$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json) Hash identifier: hpAixvcIpZnlFMVlm3VZ9iuQkOF9fWvGx5kTiaGB7f4= Subject key identifier: 37:25:F4:2E:4C:E0:04:EB:AF:7D:53:8E:BE:9D:85:FB:10:B2:8F:85 Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft Manifest number: 0166 Signing time: Wed 25 Mar 2026 04:10:28 +0000 Manifest this update: Wed 25 Mar 2026 04:10:27 +0000 Manifest next update: Wed 01 Apr 2026 04:10:27 +0000 Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: P5eQN4TzGNYDtmQ/bkYCbGiNyaDfVhfU7NdsvNj8vTw=) 2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: hsqDK4dEteoc0Mxqmy0cSR10HwSRl8nmy2mfYdV9jCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Validity Not Before: Mar 25 04:10:27 2026 GMT Not After : Apr 1 04:10:27 2026 GMT Subject: CN=69c36033-d13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:04:ca:7c:e3:fb:3a:4c:35:ad:8f:e5:d0: e8:1a:5b:ad:96:f7:1c:76:e1:fe:25:16:71:fc:1b: 53:1c:2c:ed:70:2b:53:4f:ab:94:aa:91:c7:28:43: ad:48:f1:9e:03:a5:ef:da:1c:18:31:e2:24:64:52: c3:a1:0e:9e:13:1c:24:be:f6:89:fc:1c:fa:e4:f7: 3b:d5:bc:db:d9:a0:ca:af:f4:7e:82:14:9e:15:3f: ae:db:31:33:8b:c8:82:f5:a7:79:2c:6b:82:ab:de: b3:32:b3:40:ba:3b:8a:54:14:b9:76:40:68:c8:4f: ff:09:7b:bc:f6:c2:9e:03:c8:ae:62:a0:43:cd:c9: 6a:a5:47:61:df:4f:c6:83:09:d3:bd:32:dc:49:c1: 94:dd:04:05:8b:54:52:9d:0b:74:7e:bd:05:a7:11: 55:46:b6:04:e4:a6:ad:7a:a8:1d:77:23:ac:67:b8: bc:5b:88:af:8f:98:8c:aa:e4:6e:95:80:1a:8d:b1: ae:a8:dd:30:cf:15:6c:f3:a1:d3:b1:c2:c9:4e:2e: f4:65:25:34:81:a8:7f:79:ef:58:9a:e4:f6:72:b0: 15:03:d8:3f:b3:49:22:79:37:48:25:6d:f9:15:91: 87:f7:4b:75:52:53:32:2a:d7:e9:2e:47:37:c6:f8: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:25:F4:2E:4C:E0:04:EB:AF:7D:53:8E:BE:9D:85:FB:10:B2:8F:85 X509v3 Authority Key Identifier: keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ce:bf:de:a5:ac:af:e1:3e:4e:64:47:9a:b0:ac:1e:35:c6: 49:34:33:05:e5:fe:da:31:64:7d:ef:ce:73:e8:e8:06:1a:25: 47:23:d5:bb:62:a9:69:a7:37:eb:45:af:1d:bd:15:5b:3c:e0: bc:00:fe:36:9b:e5:e2:a7:74:5a:93:b2:81:56:d1:48:5d:02: 87:08:d3:bf:62:d2:5a:fb:95:7e:92:4f:65:ba:ea:5b:06:ec: ab:de:fb:1e:a0:76:37:c0:14:29:e2:59:61:dd:da:4f:be:24: 03:15:1d:40:db:0a:51:72:48:53:b4:2f:12:3d:da:22:3f:f7: fd:9c:7c:10:8d:c4:12:87:4c:e3:04:c1:70:bc:f3:9c:bd:d6: 6a:c8:b5:a4:3b:ab:c4:95:7a:ec:63:37:d0:62:23:c0:23:ed: 56:cb:19:f0:ec:51:1f:e4:55:58:e4:93:96:ff:e6:db:91:ed: 99:83:a1:62:53:f6:38:9e:a9:ee:58:56:c8:0d:a7:d1:75:00: 2f:ab:c0:00:71:2e:83:5f:0a:be:f8:a3:f5:5e:10:f6:86:fa: e7:bd:d5:f0:0d:a8:c9:af:05:bf:5b:d6:d0:61:12:a2:94:6c: 72:80:18:8b:f8:c5:b7:3b:06:7b:e9:33:b6:e5:75:e8:3f:3d: e2:c2:2e:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIyOUIxMTAvBgNVBAUTKEM0RjdGMzlFNjJGNEM5RDc4QzVFMTJGREMxNTFBRTRF MzJCQzlBNDIwHhcNMjYwMzI1MDQxMDI3WhcNMjYwNDAxMDQxMDI3WjAYMRYwFAYD VQQDEw02OWMzNjAzMy1kMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cwEynzj+zpMNa2P5dDoGlutlvccduH+JRZx/BtTHCztcCtTT6uUqpHHKEOt SPGeA6Xv2hwYMeIkZFLDoQ6eExwkvvaJ/Bz65Pc71bzb2aDKr/R+ghSeFT+u2zEz i8iC9ad5LGuCq96zMrNAujuKVBS5dkBoyE//CXu89sKeA8iuYqBDzclqpUdh30/G gwnTvTLcScGU3QQFi1RSnQt0fr0FpxFVRrYE5KateqgddyOsZ7i8W4ivj5iMquRu lYAajbGuqN0wzxVs86HTscLJTi70ZSU0gah/ee9YmuT2crAVA9g/s0kieTdIJW35 FZGH90t1UlMyKtfpLkc3xvgC1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcl9C5M 4ATrr31Tjr6dhfsQso+FMB8GA1UdIwQYMBaAFMT3855i9MnXjF4S/cFRrk4yvJpC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjI5Qi84QTNFMUQxQTBG ODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlkZU1YaEw5d1ZHdVRqSzht a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1rSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjI5Qi84QTNFMUQxQTBGODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlk ZU1YaEw5d1ZHdVRqSzhta0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZM6/3qWsr+E+TmRHmrCsHjXGSTQzBeX+2jFkfe/Oc+joBholRyPVu2Kpaac3 60WvHb0VWzzgvAD+Npvl4qd0WpOygVbRSF0ChwjTv2LSWvuVfpJPZbrqWwbsq977 HqB2N8AUKeJZYd3aT74kAxUdQNsKUXJIU7QvEj3aIj/3/Zx8EI3EEodM4wTBcLzz nL3Wasi1pDurxJV67GM30GIjwCPtVssZ8OxRH+RVWOSTlv/m25HtmYOhYlP2OJ6p 7lhWyA2n0XUAL6vAAHEug18Kvvij9V4Q9ob6573V8A2oya8Fv1vW0GESopRscoAY i/jFtzsGe+kztuV16D894sIuBA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:13 2026 by rpki-client