$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: N+0J0EbsPMAciPNU8yN2qJ3AiDBlQn3IV9pY9u1m8a0= Subject key identifier: 21:ED:E8:96:A2:52:13:BD:81:16:BF:54:B3:81:0C:0F:2E:C4:63:DB Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0CDA Signing time: Tue 24 Mar 2026 18:09:18 +0000 Manifest this update: Tue 24 Mar 2026 18:09:17 +0000 Manifest next update: Tue 31 Mar 2026 18:09:17 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: c9Bl1cmiUIzgErGo0iVxay38fzkMzj3EG4vZ0vC3Kgg=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Mar 24 18:09:17 2026 GMT Not After : Mar 31 18:09:17 2026 GMT Subject: CN=69c2d34e-f007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:ca:ca:6e:7c:67:77:47:1b:9d:d8:b7:95: 63:4b:cf:8b:72:22:b0:5a:28:37:72:c2:53:5b:ac: 73:2a:b3:08:07:a9:b0:56:72:9b:f6:d2:59:75:03: d1:05:43:37:bf:b5:58:b2:3f:fc:6e:62:31:6c:6b: 55:de:c0:bb:be:26:e3:5f:ea:f8:5e:63:ba:34:a1: c1:60:22:66:5d:2d:b6:00:85:78:70:f6:e9:1c:9d: 12:a5:f7:05:34:36:64:6f:a5:33:b4:0b:04:5a:97: 36:97:e9:77:48:5d:a9:11:23:d4:61:c9:44:2f:58: 92:72:49:25:c3:72:7d:f3:1a:74:c8:33:9e:55:9c: 54:18:1f:ac:14:a3:99:56:2a:dd:7c:13:70:3a:ce: 35:4a:fc:0b:5c:a6:ac:85:fc:ff:e2:bc:e6:2f:95: 6b:4a:7e:e0:69:62:50:20:07:d0:45:dd:65:be:4f: 1a:12:ee:95:1a:df:23:39:e2:e1:86:b3:42:81:5c: d2:e8:27:6c:97:40:52:e6:2e:66:11:d9:61:e0:c8: e2:bf:54:43:ed:9d:3a:9c:72:37:a3:d6:a1:c9:87: cc:52:b4:6c:90:e2:aa:fd:db:5a:2c:a6:3c:b4:fa: 95:bd:0c:87:ce:7d:12:b8:1b:70:3b:0a:31:53:de: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:E8:96:A2:52:13:BD:81:16:BF:54:B3:81:0C:0F:2E:C4:63:DB X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ec:bd:ea:af:74:37:84:8c:5b:ad:63:90:f9:a7:47:38:4b: ab:5c:f2:24:4a:68:1a:5d:8e:9e:e3:d9:65:71:35:b7:76:75: 4b:83:c8:ad:8c:28:55:61:50:8f:97:cf:c1:cb:9d:84:a1:b7: 75:64:b1:2c:a9:89:9b:98:66:97:fc:b2:42:64:3f:15:15:69: 71:42:4f:35:39:e7:f1:e2:87:85:24:f2:ba:11:23:1a:23:8f: 59:f9:30:34:3b:d5:66:3b:7a:0c:f4:87:9e:c2:f2:1a:b5:a1: 36:c6:cb:49:88:eb:39:93:a3:98:40:57:89:9d:03:49:1e:60: e4:8c:ff:45:dd:38:5f:a1:5f:31:99:37:c2:07:76:a8:6f:14: 78:0e:be:64:71:17:46:19:0c:25:2f:92:b7:6f:bb:e3:4a:97: 9e:55:4a:0b:35:f6:ad:78:ef:28:5a:42:7e:20:f4:63:3b:f8: 1a:89:8d:e8:d2:c5:cc:fb:e8:d6:1a:67:30:f7:54:1a:fb:67: 5d:d1:aa:cd:0d:e8:63:a8:85:03:fc:ac:c5:19:58:ff:b2:50: a9:b9:5e:1c:4b:86:f0:d7:c8:19:12:70:c4:53:44:35:52:29: 99:04:e2:13:f7:d6:4a:22:f7:64:77:58:b1:28:f0:60:cc:1c: a1:c1:d9:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjYwMzI0MTgwOTE3WhcNMjYwMzMxMTgwOTE3WjAYMRYwFAYD VQQDEw02OWMyZDM0ZS1mMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sPKym58Z3dHG53Yt5VjS8+LciKwWig3csJTW6xzKrMIB6mwVnKb9tJZdQPR BUM3v7VYsj/8bmIxbGtV3sC7vibjX+r4XmO6NKHBYCJmXS22AIV4cPbpHJ0SpfcF NDZkb6UztAsEWpc2l+l3SF2pESPUYclEL1iSckklw3J98xp0yDOeVZxUGB+sFKOZ VirdfBNwOs41SvwLXKashfz/4rzmL5VrSn7gaWJQIAfQRd1lvk8aEu6VGt8jOeLh hrNCgVzS6Cdsl0BS5i5mEdlh4Mjiv1RD7Z06nHI3o9ahyYfMUrRskOKq/dtaLKY8 tPqVvQyHzn0SuBtwOwoxU96eWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHt6Jai UhO9gRa/VLOBDA8uxGPbMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARuy96q90N4SMW61jkPmnRzhLq1zyJEpoGl2OnuPZZXE1t3Z1S4PIrYwoVWFQ j5fPwcudhKG3dWSxLKmJm5hml/yyQmQ/FRVpcUJPNTnn8eKHhSTyuhEjGiOPWfkw NDvVZjt6DPSHnsLyGrWhNsbLSYjrOZOjmEBXiZ0DSR5g5Iz/Rd04X6FfMZk3wgd2 qG8UeA6+ZHEXRhkMJS+St2+740qXnlVKCzX2rXjvKFpCfiD0Yzv4GomN6NLFzPvo 1hpnMPdUGvtnXdGqzQ3oY6iFA/ysxRlY/7JQqbleHEuG8NfIGRJwxFNENVIpmQTi E/fWSiL3ZHdYsSjwYMwcocHZyg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:37 2026 by rpki-client