$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json) Hash identifier: UCxrAg2to+jraVNsWIFgG1jNcsVnSdAPjKPIgN8iduc= Subject key identifier: A5:E0:6E:4D:D3:E2:02:54:A5:D1:52:8F:24:9C:AF:C2:A0:41:80:DF Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft Manifest number: 0710 Signing time: Tue 24 Mar 2026 21:37:03 +0000 Manifest this update: Tue 24 Mar 2026 21:37:02 +0000 Manifest next update: Tue 31 Mar 2026 21:37:02 +0000 Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: A6qg3KthhvlLJpjthTJ7mVpJgjriq9UFhq4jW8CiHmA=) 2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: hVAzBq10JoeQ4tZjatQAI3dijRkE5vSTcqXHOyfwDrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Validity Not Before: Mar 24 21:37:02 2026 GMT Not After : Mar 31 21:37:02 2026 GMT Subject: CN=69c303ff-fd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:29:ff:1e:ff:81:51:4b:c7:7a:fc:0d:03:51: ab:f9:96:67:9b:de:3d:75:70:da:18:8b:20:48:5d: 82:03:00:ac:2b:57:3d:83:ef:e5:c8:db:a5:08:a8: 54:62:e0:8d:9d:03:b3:83:d6:18:17:01:ea:e5:dc: 02:30:1e:0c:b2:86:ca:04:d5:f0:d2:67:eb:9e:c0: df:3b:28:ff:4d:16:8d:0b:b2:89:97:19:46:92:49: 89:3e:bf:46:0e:2a:f1:c4:89:ef:a7:19:48:fd:d1: 67:14:9b:30:79:6c:2c:c0:3f:dc:f8:c8:cf:98:b5: 7c:95:c6:f2:ac:27:2a:c2:e2:14:23:eb:4e:28:13: 50:0f:71:ac:e1:20:b3:0b:dd:44:49:9e:9a:0b:55: 54:50:a1:96:04:3d:77:67:2c:c4:0b:c2:c6:8e:f0: ee:02:4d:aa:0b:e7:9d:2f:e7:6c:72:23:88:86:17: ba:f5:71:7c:af:75:2f:1a:42:23:00:79:a0:20:56: 64:b5:4c:37:e8:ca:28:a5:ec:65:83:3b:14:ac:90: 49:1a:00:24:5d:10:fa:34:a5:e1:f4:ec:3d:a0:0c: 1c:0b:80:08:ac:56:1a:9a:7f:1f:54:a7:b6:28:98: 03:8f:5e:ca:8f:83:6d:2a:22:ab:75:3e:f0:f6:49: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:6E:4D:D3:E2:02:54:A5:D1:52:8F:24:9C:AF:C2:A0:41:80:DF X509v3 Authority Key Identifier: keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e5:17:f7:66:55:3a:14:a8:51:d7:d1:fa:5e:4d:33:a6:e7: a0:53:1e:fc:15:74:ff:d1:66:a4:0b:a7:11:68:82:16:af:9e: 95:7e:7a:d5:e4:e3:bc:46:f3:fd:0d:79:56:f0:20:2c:96:bd: 0f:f8:b0:37:e8:81:7c:d0:7f:ce:6f:71:d0:3f:a1:07:78:3a: b7:9e:38:07:74:5d:28:28:1d:ee:e9:ec:ee:0c:c6:38:62:d1: ff:ae:de:bc:1c:db:6d:84:e9:7f:29:aa:6d:3c:1b:4b:72:6a: 76:5a:22:e4:73:17:c6:d2:76:56:01:03:e6:95:a8:78:21:5d: 19:44:93:4c:38:e0:b7:e5:69:3f:fd:22:cd:10:16:28:84:54: 42:69:35:1d:b0:11:8c:20:df:50:f9:af:c7:6e:d9:c3:55:73: 01:20:2a:4b:26:fd:26:f1:10:b3:ac:1b:f1:d0:19:71:bf:c3: 34:cf:2f:86:26:37:ec:02:cb:03:4e:dd:91:23:53:5c:d4:12: 75:6b:d2:64:d6:40:45:c3:44:27:8e:38:1f:3f:ce:54:2c:8c: 39:58:95:40:b7:2a:95:ea:33:0e:1e:0b:98:a3:d2:4e:6e:1e: 45:6f:00:3d:ac:16:79:a5:c8:0b:be:0a:5c:69:b4:1f:28:7c: 6e:49:ae:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz QjFBREY2QTEwHhcNMjYwMzI0MjEzNzAyWhcNMjYwMzMxMjEzNzAyWjAYMRYwFAYD VQQDEw02OWMzMDNmZi1mZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yn/Hv+BUUvHevwNA1Gr+ZZnm949dXDaGIsgSF2CAwCsK1c9g+/lyNulCKhU YuCNnQOzg9YYFwHq5dwCMB4MsobKBNXw0mfrnsDfOyj/TRaNC7KJlxlGkkmJPr9G DirxxInvpxlI/dFnFJsweWwswD/c+MjPmLV8lcbyrCcqwuIUI+tOKBNQD3Gs4SCz C91ESZ6aC1VUUKGWBD13ZyzEC8LGjvDuAk2qC+edL+dsciOIhhe69XF8r3UvGkIj AHmgIFZktUw36MoopexlgzsUrJBJGgAkXRD6NKXh9Ow9oAwcC4AIrFYamn8fVKe2 KJgDj17Kj4NtKiKrdT7w9kmJewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXgbk3T 4gJUpdFSjyScr8KgQYDfMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAceUX92ZVOhSoUdfR+l5NM6bnoFMe/BV0/9FmpAunEWiCFq+elX561eTjvEbz /Q15VvAgLJa9D/iwN+iBfNB/zm9x0D+hB3g6t544B3RdKCgd7uns7gzGOGLR/67e vBzbbYTpfymqbTwbS3Jqdloi5HMXxtJ2VgED5pWoeCFdGUSTTDjgt+VpP/0izRAW KIRUQmk1HbARjCDfUPmvx27Zw1VzASAqSyb9JvEQs6wb8dAZcb/DNM8vhiY37ALL A07dkSNTXNQSdWvSZNZARcNEJ444Hz/OVCyMOViVQLcqleozDh4LmKPSTm4eRW8A PawWeaXIC74KXGm0Hyh8bkmuWA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:13 2026 by rpki-client