$ rpki-client -vvf rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft File: XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft (raw, json) Hash identifier: mhycy5r8KsTsHmfp4gfZJ/9f3MdUTQXG2/lv0SvSM8o= Subject key identifier: B0:66:37:A9:BC:93:95:5D:70:B3:04:DC:DF:C4:56:15:19:35:E5:76 Authority key identifier: 5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67 Certificate issuer: /CN=A91230A3/serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft Manifest number: 1D Signing time: Wed 25 Mar 2026 08:09:30 +0000 Manifest this update: Wed 25 Mar 2026 08:09:30 +0000 Manifest next update: Wed 01 Apr 2026 08:09:30 +0000 Files and hashes: 1: XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl (hash: j4YlNqvyRhKkKyS/UB/fsnvYnJm5hA+2X2MjtpMZiYg=) 2: 16AC8742071011F19135264E253D8C67.roa (hash: Ho7coqEarWJ9BJhEvGox/ePOuY1nkqkaNGKMo78IrM4=) 3: 175E7E7A071011F19135264E253D8C67.roa (hash: yFSB05iQ3FLuwiQ0oQDl3ISNbrEcFFMS5/g24lUEvSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230A3, serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067 Validity Not Before: Mar 25 08:09:30 2026 GMT Not After : Apr 1 08:09:30 2026 GMT Subject: CN=69c3983a-5022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:30:22:a7:37:fa:b5:20:cc:97:98:65:45: a6:60:28:aa:98:35:c2:f1:1e:df:9e:b2:7c:b5:c1: 26:ec:8d:6e:ae:f6:01:4d:3b:f2:d4:c0:aa:04:5b: 7b:e9:4f:1d:9b:4f:fc:b9:c7:b9:78:77:bc:a3:5d: 32:c5:5e:05:e1:c2:74:a9:f9:86:e2:62:5b:a0:06: ec:fb:da:17:0f:0f:8b:8a:e1:97:26:bf:fd:6b:67: 11:74:83:ef:d4:4d:ea:15:e1:c3:0b:b5:f7:d3:89: 20:0d:67:cd:a6:67:78:fb:1c:f2:1b:26:10:74:d3: f2:1b:7e:29:41:b1:91:a1:d0:78:6e:cd:09:69:f7: 1e:98:b2:ca:91:c8:f0:c3:31:34:ab:bc:50:8e:37: 6b:ee:ee:3f:68:77:88:ab:52:4b:ad:ab:2c:f6:b5: cf:9e:54:45:8f:af:2c:17:cb:61:41:78:47:93:68: 46:11:d3:22:66:35:45:82:e9:78:47:39:b1:fd:79: 4f:fb:13:18:7c:ee:d9:42:5c:e4:4e:49:b7:a0:e4: b4:52:e5:cc:36:02:dd:d0:4f:4a:96:8d:2d:05:ce: 56:94:37:9d:50:77:af:86:8b:8b:82:2e:b8:d3:47: 36:19:82:96:38:52:83:30:8e:e8:ec:7c:19:93:61: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:37:A9:BC:93:95:5D:70:B3:04:DC:DF:C4:56:15:19:35:E5:76 X509v3 Authority Key Identifier: keyid:5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:40:e4:07:5c:74:70:11:f8:85:06:4a:21:fb:17:32:8a:2c: f4:6c:4f:09:71:11:51:4b:ee:9e:88:c4:21:f5:42:9f:57:65: 5c:8f:3c:f9:ac:3e:1e:ff:e2:09:d5:77:91:e3:db:22:bb:b3: 02:a5:65:84:73:b9:29:05:aa:ed:97:69:5f:b9:ee:8b:57:99: 0f:ee:33:4b:23:c3:33:21:8c:a3:06:6d:f9:5b:16:46:96:aa: d6:71:b3:9c:ea:26:71:28:25:e9:35:22:04:75:52:43:ec:cc: 99:e5:32:0d:c3:c0:f4:a1:73:46:10:9e:cf:a6:76:43:97:82: 3d:aa:0e:8d:15:24:c2:97:0f:2b:66:f5:76:6a:1a:f9:f2:4c: 5b:11:41:05:01:1d:5a:86:a0:79:95:35:e3:70:4e:62:2d:59: b7:a0:f6:17:61:f2:91:87:4f:31:5b:a7:53:7c:f1:de:59:86: 5c:4a:9f:c1:7e:fb:55:52:0e:dd:e8:b1:74:3c:15:94:d1:b9: 11:21:80:86:49:66:e6:0a:f3:a0:52:81:7b:28:dc:04:6e:a4: c8:b2:78:3f:07:ec:a0:c3:3a:cf:63:67:b1:ce:bf:f2:d7:05: 38:98:f5:bd:04:c3:05:af:49:60:05:36:4f:7c:c2:e2:6c:3e: 92:50:89:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzBBMzExMC8GA1UEBRMoNUVGMkJDNzZGQ0MzRkRDOTc5NTc5RUIzNDE5RjgyMTg3 NEU5NjA2NzAeFw0yNjAzMjUwODA5MzBaFw0yNjA0MDEwODA5MzBaMBgxFjAUBgNV BAMTDTY5YzM5ODNhLTUwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsATAipzf6tSDMl5hlRaZgKKqYNcLxHt+esny1wSbsjW6u9gFNO/LUwKoEW3vp Tx2bT/y5x7l4d7yjXTLFXgXhwnSp+YbiYlugBuz72hcPD4uK4Zcmv/1rZxF0g+/U TeoV4cMLtffTiSANZ82mZ3j7HPIbJhB00/IbfilBsZGh0HhuzQlp9x6YssqRyPDD MTSrvFCON2vu7j9od4irUkutqyz2tc+eVEWPrywXy2FBeEeTaEYR0yJmNUWC6XhH ObH9eU/7Exh87tlCXOROSbeg5LRS5cw2At3QT0qWjS0FzlaUN51Qd6+Gi4uCLrjT RzYZgpY4UoMwjujsfBmTYTyJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsGY3qbyT lV1wswTc38RWFRk15XYwHwYDVR0jBBgwFoAUXvK8dvzD/cl5V56zQZ+CGHTpYGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMEEzL0ZCOTgwOUE2MDcw MzExRjFBODEwNUY1NTIyM0Q4QzY3L1h2SzhkdnpEX2NsNVY1NnpRWi1DR0hUcFlH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZLOGR2ekRfY2w1VjU2elFaLUNHSFRwWUdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MEEzL0ZCOTgwOUE2MDcwMzExRjFBODEwNUY1NTIyM0Q4QzY3L1h2SzhkdnpEX2Ns NVY1NnpRWi1DR0hUcFlHYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7QOQHXHRwEfiFBkoh+xcyiiz0bE8JcRFRS+6eiMQh9UKfV2Vcjzz5rD4e/+IJ 1XeR49siu7MCpWWEc7kpBartl2lfue6LV5kP7jNLI8MzIYyjBm35WxZGlqrWcbOc 6iZxKCXpNSIEdVJD7MyZ5TINw8D0oXNGEJ7PpnZDl4I9qg6NFSTClw8rZvV2ahr5 8kxbEUEFAR1ahqB5lTXjcE5iLVm3oPYXYfKRh08xW6dTfPHeWYZcSp/BfvtVUg7d 6LF0PBWU0bkRIYCGSWbmCvOgUoF7KNwEbqTIsng/B+ygwzrPY2exzr/y1wU4mPW9 BMMFr0lgBTZPfMLibD6SUInz -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:45 2026 by rpki-client