$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft File: xbajYOSK75Kf3CcpbR1S9b9umRY.mft (raw, json) Hash identifier: hkRZYK2CGrpDdmzTZWYMyzrC7qLEIPwiCiFL/n6ZHZc= Subject key identifier: 21:FE:D6:4F:3D:72:36:CB:59:5B:EF:50:2E:9C:34:92:7E:86:06:1C Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 Certificate issuer: /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Certificate serial: 0867 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft Manifest number: 085C Signing time: Thu 16 Apr 2026 20:40:04 +0000 Manifest this update: Thu 16 Apr 2026 20:40:04 +0000 Manifest next update: Thu 23 Apr 2026 20:40:04 +0000 Files and hashes: 1: xbajYOSK75Kf3CcpbR1S9b9umRY.crl (hash: pleYzTU4pewfT6W4wxkc5+nh4Xkhe/0/RaLyUL4bXZ4=) 2: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (hash: 6Topyg8bWLl5O5LsyGLXYfvkh05TDjr30BTYJNqKf6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Validity Not Before: Apr 16 20:40:04 2026 GMT Not After : Apr 23 20:40:04 2026 GMT Subject: CN=69e14924-8f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:a3:f5:19:91:ae:69:f8:bd:3d:46:88:d1: 2b:4e:41:1d:6d:22:ff:a9:48:22:18:04:33:c0:50: a1:83:02:bf:45:bb:48:83:2a:bd:e1:31:9d:fb:92: 74:cb:16:dd:e7:96:c3:2e:39:dc:d0:be:b6:d7:8f: cc:c8:df:06:07:12:9a:c6:60:94:76:47:34:e1:31: d8:7f:d7:46:fd:10:50:e3:fe:be:36:5b:f4:66:2a: e3:39:60:f6:d2:a8:a9:88:53:da:86:04:8f:4e:53: 64:89:84:24:a4:96:41:76:94:c2:88:26:53:7b:bf: fa:6c:0f:b2:0e:ef:4e:45:b0:6a:5b:eb:0b:65:e7: a0:85:7e:48:cc:a9:26:9e:43:b4:83:ec:67:f9:3a: a0:e5:4d:2e:b0:b2:88:17:65:55:05:13:32:7f:ea: 35:70:c8:04:cd:cc:5a:b7:27:7c:e9:7a:c1:5c:57: 27:2e:d6:44:fc:56:3a:22:72:ea:8f:04:ed:bb:9c: 5e:60:4f:e1:ef:b4:e2:e2:c7:3f:e0:84:19:02:70: 55:1c:67:36:98:e8:aa:d2:ad:da:5e:8c:b4:d7:a0: 81:72:ca:59:fd:90:f8:e5:cb:68:a9:46:23:0d:a7: af:5b:3d:ab:da:f1:9b:96:9b:b6:0f:b1:6e:2a:cc: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FE:D6:4F:3D:72:36:CB:59:5B:EF:50:2E:9C:34:92:7E:86:06:1C X509v3 Authority Key Identifier: keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fa:a2:16:40:33:b7:87:d4:a2:99:74:4d:31:77:1f:81:ce: 63:f4:70:a8:5a:92:85:9c:ee:09:93:e7:e2:f3:a1:bc:58:0c: b1:18:bf:7c:f5:37:cf:da:41:d3:05:6f:94:eb:17:e1:eb:36: 53:40:24:38:2d:63:bd:bc:f0:99:b6:64:a0:5c:56:e6:c6:86: c8:d3:9a:36:1f:b1:0a:7d:2e:b1:44:31:81:c9:17:90:77:94: 74:98:9b:1a:b3:23:46:39:26:ff:a7:de:36:b4:04:d6:81:53: 4d:a0:65:31:64:4e:4a:ab:6b:af:8e:b1:92:ea:03:58:ae:1b: 09:b9:bb:ae:3e:de:07:86:d0:10:71:40:4a:91:0e:c7:59:d2: f9:7b:49:e3:b8:d2:10:28:26:1b:b2:57:58:b8:32:69:70:1e: 18:82:e7:ef:5a:f8:6d:5b:65:98:4e:0f:38:45:4c:ae:b3:3e: 98:27:c5:af:14:80:74:c7:70:10:bd:8e:d0:58:d9:8f:4d:52: bc:23:f6:e6:8d:de:cd:bf:86:a7:5c:98:0c:7b:6b:15:54:2f: 39:da:29:08:20:11:c5:12:df:bc:31:f0:91:12:ad:f1:7d:ba: 9e:73:c0:12:a6:98:24:45:bc:4f:9e:dc:ae:42:1f:bb:6f:4d: 04:68:2b:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQwODgxMTAvBgNVBAUTKEM1QjZBMzYwRTQ4QUVGOTI5RkRDMjcyOTZEMUQ1MkY1 QkY2RTk5MTYwHhcNMjYwNDE2MjA0MDA0WhcNMjYwNDIzMjA0MDA0WjAYMRYwFAYD VQQDEw02OWUxNDkyNC04Zjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMCj9RmRrmn4vT1GiNErTkEdbSL/qUgiGAQzwFChgwK/RbtIgyq94TGd+5J0 yxbd55bDLjnc0L6214/MyN8GBxKaxmCUdkc04THYf9dG/RBQ4/6+Nlv0ZirjOWD2 0qipiFPahgSPTlNkiYQkpJZBdpTCiCZTe7/6bA+yDu9ORbBqW+sLZeeghX5IzKkm nkO0g+xn+Tqg5U0usLKIF2VVBRMyf+o1cMgEzcxatyd86XrBXFcnLtZE/FY6InLq jwTtu5xeYE/h77Ti4sc/4IQZAnBVHGc2mOiq0q3aXoy016CBcspZ/ZD45ctoqUYj DaevWz2r2vGblpu2D7FuKsz3OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH+1k89 cjbLWVvvUC6cNJJ+hgYcMB8GA1UdIwQYMBaAFMW2o2Dkiu+Sn9wnKW0dUvW/bpkW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDA4OC80NEJBN0NBMkZE OUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1S2YzQ2NwYlIxUzliOXVt UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiYWpZT1NLNzVLZjNDY3BiUjFTOWI5dW1SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDA4OC80NEJBN0NBMkZEOUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1 S2YzQ2NwYlIxUzliOXVtUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/qiFkAzt4fUopl0TTF3H4HOY/RwqFqShZzuCZPn4vOhvFgMsRi/fPU3z9pB 0wVvlOsX4es2U0AkOC1jvbzwmbZkoFxW5saGyNOaNh+xCn0usUQxgckXkHeUdJib GrMjRjkm/6feNrQE1oFTTaBlMWROSqtrr46xkuoDWK4bCbm7rj7eB4bQEHFASpEO x1nS+XtJ47jSECgmG7JXWLgyaXAeGILn71r4bVtlmE4POEVMrrM+mCfFrxSAdMdw EL2O0FjZj01SvCP25o3ezb+Gp1yYDHtrFVQvOdopCCARxRLfvDHwkRKt8X26nnPA EqaYJEW8T57crkIfu29NBGgrvA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:52:24 2026 by rpki-client