$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: aglajGW+whFn7pnLZ2QOQPjtdoLhQiijTIPIre8CpC0= Subject key identifier: B3:A8:35:81:34:BE:25:21:F1:52:C6:09:3C:6D:C0:D9:E3:34:6A:11 Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 01D1 Signing time: Wed 25 Mar 2026 02:59:55 +0000 Manifest this update: Wed 25 Mar 2026 02:59:54 +0000 Manifest next update: Wed 01 Apr 2026 02:59:54 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: yOq23H34MW9DBmf2nGhkZxMLPEr697jyMa42vMzSVwc=) 2: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: poWWLE4I6jhUD5Wmi9+aSqCUDYtylXKLemPgGHYFlmI=) 3: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: 02BK3Rc5B64K8I9rDlPS9wg6HoKTZjWa4LYyMWgRM/4=) 4: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: 6ziz8Vbwbuo+v5DPJFlqhouxjGTzfKMnl6UQDVob9A0=) 5: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: D8CvXbZFI8eMzBOfI99cBZdW+iIvKoprUDlzG1boKIs=) 6: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: +UGzFoOdYB27w2dtyFnblneGu3br9H01b49RD3SBcIk=) 7: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: yG5g5l4ahe8+QX5msDDHM+u5qeGduBK/xW+5zLNGkzs=) 8: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: Dw9bjrXD09PLaGgOnouY4vwEn7ci+sbFDgoI/hc8reE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Mar 25 02:59:54 2026 GMT Not After : Apr 1 02:59:54 2026 GMT Subject: CN=69c34faa-fbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:e1:c8:10:c0:d9:1e:f5:fb:0a:22:f4:5d: 2f:f4:09:06:d9:70:a2:44:9d:9d:38:d2:f3:fa:0a: 03:ab:c2:b9:e2:5d:11:47:d9:5f:21:ac:9d:1b:8c: ee:44:f0:58:ef:2b:a6:c6:57:51:de:e3:77:d7:7c: de:08:3c:4c:67:1e:12:58:a5:fd:37:3e:27:72:85: d3:8c:f1:94:6e:04:9a:f3:88:c2:40:6c:51:5c:04: ed:87:b2:59:0f:ac:90:79:5d:60:a3:b9:ad:57:2f: a3:fd:ec:2f:8a:01:7c:b1:2e:7e:5b:8f:b2:65:ae: 66:04:c8:5e:15:3f:23:9c:ee:a0:22:b7:34:98:b8: 78:6a:b7:f8:16:3c:9c:ad:d8:aa:51:01:08:fd:82: 5b:db:a9:74:30:06:a1:62:6b:54:79:6f:97:0c:63: 43:52:8c:e4:f3:c6:fc:9c:d9:ce:8e:fc:8b:19:0b: ee:fb:5e:cb:ab:41:2e:08:64:5f:12:da:ea:fd:73: 65:eb:db:51:d0:fd:28:99:dc:7c:74:2f:0d:d3:42: 42:ea:c2:f0:fc:89:3b:7c:3b:e1:62:49:c7:22:ec: 45:13:7b:83:6b:30:35:20:ad:0b:f9:d1:6b:bf:73: e7:1c:19:9d:52:63:9f:35:5c:b9:72:c7:b5:bc:34: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A8:35:81:34:BE:25:21:F1:52:C6:09:3C:6D:C0:D9:E3:34:6A:11 X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:44:da:6c:9e:b3:6f:65:ad:ed:bf:44:2c:f0:3d:02:2a:9a: ea:dd:62:3c:d2:37:17:bf:49:bb:6f:06:14:f5:86:07:20:02: 5a:12:cc:c3:ba:75:9c:1c:c2:e9:af:c4:56:e7:6f:b3:d9:17: 5c:3b:81:a7:ee:d0:b3:55:66:52:38:8d:4d:c3:a0:6d:56:3d: fb:01:d7:d9:f3:aa:68:c0:97:2e:09:ca:85:7b:1f:e3:12:67: 9e:a5:df:04:83:f8:33:9f:8f:33:33:83:54:e8:42:97:e1:ff: f0:8c:34:36:9a:7d:77:23:6e:f7:24:1c:09:8c:a8:f1:95:51: 9b:4f:58:07:d3:b3:ea:25:12:4c:fc:8d:ed:66:6d:9f:8e:48: 9c:53:71:2b:f6:44:de:c0:56:f2:e3:8b:8a:d5:b4:b2:14:7d: 5a:be:28:f1:a7:ae:fe:9b:1a:35:8a:28:b7:a6:55:c7:b2:64: 04:d5:89:b9:e0:df:0f:10:7f:5b:69:13:f1:b0:15:ea:a2:ef: 41:a3:7e:ce:2a:4a:3b:90:10:3c:98:b1:4d:1e:b3:0b:92:61: 75:f5:2a:6b:54:41:2d:5c:9b:6f:0f:c2:45:ae:6b:0a:b1:4d: 9a:00:27:00:03:da:a8:86:14:0f:ae:23:88:7d:e6:78:49:c9: 69:70:47:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjYwMzI1MDI1OTU0WhcNMjYwNDAxMDI1OTU0WjAYMRYwFAYD VQQDEw02OWMzNGZhYS1mYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKHhyBDA2R71+woi9F0v9AkG2XCiRJ2dONLz+goDq8K54l0RR9lfIaydG4zu RPBY7yumxldR3uN313zeCDxMZx4SWKX9Nz4ncoXTjPGUbgSa84jCQGxRXATth7JZ D6yQeV1go7mtVy+j/ewvigF8sS5+W4+yZa5mBMheFT8jnO6gIrc0mLh4arf4Fjyc rdiqUQEI/YJb26l0MAahYmtUeW+XDGNDUozk88b8nNnOjvyLGQvu+17Lq0EuCGRf Etrq/XNl69tR0P0omdx8dC8N00JC6sLw/Ik7fDvhYknHIuxFE3uDazA1IK0L+dFr v3PnHBmdUmOfNVy5cse1vDRxpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOoNYE0 viUh8VLGCTxtwNnjNGoRMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqkTabJ6zb2Wt7b9ELPA9Aiqa6t1iPNI3F79Ju28GFPWGByACWhLMw7p1nBzC 6a/EVudvs9kXXDuBp+7Qs1VmUjiNTcOgbVY9+wHX2fOqaMCXLgnKhXsf4xJnnqXf BIP4M5+PMzODVOhCl+H/8Iw0Npp9dyNu9yQcCYyo8ZVRm09YB9Oz6iUSTPyN7WZt n45InFNxK/ZE3sBW8uOLitW0shR9Wr4o8aeu/psaNYoot6ZVx7JkBNWJueDfDxB/ W2kT8bAV6qLvQaN+zipKO5AQPJixTR6zC5JhdfUqa1RBLVybbw/CRa5rCrFNmgAn AAPaqIYUD64jiH3meEnJaXBHYw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:56 2026 by rpki-client