$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft File: XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json) Hash identifier: pHRm/a2+E+LMDgRj7p6ZkiaTAq4rUOP6gvijoXnVy1A= Subject key identifier: F3:5F:C7:6C:75:45:45:FF:CC:D8:62:6E:4A:CA:B8:EC:12:EF:43:F0 Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft Manifest number: 07E3 Signing time: Thu 26 Mar 2026 21:07:58 +0000 Manifest this update: Thu 26 Mar 2026 21:07:58 +0000 Manifest next update: Thu 02 Apr 2026 21:07:58 +0000 Files and hashes: 1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: oa1pg4jv5oIp8YGaW0Wqj2fOhrM6Sqnh8plmiUSONqI=) 2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: A+lqHHILRck/15Y7Xtw67As0ESAMbuZbfeWoqwALbWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: Mar 26 21:07:58 2026 GMT Not After : Apr 2 21:07:58 2026 GMT Subject: CN=69c5a02e-613f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:89:1b:b5:64:48:a2:5c:82:89:3b:8a:bd: 89:21:a3:29:a7:81:b8:3d:b8:94:84:75:99:60:b0: 84:4b:fe:42:3b:81:d2:ef:25:eb:d6:eb:f8:93:f2: ef:e0:c1:47:e1:d9:9c:78:68:52:48:32:ea:4d:d7: 96:53:4e:69:d0:0a:bc:50:d5:5f:a3:9b:1f:c9:74: 29:25:da:bf:08:f9:46:08:b3:3d:cd:ce:93:3b:fd: 6d:00:9c:2e:65:31:50:a4:62:98:4a:04:bb:23:bc: 58:40:fd:80:f7:3b:76:29:e6:a9:5e:9d:a2:bc:64: 0c:9d:69:a2:fd:c2:e9:76:8d:2d:9e:a9:40:8a:29: 09:6a:cf:07:ac:7a:ee:30:1b:65:bb:cf:3f:22:66: 8a:cd:95:4e:4f:9b:13:30:44:d1:87:3a:49:9e:97: 90:3a:e3:86:db:03:91:c2:c7:42:17:c9:2d:d8:05: f3:64:de:94:26:19:09:11:6f:bf:f3:5e:0c:1d:0b: 61:51:c4:2c:0b:43:79:cc:ea:75:93:5b:4e:91:ae: 15:8b:f5:ac:52:eb:8b:77:a3:85:47:2e:db:b4:c4: 65:26:52:f7:2f:ad:f9:95:eb:35:8a:9a:5b:8c:f8: 7e:ad:b2:52:c4:82:fb:08:00:f8:bc:c2:27:60:63: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5F:C7:6C:75:45:45:FF:CC:D8:62:6E:4A:CA:B8:EC:12:EF:43:F0 X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f7:15:04:83:97:14:64:e5:33:e6:44:06:db:86:0d:78:90: ef:52:fd:09:c3:d5:9d:68:34:bf:51:a7:5e:33:25:f7:5d:6d: f7:f8:a8:d7:18:d3:15:1c:a8:16:dc:8d:dc:21:7a:bc:dc:69: 57:23:0d:f7:16:84:59:ae:cc:00:be:97:33:73:96:db:9a:c5: 04:5f:01:a3:b3:d6:5d:bc:25:78:40:a2:a2:85:24:d8:5d:25: 53:c6:ff:cb:97:51:38:f7:b4:45:e9:3c:dc:6c:cc:40:65:1f: e6:4d:63:36:af:2e:8d:d6:51:e4:80:fa:80:a3:08:f2:08:65: b9:a6:42:b7:59:d3:65:b1:38:d6:64:39:5f:27:2f:61:a5:6d: b5:53:4e:4a:4c:dc:08:35:fc:3e:51:6a:80:3b:8d:b6:98:f0: b3:86:6e:04:51:ba:9c:c4:2e:21:35:bb:de:61:f3:64:7d:54: 9d:86:a0:66:8d:16:77:9f:0e:99:c4:62:7d:10:db:1d:c8:40: 4e:2a:90:b0:b6:8e:aa:64:28:18:fb:a5:b8:93:b7:fd:61:29: b7:31:40:fe:ea:21:c4:66:09:42:3e:20:4a:fd:57:ab:1a:2b: 9b:3b:fe:3c:6b:80:06:d7:fa:60:5a:7f:db:bc:9a:d7:ee:0b: 5a:37:fa:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjYwMzI2MjEwNzU4WhcNMjYwNDAyMjEwNzU4WjAYMRYwFAYD VQQDEw02OWM1YTAyZS02MTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0M+JG7VkSKJcgok7ir2JIaMpp4G4PbiUhHWZYLCES/5CO4HS7yXr1uv4k/Lv 4MFH4dmceGhSSDLqTdeWU05p0Aq8UNVfo5sfyXQpJdq/CPlGCLM9zc6TO/1tAJwu ZTFQpGKYSgS7I7xYQP2A9zt2KeapXp2ivGQMnWmi/cLpdo0tnqlAiikJas8HrHru MBtlu88/ImaKzZVOT5sTMETRhzpJnpeQOuOG2wORwsdCF8kt2AXzZN6UJhkJEW+/ 814MHQthUcQsC0N5zOp1k1tOka4Vi/WsUuuLd6OFRy7btMRlJlL3L635les1ippb jPh+rbJSxIL7CAD4vMInYGOknwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNfx2x1 RUX/zNhibkrKuOwS70PwMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3OC9GMUY0RDNDRTI5MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5 TXBncUxMVGVWUE44Y2dXcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWPcVBIOXFGTlM+ZEBtuGDXiQ71L9CcPVnWg0v1GnXjMl911t9/io1xjTFRyo FtyN3CF6vNxpVyMN9xaEWa7MAL6XM3OW25rFBF8Bo7PWXbwleECiooUk2F0lU8b/ y5dROPe0Rek83GzMQGUf5k1jNq8ujdZR5ID6gKMI8ghluaZCt1nTZbE41mQ5Xycv YaVttVNOSkzcCDX8PlFqgDuNtpjws4ZuBFG6nMQuITW73mHzZH1UnYagZo0Wd58O mcRifRDbHchATiqQsLaOqmQoGPuluJO3/WEptzFA/uohxGYJQj4gSv1Xqxormzv+ PGuABtf6YFp/27ya1+4LWjf6NQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:34 2026 by rpki-client