$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: RNEZjrQajJ6a0n1EOa8GrAFOyt4hl3CkcUrsFCccBlQ= Subject key identifier: 77:ED:8B:CE:B9:32:72:47:11:CA:03:8F:82:F9:2B:4B:CB:64:1F:DA Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 0291 Signing time: Wed 25 Mar 2026 01:28:58 +0000 Manifest this update: Wed 25 Mar 2026 01:28:58 +0000 Manifest next update: Wed 01 Apr 2026 01:28:58 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: G4zPEa++4+sWuwGWpOrd2iTS1RtZeiWKXk+3pVVbp5Q=) 2: 01A55FE8EB8811F09418252C556F56BC.roa (hash: cFB/8Vgkj4i8BlW9emUOHcyZlqasNRUOsxhp6QEZNAo=) 3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: DoI1H5cBVDVpM0o3Z6TBBwhDvf1Ij5PjDVqCV737dgA=) 4: 8A537D0CEB8811F09D1C7947556F56BC.roa (hash: HXOczdbG3jBtr/wzTx6ipHvHkHT1tt95ne5sa0eRBf8=) 5: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: DxSoqS3b+Y/gdSbATN2rSyfLU8qRKds7oUL0VnUHIkU=) 6: 6121C23230AC11F08C150767C4F9AE02.roa (hash: yFAyH86XSQnek6ohQ/lpmbhrJ7zT+NkCgAJN/G3hbEI=) 7: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: EqT4x+M1dS0lAoKnprnpqiEWavrDyHejbJDUqIhSKBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Mar 25 01:28:58 2026 GMT Not After : Apr 1 01:28:58 2026 GMT Subject: CN=69c33a5a-61f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:85:4a:d3:b0:15:9e:11:92:95:91:bc:ac: 6c:ba:f0:ea:da:c3:3b:c3:d7:e1:1e:ec:6c:0c:8c: 73:0c:8c:78:30:58:00:5a:8f:d8:5e:9f:31:54:e3: f3:8e:96:b0:ea:3a:e5:8e:84:29:e8:fd:44:34:29: e6:dd:a1:de:57:95:ac:69:a6:58:7d:8f:8a:83:1d: 0e:5c:68:cd:49:9d:2b:6a:cd:ca:d6:9a:ef:c4:8e: 50:63:6e:90:38:a8:0d:df:62:35:6e:79:a5:06:ca: 60:c9:4f:ad:ca:14:5f:4b:20:20:27:ec:ff:39:85: 14:ef:05:c4:89:0a:da:60:dd:42:73:0e:e1:68:83: e4:23:77:2e:2f:cd:c3:5a:12:1a:43:69:44:5d:c4: 26:54:37:ed:c6:15:4b:f2:b1:c4:03:26:cd:44:64: fc:c4:cc:da:09:83:97:c8:0b:98:7a:f0:1a:12:e3: 6c:c6:b5:ec:70:56:93:00:84:d4:b2:d6:3a:39:c2: 99:c7:ea:6f:6c:51:fe:32:50:ad:2e:2b:1d:87:d6: 27:d3:50:10:42:e8:f6:d8:ce:3c:42:d9:ed:5f:0c: e0:68:09:34:c2:d4:4a:e8:aa:8d:58:cc:3a:e6:5e: 94:1c:64:9d:88:93:cf:2c:de:f4:06:a5:23:e3:dc: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:ED:8B:CE:B9:32:72:47:11:CA:03:8F:82:F9:2B:4B:CB:64:1F:DA X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:90:13:a7:8c:81:73:4c:29:09:94:48:86:72:7a:75:e5:7f: cd:3f:3d:76:ae:5f:5b:8b:43:d4:b0:53:a7:7d:d6:04:b6:6c: 2f:8d:8b:8f:f5:69:40:b3:fd:ab:e0:50:01:d9:8a:ad:8e:2f: 86:ae:10:40:3c:ca:5a:0c:2c:61:03:a9:ba:d8:4b:df:be:d6: 5f:5a:92:14:f8:6e:3f:65:a8:ed:a7:21:f1:1b:3b:5f:8b:c2: 19:3e:6d:ac:52:da:88:5f:5b:9e:6e:ad:0e:d0:e6:f3:af:3d: af:89:48:40:55:d8:64:56:d3:72:38:51:b8:bc:24:21:5c:d7: d8:c4:0d:73:06:45:91:51:86:97:36:b0:fd:ac:b7:06:8c:3b: a8:36:94:4a:8f:0d:3b:a3:62:a1:e2:c6:1b:fd:67:41:d8:d4: e6:47:a9:d3:47:2a:d1:5b:6c:3c:90:28:a6:0d:ca:20:2e:4e: a4:c8:a4:43:6c:bc:a5:36:00:55:3e:73:d4:ff:17:bf:59:f1: fb:e5:4e:86:ef:1e:ed:1c:c2:d8:4b:19:cc:c3:83:10:e9:d2: 49:77:e9:29:85:fa:d9:b6:ba:58:ea:f4:a8:a6:11:e4:ee:f3: 23:4b:4d:6b:b6:e0:6f:9f:b5:b8:7c:c6:bc:00:d2:4d:a9:bc: 3b:16:10:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjYwMzI1MDEyODU4WhcNMjYwNDAxMDEyODU4WjAYMRYwFAYD VQQDEw02OWMzM2E1YS02MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKyFStOwFZ4RkpWRvKxsuvDq2sM7w9fhHuxsDIxzDIx4MFgAWo/YXp8xVOPz jpaw6jrljoQp6P1ENCnm3aHeV5WsaaZYfY+Kgx0OXGjNSZ0ras3K1prvxI5QY26Q OKgN32I1bnmlBspgyU+tyhRfSyAgJ+z/OYUU7wXEiQraYN1Ccw7haIPkI3cuL83D WhIaQ2lEXcQmVDftxhVL8rHEAybNRGT8xMzaCYOXyAuYevAaEuNsxrXscFaTAITU stY6OcKZx+pvbFH+MlCtLisdh9Yn01AQQuj22M48QtntXwzgaAk0wtRK6KqNWMw6 5l6UHGSdiJPPLN70BqUj49zr5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfti865 MnJHEcoDj4L5K0vLZB/aMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB5ATp4yBc0wpCZRIhnJ6deV/zT89dq5fW4tD1LBTp33WBLZsL42Lj/VpQLP9 q+BQAdmKrY4vhq4QQDzKWgwsYQOputhL377WX1qSFPhuP2Wo7ach8Rs7X4vCGT5t rFLaiF9bnm6tDtDm8689r4lIQFXYZFbTcjhRuLwkIVzX2MQNcwZFkVGGlzaw/ay3 Bow7qDaUSo8NO6NioeLGG/1nQdjU5kep00cq0VtsPJAopg3KIC5OpMikQ2y8pTYA VT5z1P8Xv1nx++VOhu8e7RzC2EsZzMODEOnSSXfpKYX62ba6WOr0qKYR5O7zI0tN a7bgb5+1uHzGvADSTam8OxYQ5g== -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:07 2026 by rpki-client