$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: il3EOHa0aIaDc0/f9Vuobd0j/BwNjROkXT+kjJuq0cU= Subject key identifier: 38:EC:EB:F2:48:E7:2F:71:3F:11:8D:F6:6D:DB:7B:13:D3:4A:0D:58 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 188B Signing time: Thu 26 Mar 2026 17:28:29 +0000 Manifest this update: Thu 26 Mar 2026 17:28:29 +0000 Manifest next update: Thu 02 Apr 2026 17:28:29 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: HGVXyInnaAa3rIjCG5zBmqtoaR6Jm9GG3tX4v35zKU0=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: MxyzD6uP6BV8vVRqDcKdMO9gZ3aEGm0a3vLNIBFA74A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: Mar 26 17:28:29 2026 GMT Not After : Apr 2 17:28:29 2026 GMT Subject: CN=69c56cbd-6fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:1d:d6:9a:13:ce:ef:fe:29:86:6f:be:98: 49:58:ef:6a:57:53:f1:d0:53:1e:f9:8a:00:a3:9c: 41:f6:f9:38:02:c1:70:1c:1f:29:f8:be:83:f0:18: 42:45:ba:2b:7f:04:1a:7e:67:47:34:28:23:54:6f: 37:66:c6:32:22:2f:fa:40:30:a9:ec:09:43:a9:ce: 2d:8f:e0:2b:8d:45:4c:7a:21:9e:c1:61:a8:de:21: e4:83:a0:e1:f6:19:09:76:e9:3b:9a:39:39:83:76: 54:b8:f7:38:8b:91:9e:30:35:72:82:a4:55:56:3f: 09:f0:c5:d7:fa:a5:41:fb:d7:bb:e7:d2:3f:8b:b3: 36:ce:f0:ef:0a:84:6c:c8:95:f1:2a:1b:24:2e:a1: 06:32:0f:71:94:59:86:ce:ce:66:d9:18:90:2f:66: 1e:d1:ef:78:7b:35:8a:45:71:cf:f0:b5:a2:ca:27: 8f:2c:06:8a:b1:b0:df:fa:9c:78:a3:59:8f:58:53: 4b:e4:64:8e:16:19:07:a6:9d:ac:83:6d:23:73:03: bf:3f:e7:79:41:21:e9:cf:c9:40:2a:b4:c1:7a:b8: 50:e1:4c:2f:46:72:54:66:2f:d8:3d:2b:68:f3:2c: 0d:23:8f:85:9e:d5:13:f8:e1:17:e0:06:37:ee:f2: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EC:EB:F2:48:E7:2F:71:3F:11:8D:F6:6D:DB:7B:13:D3:4A:0D:58 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:50:7f:72:07:f3:e6:5d:df:2e:bd:c0:f0:44:f5:57:a1:59: 1e:e5:bb:7b:32:6c:aa:02:0c:a2:6b:50:dd:43:23:c8:13:f1: df:d4:39:2d:7b:9d:90:cd:ab:e6:f4:2f:d9:d6:6d:7d:0c:dc: 5c:c8:85:c1:4a:52:ce:82:1a:fa:79:4f:a6:14:60:75:4e:24: ba:f6:77:f9:b9:ec:98:19:18:97:38:87:ae:38:69:60:69:91: 45:bf:2d:32:8b:2a:a1:f6:1a:7b:35:98:a0:23:27:23:78:c6: 13:bd:57:cd:2a:2d:e2:5c:88:3f:34:60:21:24:9e:c7:1c:5f: b9:32:9f:1f:4c:b5:e2:b9:39:c0:b6:db:fa:7b:1c:5b:02:6c: 93:55:74:c7:48:48:55:95:05:f3:c8:d2:3b:c8:c9:ba:d4:a2: 6c:4b:8a:bc:60:c8:d4:85:dd:33:0a:0f:dd:c0:38:b9:f5:ad: 4f:f3:8d:04:ba:ae:40:d6:1d:4b:e6:65:cf:26:08:99:5a:b7: 1f:c0:0f:f5:c7:40:61:3e:d1:b4:bb:b0:16:f3:22:4a:8b:d0: 28:a2:a2:9a:91:99:bf:f3:bb:6e:cc:07:98:cb:5a:d1:c0:a5: 93:19:02:58:51:aa:2c:fb:c1:18:87:66:e1:2d:85:70:80:57: 78:44:e1:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjYwMzI2MTcyODI5WhcNMjYwNDAyMTcyODI5WjAYMRYwFAYD VQQDEw02OWM1NmNiZC02ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmEd1poTzu/+KYZvvphJWO9qV1Px0FMe+YoAo5xB9vk4AsFwHB8p+L6D8BhC RborfwQafmdHNCgjVG83ZsYyIi/6QDCp7AlDqc4tj+ArjUVMeiGewWGo3iHkg6Dh 9hkJduk7mjk5g3ZUuPc4i5GeMDVygqRVVj8J8MXX+qVB+9e759I/i7M2zvDvCoRs yJXxKhskLqEGMg9xlFmGzs5m2RiQL2Ye0e94ezWKRXHP8LWiyiePLAaKsbDf+px4 o1mPWFNL5GSOFhkHpp2sg20jcwO/P+d5QSHpz8lAKrTBerhQ4UwvRnJUZi/YPSto 8ywNI4+FntUT+OEX4AY37vJBowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjs6/JI 5y9xPxGN9m3bexPTSg1YMB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4FB/cgfz5l3fLr3A8ET1V6FZHuW7ezJsqgIMomtQ3UMjyBPx39Q5LXudkM2r 5vQv2dZtfQzcXMiFwUpSzoIa+nlPphRgdU4kuvZ3+bnsmBkYlziHrjhpYGmRRb8t MosqofYaezWYoCMnI3jGE71XzSot4lyIPzRgISSexxxfuTKfH0y14rk5wLbb+nsc WwJsk1V0x0hIVZUF88jSO8jJutSibEuKvGDI1IXdMwoP3cA4ufWtT/ONBLquQNYd S+ZlzyYImVq3H8AP9cdAYT7RtLuwFvMiSovQKKKimpGZv/O7bswHmMta0cClkxkC WFGqLPvBGIdm4S2FcIBXeEThSQ== -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:53 2026 by rpki-client