$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json) Hash identifier: hu339AzfICr5w1BvBNOYAZ0Jw+ImJBSRchR0jMDu9Rk= Subject key identifier: CB:D9:EA:DE:35:BF:79:D8:7C:3E:9A:B6:C2:12:8A:11:20:E8:70:DF Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Certificate serial: 0373 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft Manifest number: 036B Signing time: Fri 17 Apr 2026 00:47:05 +0000 Manifest this update: Fri 17 Apr 2026 00:47:05 +0000 Manifest next update: Fri 24 Apr 2026 00:47:05 +0000 Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: hQzydcMaby9Eu9/tl+vL0XXLs2poxJfmFY6G4oh0jjQ=) 2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 2U6xmhzv0fOgJj7RZr6nEhhX0Za/2a3PlEUXvRGOzUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Validity Not Before: Apr 17 00:47:05 2026 GMT Not After : Apr 24 00:47:05 2026 GMT Subject: CN=69e18309-c6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:b2:eb:89:4e:b4:f5:9f:55:da:ad:8f:60: f4:78:48:bd:b0:04:69:5f:48:b4:07:6a:9c:e5:c2: 7d:69:03:9d:78:8e:63:13:90:d1:7a:af:98:2a:92: 40:a2:4b:6d:0b:df:60:83:35:b4:33:d3:51:e7:5f: 09:38:9d:ee:f7:41:0a:48:f2:30:7a:8e:91:bc:8f: 1d:9d:0a:d6:c1:60:35:a9:c4:24:ea:7b:c3:ed:91: 02:9b:d4:25:2d:0e:71:81:97:4f:de:7b:cc:56:4a: 2e:6b:ae:46:5e:7e:69:f2:8b:8c:69:6f:e1:d5:15: 13:81:48:5a:83:19:bd:11:b1:a6:e0:a3:d4:89:64: d6:e8:61:76:a3:b8:f1:6d:81:d7:f7:c9:1a:c4:40: d1:ce:cb:ab:c1:2e:59:6b:92:05:0a:a7:7c:e6:fe: c1:ac:e5:52:71:10:d9:68:e9:92:18:2a:01:08:7d: b2:4b:d6:02:da:a8:d5:73:da:d2:5b:ad:63:e3:1d: f4:2d:1a:bb:b6:f4:38:59:14:8e:36:d6:4d:bc:3e: 3e:f6:52:b1:62:31:a5:c4:ee:c5:01:b0:ab:ec:49: a2:86:71:a3:ec:cb:e0:b8:85:70:f6:dd:ca:aa:4a: 69:e5:3a:3f:bd:46:b4:9c:15:ad:e5:20:1e:d5:cd: b8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D9:EA:DE:35:BF:79:D8:7C:3E:9A:B6:C2:12:8A:11:20:E8:70:DF X509v3 Authority Key Identifier: keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a9:c7:94:a9:37:f3:88:98:e7:64:92:8f:1c:f0:af:f1:7c: 2a:c3:b3:90:90:f6:36:b6:08:51:c4:08:ca:5b:60:be:df:9c: c1:38:35:d3:a3:70:90:9c:2b:9a:26:1e:48:61:b0:19:ac:ee: cf:54:c2:2a:18:68:d7:49:2b:ae:03:8d:fb:d4:15:64:6e:a2: 00:ee:b2:70:0e:8c:b6:37:47:88:c0:c7:76:b7:14:a4:f6:70: 9a:23:93:cc:ce:3b:78:71:44:7b:41:5f:3c:3b:4d:bd:13:04: bc:9c:d2:18:bb:b0:5c:24:3a:72:77:a1:a4:d6:e0:be:95:0e: a3:59:77:7b:7e:90:ce:26:46:70:0f:e9:96:18:63:4a:07:76: 31:c6:b3:8f:d3:b5:1d:68:bc:7d:e8:3f:0a:88:97:c4:a8:10: 3c:a2:fe:7d:d9:1d:77:ce:40:ec:f9:5f:b3:a4:03:70:9b:80: f7:17:fb:76:4b:98:27:67:d2:bd:eb:7d:60:c8:ee:b9:ba:2a: e5:ed:52:1c:c8:4f:cb:cd:8a:ce:db:ca:63:cb:ef:65:fe:d5: 2b:6c:21:ef:46:40:10:f7:bf:cb:eb:91:8b:ed:33:06:36:84: df:14:65:e1:1a:26:b6:68:0d:be:dc:2f:36:52:e2:1f:22:a7: 47:c7:10:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNzMxMTAvBgNVBAUTKDVFNzA5OTQ5QkFBNDBBN0Q0N0Q0NEQyMTE2OTBCMzc3 RTA1MUM0NUYwHhcNMjYwNDE3MDA0NzA1WhcNMjYwNDI0MDA0NzA1WjAYMRYwFAYD VQQDEw02OWUxODMwOS1jNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKqy64lOtPWfVdqtj2D0eEi9sARpX0i0B2qc5cJ9aQOdeI5jE5DReq+YKpJA okttC99ggzW0M9NR518JOJ3u90EKSPIweo6RvI8dnQrWwWA1qcQk6nvD7ZECm9Ql LQ5xgZdP3nvMVkoua65GXn5p8ouMaW/h1RUTgUhagxm9EbGm4KPUiWTW6GF2o7jx bYHX98kaxEDRzsurwS5Za5IFCqd85v7BrOVScRDZaOmSGCoBCH2yS9YC2qjVc9rS W61j4x30LRq7tvQ4WRSONtZNvD4+9lKxYjGlxO7FAbCr7EmihnGj7MvguIVw9t3K qkpp5To/vUa0nBWt5SAe1c24PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvZ6t41 v3nYfD6atsISihEg6HDfMB8GA1UdIwQYMBaAFF5wmUm6pAp9R9RNIRaQs3fgUcRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM3My84MjE0NTdEMkYx MzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0NuMUgxRTBoRnBDemQtQlJ4 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huQ1pTYnFrQ24xSDFFMGhGcEN6ZC1CUnhGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM3My84MjE0NTdEMkYxMzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0Nu MUgxRTBoRnBDemQtQlJ4RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhKnHlKk384iY52SSjxzwr/F8KsOzkJD2NrYIUcQIyltgvt+cwTg106NwkJwr miYeSGGwGazuz1TCKhho10krrgON+9QVZG6iAO6ycA6MtjdHiMDHdrcUpPZwmiOT zM47eHFEe0FfPDtNvRMEvJzSGLuwXCQ6cnehpNbgvpUOo1l3e36QziZGcA/plhhj Sgd2Mcazj9O1HWi8feg/CoiXxKgQPKL+fdkdd85A7Plfs6QDcJuA9xf7dkuYJ2fS vet9YMjuuboq5e1SHMhPy82KztvKY8vvZf7VK2wh70ZAEPe/y+uRi+0zBjaE3xRl 4RomtmgNvtwvNlLiHyKnR8cQAQ== -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:39 2026 by rpki-client