$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: 0p0QtKi0tMkzn6ULgc7EVg2jmMV3boo+zFyfuWZr0HA= Subject key identifier: 3B:91:2A:BC:58:F3:FB:7F:B0:1E:FB:BF:01:54:61:C6:13:C7:21:C3 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 084E Signing time: Tue 24 Mar 2026 20:32:32 +0000 Manifest this update: Tue 24 Mar 2026 20:32:32 +0000 Manifest next update: Tue 31 Mar 2026 20:32:32 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: h8HAb2CBiY25FIxRmRQI+k5iIz0vUxlvRy6Lo95CJJc=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: 0atk63T1W/wzmM9R09qN0CbSSQOZFaD/GMI/cNzoG4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Mar 24 20:32:32 2026 GMT Not After : Mar 31 20:32:32 2026 GMT Subject: CN=69c2f4e0-ffb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:fd:17:bf:d3:d6:6d:cd:7f:d0:b2:21:5d: b0:be:82:47:fd:84:c8:5f:19:f0:45:04:95:2d:12: 3e:65:e6:ed:60:83:68:85:e1:b2:59:39:19:6c:a5: aa:91:0b:75:57:14:1e:86:da:26:2c:7a:aa:b0:71: 90:37:9a:a2:41:e9:70:76:ce:80:bf:82:b9:f9:c6: 40:4c:2b:4e:47:48:48:c9:f1:8f:e2:c6:62:35:a3: fa:3f:e7:54:cc:95:0d:ff:0f:72:20:70:cf:b5:c7: 00:cb:6e:70:65:c9:6c:ae:cb:85:54:d0:56:65:0e: fc:00:cc:47:ac:b9:bc:8c:69:1d:ac:d8:be:7d:3a: 59:f7:9a:2e:28:04:09:06:c4:28:ff:1d:7b:60:fc: 81:2b:48:75:0e:bd:78:81:7b:fc:6f:a8:ab:ba:0f: 72:98:03:2b:25:5d:4b:66:a4:36:be:4d:cf:19:ee: 08:1a:d8:69:83:03:5a:27:ca:80:44:f2:e2:a1:cf: e3:04:e6:91:25:f2:da:9a:82:bb:b1:d9:5f:9c:76: c9:f4:4d:8a:f9:11:b9:51:20:cf:aa:51:cb:1c:47: 14:08:9f:84:c7:38:44:c7:95:de:be:a3:1a:d9:ed: e1:b0:3a:c4:94:a4:5e:47:91:dd:01:8e:0a:ca:b1: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:2A:BC:58:F3:FB:7F:B0:1E:FB:BF:01:54:61:C6:13:C7:21:C3 X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d5:7c:fe:97:1e:cc:6c:09:ae:54:4a:65:78:17:72:05:f8: a7:78:5c:29:ea:fb:d5:47:54:95:23:e9:73:c5:65:5a:cf:5b: 50:ae:70:4f:0a:3e:85:25:ef:d3:33:0b:ba:a2:c7:5e:54:e9: 97:45:17:a9:b2:4a:b7:9a:1c:bb:e2:53:c2:fb:e3:b5:d2:02: 12:95:67:5f:24:95:e9:be:5a:f3:6b:2d:5b:61:2f:11:24:51: 29:6d:cf:a1:a1:df:c0:80:69:34:97:fd:03:fe:18:82:12:1d: f6:f4:b2:ad:75:44:65:de:ff:ab:91:dd:4d:fe:5d:55:f3:3e: e2:31:db:01:fa:0c:e9:5a:20:3e:a4:cb:e9:26:69:10:c9:bc: 5c:dc:66:39:a6:04:8e:2d:02:cb:a7:ac:b8:86:74:e8:7e:55: 48:3a:4f:d1:de:51:3f:7a:6d:67:c5:05:64:29:50:8c:54:d2: c5:c9:1e:18:00:ad:b1:2a:e1:f7:ea:be:8f:4c:da:f4:65:24: 76:4b:97:b4:46:69:e8:ad:41:69:03:ed:9b:c2:96:24:b4:ea: 02:8a:c7:7c:57:89:ce:52:7d:45:42:7f:83:96:94:15:fc:f0: f5:49:e6:b1:f5:8e:a9:a1:23:3d:6b:ac:0e:f6:80:51:59:da: 1f:ff:0a:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjYwMzI0MjAzMjMyWhcNMjYwMzMxMjAzMjMyWjAYMRYwFAYD VQQDEw02OWMyZjRlMC1mZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+n9F7/T1m3Nf9CyIV2wvoJH/YTIXxnwRQSVLRI+ZebtYINoheGyWTkZbKWq kQt1VxQehtomLHqqsHGQN5qiQelwds6Av4K5+cZATCtOR0hIyfGP4sZiNaP6P+dU zJUN/w9yIHDPtccAy25wZclsrsuFVNBWZQ78AMxHrLm8jGkdrNi+fTpZ95ouKAQJ BsQo/x17YPyBK0h1Dr14gXv8b6irug9ymAMrJV1LZqQ2vk3PGe4IGthpgwNaJ8qA RPLioc/jBOaRJfLamoK7sdlfnHbJ9E2K+RG5USDPqlHLHEcUCJ+ExzhEx5XevqMa 2e3hsDrElKReR5HdAY4KyrGbqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuRKrxY 8/t/sB77vwFUYcYTxyHDMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvNV8/pcezGwJrlRKZXgXcgX4p3hcKer71UdUlSPpc8VlWs9bUK5wTwo+hSXv 0zMLuqLHXlTpl0UXqbJKt5ocu+JTwvvjtdICEpVnXySV6b5a82stW2EvESRRKW3P oaHfwIBpNJf9A/4YghId9vSyrXVEZd7/q5HdTf5dVfM+4jHbAfoM6VogPqTL6SZp EMm8XNxmOaYEji0Cy6esuIZ06H5VSDpP0d5RP3ptZ8UFZClQjFTSxckeGACtsSrh 9+q+j0za9GUkdkuXtEZp6K1BaQPtm8KWJLTqAorHfFeJzlJ9RUJ/g5aUFfzw9Unm sfWOqaEjPWusDvaAUVnaH/8K+w== -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:42 2026 by rpki-client