$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: d+FpFacMGV+NWJWRm6LT0czv0arm1aO1KKY9zT9WtBA= Subject key identifier: 94:8C:B6:D4:46:0C:6A:ED:05:55:FF:8D:21:07:2B:C4:44:10:B8:1A Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 070E Signing time: Tue 24 Mar 2026 21:37:43 +0000 Manifest this update: Tue 24 Mar 2026 21:37:42 +0000 Manifest next update: Tue 31 Mar 2026 21:37:42 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: pufrGC9z1qwxt0wv6XrD9lfalun1cANN6EehjiiGaTQ=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: 0b0HGaDdSoGabGbuIldgPlVlxVMXsiZt0/dswCWx48E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: Mar 24 21:37:42 2026 GMT Not After : Mar 31 21:37:42 2026 GMT Subject: CN=69c30427-2fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:18:79:29:4b:ad:df:12:8b:dd:78:88:c1:3a: 28:3d:41:39:78:a9:54:40:46:b6:96:67:0e:bf:78: eb:2f:bb:4e:70:03:13:85:ae:62:6a:86:e1:c6:df: 89:b1:c7:90:2b:b3:0c:70:cd:45:1a:1f:33:e4:a6: f3:12:a9:d1:3a:1a:69:d8:c8:c1:78:dc:81:45:ef: 90:35:bd:40:2f:de:7d:2a:19:f1:17:34:51:e5:f5: 41:4d:0d:82:93:9d:c5:04:04:ab:1d:34:ef:14:0f: 3a:93:77:01:75:35:1b:d3:28:a6:b7:c8:e6:55:8c: e8:00:a9:5d:6e:a3:5c:15:e5:89:c7:fd:bd:21:94: 04:29:ab:a0:29:1a:a7:ac:45:cd:86:0f:d0:cd:9b: 53:28:de:a6:03:fc:8a:e3:fc:10:75:e2:30:f7:b6: 25:45:d8:04:91:0f:52:6e:10:1f:4d:e4:37:1f:27: 00:48:b1:92:38:a6:65:72:91:a8:6b:72:7a:86:cb: af:65:95:7e:a8:b4:4f:47:fd:31:10:c8:a9:c1:12: 9b:0c:ea:8d:f3:11:31:64:78:eb:9f:32:ff:45:89: ef:e9:35:9a:dc:2b:36:45:ca:18:3e:ba:f3:1e:5c: 5c:f2:cb:4d:ab:66:67:b7:43:ae:a1:af:b9:eb:da: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:B6:D4:46:0C:6A:ED:05:55:FF:8D:21:07:2B:C4:44:10:B8:1A X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:86:fb:4f:3d:d0:86:53:40:fc:e6:a2:56:dd:e6:36:64:cb: a5:00:4e:16:c2:d0:5e:b9:29:8e:50:08:8c:7d:7f:7c:04:5e: de:f2:e5:fc:ce:7a:5f:c6:cf:1c:41:ed:d0:a2:6d:fa:39:b5: ed:fe:f5:b9:cf:12:83:89:38:d1:91:43:56:39:64:f3:24:a6: 0c:83:06:99:2e:7a:cc:8a:86:f9:36:77:69:d1:86:56:8a:e5: 04:94:81:29:a3:55:5f:68:a6:78:a6:06:58:71:01:01:98:3f: 4a:40:aa:cd:c7:9a:2d:91:e7:5d:16:6a:81:1f:12:76:e7:f1: dd:6b:c4:b4:c9:4b:76:bc:7c:14:29:82:86:c4:2d:fa:54:a0: 18:15:41:9c:ce:5b:02:72:e9:29:2f:2a:2f:ad:bb:a5:4c:57: 09:7f:88:00:05:2b:60:3a:0d:8f:88:4c:82:ce:a2:f1:b7:7a: ce:64:0e:83:d6:00:b5:ce:5a:ca:06:52:26:28:c0:07:01:b3: 27:c5:d1:aa:16:7c:8a:a6:41:9b:a6:12:c7:c8:82:77:e3:c2: 3e:13:4a:bd:d6:82:40:75:b3:fb:c8:ef:62:f8:8e:21:18:5f: 1e:a6:34:3f:89:01:d9:b8:50:b2:3d:99:de:c5:b7:06:8c:b8: b9:14:ac:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjYwMzI0MjEzNzQyWhcNMjYwMzMxMjEzNzQyWjAYMRYwFAYD VQQDEw02OWMzMDQyNy0yZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Bh5KUut3xKL3XiIwTooPUE5eKlUQEa2lmcOv3jrL7tOcAMTha5iaobhxt+J sceQK7MMcM1FGh8z5KbzEqnROhpp2MjBeNyBRe+QNb1AL959KhnxFzRR5fVBTQ2C k53FBASrHTTvFA86k3cBdTUb0yimt8jmVYzoAKldbqNcFeWJx/29IZQEKaugKRqn rEXNhg/QzZtTKN6mA/yK4/wQdeIw97YlRdgEkQ9SbhAfTeQ3HycASLGSOKZlcpGo a3J6hsuvZZV+qLRPR/0xEMipwRKbDOqN8xExZHjrnzL/RYnv6TWa3Cs2RcoYPrrz Hlxc8stNq2Znt0Ouoa+569rWfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSMttRG DGrtBVX/jSEHK8REELgaMB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQYb7Tz3QhlNA/OaiVt3mNmTLpQBOFsLQXrkpjlAIjH1/fARe3vLl/M56X8bP HEHt0KJt+jm17f71uc8Sg4k40ZFDVjlk8ySmDIMGmS56zIqG+TZ3adGGVorlBJSB KaNVX2imeKYGWHEBAZg/SkCqzceaLZHnXRZqgR8Sdufx3WvEtMlLdrx8FCmChsQt +lSgGBVBnM5bAnLpKS8qL627pUxXCX+IAAUrYDoNj4hMgs6i8bd6zmQOg9YAtc5a ygZSJijABwGzJ8XRqhZ8iqZBm6YSx8iCd+PCPhNKvdaCQHWz+8jvYviOIRhfHqY0 P4kB2bhQsj2Z3sW3Boy4uRSsog== -----END CERTIFICATE-----Generated at Thu Mar 26 14:08:07 2026 by rpki-client