$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: gSWc/AJI/uJ8JD6IxysI/wFjK8b92/iirKVJcK7beHI= Subject key identifier: 81:C7:F2:36:B8:3B:77:E5:49:39:06:2B:37:BB:D5:7E:40:3F:D3:D9 Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 0135 Signing time: Wed 25 Mar 2026 04:39:40 +0000 Manifest this update: Wed 25 Mar 2026 04:39:40 +0000 Manifest next update: Wed 01 Apr 2026 04:39:40 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: oRudXrSLgU2kP/Cwc2JSCnAyfINIQOXqi/fmCD/AzY8=) 2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: ittpt4A7ySbEBupt94ZQJgIOH62PTtCbBsA64tVVFU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Mar 25 04:39:40 2026 GMT Not After : Apr 1 04:39:40 2026 GMT Subject: CN=69c3670c-1580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:75:2d:a8:f8:f5:5b:2a:dd:22:bb:bd:36: dc:d7:8a:77:71:55:d9:19:18:ff:c5:e3:08:be:d1: 4f:87:55:a1:14:61:0f:49:e4:67:3d:9b:aa:0a:d3: 6c:98:46:22:04:20:21:d7:39:94:85:16:c2:1e:0b: 41:df:65:f8:f6:b1:55:56:0f:36:fe:65:63:81:45: 95:2b:77:6d:7f:17:32:4b:a8:b2:ac:1e:d7:a7:62: 63:7c:e2:45:4e:95:97:94:00:23:72:f2:62:d8:fb: 68:38:4e:58:e4:7c:ee:c6:78:36:17:02:0e:99:91: 07:79:81:7c:57:c6:87:4d:2e:91:d8:a9:10:71:69: fd:71:89:00:71:d8:db:e0:ca:c7:c3:4c:37:b8:61: c4:5f:8c:2b:d9:1f:57:96:af:1b:81:4e:76:84:72: f8:92:6f:2d:6c:92:0e:d5:30:14:26:d9:3b:30:31: ef:6a:2a:b2:01:ba:22:ba:14:e4:e5:ba:0f:6f:5b: b4:e4:91:db:a6:41:29:47:5b:49:69:90:a8:2e:5d: e7:5b:60:8f:ca:03:95:f7:4b:64:c8:53:c9:8d:55: 36:46:74:22:d9:76:09:35:32:27:21:d9:54:78:a1: ed:d5:c1:4e:fc:9c:c2:36:f1:61:44:ea:55:20:7e: 19:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C7:F2:36:B8:3B:77:E5:49:39:06:2B:37:BB:D5:7E:40:3F:D3:D9 X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:80:83:29:dc:f2:eb:b1:1a:20:e0:23:67:95:56:05:6a:52: 5f:97:b3:f3:90:b0:71:17:66:ad:f8:15:7f:16:d5:dd:a2:7b: ce:c4:a2:ad:25:48:85:34:82:d5:82:4c:c1:22:c7:c0:60:33: a4:37:35:cd:c5:3b:1a:cc:9e:ff:63:72:10:80:04:be:b5:11: 89:9c:8e:95:b9:ec:e7:0a:7f:ec:92:f1:c6:10:98:e2:44:80: 0a:07:f6:8c:e4:56:65:84:a1:95:dc:a9:c7:24:02:55:69:4c: f3:a3:29:2c:1e:85:76:0c:96:24:43:d3:27:8d:32:ed:5d:4e: 46:b2:53:be:14:e0:db:12:1f:4e:96:49:29:84:46:7a:94:04: a7:93:91:84:45:1f:ed:50:f4:13:68:f5:70:f4:67:62:bc:e3: 9d:c7:d9:dc:08:91:99:12:55:1d:76:16:40:a1:50:8b:88:78: e9:a3:eb:63:70:d5:ac:77:e1:aa:1e:02:3c:c3:76:61:ff:97: d3:dc:62:e6:52:45:85:90:37:72:61:8f:d1:82:f3:70:dd:5c: 62:37:78:ae:43:16:81:25:fa:3b:d3:5e:4d:7e:32:b7:ca:6c: ef:46:8a:f7:4f:3c:46:78:7b:02:61:ab:f4:c1:97:1f:78:12: 2c:1c:6c:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjYwMzI1MDQzOTQwWhcNMjYwNDAxMDQzOTQwWjAYMRYwFAYD VQQDEw02OWMzNjcwYy0xNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi3V1Laj49Vsq3SK7vTbc14p3cVXZGRj/xeMIvtFPh1WhFGEPSeRnPZuqCtNs mEYiBCAh1zmUhRbCHgtB32X49rFVVg82/mVjgUWVK3dtfxcyS6iyrB7Xp2JjfOJF TpWXlAAjcvJi2PtoOE5Y5Hzuxng2FwIOmZEHeYF8V8aHTS6R2KkQcWn9cYkAcdjb 4MrHw0w3uGHEX4wr2R9Xlq8bgU52hHL4km8tbJIO1TAUJtk7MDHvaiqyAboiuhTk 5boPb1u05JHbpkEpR1tJaZCoLl3nW2CPygOV90tkyFPJjVU2RnQi2XYJNTInIdlU eKHt1cFO/JzCNvFhROpVIH4ZzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHH8ja4 O3flSTkGKze71X5AP9PZMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJICDKdzy67EaIOAjZ5VWBWpSX5ez85CwcRdmrfgVfxbV3aJ7zsSirSVIhTSC 1YJMwSLHwGAzpDc1zcU7Gsye/2NyEIAEvrURiZyOlbns5wp/7JLxxhCY4kSACgf2 jORWZYShldypxyQCVWlM86MpLB6FdgyWJEPTJ40y7V1ORrJTvhTg2xIfTpZJKYRG epQEp5ORhEUf7VD0E2j1cPRnYrzjncfZ3AiRmRJVHXYWQKFQi4h46aPrY3DVrHfh qh4CPMN2Yf+X09xi5lJFhZA3cmGP0YLzcN1cYjd4rkMWgSX6O9NeTX4yt8ps70aK 9088Rnh7AmGr9MGXH3gSLBxs/w== -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:18 2026 by rpki-client