$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: Ea0CTyNAIOgf4bgz/FCC8eRzwbbkISNRsgdhMLgNkD4= Subject key identifier: 99:E0:A0:7B:5B:58:BB:2A:2B:4F:C7:DC:14:4F:77:5D:06:B3:0D:E5 Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 0565 Signing time: Tue 24 Mar 2026 23:02:41 +0000 Manifest this update: Tue 24 Mar 2026 23:02:40 +0000 Manifest next update: Tue 31 Mar 2026 23:02:40 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: f+zxDvQuSDFU7WF20YFlfbOwfubuJITeZn+BSpSL4BI=) 2: 308E4138CF7911F081AD0016C4F9AE02.roa (hash: Qe0QBeQXxDexEGZWCVceFBZ0omw7zxCKTPm8MWRJOG0=) 3: 3108D830CF7911F0861E0016C4F9AE02.roa (hash: 0gEebnFcx96IWAD0Qo+4/3MnsrXoHBiI9ORKhrPhb3Q=) 4: 7A88B1FCB44311F09019B577C4F9AE02.roa (hash: GVEQA+3eqIkzA9/ZGe521NeAxe7jSsSWSid0hUiNJOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: Mar 24 23:02:40 2026 GMT Not After : Mar 31 23:02:40 2026 GMT Subject: CN=69c31811-e8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:59:1e:ea:64:de:eb:46:9a:42:56:39:7f: 52:3b:46:51:ce:5d:9a:16:61:82:6e:3d:5d:c4:1a: 6f:10:26:0c:2b:22:97:42:c9:fb:ee:fb:87:d2:a5: a0:13:a8:17:64:f2:dc:00:f0:cd:c7:15:47:b0:11: 9e:20:19:9c:3f:89:80:5a:be:c0:83:46:61:6f:0b: e1:03:2a:3f:2b:c2:18:f5:32:95:3c:fa:03:69:6f: 16:06:e9:51:e7:83:4e:8b:92:21:d2:37:11:0a:a3: 29:b0:da:e1:13:79:30:a3:d7:b6:16:6e:8a:a9:e1: 58:b4:26:62:32:fa:b3:b8:d7:9a:b0:d4:d2:ff:c7: a7:05:c2:83:90:35:91:9c:99:76:25:57:9a:67:f9: a4:6f:36:15:5e:ca:f7:b2:08:03:4f:e9:a3:84:be: 67:e9:e6:cb:9a:6c:2b:4e:0d:b6:91:7c:26:f6:3a: 74:3c:9a:e0:29:58:65:0c:22:1a:31:e0:24:2f:be: d9:ca:5e:7a:37:36:ca:1c:b5:2f:0a:95:79:b8:6d: da:ea:2a:46:af:bd:7b:f6:df:be:b7:59:61:d9:ff: 68:10:46:3a:36:82:a3:24:7f:1a:84:b6:5f:c0:e5: cc:e9:53:15:8f:ff:10:92:08:63:57:02:80:33:bc: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:A0:7B:5B:58:BB:2A:2B:4F:C7:DC:14:4F:77:5D:06:B3:0D:E5 X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:54:aa:e5:ee:8e:31:a9:ba:13:d3:b2:8c:6b:47:46:2b:16: 78:a3:69:f6:ee:a5:b4:5c:65:1d:1c:68:1b:ed:ca:ac:df:6a: ef:5e:c7:a5:66:d9:64:b2:84:92:05:da:1d:4c:88:a8:66:b1: eb:1a:aa:a9:07:ce:03:ca:4d:1b:4c:57:50:86:8e:27:23:da: 29:17:6b:aa:94:73:ec:47:2b:e1:7a:72:a7:a6:f4:81:8c:6c: 6f:48:a0:17:6b:fc:9d:4f:46:a7:66:73:0b:b4:b6:fd:7e:ce: 59:db:e9:3f:f2:5e:db:d3:31:ca:f0:48:4f:b0:33:6b:8a:85: dd:03:ae:9a:51:8e:ce:71:43:98:7c:bc:9b:24:74:6b:f8:3f: a1:24:ce:a9:52:00:95:4f:9e:b3:96:fd:cf:e4:52:54:61:a8: 71:0a:e9:df:28:d9:fe:41:63:59:df:8b:89:f6:5e:18:28:06: 5d:28:e0:63:3e:76:6c:a4:d2:d9:44:d1:c1:e0:aa:5a:a0:75: 0c:db:ac:9c:e5:56:29:0f:f6:e0:ad:69:c4:65:4f:59:de:a2: e2:22:97:c2:3b:99:95:b0:43:6c:16:5a:30:27:de:34:61:3a: 72:1a:5f:14:d2:4f:76:aa:95:84:00:46:ba:c4:de:8f:9d:d5: 9a:e0:ae:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjYwMzI0MjMwMjQwWhcNMjYwMzMxMjMwMjQwWjAYMRYwFAYD VQQDEw02OWMzMTgxMS1lOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAVZHupk3utGmkJWOX9SO0ZRzl2aFmGCbj1dxBpvECYMKyKXQsn77vuH0qWg E6gXZPLcAPDNxxVHsBGeIBmcP4mAWr7Ag0ZhbwvhAyo/K8IY9TKVPPoDaW8WBulR 54NOi5Ih0jcRCqMpsNrhE3kwo9e2Fm6KqeFYtCZiMvqzuNeasNTS/8enBcKDkDWR nJl2JVeaZ/mkbzYVXsr3sggDT+mjhL5n6ebLmmwrTg22kXwm9jp0PJrgKVhlDCIa MeAkL77Zyl56NzbKHLUvCpV5uG3a6ipGr7179t++t1lh2f9oEEY6NoKjJH8ahLZf wOXM6VMVj/8QkghjVwKAM7xwpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJngoHtb WLsqK0/H3BRPd10Gsw3lMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgFSq5e6OMam6E9OyjGtHRisWeKNp9u6ltFxlHRxoG+3KrN9q717HpWbZZLKE kgXaHUyIqGax6xqqqQfOA8pNG0xXUIaOJyPaKRdrqpRz7Ecr4Xpyp6b0gYxsb0ig F2v8nU9Gp2ZzC7S2/X7OWdvpP/Je29MxyvBIT7Aza4qF3QOumlGOznFDmHy8myR0 a/g/oSTOqVIAlU+es5b9z+RSVGGocQrp3yjZ/kFjWd+LifZeGCgGXSjgYz52bKTS 2UTRweCqWqB1DNusnOVWKQ/24K1pxGVPWd6i4iKXwjuZlbBDbBZaMCfeNGE6chpf FNJPdqqVhABGusTej53VmuCuAA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:46 2026 by rpki-client