$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: U0Abut+5yBz/idgW7/urWi5BackFFHqxZ8fhhFarpSg= Subject key identifier: 74:FA:BA:1C:29:1E:3F:F1:5C:5D:60:7F:37:16:9E:56:05:DD:1F:DA Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0B9A Signing time: Tue 24 Mar 2026 18:56:14 +0000 Manifest this update: Tue 24 Mar 2026 18:56:14 +0000 Manifest next update: Tue 31 Mar 2026 18:56:14 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: qKU/bmxmfs4bRSdqHng4pXpAp9j8u8zaOi7JY0oiCxg=) 2: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: jgODBf90PLIekmliPOAF3OzdEJpw9Z8/WZ9KJk+7ktg=) 3: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 92685NiysBbrtWZSw0HVcicqfMgScx//nGEoHRhDw1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3008 (0xbc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Mar 24 18:56:14 2026 GMT Not After : Mar 31 18:56:14 2026 GMT Subject: CN=69c2de4e-0a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:66:0e:b1:cd:1e:44:ca:48:54:2c:9d:00: ba:02:c8:32:40:ce:a9:5c:03:00:f3:3d:d9:98:a3: db:d6:b2:c0:cf:de:5e:03:72:d8:bc:c2:3f:da:a5: 1d:35:26:b4:50:4f:a6:0e:d6:77:df:15:48:bf:a9: b1:66:49:f1:50:6b:17:72:22:1a:e9:12:ce:c2:69: 82:eb:8f:12:e3:45:1e:dc:ec:75:44:ed:69:8f:2c: e3:2e:94:50:74:14:1a:6a:e4:6f:1d:f6:88:a4:42: c1:c7:d8:df:1c:1b:ed:1d:2c:57:04:13:bb:40:13: bf:b9:90:05:36:ff:c6:e2:8a:73:4d:28:f6:0f:d8: b8:41:2a:14:1f:51:8b:b3:43:30:4d:e0:61:c1:68: 18:10:24:d3:a4:a5:e6:59:aa:59:35:08:75:af:93: b0:62:59:c2:bf:b9:62:60:42:d3:1c:fb:69:1a:5a: 88:7f:55:96:60:85:d7:0d:8b:24:3e:c6:67:3c:b5: 3f:1f:96:4f:d6:c2:21:e2:cd:72:9a:2c:43:49:2e: 9c:52:9b:3d:73:54:ce:60:91:c5:03:3a:c1:47:87: e3:0c:73:e6:33:de:02:7d:d9:ba:fc:52:fc:9e:00: 11:d8:17:3f:79:a6:b5:a2:f3:23:40:b0:ec:c8:96: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FA:BA:1C:29:1E:3F:F1:5C:5D:60:7F:37:16:9E:56:05:DD:1F:DA X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:e4:04:a1:29:b3:f1:6d:ff:29:90:37:6e:86:d1:6d:3b: d1:fa:c8:96:74:f0:16:95:48:b5:11:f5:6e:3a:c8:66:f5:da: 7b:be:74:2f:e8:53:eb:fa:99:4f:39:42:42:47:44:cf:2e:e9: fd:5e:07:2e:35:75:d6:7e:67:b8:5e:d2:d4:e4:5b:7a:4b:27: 3d:c8:f9:33:8f:45:65:43:c8:6e:cf:ed:b8:11:d8:57:1e:bc: 43:38:05:ed:c3:36:7f:20:7e:2f:53:d1:63:91:ae:e3:53:92: e9:7f:dc:1d:20:ec:b4:f4:d6:df:60:ab:91:f7:48:9e:1b:ce: 23:10:68:38:60:e9:0b:33:f7:08:46:f2:eb:db:c3:f1:a8:dd: 4d:07:e9:9b:5a:df:01:59:47:b6:a1:e2:ed:9d:5f:09:e5:aa: 59:69:6b:b7:01:19:54:44:e9:e4:3b:83:9b:74:46:24:2d:a9: 99:b7:2f:96:e1:60:f3:c7:98:0c:e2:81:b7:93:b8:d7:3b:be: e7:33:35:fb:4f:0f:25:ce:10:78:4a:57:13:23:5e:fa:11:a2: e0:1b:54:0a:99:6c:eb:b5:5b:c3:0a:78:d8:5f:5d:2d:be:f9: 05:80:de:c9:49:a1:a8:c2:d7:22:2c:7d:0c:a4:9e:fb:7c:f3: cc:9a:57:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjYwMzI0MTg1NjE0WhcNMjYwMzMxMTg1NjE0WjAYMRYwFAYD VQQDEw02OWMyZGU0ZS0wYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF9mDrHNHkTKSFQsnQC6AsgyQM6pXAMA8z3ZmKPb1rLAz95eA3LYvMI/2qUd NSa0UE+mDtZ33xVIv6mxZknxUGsXciIa6RLOwmmC648S40Ue3Ox1RO1pjyzjLpRQ dBQaauRvHfaIpELBx9jfHBvtHSxXBBO7QBO/uZAFNv/G4opzTSj2D9i4QSoUH1GL s0MwTeBhwWgYECTTpKXmWapZNQh1r5OwYlnCv7liYELTHPtpGlqIf1WWYIXXDYsk PsZnPLU/H5ZP1sIh4s1ymixDSS6cUps9c1TOYJHFAzrBR4fjDHPmM94Cfdm6/FL8 ngAR2Bc/eaa1ovMjQLDsyJYwPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHT6uhwp Hj/xXF1gfzcWnlYF3R/aMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaiHkBKEps/Ft/ymQN26G0W070frIlnTwFpVItRH1bjrIZvXae750L+hT6/qZ TzlCQkdEzy7p/V4HLjV11n5nuF7S1ORbeksnPcj5M49FZUPIbs/tuBHYVx68QzgF 7cM2fyB+L1PRY5Gu41OS6X/cHSDstPTW32CrkfdInhvOIxBoOGDpCzP3CEby69vD 8ajdTQfpm1rfAVlHtqHi7Z1fCeWqWWlrtwEZVETp5DuDm3RGJC2pmbcvluFg88eY DOKBt5O41zu+5zM1+08PJc4QeEpXEyNe+hGi4BtUCpls67Vbwwp42F9dLb75BYDe yUmhqMLXIix9DKSe+3zzzJpX5A== -----END CERTIFICATE-----Generated at Thu Mar 26 13:35:29 2026 by rpki-client