$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: jprh6WUWoEjPEBaqAlv4nRYtkMGWwiqx1dley+OUQXk= Subject key identifier: 0B:67:AF:AE:33:7B:81:10:A1:23:0A:0F:72:0E:59:76:97:28:73:6F Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0427 Signing time: Fri 27 Mar 2026 00:09:06 +0000 Manifest this update: Fri 27 Mar 2026 00:09:06 +0000 Manifest next update: Fri 03 Apr 2026 00:09:06 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: 1FcWZ5XYzBXJNby1wQkAUh6FwgQ752LmswjUYDeTasU=) 2: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: q5IvURlRSZM1tbSnIUK7mrAYKjf2ufDxWX6LFHw5WEY=) 3: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: j2S/9hhdR71OoPWxIwP3TFKjgMgXC3Tmdl7QnGCMX8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Mar 27 00:09:06 2026 GMT Not After : Apr 3 00:09:06 2026 GMT Subject: CN=69c5caa2-b499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:74:ad:86:90:b7:ac:8b:c7:1f:e2:c9:e8:da: 97:24:de:6f:fd:de:a0:ee:4e:d6:f5:df:77:2e:b8: 72:cb:e9:31:d2:e2:89:b6:8d:99:9b:89:81:ae:55: 43:26:cf:2b:04:7f:77:de:65:17:7b:ac:85:5b:b7: 36:8e:2c:2b:6f:5c:6a:4a:4b:e6:2f:26:c7:6f:62: 88:90:75:fa:51:8c:28:96:d3:0d:cf:7c:47:54:28: 59:e0:ad:79:2e:a5:0e:69:e1:f5:c0:77:44:56:f3: f8:56:68:3e:79:4d:31:5a:7c:c5:9f:95:b0:ba:fd: 3c:d4:ab:9a:0e:cd:4f:1d:9d:26:89:aa:e5:74:f7: b1:37:5e:0d:bc:a4:06:5f:ee:8d:2d:ac:e6:72:32: 85:26:bc:fc:48:d0:2c:fd:c7:94:a3:48:9b:04:e1: c3:9f:17:0e:5c:d6:1d:c1:85:dd:b2:c0:d9:bf:66: e8:8a:99:2a:48:6e:29:46:ea:92:c9:47:66:84:38: c1:4f:23:ff:00:5e:6e:bb:38:9e:68:00:d8:f0:41: 5b:77:f1:4f:db:11:44:bd:4a:92:ce:7d:df:f9:01: 32:a9:77:f1:59:1b:a7:96:46:7c:b0:cf:21:2a:97: 02:c3:a1:c2:fe:0b:dd:fd:d1:ca:59:39:93:c3:19: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:AF:AE:33:7B:81:10:A1:23:0A:0F:72:0E:59:76:97:28:73:6F X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:37:8b:b0:13:3a:79:c3:79:35:8c:99:95:02:d0:72:79:69: e1:1c:0b:8d:ad:17:b5:d8:33:75:f9:f4:70:c1:e5:ec:77:21: 3f:ec:1c:56:49:69:c1:43:bb:2d:d3:94:9d:a6:ba:82:21:b3: 16:dc:46:69:44:4d:0e:0f:79:1a:99:21:0d:c1:62:83:fa:5c: fb:d2:83:b7:47:4d:41:f0:83:f2:f0:27:3c:44:61:97:0c:62: c8:5c:ae:83:90:86:e9:d8:2c:65:ca:ed:49:7c:fa:bf:f4:3f: 75:2b:bc:12:49:21:3d:ce:eb:16:ac:5a:2e:47:96:77:ff:4f: 1a:1e:5b:46:c5:06:42:57:6a:0e:b0:ac:9c:b2:02:a5:49:84: 49:5f:c7:c7:6d:a9:6f:83:30:0a:46:49:2e:d9:ae:8f:3d:a5: 27:07:2f:1a:4b:6b:9c:5e:16:b2:3e:ae:f7:ef:8a:dc:96:92: 8c:c2:01:a2:4c:d7:44:96:86:27:d6:ac:a5:23:b9:06:48:be: 90:62:cc:63:d4:ed:11:21:2d:98:95:96:9c:0f:aa:b6:de:b4: a7:98:9e:d9:9f:eb:4c:91:ea:10:c8:f0:05:bb:37:1e:ce:cf: 05:07:8a:f5:2d:2e:91:43:a3:39:1b:4e:ed:9b:18:e9:f1:b8: c5:66:44:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYwMzI3MDAwOTA2WhcNMjYwNDAzMDAwOTA2WjAYMRYwFAYD VQQDEw02OWM1Y2FhMi1iNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXSthpC3rIvHH+LJ6NqXJN5v/d6g7k7W9d93Lrhyy+kx0uKJto2Zm4mBrlVD Js8rBH933mUXe6yFW7c2jiwrb1xqSkvmLybHb2KIkHX6UYwoltMNz3xHVChZ4K15 LqUOaeH1wHdEVvP4Vmg+eU0xWnzFn5Wwuv081KuaDs1PHZ0miarldPexN14NvKQG X+6NLazmcjKFJrz8SNAs/ceUo0ibBOHDnxcOXNYdwYXdssDZv2boipkqSG4pRuqS yUdmhDjBTyP/AF5uuzieaADY8EFbd/FP2xFEvUqSzn3f+QEyqXfxWRunlkZ8sM8h KpcCw6HC/gvd/dHKWTmTwxnhAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAtnr64z e4EQoSMKD3IOWXaXKHNvMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZzeLsBM6ecN5NYyZlQLQcnlp4RwLja0Xtdgzdfn0cMHl7HchP+wcVklpwUO7 LdOUnaa6giGzFtxGaURNDg95GpkhDcFig/pc+9KDt0dNQfCD8vAnPERhlwxiyFyu g5CG6dgsZcrtSXz6v/Q/dSu8EkkhPc7rFqxaLkeWd/9PGh5bRsUGQldqDrCsnLIC pUmESV/Hx22pb4MwCkZJLtmujz2lJwcvGktrnF4Wsj6u9++K3JaSjMIBokzXRJaG J9aspSO5Bki+kGLMY9TtESEtmJWWnA+qtt60p5ie2Z/rTJHqEMjwBbs3Hs7PBQeK 9S0ukUOjORtO7ZsY6fG4xWZEiw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:57 2026 by rpki-client