$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: S/8so9oD5sMORKG1Kpe+U9mi54QSHW0byHjtIJfwRtQ= Subject key identifier: 4F:55:A0:81:AB:2C:35:DD:34:2B:C5:DE:2C:80:F2:15:68:C0:AF:9F Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: A2 Signing time: Wed 25 Mar 2026 06:29:08 +0000 Manifest this update: Wed 25 Mar 2026 06:29:07 +0000 Manifest next update: Wed 01 Apr 2026 06:29:07 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: gVkN64gzwvGzWnw/qt6MxbvXQkrOSAf1un9ced9Aa0s=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: ApjR/yfbHiS6jXTPW7Xd9Kqd62irjzHpZs9KCs6VuZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: Mar 25 06:29:07 2026 GMT Not After : Apr 1 06:29:07 2026 GMT Subject: CN=69c380b4-f27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:6c:d8:3b:73:a2:db:e2:42:56:91:10:78: 60:32:d4:15:64:39:39:c5:4f:28:b0:7b:96:bf:a2: f9:fb:8c:8d:1c:8d:67:a5:47:bc:23:b0:19:fb:1c: df:f2:3c:e9:9d:27:51:ad:b1:57:b3:9e:02:06:84: ca:9c:cd:55:b5:f5:62:86:1f:e4:fb:f3:5d:cc:49: c8:9c:b6:b4:7b:9f:64:df:b2:a7:b3:6d:7b:82:1f: 4d:f9:3f:04:a6:d8:63:22:78:23:62:15:9c:97:16: 09:a3:41:af:93:06:1a:bd:27:19:48:61:d0:60:87: fc:e4:fb:13:df:4b:39:8f:f8:42:46:0e:6a:7a:d2: cc:8e:13:d3:ca:95:57:c4:8c:b1:01:dc:82:1c:9b: f3:8e:d7:46:86:da:e3:87:10:6b:02:43:f8:33:0e: a4:1d:17:42:46:6e:8d:51:80:af:eb:9f:a4:80:06: e4:78:2f:40:60:f0:ca:b8:1e:53:b9:ac:be:00:c0: 17:7e:b9:52:cb:c7:1f:a0:99:ac:ad:bd:00:f6:e3: f8:2e:d0:4c:66:6c:a0:fe:91:c6:bb:54:83:4e:f6: 84:d7:ca:a6:74:19:c6:e0:df:d3:42:1a:65:27:81: 7b:0b:0c:f8:65:7c:53:d3:45:06:55:61:cc:11:63: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:55:A0:81:AB:2C:35:DD:34:2B:C5:DE:2C:80:F2:15:68:C0:AF:9F X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:a1:96:e9:5c:8b:32:33:b6:6d:73:e9:e8:9e:b6:06:84:0a: 5c:75:00:55:be:ab:1b:a2:08:0d:17:00:c7:00:07:77:21:95: 4b:c5:1e:bc:d2:bd:84:1d:f2:8f:1a:77:7d:4e:43:56:4c:b1: 97:95:50:ea:01:8d:ca:53:65:12:a1:70:f1:59:18:b5:63:7e: b5:4e:fd:c7:e8:91:ed:d5:e8:bf:d5:2f:7b:0c:9d:fd:c6:d3: 46:bb:17:a3:12:be:1b:05:42:4e:d2:33:90:c7:23:b5:bd:c2: d6:ea:2e:87:e0:9a:ac:0d:13:5d:e1:4f:ac:fd:29:fb:bc:7e: 60:37:85:21:05:ff:11:29:20:91:fa:43:23:cf:2a:42:8a:d3: 3b:b5:9e:cd:a0:61:97:cb:a7:dc:4c:b1:44:e4:40:b8:0e:75: 8d:db:93:5f:a2:a5:bc:01:d6:10:a4:e2:7b:69:4e:ac:25:f5: 3a:30:8b:d5:71:84:12:25:49:a6:c7:bd:d3:19:eb:21:e3:47: 4a:cd:44:bd:a6:08:5c:9f:98:dc:b5:c5:ff:11:0b:23:38:38: 9c:02:ce:95:ce:7d:4c:3f:3e:f8:48:7e:f5:76:ce:d9:fd:38: 03:66:e4:18:e9:e2:28:35:0e:21:bc:c5:66:4b:ff:f6:38:22: a4:05:d8:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MzMTExMTAvBgNVBAUTKEM2REUzNkE0RTQ1RTdBOTkxRkM0NDRGOENCMUI0NTVG MTc0NjJDOEQwHhcNMjYwMzI1MDYyOTA3WhcNMjYwNDAxMDYyOTA3WjAYMRYwFAYD VQQDEw02OWMzODBiNC1mMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26Js2DtzotviQlaREHhgMtQVZDk5xU8osHuWv6L5+4yNHI1npUe8I7AZ+xzf 8jzpnSdRrbFXs54CBoTKnM1VtfVihh/k+/NdzEnInLa0e59k37Kns217gh9N+T8E pthjIngjYhWclxYJo0GvkwYavScZSGHQYIf85PsT30s5j/hCRg5qetLMjhPTypVX xIyxAdyCHJvzjtdGhtrjhxBrAkP4Mw6kHRdCRm6NUYCv65+kgAbkeC9AYPDKuB5T uay+AMAXfrlSy8cfoJmsrb0A9uP4LtBMZmyg/pHGu1SDTvaE18qmdBnG4N/TQhpl J4F7Cwz4ZXxT00UGVWHMEWPhRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9VoIGr LDXdNCvF3iyA8hVowK+fMB8GA1UdIwQYMBaAFMbeNqTkXnqZH8RE+MsbRV8XRiyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzMxMS9GMUY3QUYyNjJG QkYxMUYwOUE5MzYwNTdDNEY5QUUwMi94dDQycE9SZWVwa2Z4RVQ0eXh0Rlh4ZEdM STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzMxMS9GMUY3QUYyNjJGQkYxMUYwOUE5MzYwNTdDNEY5QUUwMi94dDQycE9SZWVw a2Z4RVQ0eXh0Rlh4ZEdMSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx6GW6VyLMjO2bXPp6J62BoQKXHUAVb6rG6IIDRcAxwAHdyGVS8UevNK9hB3y jxp3fU5DVkyxl5VQ6gGNylNlEqFw8VkYtWN+tU79x+iR7dXov9Uvewyd/cbTRrsX oxK+GwVCTtIzkMcjtb3C1uouh+CarA0TXeFPrP0p+7x+YDeFIQX/ESkgkfpDI88q QorTO7WezaBhl8un3EyxRORAuA51jduTX6KlvAHWEKTie2lOrCX1OjCL1XGEEiVJ pse90xnrIeNHSs1EvaYIXJ+Y3LXF/xELIzg4nALOlc59TD8++Eh+9XbO2f04A2bk GOniKDUOIbzFZkv/9jgipAXYwA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:39 2026 by rpki-client