$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft File: XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json) Hash identifier: 1kEXww7nonnygifRBLWMiHg8qsdY429GYyKWlGE2PsE= Subject key identifier: D7:CF:C2:63:1D:0C:16:FA:2D:4A:D2:60:47:A9:A6:E5:6F:23:37:BF Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft Manifest number: 0328 Signing time: Fri 27 Mar 2026 00:51:02 +0000 Manifest this update: Fri 27 Mar 2026 00:51:02 +0000 Manifest next update: Fri 03 Apr 2026 00:51:02 +0000 Files and hashes: 1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: wVxKDmOtQwAzCyHMCZIt1hw/5TRAVMY07oIQ+ZA0U/A=) 2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: ZLrpjaK1+7gnd1piN93H0vUz3/K0I8ARXc+tRTMhSrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Validity Not Before: Mar 27 00:51:02 2026 GMT Not After : Apr 3 00:51:02 2026 GMT Subject: CN=69c5d476-5249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:f9:81:6b:59:70:f5:c2:3e:47:e5:bf:8c: d9:da:86:fe:7c:02:42:7d:a1:5e:46:19:2c:09:43: ac:aa:e5:36:89:f8:ca:6d:6e:14:f8:7e:81:66:43: 93:95:4b:e0:2e:21:b5:d3:57:00:f8:f7:13:dd:e5: a7:40:7c:27:b5:5e:7b:28:72:a1:b4:72:45:74:f6: 7f:b8:9d:27:85:d7:2f:bf:f7:8c:af:57:d0:b4:57: 56:c8:c3:5f:bb:2d:38:3a:c3:2d:c9:ae:6b:a4:74: 0c:e0:f8:fb:a2:69:af:bc:66:2e:ab:55:a5:69:22: 0e:9f:6a:96:bf:0d:ba:87:14:8a:38:22:76:3f:47: 84:ed:93:33:23:dc:6c:23:20:1e:42:8e:9e:95:2d: 67:c1:79:23:c2:cb:0d:93:97:2e:9a:8c:ff:a9:1a: 47:9d:d0:2a:37:93:c6:14:1e:8c:5d:3a:bd:7c:ec: 20:8c:8d:63:f1:29:f3:74:bd:e7:56:2b:3c:fc:bc: 4f:98:a8:c3:4f:75:27:37:e9:37:52:e5:63:9f:74: 40:1e:ab:51:ef:98:57:5f:5a:ba:07:1d:9f:eb:13: c0:7e:60:d4:64:22:ea:13:16:e3:bc:9e:00:78:3b: 04:61:bd:40:71:b0:e4:1b:72:88:9f:cd:31:d7:27: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CF:C2:63:1D:0C:16:FA:2D:4A:D2:60:47:A9:A6:E5:6F:23:37:BF X509v3 Authority Key Identifier: keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:4f:59:ee:91:09:71:86:99:44:92:67:52:e6:ee:3d:ab:c0: 57:33:e5:71:b6:5f:25:b6:e2:a9:ae:d1:d9:f8:ba:00:9b:e1: 18:ba:67:5e:62:2f:f8:01:03:56:1c:a7:4d:46:07:70:56:f0: 05:17:f2:1e:e5:6c:2a:09:d5:30:92:af:9d:fc:0a:94:39:e4: c6:a2:6c:c9:76:26:d9:3e:6c:dc:f5:02:62:79:cb:c4:db:84: 23:8b:e6:a6:aa:74:65:7d:b3:c1:d7:17:40:1d:52:53:47:b8: 49:a0:64:f1:02:f6:64:6d:31:46:b0:b4:49:40:46:6f:a7:a0: ea:17:50:7a:54:d7:a6:ab:a6:34:39:12:8f:8e:94:5d:d1:f8: 9f:a8:66:49:c2:b2:d1:d1:89:de:a3:41:55:bb:ef:5c:59:ad: 1b:6d:d3:b6:42:9d:b4:46:ac:64:93:ca:b1:d4:93:fc:4c:35: c3:39:95:3d:ad:64:75:91:84:db:b7:28:ab:f7:d1:02:29:37: b2:4a:1c:23:e4:ac:5b:04:52:c8:26:36:c3:b7:5b:20:8c:a2: f4:53:0f:52:f6:98:60:f5:09:91:7f:4a:ae:c8:5e:e4:d2:6a: 3f:0b:66:40:52:0b:85:3d:20:c8:3b:79:00:3d:18:2b:08:c9: 7e:9e:6f:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0RTkxMTAvBgNVBAUTKDVENEExRkNGNTMwMUMwMjc1OUM4NEVFQTU1OTE1RTI1 QzE3MUE3M0YwHhcNMjYwMzI3MDA1MTAyWhcNMjYwNDAzMDA1MTAyWjAYMRYwFAYD VQQDEw02OWM1ZDQ3Ni01MjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bv5gWtZcPXCPkflv4zZ2ob+fAJCfaFeRhksCUOsquU2ifjKbW4U+H6BZkOT lUvgLiG101cA+PcT3eWnQHwntV57KHKhtHJFdPZ/uJ0nhdcvv/eMr1fQtFdWyMNf uy04OsMtya5rpHQM4Pj7ommvvGYuq1WlaSIOn2qWvw26hxSKOCJ2P0eE7ZMzI9xs IyAeQo6elS1nwXkjwssNk5cumoz/qRpHndAqN5PGFB6MXTq9fOwgjI1j8SnzdL3n Vis8/LxPmKjDT3UnN+k3UuVjn3RAHqtR75hXX1q6Bx2f6xPAfmDUZCLqExbjvJ4A eDsEYb1AcbDkG3KIn80x1yfB+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNfPwmMd DBb6LUrSYEeppuVvIze/MB8GA1UdIwQYMBaAFF1KH89TAcAnWchO6lWRXiXBcac/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTRFOS9DNUQ1RTRDQTA2 NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndDZFp5RTdxVlpGZUpjRnhw ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVb2Z6MU1Cd0NkWnlFN3FWWkZlSmNGeHB6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTRFOS9DNUQ1RTRDQTA2NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndD ZFp5RTdxVlpGZUpjRnhwejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEU9Z7pEJcYaZRJJnUubuPavAVzPlcbZfJbbiqa7R2fi6AJvhGLpnXmIv+AED VhynTUYHcFbwBRfyHuVsKgnVMJKvnfwKlDnkxqJsyXYm2T5s3PUCYnnLxNuEI4vm pqp0ZX2zwdcXQB1SU0e4SaBk8QL2ZG0xRrC0SUBGb6eg6hdQelTXpqumNDkSj46U XdH4n6hmScKy0dGJ3qNBVbvvXFmtG23TtkKdtEasZJPKsdST/Ew1wzmVPa1kdZGE 27coq/fRAik3skocI+SsWwRSyCY2w7dbIIyi9FMPUvaYYPUJkX9Krshe5NJqPwtm QFILhT0gyDt5AD0YKwjJfp5v8g== -----END CERTIFICATE-----Generated at Sat Mar 28 12:17:53 2026 by rpki-client