$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: 6RN3GxG9SVbFg90K5ICjRTsOmTigZOZByhVUH8KZFzc= Subject key identifier: 52:2B:A5:DF:68:3A:6F:D7:23:F8:7E:A5:0A:D2:94:88:99:3C:1A:C0 Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 01DA Signing time: Fri 27 Mar 2026 03:00:05 +0000 Manifest this update: Fri 27 Mar 2026 03:00:04 +0000 Manifest next update: Fri 03 Apr 2026 03:00:04 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: BbcJrS1r3/5Vw0GJz0lO/TnHjyNt2AG6LhPKyWG9wzg=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: O9lCjMQypdSGWG3ll22zLdodDNP/53eTRSGfWnDPLFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Mar 27 03:00:04 2026 GMT Not After : Apr 3 03:00:04 2026 GMT Subject: CN=69c5f2b5-354a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:46:d1:e0:f0:db:dc:60:82:c2:32:45:77: 0a:35:af:48:53:61:4d:b1:6b:77:b1:86:4b:82:aa: 19:fd:c8:f1:b5:7f:57:8f:eb:05:ab:bb:38:38:f0: 9d:21:61:65:1b:f1:1b:4a:c1:af:3c:ec:98:ff:c6: db:77:f0:1b:ca:aa:55:50:74:5c:ad:5e:5c:5b:3a: 15:0d:1c:2f:77:57:77:e9:02:5c:e2:60:2e:25:a6: 49:e8:86:ac:f4:33:d7:5d:c4:65:d4:61:48:4a:9a: 13:98:b9:3c:7f:a4:c4:a0:21:12:dc:a3:19:67:4b: c3:b9:0b:8e:35:6d:e1:87:d6:e3:87:d3:50:54:2f: 8e:88:4e:bb:c2:b3:aa:70:18:61:4c:c3:1f:2c:e3: dd:e0:d9:ed:de:fa:34:70:f7:e0:c4:90:da:7b:8c: 62:7b:8b:d9:4c:f3:47:74:0c:2e:96:b4:7a:2c:23: 83:7d:66:d8:b2:b9:f9:59:7d:83:d4:bb:9e:c9:3d: 2c:84:b6:13:ba:a6:d7:18:9b:d4:d0:89:71:71:7c: 1f:3e:e5:1a:58:87:65:c7:ea:fa:fe:5b:66:a0:e9: 9c:e2:40:eb:a4:29:38:76:66:70:be:26:57:ab:e5: 7b:8b:cf:96:cd:73:b9:64:f3:15:76:77:e8:81:e1: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2B:A5:DF:68:3A:6F:D7:23:F8:7E:A5:0A:D2:94:88:99:3C:1A:C0 X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:90:03:25:00:7c:65:17:eb:47:a0:69:43:c9:66:8b:9d:0c: 1f:6c:9b:e3:ad:9d:55:5f:3f:81:3f:cb:72:8f:1a:07:c6:50: a4:f9:34:2b:35:49:6d:a3:d9:8e:f7:7d:c9:c0:24:71:00:a0: f3:1a:f5:5d:37:95:4c:38:74:99:4c:5a:5d:95:66:d9:ac:93: ce:3d:ec:8b:1d:63:49:6b:db:ba:01:09:2e:12:f2:fc:59:94: b6:6e:a5:e8:06:37:be:17:5c:27:4e:5a:1d:6a:ab:cd:f9:26: 71:d7:50:aa:13:8e:f4:f8:5c:78:37:77:fa:80:fd:f0:44:f4: 8a:6a:c5:60:e6:82:df:d3:28:7a:56:55:a6:67:d6:1e:c0:21: 49:dd:c2:7c:13:bd:e0:ae:ec:eb:42:bb:3c:ae:89:d0:e9:63: 39:11:9f:ea:60:43:9f:8d:44:61:7d:91:a9:a8:61:16:bc:ca: 5c:8c:d8:f6:14:a1:80:c1:0b:a3:83:e4:8d:55:5d:25:b5:fb: 14:38:ed:14:ce:7a:e9:ff:30:8d:26:90:c3:64:92:0f:a6:9d: d0:6d:5a:a7:95:2a:63:50:6a:8b:3b:57:1f:2b:8e:f1:82:f7: 6c:b5:5e:71:00:f7:4d:de:a8:c2:86:45:0c:b9:7d:cf:c6:7d: 0f:6e:ea:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjYwMzI3MDMwMDA0WhcNMjYwNDAzMDMwMDA0WjAYMRYwFAYD VQQDEw02OWM1ZjJiNS0zNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjZG0eDw29xggsIyRXcKNa9IU2FNsWt3sYZLgqoZ/cjxtX9Xj+sFq7s4OPCd IWFlG/EbSsGvPOyY/8bbd/AbyqpVUHRcrV5cWzoVDRwvd1d36QJc4mAuJaZJ6Ias 9DPXXcRl1GFISpoTmLk8f6TEoCES3KMZZ0vDuQuONW3hh9bjh9NQVC+OiE67wrOq cBhhTMMfLOPd4Nnt3vo0cPfgxJDae4xie4vZTPNHdAwulrR6LCODfWbYsrn5WX2D 1LueyT0shLYTuqbXGJvU0IlxcXwfPuUaWIdlx+r6/ltmoOmc4kDrpCk4dmZwviZX q+V7i8+WzXO5ZPMVdnfogeGLJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIrpd9o Om/XI/h+pQrSlIiZPBrAMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiZADJQB8ZRfrR6BpQ8lmi50MH2yb462dVV8/gT/Lco8aB8ZQpPk0KzVJbaPZ jvd9ycAkcQCg8xr1XTeVTDh0mUxaXZVm2ayTzj3six1jSWvbugEJLhLy/FmUtm6l 6AY3vhdcJ05aHWqrzfkmcddQqhOO9PhceDd3+oD98ET0imrFYOaC39MoelZVpmfW HsAhSd3CfBO94K7s60K7PK6J0OljORGf6mBDn41EYX2RqahhFrzKXIzY9hShgMEL o4PkjVVdJbX7FDjtFM566f8wjSaQw2SSD6ad0G1ap5UqY1BqiztXHyuO8YL3bLVe cQD3Td6owoZFDLl9z8Z9D27q/g== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:29 2026 by rpki-client