd:e3:6e:b7:76:1f:39:3b:8b:d5:9c: ea:08:4a:87:45:57:52:ad:6a:55:99:7a:b4:e3:d8: 64:8a:b7:8a:37:9a:7c:ec:35:7d:35:f2:2b:38:bc: 16:2f:d4:d1:29:8e:4d:61:8c:de:6e:fa:b4:69:fc: f5:5b:23:d9:7a:b6:93:58:13:5c:5b:ed:6d:12:60: b3:3e:94:3b:b7:22:05:ed:91:e2:dd:a5:2d:f8:49: a1:e6:14:26:eb:76:3a:0a:c9:29:16:f8:02:88:bd: 73:f4:82:d2:8b:80:04:18:56:84:74:35:dd:a2:62: 75:3e:b5:f1:34:25:6d:36:6b:fc:77:66:28:6c:46: a6:ae:2d:69:b0:6f:78:01:b6:d0:60:40:83:27:c8: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6C:37:2B:51:C8:17:D5:2B:74:BA:E8:E8:F7:06:A0:68:C8:D4:4F X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f0:b8:dc:50:07:68:d9:35:c3:68:39:82:3c:d5:fa:aa:cd: 56:aa:13:60:53:9a:7f:ab:ac:83:bf:74:5a:2a:5f:54:54:fc: 9e:a6:c4:cb:f1:c7:2d:78:de:b2:d1:2b:67:5c:76:41:f1:03: 06:f0:46:b8:95:29:d6:5d:e5:60:47:d2:7d:44:82:40:a2:bd: fd:74:1d:26:2d:ac:aa:56:41:93:1c:28:02:cd:99:a0:e3:af: 2d:d0:85:31:09:68:2b:2f:15:13:c5:47:71:81:d1:b5:f0:dd: 13:23:12:97:63:78:fe:9b:2f:05:34:57:6e:70:df:f7:c4:95: a9:c3:2f:4b:3b:da:6c:3f:72:d1:2c:89:0f:49:55:f1:13:67: 6e:5e:16:31:9a:f8:0e:92:03:a1:8c:e8:34:8b:ef:45:06:50: 2a:ef:56:6d:d0:fb:7a:c1:6c:2f:eb:0f:89:8a:5f:27:43:63: ae:72:3b:60:c5:da:0f:08:1e:f7:32:92:59:3b:7d:6a:58:15: 68:8f:9d:8d:95:e3:bc:cd:32:7a:06:72:ba:38:61:56:b1:89: 74:87:4f:3b:dc:6d:7c:d1:81:0b:57:c4:ba:ee:11:72:dd:bd: 31:ce:5e:b1:37:6d:1a:42:ca:66:02:9c:2c:ec:0d:e7:c7:b3: fa:2e:f3:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjYwNDE4MTg1ODQzWhcNMjYwNDI1MTg1ODQzWjAYMRYwFAYD VQQDEw02OWUzZDQ2NC1jYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Qt7fruKxwZB4okyjngC+21uzUOrOk+Byn0bbyyxLJryHCsJWaWIfm+vNgBW ax5aA12ypZrPvqmaj1ASDM5r6aJFT9NrJ3OOd5grEvX3CLNKIQnuVkvRkRqf+O6T PK7YA+EgANKKjFSf9EH9zeNut3YfOTuL1ZzqCEqHRVdSrWpVmXq049hkireKN5p8 7DV9NfIrOLwWL9TRKY5NYYzebvq0afz1WyPZeraTWBNcW+1tEmCzPpQ7tyIF7ZHi 3aUt+Emh5hQm63Y6CskpFvgCiL1z9ILSi4AEGFaEdDXdomJ1PrXxNCVtNmv8d2Yo bEamri1psG94AbbQYECDJ8gmkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVsNytR yBfVK3S66Oj3BqBoyNRPMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI/C43FAHaNk1w2g5gjzV+qrNVqoTYFOaf6usg790WipfVFT8nqbEy/HHLXje stErZ1x2QfEDBvBGuJUp1l3lYEfSfUSCQKK9/XQdJi2sqlZBkxwoAs2ZoOOvLdCF MQloKy8VE8VHcYHRtfDdEyMSl2N4/psvBTRXbnDf98SVqcMvSzvabD9y0SyJD0lV 8RNnbl4WMZr4DpIDoYzoNIvvRQZQKu9WbdD7esFsL+sPiYpfJ0NjrnI7YMXaDwge 9zKSWTt9algVaI+djZXjvM0yegZyujhhVrGJdIdPO9xtfNGBC1fEuu4Rct29Mc5e sTdtGkLKZgKcLOwN58ez+i7z/A== -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:43 2026 by rpki-client