$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: lRFq2y2ehizIwAXQ9i39Vwa8gB1KaARjI4TcyKSdxUM= Subject key identifier: 50:28:A9:5D:D0:D7:8E:23:36:C4:E9:56:C7:51:F7:39:D6:73:3C:1A Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 065F Signing time: Tue 24 Mar 2026 22:20:07 +0000 Manifest this update: Tue 24 Mar 2026 22:20:07 +0000 Manifest next update: Tue 31 Mar 2026 22:20:07 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: uXyMtF4nfYAy0AOYG0fRPv8YM1GruaFKa6hUcWUGmoU=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: 3A2pV/UTZtR9m+Y1mc0+3JTKgqWFh6fCoGK6Q5CmqNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: Mar 24 22:20:07 2026 GMT Not After : Mar 31 22:20:07 2026 GMT Subject: CN=69c30e17-5111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:ba:d6:01:0d:74:af:2b:07:aa:c6:dd:cb: 21:29:6d:74:da:72:6d:b9:34:6d:aa:e0:8c:2e:d6: 94:c5:e0:c9:6d:f4:1c:5c:0a:c1:4a:b8:d1:9b:cf: 46:9c:e5:aa:05:b2:fa:44:cd:8f:63:20:4a:82:29: b8:ee:cc:47:06:8e:b8:4e:17:2e:37:08:bc:86:21: f0:9e:c9:7e:77:37:6c:ea:18:8e:18:9f:64:a1:95: fd:fe:f6:2f:84:fc:3a:d3:2d:4e:0d:0f:53:d3:15: eb:8f:f5:9e:1d:cd:ee:ad:f0:f2:c6:46:4f:f3:e7: b6:7f:1b:57:ec:34:2d:ef:56:7c:13:49:87:11:bd: 20:c7:2e:5b:0c:fb:1a:08:7a:19:55:8f:82:49:dc: fc:12:72:e3:77:58:40:73:6c:11:6e:7f:fd:61:da: 54:11:b8:ad:36:31:d9:d1:22:54:ab:ca:90:5b:c9: 91:50:fc:d5:88:f2:89:06:e3:93:e7:c4:1e:ec:07: a3:a8:05:e0:e2:91:00:58:f8:61:3d:6b:64:3d:e8: b9:9a:b7:c8:0e:b3:3f:a1:17:0a:93:b3:c9:b9:3d: 2c:c7:20:01:e2:02:a1:46:fc:60:d5:01:9c:0a:e7: 56:d7:3c:13:6d:b9:69:83:8d:f2:2d:1a:3e:06:a2: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:28:A9:5D:D0:D7:8E:23:36:C4:E9:56:C7:51:F7:39:D6:73:3C:1A X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6a:c4:ce:94:e9:7b:f5:22:9a:17:57:3e:38:4a:11:fc:17: c2:b4:84:c2:d4:e5:c2:0a:44:95:cf:82:6c:23:9f:6c:ad:c7: bd:0a:43:48:3d:f4:3f:aa:96:7c:4a:fb:9c:6d:f9:d5:b2:16: f9:9a:f2:da:4a:3c:02:28:61:f4:d9:6d:d1:ad:b1:eb:f9:b6: b5:e4:e2:55:58:b2:e9:41:eb:fc:ab:97:00:fc:70:4a:00:2c: 5e:57:e0:d0:8e:97:c8:ac:82:0f:cd:68:34:e4:7e:f0:65:05: 5e:0c:8c:b4:56:48:24:df:46:84:28:cc:fe:87:83:49:d1:9b: 7c:4c:4b:1c:0c:2d:87:14:79:c5:28:18:48:74:10:bd:98:dc: fd:4b:fc:df:16:1d:c9:ad:12:cf:6b:b3:07:99:41:73:c4:8f: 94:69:0d:91:e0:09:40:1e:0e:d5:b1:65:fe:56:8b:ce:d8:49: 83:31:75:c8:2e:7b:68:fe:d5:08:e0:7f:60:f5:84:36:55:8b: e1:09:74:c9:d4:28:ee:e0:ef:94:c1:85:de:1f:91:dd:bc:a2: 4b:18:d5:65:65:f4:5f:ba:16:a7:93:59:33:84:22:18:92:1a: 22:d4:4e:d5:69:c6:d3:6c:d6:05:ff:1c:24:54:41:ae:b6:0c: e2:2c:ee:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjYwMzI0MjIyMDA3WhcNMjYwMzMxMjIyMDA3WjAYMRYwFAYD VQQDEw02OWMzMGUxNy01MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvee61gENdK8rB6rG3cshKW102nJtuTRtquCMLtaUxeDJbfQcXArBSrjRm89G nOWqBbL6RM2PYyBKgim47sxHBo64ThcuNwi8hiHwnsl+dzds6hiOGJ9koZX9/vYv hPw60y1ODQ9T0xXrj/WeHc3urfDyxkZP8+e2fxtX7DQt71Z8E0mHEb0gxy5bDPsa CHoZVY+CSdz8EnLjd1hAc2wRbn/9YdpUEbitNjHZ0SJUq8qQW8mRUPzViPKJBuOT 58Qe7AejqAXg4pEAWPhhPWtkPei5mrfIDrM/oRcKk7PJuT0sxyAB4gKhRvxg1QGc CudW1zwTbblpg43yLRo+BqJifwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAoqV3Q 144jNsTpVsdR9znWczwaMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj2rEzpTpe/UimhdXPjhKEfwXwrSEwtTlwgpElc+CbCOfbK3HvQpDSD30P6qW fEr7nG351bIW+Zry2ko8Aihh9Nlt0a2x6/m2teTiVViy6UHr/KuXAPxwSgAsXlfg 0I6XyKyCD81oNOR+8GUFXgyMtFZIJN9GhCjM/oeDSdGbfExLHAwthxR5xSgYSHQQ vZjc/Uv83xYdya0Sz2uzB5lBc8SPlGkNkeAJQB4O1bFl/laLzthJgzF1yC57aP7V COB/YPWENlWL4Ql0ydQo7uDvlMGF3h+R3byiSxjVZWX0X7oWp5NZM4QiGJIaItRO 1WnG02zWBf8cJFRBrrYM4izuwA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:51:35 2026 by rpki-client