$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json) Hash identifier: QxlPf4tXTEueUIdSUcrCdQKitDYIupezIFocoDkvHw8= Subject key identifier: 92:F6:1F:A6:74:0C:2C:D0:E8:6C:E3:AF:1C:03:D2:AD:7E:88:C2:CE Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 06E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft Manifest number: 06D9 Signing time: Tue 24 Mar 2026 21:53:21 +0000 Manifest this update: Tue 24 Mar 2026 21:53:21 +0000 Manifest next update: Tue 31 Mar 2026 21:53:21 +0000 Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: wdNmtrpyhXp+8DviN1wN5kcN7+SVUYF01ECSvFQgEmg=) 2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: kPCD0Fz7/O4ntMHiCFvRFjcWPT4ww4VjwAtUClsCkrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: Mar 24 21:53:21 2026 GMT Not After : Mar 31 21:53:21 2026 GMT Subject: CN=69c307d1-ce47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:df:e2:da:1c:46:e0:99:f2:a3:5f:0a:79: 20:0d:d5:52:6f:8e:bd:b8:fd:4c:69:bf:f9:2d:1f: 5c:90:5f:ec:ab:8e:c6:63:4e:61:28:2f:73:af:17: 1e:63:c0:f0:a0:3d:c1:9e:9d:13:4f:51:c6:df:ab: 20:8d:15:df:97:3f:6b:13:37:a4:a3:f3:55:4f:38: 16:d6:c5:f7:e4:75:e0:c7:88:59:90:38:7c:cf:92: b4:07:7c:7a:ec:2b:11:de:79:be:5b:ba:97:1c:e3: d2:2a:23:db:18:8b:71:01:8f:25:60:95:15:c0:00: af:63:e0:13:eb:af:e5:d2:a6:60:96:41:dd:83:73: ff:d1:5f:a9:6a:de:b4:50:26:8b:12:8d:b2:20:aa: 2d:85:ec:fd:83:11:5a:a5:37:dc:c3:b9:2c:cd:ec: ae:4c:d4:fd:f6:f1:af:01:ae:6e:4f:2f:0c:95:fe: c9:b7:4d:46:86:8c:3b:d1:70:63:21:52:c5:d2:df: d3:ff:4f:09:0f:35:d7:15:91:66:d4:31:8d:a3:40: 0e:7c:46:19:4f:53:e4:d0:13:13:67:6d:ee:c8:72: c5:f7:e5:68:e9:f2:87:88:3f:26:1e:a6:c6:e5:a8: 57:3d:8c:b5:45:43:85:92:fc:31:b0:7b:4f:42:fc: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F6:1F:A6:74:0C:2C:D0:E8:6C:E3:AF:1C:03:D2:AD:7E:88:C2:CE X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d3:4c:a9:4f:41:74:c2:3e:d3:4b:46:3f:2d:f9:b8:98:20: 28:c7:e3:1c:5c:e4:ae:f8:5f:48:4c:91:c7:c5:9b:13:b9:4e: be:82:7d:ea:c7:7d:f2:a2:c7:55:52:a3:3d:da:61:b3:6d:c6: 0f:cd:00:c5:e0:89:04:66:85:8e:8e:fa:5e:58:53:1a:98:71: 0c:7a:4b:96:46:0c:ab:62:d5:e1:b2:9b:ba:23:94:46:a0:aa: b8:16:41:ea:2e:c2:c8:0f:40:ac:6e:ce:fd:54:95:ed:1d:34: 26:ac:f5:9e:2f:e7:ef:93:b2:88:14:03:c7:4f:53:9d:b5:7b: ce:79:4d:77:2d:9a:d4:66:5b:1c:24:68:3c:91:09:2e:68:fa: 8f:84:d7:6b:de:14:0a:b8:77:62:b5:b9:38:9f:b1:5e:1d:64: 83:8f:9f:e5:2f:7e:51:9f:a0:ff:39:9f:ef:69:25:89:3d:0b: a2:61:4f:92:cf:70:2e:31:0f:87:6a:5b:a7:5c:cd:97:45:9b: be:a8:10:00:2c:21:7d:8e:0c:1a:c8:01:10:1a:6f:c4:1c:ef: ed:e7:39:b3:42:5b:73:3e:4b:bc:1d:81:4f:f3:97:56:4a:4a: f8:64:ab:37:a6:22:ba:72:97:fe:ff:fd:6c:89:32:ae:01:a8: bf:5c:69:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjYwMzI0MjE1MzIxWhcNMjYwMzMxMjE1MzIxWjAYMRYwFAYD VQQDEw02OWMzMDdkMS1jZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj/f4tocRuCZ8qNfCnkgDdVSb469uP1Mab/5LR9ckF/sq47GY05hKC9zrxce Y8DwoD3Bnp0TT1HG36sgjRXflz9rEzeko/NVTzgW1sX35HXgx4hZkDh8z5K0B3x6 7CsR3nm+W7qXHOPSKiPbGItxAY8lYJUVwACvY+AT66/l0qZglkHdg3P/0V+pat60 UCaLEo2yIKothez9gxFapTfcw7kszeyuTNT99vGvAa5uTy8Mlf7Jt01Ghow70XBj IVLF0t/T/08JDzXXFZFm1DGNo0AOfEYZT1Pk0BMTZ23uyHLF9+Vo6fKHiD8mHqbG 5ahXPYy1RUOFkvwxsHtPQvxp8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJL2H6Z0 DCzQ6GzjrxwD0q1+iMLOMB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I2Ni9FNUM0RDMyNjkwMzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpI elNVUXlvTWtIbkFCVE5pa1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAItNMqU9BdMI+00tGPy35uJggKMfjHFzkrvhfSEyRx8WbE7lOvoJ96sd98qLH VVKjPdphs23GD80AxeCJBGaFjo76XlhTGphxDHpLlkYMq2LV4bKbuiOURqCquBZB 6i7CyA9ArG7O/VSV7R00Jqz1ni/n75OyiBQDx09TnbV7znlNdy2a1GZbHCRoPJEJ Lmj6j4TXa94UCrh3YrW5OJ+xXh1kg4+f5S9+UZ+g/zmf72kliT0LomFPks9wLjEP h2pbp1zNl0WbvqgQACwhfY4MGsgBEBpvxBzv7ec5s0Jbcz5LvB2BT/OXVkpK+GSr N6YiunKX/v/9bIkyrgGov1xpkg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:55 2026 by rpki-client