$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft File: rXVQArP_DnYnxKnah3pQV1LgFvY.mft (raw, json) Hash identifier: FnU9HfPfCNBFStrgwwv0N/XDs2rV1imoiuQu03jHaMg= Subject key identifier: 46:87:81:0D:5F:A1:44:4E:AB:0F:CB:48:F7:B7:1E:1B:71:A2:15:AB Authority key identifier: AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6 Certificate issuer: /CN=A9145CB7/serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft Manifest number: 18 Signing time: Wed 25 Mar 2026 08:10:17 +0000 Manifest this update: Wed 25 Mar 2026 08:10:17 +0000 Manifest next update: Wed 01 Apr 2026 08:10:17 +0000 Files and hashes: 1: rXVQArP_DnYnxKnah3pQV1LgFvY.crl (hash: kRDUXm/e4VOMQFYBSnoP3ITdxrugb2GubBvDNXDgp4s=) 2: E3565366082A11F19BFE93E8353D8C67.roa (hash: /aCKUkFizA70YgvpSSlO/F5nZ+3741gcJyJ2Mit8OBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145CB7, serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6 Validity Not Before: Mar 25 08:10:17 2026 GMT Not After : Apr 1 08:10:17 2026 GMT Subject: CN=69c39869-fc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:64:ef:a8:d4:1a:7a:3e:da:23:ec:4a:4f: 3d:58:66:51:bf:6a:bf:46:8b:0a:71:c8:0c:9e:88: 98:92:61:2c:6e:62:74:8e:e7:3d:81:62:e1:1b:53: 54:cb:00:d0:26:50:eb:9a:e3:e1:0b:a7:e1:ee:a7: 5c:a2:f0:0f:b6:60:7f:c5:9e:6a:8c:44:1a:4f:ca: 6c:30:49:28:4e:11:1c:9f:e9:3c:0e:68:eb:f2:49: 5a:44:90:c3:3c:3b:a1:71:3e:8b:8c:92:b2:84:13: 24:c0:28:56:37:22:54:7e:6f:76:ec:96:05:bc:58: 5f:c2:24:d0:fc:cd:fc:16:f2:0a:1a:47:c5:ab:11: a3:83:52:2a:aa:f0:37:0a:5a:c5:36:b4:5c:4c:dc: 86:20:01:13:6d:30:21:a0:5a:46:e6:ab:c2:72:20: d1:e6:35:30:43:97:0f:77:f9:ac:e7:09:35:52:e0: 76:59:16:d8:25:b5:a3:c7:97:7b:07:dc:12:51:72: 8c:a4:f7:41:ce:0a:06:2d:54:35:9f:11:cd:35:be: 37:64:be:2b:ab:92:e6:02:7d:d6:7e:29:61:b9:af: 94:eb:79:24:18:80:36:07:93:0c:46:a2:66:c6:94: 7f:fa:f5:2e:a4:d6:be:bb:a4:5d:24:3c:ad:70:25: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:81:0D:5F:A1:44:4E:AB:0F:CB:48:F7:B7:1E:1B:71:A2:15:AB X509v3 Authority Key Identifier: keyid:AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c2:77:23:9e:3b:ec:8d:60:19:54:ea:13:ee:2e:ba:49:e4: 76:a0:d6:7c:19:8c:cd:3a:27:00:28:3c:3c:20:50:4b:2a:cb: ae:83:a5:ea:f6:6d:0d:c1:8d:e0:d6:3d:30:fb:e5:02:8b:d4: 4a:ef:b5:4d:21:87:94:97:f2:19:91:61:f1:34:96:2d:9a:bf: 5b:6d:8d:c1:5b:71:ab:da:22:a4:0f:43:de:2f:21:d7:c6:eb: c1:2e:e1:92:5f:27:30:f4:f0:a3:57:e6:4d:24:94:2f:9b:0b: 54:d1:5d:db:0d:ff:09:5f:bd:14:7d:95:c7:a8:78:ab:9d:91: 3a:95:94:d9:cd:f5:ec:ee:df:5e:ac:81:75:69:2d:37:d9:a6: eb:9c:1b:45:e9:68:3b:aa:b7:1f:27:13:fe:83:9c:55:73:18: e9:35:c4:b4:75:32:b5:35:18:4f:97:83:b8:ac:2a:2a:20:96: 76:1b:9d:d6:fa:71:dc:72:44:f2:45:3c:ea:c6:9e:f8:82:4c: 1a:0e:f4:82:72:0e:4d:e5:b0:3b:7a:4f:93:e8:e4:03:d3:be: 56:a8:eb:ef:b5:f2:31:79:05:ab:e0:83:46:0e:2c:1d:73:93: c4:86:4a:fe:54:51:4c:c7:36:86:2f:17:07:37:ed:df:92:78: f4:33:dc:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUNCNzExMC8GA1UEBRMoQUQ3NTUwMDJCM0ZGMEU3NjI3QzRBOURBODc3QTUwNTc1 MkUwMTZGNjAeFw0yNjAzMjUwODEwMTdaFw0yNjA0MDEwODEwMTdaMBgxFjAUBgNV BAMTDTY5YzM5ODY5LWZjNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj62TvqNQaej7aI+xKTz1YZlG/ar9GiwpxyAyeiJiSYSxuYnSO5z2BYuEbU1TL ANAmUOua4+ELp+Hup1yi8A+2YH/FnmqMRBpPymwwSShOERyf6TwOaOvySVpEkMM8 O6FxPouMkrKEEyTAKFY3IlR+b3bslgW8WF/CJND8zfwW8goaR8WrEaODUiqq8DcK WsU2tFxM3IYgARNtMCGgWkbmq8JyINHmNTBDlw93+aznCTVS4HZZFtgltaPHl3sH 3BJRcoyk90HOCgYtVDWfEc01vjdkviurkuYCfdZ+KWG5r5TreSQYgDYHkwxGombG lH/69S6k1r67pF0kPK1wJb/NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURoeBDV+h RE6rD8tI97ceG3GiFaswHwYDVR0jBBgwFoAUrXVQArP/DnYnxKnah3pQV1LgFvYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1Q0I3LzdBNTU1RTAyMDgy QTExRjFCNDU2QkVERjM1M0Q4QzY3L3JYVlFBclBfRG5ZbnhLbmFoM3BRVjFMZ0Z2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclhWUUFyUF9EbllueEtuYWgzcFFWMUxnRnZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 Q0I3LzdBNTU1RTAyMDgyQTExRjFCNDU2QkVERjM1M0Q4QzY3L3JYVlFBclBfRG5Z bnhLbmFoM3BRVjFMZ0Z2WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4wncjnjvsjWAZVOoT7i66SeR2oNZ8GYzNOicAKDw8IFBLKsuug6Xq9m0NwY3g 1j0w++UCi9RK77VNIYeUl/IZkWHxNJYtmr9bbY3BW3Gr2iKkD0PeLyHXxuvBLuGS Xycw9PCjV+ZNJJQvmwtU0V3bDf8JX70UfZXHqHirnZE6lZTZzfXs7t9erIF1aS03 2abrnBtF6Wg7qrcfJxP+g5xVcxjpNcS0dTK1NRhPl4O4rCoqIJZ2G53W+nHcckTy RTzqxp74gkwaDvSCcg5N5bA7ek+T6OQD075WqOvvtfIxeQWr4INGDiwdc5PEhkr+ VFFMxzaGLxcHN+3fknj0M9wU -----END CERTIFICATE-----Generated at Thu Mar 26 20:48:37 2026 by rpki-client