$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: rHycZ+EBp+ECW02fYVT97+TMonBil3HXtJVC3pfYmws= Subject key identifier: 29:5B:33:89:F2:50:A9:08:43:E1:02:3E:D2:BB:9B:54:3B:9D:32:11 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 086C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 085F Signing time: Tue 24 Mar 2026 20:30:44 +0000 Manifest this update: Tue 24 Mar 2026 20:30:43 +0000 Manifest next update: Tue 31 Mar 2026 20:30:43 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: /BSVSSTjjG+GJ5caYxRM4ZjTePFG881yXusK2CHCkZY=) 2: 8FB8171E1D2C11F18BD061F8153D8C67.roa (hash: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo=) 3: B08421401D2C11F1AC765BFB153D8C67.roa (hash: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU=) 4: 137DD3E8E60C11F0A18B1E57676F56BC.roa (hash: uV78r469K9kpBYYycBaJqz/OEoI2cFdGsz5vaAFm0kA=) 5: DFBB127A1FD911F18338B27E3F3D8C67.roa (hash: /SYY7WeR+aA+gbxGrf5qM5FajASTqqxf81wX3CNIlA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2156 (0x86c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Mar 24 20:30:43 2026 GMT Not After : Mar 31 20:30:43 2026 GMT Subject: CN=69c2f474-1ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:de:b2:35:bf:db:05:0b:83:01:fc:22:67: 46:a3:ec:1e:c7:19:2c:ef:79:c3:6c:d1:7e:4d:0c: 95:7d:2e:9a:96:b8:19:1e:a5:45:86:48:27:73:83: 13:17:16:c6:02:97:d3:74:ff:55:6f:07:94:ef:4c: b4:eb:38:b6:9c:9f:36:3a:c7:73:4f:b7:67:fb:8b: df:97:94:54:7a:16:93:8c:cc:53:4c:58:b4:e4:2d: 52:b8:01:75:1c:45:fc:05:ef:48:c5:b1:9e:13:76: 28:c4:4b:51:c8:ba:45:f8:2e:9c:e1:60:f6:c8:94: 64:79:71:d8:a1:d3:3b:20:e0:a2:f6:b3:73:93:6c: 57:2b:70:e2:10:42:d3:59:22:8c:a0:a8:7b:95:74: 9e:34:6a:26:94:03:ee:13:41:03:b9:91:f6:f0:de: 3a:92:26:46:79:4a:aa:27:4a:b1:3f:5e:50:f5:af: 15:22:e6:d9:e8:e6:ae:50:0f:bb:e9:8f:17:0d:87: a3:f1:6a:45:6c:4f:74:da:51:25:d6:8b:fc:45:32: 89:41:25:f5:f3:0c:89:45:4a:68:4f:70:5d:46:a5: 2c:22:d7:84:a8:a0:3f:cf:73:bc:53:48:71:97:95: d9:44:2f:55:48:b5:ea:e6:0e:34:d4:13:c3:7f:d0: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5B:33:89:F2:50:A9:08:43:E1:02:3E:D2:BB:9B:54:3B:9D:32:11 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:31:c2:b8:ec:5f:da:6e:4f:56:49:c3:ad:08:ed:6a:b4:86: 2d:c5:3e:94:4b:1a:2f:0a:d3:8f:14:0e:76:48:05:27:c3:76: 5a:64:81:da:5f:e4:cf:58:2e:32:b6:e1:05:d4:fe:52:63:38: cc:6f:79:f9:63:e6:a2:ef:fb:0f:73:57:d3:b7:19:19:9c:25: 25:ae:8d:bb:73:aa:5d:55:6a:6f:00:be:c7:53:af:ab:46:a5: a1:77:07:78:3b:58:7b:34:a3:31:23:15:db:10:45:1b:a8:46: d8:5d:ec:1a:06:11:a2:97:0e:57:aa:c1:f5:f7:e4:94:54:0b: a1:d4:41:0c:7f:da:ff:06:ce:92:13:03:0b:df:80:08:42:6c: ab:c1:97:94:35:8e:b9:44:b6:e8:31:8a:29:1e:05:63:e4:33: 0f:a3:37:92:2e:4d:03:58:48:8e:34:70:af:42:75:3a:af:ee: 7b:3a:d9:46:1a:22:e8:bf:ec:9c:56:13:2d:84:7b:63:2a:be: c1:8d:f8:4d:5c:c7:61:c0:db:47:16:84:ae:58:aa:1c:f2:3f: 63:fe:03:a6:cf:d5:bb:42:23:20:62:66:4a:ca:02:77:86:4f: 50:0c:7f:eb:51:66:b5:2a:57:99:fa:4b:ec:30:c0:8a:46:8a: ec:ab:14:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjYwMzI0MjAzMDQzWhcNMjYwMzMxMjAzMDQzWjAYMRYwFAYD VQQDEw02OWMyZjQ3NC0xY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KLesjW/2wULgwH8ImdGo+wexxks73nDbNF+TQyVfS6alrgZHqVFhkgnc4MT FxbGApfTdP9VbweU70y06zi2nJ82OsdzT7dn+4vfl5RUehaTjMxTTFi05C1SuAF1 HEX8Be9IxbGeE3YoxEtRyLpF+C6c4WD2yJRkeXHYodM7IOCi9rNzk2xXK3DiEELT WSKMoKh7lXSeNGomlAPuE0EDuZH28N46kiZGeUqqJ0qxP15Q9a8VIubZ6OauUA+7 6Y8XDYej8WpFbE902lEl1ov8RTKJQSX18wyJRUpoT3BdRqUsIteEqKA/z3O8U0hx l5XZRC9VSLXq5g401BPDf9C6ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClbM4ny UKkIQ+ECPtK7m1Q7nTIRMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwzHCuOxf2m5PVknDrQjtarSGLcU+lEsaLwrTjxQOdkgFJ8N2WmSB2l/kz1gu MrbhBdT+UmM4zG95+WPmou/7D3NX07cZGZwlJa6Nu3OqXVVqbwC+x1Ovq0aloXcH eDtYezSjMSMV2xBFG6hG2F3sGgYRopcOV6rB9ffklFQLodRBDH/a/wbOkhMDC9+A CEJsq8GXlDWOuUS26DGKKR4FY+QzD6M3ki5NA1hIjjRwr0J1Oq/uezrZRhoi6L/s nFYTLYR7Yyq+wY34TVzHYcDbRxaErliqHPI/Y/4Dps/Vu0IjIGJmSsoCd4ZPUAx/ 61FmtSpXmfpL7DDAikaK7KsUpA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:48 2026 by rpki-client