$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: PtPUvGg5SB2fN4nbpwt+5Gb9YvYwylviLk7lq6IpzbU= Subject key identifier: 5A:8D:9C:FC:F9:7A:4B:21:70:17:3F:0F:E9:29:2D:26:64:A9:18:79 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 3555 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 3525 Signing time: Thu 26 Mar 2026 15:12:47 +0000 Manifest this update: Thu 26 Mar 2026 15:12:47 +0000 Manifest next update: Thu 02 Apr 2026 15:12:47 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: rovUkOQOZx4G7+n0Nqtn1nJHTG3xlkJ3XuZzvTACiZE=) 2: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: ZiQ3Fa8zlV9SFju5CJ4G2vzDiYjT+FvEBz+HNh9KOzk=) 3: 504CB1588D3911F093856C71C4F9AE02.roa (hash: XbsPrmHsv3A3kJ0QH0nWqPm+aVwo38LG2afXIGK/eHk=) 4: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: UcggPbJhgE8EGS4IdplCk/tp4RjY1CPQccDnakbA59Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13653 (0x3555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Mar 26 15:12:47 2026 GMT Not After : Apr 2 15:12:47 2026 GMT Subject: CN=69c54cef-a8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:39:75:6e:f8:4a:53:9d:10:3e:a1:2a:7e: 04:c0:06:1d:df:11:a6:cc:48:20:51:30:de:c6:ce: 7c:0a:76:51:8e:e3:c4:be:b3:ce:b6:dd:1b:f4:e1: c6:80:c6:89:f6:86:5e:c2:54:af:e0:69:e6:f2:9b: 62:08:87:eb:37:bf:b0:5b:2f:47:7b:1a:b5:3b:b9: 79:bc:4d:2a:f5:62:42:1a:b2:1b:32:76:c0:b0:5c: 72:84:5f:24:38:f4:31:72:57:2c:86:ff:12:0f:a9: 84:7a:46:fe:d8:ee:ae:f9:b3:b4:3e:15:90:c3:b0: 44:9f:57:89:33:3c:40:f9:52:28:79:f4:b3:f2:b5: 17:2e:7f:66:72:63:85:ae:e4:d2:f2:eb:bc:25:6f: 76:26:72:57:df:62:ca:bf:2a:fe:3e:9b:73:b2:b2: 51:5e:65:13:71:61:04:d2:d9:31:2a:82:10:57:8c: 7a:26:ed:55:c4:a1:cc:88:2f:c7:10:a4:b2:b7:f5: fa:b7:86:d1:85:d1:b7:04:65:f7:06:dc:2f:9b:20: 12:68:d5:72:eb:b7:59:cc:5d:6f:93:36:55:e3:12: b9:7f:88:0a:ff:c6:c6:71:a6:9b:18:72:8a:e1:c1: 37:22:f0:e6:30:f5:dc:c5:6b:5b:a0:9d:36:a4:90: 71:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8D:9C:FC:F9:7A:4B:21:70:17:3F:0F:E9:29:2D:26:64:A9:18:79 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:82:f5:49:ef:37:b7:14:1a:47:fc:01:76:64:f8:a8:10:84: 56:ab:77:10:41:ea:22:0e:76:a3:00:96:ec:eb:22:c2:7f:06: 05:b5:8f:f9:f6:cd:23:23:75:df:18:76:2b:41:b0:a9:93:21: 1e:ac:d2:f5:5e:ce:fe:59:2a:6a:17:29:44:19:f1:d7:69:6e: ca:fd:b6:3c:30:a3:3f:cd:bd:d4:0f:c8:7a:18:3f:af:60:91: 33:c1:dd:97:6e:24:87:78:76:aa:0f:24:f3:e0:84:b6:ed:ed: ae:54:f8:f6:c1:e1:3e:a9:0a:8c:f3:98:5b:38:86:bd:a1:e1: 9e:06:35:af:35:e6:c7:c4:cf:16:1b:e1:9c:94:73:bd:5e:b8: 39:1c:55:1e:45:f4:b1:16:f0:3a:55:62:9f:f5:84:e3:71:82: 53:6e:a6:6b:d1:f1:7f:3d:b5:66:c8:86:66:9f:34:c7:2a:06: 4e:c0:5c:c7:13:6e:93:11:24:f8:10:31:d4:cb:46:c4:31:18: 14:f9:fa:d6:29:ec:9e:8a:b3:4b:55:85:bf:ef:0a:5f:61:48: 9f:d1:91:5d:5a:a2:ab:60:51:dd:f5:27:43:9e:92:89:a1:51: 59:b7:53:45:ea:01:de:5e:84:1e:9b:58:0d:9b:d2:20:81:c4: 49:32:b4:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjYwMzI2MTUxMjQ3WhcNMjYwNDAyMTUxMjQ3WjAYMRYwFAYD VQQDEw02OWM1NGNlZi1hOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+45dW74SlOdED6hKn4EwAYd3xGmzEggUTDexs58CnZRjuPEvrPOtt0b9OHG gMaJ9oZewlSv4Gnm8ptiCIfrN7+wWy9Hexq1O7l5vE0q9WJCGrIbMnbAsFxyhF8k OPQxclcshv8SD6mEekb+2O6u+bO0PhWQw7BEn1eJMzxA+VIoefSz8rUXLn9mcmOF ruTS8uu8JW92JnJX32LKvyr+PptzsrJRXmUTcWEE0tkxKoIQV4x6Ju1VxKHMiC/H EKSyt/X6t4bRhdG3BGX3BtwvmyASaNVy67dZzF1vkzZV4xK5f4gK/8bGcaabGHKK 4cE3IvDmMPXcxWtboJ02pJBxRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqNnPz5 ekshcBc/D+kpLSZkqRh5MB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH4L1Se83txQaR/wBdmT4qBCEVqt3EEHqIg52owCW7Osiwn8GBbWP+fbNIyN1 3xh2K0GwqZMhHqzS9V7O/lkqahcpRBnx12luyv22PDCjP8291A/Iehg/r2CRM8Hd l24kh3h2qg8k8+CEtu3trlT49sHhPqkKjPOYWziGvaHhngY1rzXmx8TPFhvhnJRz vV64ORxVHkX0sRbwOlVin/WE43GCU26ma9Hxfz21ZsiGZp80xyoGTsBcxxNukxEk +BAx1MtGxDEYFPn61insnoqzS1WFv+8KX2FIn9GRXVqiq2BR3fUnQ56SiaFRWbdT ReoB3l6EHptYDZvSIIHESTK0SQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:58 2026 by rpki-client