$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: 8Uka3UHgX0sHsVYvcT1AyEOCaRfQFhiddqys3h2FYg0= Subject key identifier: 6F:DF:02:88:35:0C:24:CE:4D:00:B6:F8:F5:1E:45:45:02:C8:36:FF Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 9F Signing time: Wed 25 Mar 2026 06:35:15 +0000 Manifest this update: Wed 25 Mar 2026 06:35:14 +0000 Manifest next update: Wed 01 Apr 2026 06:35:14 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: Zp3hyCXNMUsruYJ5cH8pm7nR7kCmw3bkVy0UsnaJo5s=) 2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) 3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Mar 25 06:35:14 2026 GMT Not After : Apr 1 06:35:14 2026 GMT Subject: CN=69c38223-1620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:71:90:9d:e8:14:46:ad:cb:7e:18:4b:34: a0:eb:53:60:53:ed:e2:09:64:f4:a7:a8:bf:67:76: 0d:74:30:cd:87:0c:05:e2:d4:ed:8f:0f:10:be:7e: db:b3:c6:d8:b2:02:9b:8e:34:93:07:93:54:e3:54: 05:91:79:62:20:b7:39:64:0a:39:9b:39:a5:43:95: 04:af:fd:8c:2d:07:97:64:e0:e2:8e:8b:88:4e:f5: d5:28:3c:fa:64:a7:41:c1:d2:04:4c:4f:4d:f3:26: 2e:fe:b1:38:22:fd:9b:a8:4f:01:fe:66:59:ff:0f: c0:fc:2d:55:0c:92:9b:15:b4:55:aa:5b:28:46:13: 7c:ce:cf:11:92:1e:e2:6a:29:24:7a:20:dc:5e:94: 7e:e4:52:de:fe:e4:43:6a:fd:ab:64:aa:5a:f1:0e: 2c:71:c9:46:c6:95:6f:42:e8:d6:3c:cf:4a:e2:5f: 4a:e1:5b:e4:63:80:3e:92:fa:4a:fd:f3:10:ad:1e: 14:10:2d:9a:98:0e:2f:1c:98:58:c3:cc:d8:4c:ab: 0e:77:16:a0:93:d6:78:85:e0:8f:55:bf:b6:06:ae: cc:a2:7c:b9:a2:16:de:9c:19:92:c4:41:47:4f:a6: 35:c3:1a:23:72:9f:71:33:90:21:95:34:6c:fc:11: 44:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DF:02:88:35:0C:24:CE:4D:00:B6:F8:F5:1E:45:45:02:C8:36:FF X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:95:39:a4:62:c9:c3:13:85:7f:a2:1f:96:4a:3a:2d:99:26: 14:b8:ad:1c:39:2f:9e:65:51:5a:4a:b9:6a:c9:1a:da:50:cf: cb:b5:3a:8f:ed:bf:cc:26:85:12:22:7c:12:4f:a2:7f:f9:8b: 71:c0:3a:69:ba:19:77:47:77:12:20:95:79:6f:62:4b:07:97: 93:4c:88:b9:65:96:17:91:31:62:d9:17:28:0c:34:a3:c3:97: 52:62:ad:9a:c3:e3:d1:eb:06:b4:61:9f:6d:bc:d4:d3:d5:74: 70:a8:e0:7e:de:ae:cb:d0:31:1e:2f:b3:c7:9f:7f:11:41:5f: 83:76:77:8b:44:72:90:70:b4:45:b1:d0:78:de:3c:a1:3c:16: 95:29:16:e8:a4:2f:5b:0d:6b:b1:af:69:5d:b6:84:12:b7:1a: be:44:ec:81:d6:12:28:73:da:3d:67:1d:d5:4a:b4:e7:2a:0d: b7:8a:3e:64:82:bd:cd:be:a2:01:57:f0:fa:b1:f0:3d:18:f7: e5:ec:58:b1:18:7d:0f:d2:8b:17:5e:79:08:5b:6b:98:2e:f9: 16:8c:f6:5d:c4:7e:7c:cc:8d:66:7d:96:62:c3:03:3d:6a:55: 6a:da:f7:65:c1:2b:58:60:85:0e:34:63:60:af:bf:3a:99:64: 29:8c:21:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwMzI1MDYzNTE0WhcNMjYwNDAxMDYzNTE0WjAYMRYwFAYD VQQDEw02OWMzODIyMy0xNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon1xkJ3oFEaty34YSzSg61NgU+3iCWT0p6i/Z3YNdDDNhwwF4tTtjw8Qvn7b s8bYsgKbjjSTB5NU41QFkXliILc5ZAo5mzmlQ5UEr/2MLQeXZODijouITvXVKDz6 ZKdBwdIETE9N8yYu/rE4Iv2bqE8B/mZZ/w/A/C1VDJKbFbRVqlsoRhN8zs8Rkh7i aikkeiDcXpR+5FLe/uRDav2rZKpa8Q4scclGxpVvQujWPM9K4l9K4VvkY4A+kvpK /fMQrR4UEC2amA4vHJhYw8zYTKsOdxagk9Z4heCPVb+2Bq7Mony5ohbenBmSxEFH T6Y1wxojcp9xM5AhlTRs/BFEIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/fAog1 DCTOTQC2+PUeRUUCyDb/MB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyZU5pGLJwxOFf6Iflko6LZkmFLitHDkvnmVRWkq5aska2lDPy7U6j+2/zCaF EiJ8Ek+if/mLccA6aboZd0d3EiCVeW9iSweXk0yIuWWWF5ExYtkXKAw0o8OXUmKt msPj0esGtGGfbbzU09V0cKjgft6uy9AxHi+zx59/EUFfg3Z3i0RykHC0RbHQeN48 oTwWlSkW6KQvWw1rsa9pXbaEErcavkTsgdYSKHPaPWcd1Uq05yoNt4o+ZIK9zb6i AVfw+rHwPRj35exYsRh9D9KLF155CFtrmC75Foz2XcR+fMyNZn2WYsMDPWpVatr3 ZcErWGCFDjRjYK+/OplkKYwhLg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:37 2026 by rpki-client