$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: P4bOmHGxdkOYBbnhM4FueDJsMBQUUrpkSlvK6EDhvrM= Subject key identifier: 4C:ED:E7:18:B0:A6:D4:E9:AD:73:07:E1:8B:C6:9D:F9:68:D1:E1:98 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 03C1 Signing time: Fri 17 Apr 2026 00:35:48 +0000 Manifest this update: Fri 17 Apr 2026 00:35:47 +0000 Manifest next update: Fri 24 Apr 2026 00:35:47 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: laEGiwDTDeBU02SggUvikY6O7lh5zcIJR2Oq7zkUeSM=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: VLoma/afTmz4hnI0EdqXpLXgczEhizYxmaDG9CyhcCo=) 3: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: MYhon/bKVvfbESU7PH3/suSb5/+YVeHAdnZ0m09ZYpE=) 4: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 4Abgy+X2ZW9Ha0ytPuEUdXVUheE/F+OPg09zPVRwTxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Apr 17 00:35:47 2026 GMT Not After : Apr 24 00:35:47 2026 GMT Subject: CN=69e18064-4978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:89:5d:3a:ba:62:d3:8e:ed:f0:b7:fe:a1: eb:d4:1f:c3:36:ca:ae:a5:7a:b3:bd:9f:fc:88:47: fd:81:36:87:f5:03:82:9d:f4:c9:48:f1:85:a4:9e: 89:e4:7e:b8:dc:ff:fe:8b:41:2c:c8:f0:c4:22:dd: 2b:82:17:cb:ed:4a:9c:b8:c8:41:92:d6:4e:f6:04: e5:85:48:85:b5:c3:4e:9c:3d:8b:d2:ac:c6:b8:39: 86:42:02:83:29:18:04:d7:ff:bd:3e:57:93:cd:6a: 9b:80:5f:9c:5f:43:bb:56:67:b9:f5:cc:cf:e1:69: 44:ce:c3:77:ff:7a:2f:06:8c:37:a7:d5:5f:2c:a2: ec:56:6b:ad:30:1d:f2:e4:80:d8:20:fe:b7:ca:33: 8e:c7:75:4d:94:94:d7:b2:2c:2c:6e:68:e7:64:5b: bc:25:b7:88:4a:d2:48:c1:36:58:56:0a:94:dc:d9: 8e:4c:f8:56:ea:3d:af:ee:f3:65:b3:2f:32:ef:d1: 05:f7:ea:eb:a0:79:6b:1f:83:97:f7:db:a2:1f:e6: dc:20:ba:54:5e:36:6d:19:01:18:06:7c:f1:8e:d9: b4:7d:b6:3e:96:fb:34:44:c5:5d:10:bf:53:a0:0f: 8e:b2:b5:37:20:42:00:65:43:12:10:7b:ba:74:18: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:ED:E7:18:B0:A6:D4:E9:AD:73:07:E1:8B:C6:9D:F9:68:D1:E1:98 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:61:f2:8a:5b:ec:a0:dd:a1:83:9f:c0:d7:b0:59:43:aa:9f: 5a:6b:ea:2a:87:f4:b9:d6:78:66:e7:62:e7:68:ac:f6:ff:1d: e8:d0:3b:ec:8c:e1:5d:9c:8d:e9:e6:b8:1f:7d:8a:98:55:05: ad:a3:4d:39:47:cd:30:3f:f6:24:3e:f4:62:73:60:80:33:55: 72:86:cb:c3:57:f0:a4:ea:18:78:ee:e5:89:e2:14:62:d9:cb: c7:89:b1:9f:bf:7f:49:e3:67:9a:a5:75:e5:7c:48:aa:f0:56: 89:51:16:ef:f6:f2:a9:2f:bd:bb:7c:fa:36:d6:e9:54:bf:5d: f9:09:8e:08:35:55:89:24:43:f5:f6:ba:69:18:6d:a7:cf:80: 8e:95:7b:d6:17:ba:2a:71:62:ad:c9:48:16:67:62:a0:6d:a9: fe:d1:ae:6b:b5:d2:5a:9a:ca:b9:f8:17:e4:80:98:eb:3f:de: 38:58:13:fc:8e:f2:3b:02:08:b0:87:25:50:00:8d:d4:3c:71: 5d:fd:61:48:72:ce:b6:b1:e7:82:de:13:65:f6:45:1c:b8:89: 15:92:6a:fa:f9:e9:28:2e:03:e4:ea:d2:2f:97:50:8e:13:9f: ad:5f:80:47:19:a0:11:ec:01:68:f0:20:f8:57:4e:5c:8f:09: 72:48:b7:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwNDE3MDAzNTQ3WhcNMjYwNDI0MDAzNTQ3WjAYMRYwFAYD VQQDEw02OWUxODA2NC00OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBuJXTq6YtOO7fC3/qHr1B/DNsqupXqzvZ/8iEf9gTaH9QOCnfTJSPGFpJ6J 5H643P/+i0EsyPDEIt0rghfL7UqcuMhBktZO9gTlhUiFtcNOnD2L0qzGuDmGQgKD KRgE1/+9PleTzWqbgF+cX0O7Vme59czP4WlEzsN3/3ovBow3p9VfLKLsVmutMB3y 5IDYIP63yjOOx3VNlJTXsiwsbmjnZFu8JbeIStJIwTZYVgqU3NmOTPhW6j2v7vNl sy8y79EF9+rroHlrH4OX99uiH+bcILpUXjZtGQEYBnzxjtm0fbY+lvs0RMVdEL9T oA+OsrU3IEIAZUMSEHu6dBgveQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzt5xiw ptTprXMH4YvGnflo0eGYMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk2HyilvsoN2hg5/A17BZQ6qfWmvqKof0udZ4Zudi52is9v8d6NA77IzhXZyN 6ea4H32KmFUFraNNOUfNMD/2JD70YnNggDNVcobLw1fwpOoYeO7lieIUYtnLx4mx n79/SeNnmqV15XxIqvBWiVEW7/byqS+9u3z6NtbpVL9d+QmOCDVViSRD9fa6aRht p8+AjpV71he6KnFirclIFmdioG2p/tGua7XSWprKufgX5ICY6z/eOFgT/I7yOwII sIclUACN1DxxXf1hSHLOtrHngt4TZfZFHLiJFZJq+vnpKC4D5OrSL5dQjhOfrV+A RxmgEewBaPAg+FdOXI8Jcki3CA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:29:09 2026 by rpki-client