$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft File: X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json) Hash identifier: M6azIBO8ZqCdczHlH07/YDMkkvDBHYnHSsqbkq8lwmM= Subject key identifier: 96:D1:04:E6:74:C3:12:7B:61:06:2B:54:96:EB:98:78:E7:09:17:B3 Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft Manifest number: 01DB Signing time: Fri 17 Apr 2026 03:17:41 +0000 Manifest this update: Fri 17 Apr 2026 03:17:40 +0000 Manifest next update: Fri 24 Apr 2026 03:17:40 +0000 Files and hashes: 1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: kb7r5ghXFGpm2DeeSsheYX14c7u/dJ6KXLV4EZYIb7Q=) 2: 85BF2BE4710111F093C54468C4F9AE02.roa (hash: j9SKLInNcpVR2MVZ8Thc62Fi6/lQmCSnVrmSmxlo0RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Validity Not Before: Apr 17 03:17:40 2026 GMT Not After : Apr 24 03:17:40 2026 GMT Subject: CN=69e1a655-d1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:2f:21:88:40:2c:00:12:97:92:b1:69:1a: f4:8e:ad:01:7c:b2:e2:a8:d5:c8:ef:8b:ac:fc:83: 8f:47:13:f6:18:da:65:4d:9b:14:4c:4e:05:ee:64: 4f:91:db:29:2c:d3:05:67:8c:36:e1:fb:54:c8:9d: 78:69:02:26:83:10:52:77:e3:72:01:3e:ed:c3:4c: 4a:f0:f6:ea:75:88:d5:27:6a:c0:28:fc:18:4a:97: 9d:aa:a7:5d:07:fc:37:0e:90:67:df:61:5e:66:9e: b4:59:9b:ab:10:9f:dd:97:77:e9:40:9d:90:4e:73: 48:53:dc:1f:9f:d5:55:dc:25:da:ac:fe:c8:db:ac: 35:15:c1:d8:a5:dc:d4:61:49:56:9a:57:d2:4e:14: 03:24:c8:dc:45:2c:02:47:10:0d:8d:ab:33:31:7d: ca:21:cb:a6:76:5d:2f:20:64:ad:c6:5a:01:05:57: 0b:b0:2a:b0:96:0e:44:64:2f:9b:af:e0:c4:09:43: 83:0c:7c:d8:a4:9e:d3:15:fc:9b:32:d6:ec:eb:97: d6:4b:5a:20:44:42:54:c1:76:cd:3a:e0:01:94:1f: 87:01:70:12:7b:54:26:c3:8f:ff:31:fd:38:45:02: 52:be:94:45:5d:c3:b3:26:fe:0a:1d:be:3d:b0:13: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D1:04:E6:74:C3:12:7B:61:06:2B:54:96:EB:98:78:E7:09:17:B3 X509v3 Authority Key Identifier: keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7b:c2:62:62:08:35:52:bf:80:80:5d:4b:b8:a2:31:82:11: 2f:f3:2f:d3:83:14:3c:0a:7d:65:e2:3a:e9:23:84:00:18:90: e6:ab:b7:a4:7e:8e:27:a9:f0:c3:e2:80:a4:d1:bd:d2:13:03: 19:66:9d:3b:fe:2d:95:ee:49:aa:e4:4c:81:63:3f:9b:19:61: d4:c9:e0:5d:c1:b3:e0:65:36:9a:c4:c2:94:fe:dc:87:09:32: be:74:0d:e9:9e:3a:af:f3:25:e6:08:d2:7a:f8:7f:a1:94:15: 18:7c:e3:49:e1:15:8b:c2:0f:09:6f:96:02:d5:8f:80:5f:08: 5c:f5:51:a6:84:b3:80:ce:91:30:69:0c:26:6b:30:11:b6:a5: fd:aa:55:83:83:0c:9e:f3:f0:d0:d8:c1:6b:a2:c1:ce:8c:c7: 8a:c0:8f:6a:2d:75:66:df:ab:a5:89:f8:70:18:a9:1a:d9:c7: 62:2f:2a:ac:ea:67:c5:fc:04:97:da:34:4f:54:16:a1:67:3f: 81:8b:3e:29:ad:4a:40:e3:0f:fb:2a:aa:5b:ee:f8:2a:46:c4: b4:c5:63:49:9d:a2:73:16:05:35:20:c9:2d:32:29:0c:98:91: b7:5d:75:8a:57:4b:c6:ab:6b:31:d7:8a:4c:d5:a3:a0:0f:4a: 79:ac:2a:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBEODYxMTAvBgNVBAUTKDVGNUNFMjhDMDREMTZFOTUwRTBFQkNENTk1NTU0MjQ4 M0QzOTU2RDAwHhcNMjYwNDE3MDMxNzQwWhcNMjYwNDI0MDMxNzQwWjAYMRYwFAYD VQQDEw02OWUxYTY1NS1kMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtcvIYhALAASl5KxaRr0jq0BfLLiqNXI74us/IOPRxP2GNplTZsUTE4F7mRP kdspLNMFZ4w24ftUyJ14aQImgxBSd+NyAT7tw0xK8PbqdYjVJ2rAKPwYSpedqqdd B/w3DpBn32FeZp60WZurEJ/dl3fpQJ2QTnNIU9wfn9VV3CXarP7I26w1FcHYpdzU YUlWmlfSThQDJMjcRSwCRxANjaszMX3KIcumdl0vIGStxloBBVcLsCqwlg5EZC+b r+DECUODDHzYpJ7TFfybMtbs65fWS1ogREJUwXbNOuABlB+HAXASe1Qmw4//Mf04 RQJSvpRFXcOzJv4KHb49sBPwVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbRBOZ0 wxJ7YQYrVJbrmHjnCRezMB8GA1UdIwQYMBaAFF9c4owE0W6VDg681ZVVQkg9OVbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEQ4Ni82OEU3OTc4QTZD QkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9YMXppakFUUmJwVU9EcnpWbFZWQ1NEMDVW dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gxemlqQVRSYnBVT0RyelZsVlZDU0QwNVZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEQ4Ni82OEU3OTc4QTZDQkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9YMXppakFUUmJw VU9EcnpWbFZWQ1NEMDVWdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgHvCYmIINVK/gIBdS7iiMYIRL/Mv04MUPAp9ZeI66SOEABiQ5qu3pH6OJ6nw w+KApNG90hMDGWadO/4tle5JquRMgWM/mxlh1MngXcGz4GU2msTClP7chwkyvnQN 6Z46r/Ml5gjSevh/oZQVGHzjSeEVi8IPCW+WAtWPgF8IXPVRpoSzgM6RMGkMJmsw Ebal/apVg4MMnvPw0NjBa6LBzozHisCPai11Zt+rpYn4cBipGtnHYi8qrOpnxfwE l9o0T1QWoWc/gYs+Ka1KQOMP+yqqW+74KkbEtMVjSZ2icxYFNSDJLTIpDJiRt111 ildLxqtrMdeKTNWjoA9KeawqzQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:40:47 2026 by rpki-client