$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft File: XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json) Hash identifier: dROu8zEaHMtqqa0H9CqswmEZEmR1HIheT3GYbEEj1iI= Subject key identifier: 4C:CC:90:9D:62:90:B4:61:C8:73:C6:6F:64:90:48:FD:1C:4B:A4:32 Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24 Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824 Certificate serial: 238E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft Manifest number: 2373 Signing time: Thu 16 Apr 2026 15:47:31 +0000 Manifest this update: Thu 16 Apr 2026 15:47:30 +0000 Manifest next update: Thu 23 Apr 2026 15:47:30 +0000 Files and hashes: 1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: 7vGg4JLJ2YLqYtyJMgylC+C/JLjN0d1BIwGQQdz9img=) 2: 44C007B0A0D611EDA2603C4EC4F9AE02.roa (hash: R5xEKjp2COzsPx07QmJ9ZHVVMUSggpYYD3FgaBWcVMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9102 (0x238e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824 Validity Not Before: Apr 16 15:47:30 2026 GMT Not After : Apr 23 15:47:30 2026 GMT Subject: CN=69e10493-3c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:30:34:e3:b4:8f:ee:0e:03:5e:da:72:be: ff:ba:22:6c:4e:44:04:e2:41:10:57:d3:28:82:dd: 6d:9b:11:05:88:8e:98:ba:79:d9:32:24:97:59:d9: 6f:98:50:ee:0e:4c:73:60:c0:39:ca:fc:f8:fc:49: 06:74:92:ae:ef:7a:cd:be:67:95:7c:6b:7e:1a:d9: 33:43:25:15:6d:7b:d6:ea:5a:82:63:bb:22:61:ce: 61:28:aa:a2:9d:6a:5e:4f:6e:b8:e3:67:3b:81:89: 95:b0:6f:5a:58:c0:8e:1e:f3:d1:54:76:fc:88:95: 9f:f1:ed:37:77:71:de:7f:e9:61:01:99:ca:f1:99: be:78:1a:f5:b0:c4:0d:52:d3:35:65:ab:6c:33:21: f4:91:2a:a8:6a:27:ce:5d:bc:9b:74:c3:57:22:53: f5:73:00:ba:43:5e:bb:0f:a4:15:28:38:ff:59:21: 5c:e4:e1:17:59:98:23:a0:c0:a9:1b:74:82:43:9a: 7e:e4:97:32:f4:bb:79:96:80:a1:0a:d1:cb:9f:73: 8d:5a:05:6d:0e:e2:42:b3:35:a6:13:14:c4:65:83: 78:14:76:49:af:38:7d:f8:d8:e7:c4:7c:81:59:a8: 9a:9f:4f:21:b5:08:28:45:3c:55:4e:a0:4c:05:ec: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CC:90:9D:62:90:B4:61:C8:73:C6:6F:64:90:48:FD:1C:4B:A4:32 X509v3 Authority Key Identifier: keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b9:9d:23:28:c6:54:a9:42:ac:73:a2:65:a0:a6:55:2e:b5: 65:fb:eb:8e:7a:f4:ee:d1:1e:a5:02:f8:b3:ab:93:b7:d3:98: 43:07:e8:83:a9:9f:06:17:38:2c:fc:74:1b:e1:9e:82:08:17: e6:5e:c3:c2:95:7e:8e:6f:e8:55:22:cf:28:77:88:d4:37:26: 82:c1:43:17:04:54:a3:77:3d:7d:77:3d:e3:27:0f:fd:30:23: 67:ea:25:d9:b8:dd:e2:46:8a:53:75:7a:0a:2e:4d:76:81:c6: 8b:86:ae:63:84:0c:0b:da:8b:e0:bc:9d:a0:f5:5d:f6:03:38: 60:68:aa:34:e3:84:e6:eb:59:bc:4f:b6:17:63:56:6d:be:33: 9c:98:e9:d2:0d:47:3b:47:64:2e:f5:7c:59:b0:32:a1:17:9e: 63:90:f5:d5:c3:35:15:5b:8b:92:13:e0:47:62:bc:76:c2:5d: 84:ab:47:95:91:96:65:f1:11:0b:0d:37:73:0d:b5:77:dd:99: 6d:8e:21:3f:33:95:31:b0:a5:8c:21:72:c4:64:c3:71:5b:11: 4c:31:7a:d9:93:3c:6e:be:e1:59:a8:87:57:48:84:fe:b4:5e: 35:ce:6b:23:05:aa:8e:d1:a1:15:d2:d9:35:77:b7:be:23:8d: 19:ed:27:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxMDcxMTAvBgNVBAUTKDVFNkI1QTA2ODZGNTZCQTBDMEY3N0ZCM0JGMzFCMzg1 NjMyMjA4MjQwHhcNMjYwNDE2MTU0NzMwWhcNMjYwNDIzMTU0NzMwWjAYMRYwFAYD VQQDEw02OWUxMDQ5My0zYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQkwNOO0j+4OA17acr7/uiJsTkQE4kEQV9Mogt1tmxEFiI6YunnZMiSXWdlv mFDuDkxzYMA5yvz4/EkGdJKu73rNvmeVfGt+GtkzQyUVbXvW6lqCY7siYc5hKKqi nWpeT26442c7gYmVsG9aWMCOHvPRVHb8iJWf8e03d3Hef+lhAZnK8Zm+eBr1sMQN UtM1ZatsMyH0kSqoaifOXbybdMNXIlP1cwC6Q167D6QVKDj/WSFc5OEXWZgjoMCp G3SCQ5p+5Jcy9Lt5loChCtHLn3ONWgVtDuJCszWmExTEZYN4FHZJrzh9+NjnxHyB Waian08htQgoRTxVTqBMBezmawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzMkJ1i kLRhyHPGb2SQSP0cS6QyMB8GA1UdIwQYMBaAFF5rWgaG9WugwPd/s78xs4VjIggk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTEwNy9FRTM1QzQ0NjlF NjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2REE5My16dnpHemhXTWlD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1htdGFCb2IxYTZEQTkzLXp2ekd6aFdNaUNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTEwNy9FRTM1QzQ0NjlFNjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2 REE5My16dnpHemhXTWlDQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADLmdIyjGVKlCrHOiZaCmVS61Zfvrjnr07tEepQL4s6uTt9OYQwfog6mfBhc4 LPx0G+GegggX5l7DwpV+jm/oVSLPKHeI1DcmgsFDFwRUo3c9fXc94ycP/TAjZ+ol 2bjd4kaKU3V6Ci5NdoHGi4auY4QMC9qL4LydoPVd9gM4YGiqNOOE5utZvE+2F2NW bb4znJjp0g1HO0dkLvV8WbAyoReeY5D11cM1FVuLkhPgR2K8dsJdhKtHlZGWZfER Cw03cw21d92ZbY4hPzOVMbCljCFyxGTDcVsRTDF62ZM8br7hWaiHV0iE/rReNc5r IwWqjtGhFdLZNXe3viONGe0nkQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:43:26 2026 by rpki-client