$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: t7z90zA5pA7ySPZJxX14o+exPOmDqMfreTXWr4oOZZY= Subject key identifier: DB:6D:EE:C3:BA:5A:17:7F:8B:07:AA:C1:68:6F:04:B4:7F:7A:5C:E8 Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 3500 Signing time: Tue 24 Mar 2026 15:16:06 +0000 Manifest this update: Tue 24 Mar 2026 15:16:05 +0000 Manifest next update: Tue 31 Mar 2026 15:16:05 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: xtteFIRJeU9HC2FirqDv2z6Yo6Q/MCyOs2clJrAlhV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: Mar 24 15:16:05 2026 GMT Not After : Mar 31 15:16:05 2026 GMT Subject: CN=69c2aab6-f50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:1c:ec:ab:bf:fc:f2:01:a8:e3:ca:8b:2f: 1e:10:cf:6f:b2:5a:47:6c:85:d0:ae:b0:b2:d3:66: 23:ee:5f:c3:c8:9b:45:fa:1f:3b:5e:65:57:9e:5b: a2:69:7f:fd:88:f0:92:5e:d0:ce:b4:3d:06:27:17: 36:87:ab:0e:85:93:b7:4d:80:c2:86:ee:f2:f1:ee: 81:2e:b6:39:fc:04:e8:e2:77:51:ad:d8:70:c2:ab: d6:1a:63:9c:a7:95:c3:95:4e:bf:7e:3a:36:5b:96: f5:74:b4:13:25:36:2d:1f:5a:63:0b:e2:40:66:5b: 3c:83:a9:77:8f:58:8f:ef:d4:1a:07:11:a5:bf:b4: 28:ad:59:91:d9:cd:53:dc:99:98:18:ea:35:17:cc: 81:9e:ff:7a:e2:70:af:97:45:df:05:f2:43:90:98: 15:e0:7f:fa:ef:85:e6:ff:d2:c7:cb:57:14:6b:98: d7:a5:a0:b2:52:0e:3b:c2:f7:f6:07:67:b6:b5:0d: ee:47:4e:9f:41:1a:59:d2:9c:8b:a9:4f:ba:f5:bf: 6f:b5:42:01:7b:c9:df:cd:98:62:d2:9e:89:fb:5b: 95:f7:58:e9:1a:1f:4c:b3:3a:2a:a9:d4:f9:7d:0c: 7c:08:b2:28:ca:8b:a0:86:5d:a1:40:75:02:0f:eb: b4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6D:EE:C3:BA:5A:17:7F:8B:07:AA:C1:68:6F:04:B4:7F:7A:5C:E8 X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:be:ec:90:e2:a1:46:5d:40:65:a6:c6:93:b6:3c:aa:5a: 15:1c:7d:34:b8:ed:8b:79:ee:18:4a:b1:31:13:52:d0:2c:f2: 6b:82:cd:bb:94:d1:30:39:ed:e4:3e:22:7d:3e:a3:69:01:11: ac:84:06:c8:fb:02:de:25:ea:41:55:40:10:25:1f:f4:41:d8: 37:68:fb:41:de:90:cf:50:32:6e:0f:54:f0:14:0a:01:6d:e4: 7c:52:c8:8c:bc:01:f2:60:23:74:02:00:07:b6:81:c0:ac:f1: 74:8f:ae:c9:21:c5:b3:ab:09:14:23:a4:dc:df:1d:00:d0:32: 67:ab:23:cb:6d:b7:10:03:c3:db:b3:89:f4:0c:f0:64:b2:34: 7a:42:c3:67:58:64:78:2e:13:39:12:61:5e:a4:66:e8:ef:8a: 3c:85:58:13:14:80:b8:93:e8:3f:00:c7:1b:04:c0:3d:75:13: 22:61:4e:27:28:3d:9f:64:ef:62:0b:43:ab:e5:f8:7f:f8:14: 1a:88:ea:38:46:0d:de:e7:81:14:13:81:b8:95:0d:7a:fb:2c: 60:ab:21:be:76:31:2b:dd:4e:09:63:98:07:bb:b3:c3:ac:48: 6c:83:c7:c0:13:30:ca:ee:27:bb:c7:b0:37:12:39:1f:af:d7: 71:ee:a8:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjYwMzI0MTUxNjA1WhcNMjYwMzMxMTUxNjA1WjAYMRYwFAYD VQQDEw02OWMyYWFiNi1mNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroEc7Ku//PIBqOPKiy8eEM9vslpHbIXQrrCy02Yj7l/DyJtF+h87XmVXnlui aX/9iPCSXtDOtD0GJxc2h6sOhZO3TYDChu7y8e6BLrY5/ATo4ndRrdhwwqvWGmOc p5XDlU6/fjo2W5b1dLQTJTYtH1pjC+JAZls8g6l3j1iP79QaBxGlv7QorVmR2c1T 3JmYGOo1F8yBnv964nCvl0XfBfJDkJgV4H/674Xm/9LHy1cUa5jXpaCyUg47wvf2 B2e2tQ3uR06fQRpZ0pyLqU+69b9vtUIBe8nfzZhi0p6J+1uV91jpGh9MszoqqdT5 fQx8CLIoyoughl2hQHUCD+u0swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtt7sO6 Whd/iweqwWhvBLR/elzoMB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7y+7JDioUZdQGWmxpO2PKpaFRx9NLjti3nuGEqxMRNS0Czya4LNu5TRMDnt 5D4ifT6jaQERrIQGyPsC3iXqQVVAECUf9EHYN2j7Qd6Qz1Aybg9U8BQKAW3kfFLI jLwB8mAjdAIAB7aBwKzxdI+uySHFs6sJFCOk3N8dANAyZ6sjy223EAPD27OJ9Azw ZLI0ekLDZ1hkeC4TORJhXqRm6O+KPIVYExSAuJPoPwDHGwTAPXUTImFOJyg9n2Tv YgtDq+X4f/gUGojqOEYN3ueBFBOBuJUNevssYKshvnYxK91OCWOYB7uzw6xIbIPH wBMwyu4nu8ewNxI5H6/Xce6oLQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:57:58 2026 by rpki-client