$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: pa0MKk8l3zn5dbG0WQVXpa+9AzE9XEz2k8SvJm53rrY= Subject key identifier: CC:9D:6D:31:90:69:0F:0B:FE:B1:8B:31:B9:75:46:09:EC:F0:5D:BC Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: A1 Signing time: Wed 25 Mar 2026 06:36:06 +0000 Manifest this update: Wed 25 Mar 2026 06:36:05 +0000 Manifest next update: Wed 01 Apr 2026 06:36:05 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: RYpYnnId5K/sWKMtv4a6JYhSJHjzGUUHU9Hb4OhCQT0=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: 8cuDD60OBi1vO/7c9lhKgZt7KgJpxsLM7iezV0RYbzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Mar 25 06:36:05 2026 GMT Not After : Apr 1 06:36:05 2026 GMT Subject: CN=69c38255-97ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6a:25:67:7d:52:46:03:97:de:a6:08:77:5c: a9:a7:52:22:28:53:43:45:d9:8b:64:d3:9c:8f:7c: 0d:52:f8:32:3f:9d:50:e5:f5:59:fd:8d:5a:e4:76: 91:3a:94:6d:4f:21:3e:90:fb:d2:1e:fc:91:93:fb: 33:e2:8e:5d:eb:20:d6:59:be:3f:01:d9:2a:55:61: a4:cf:2c:a6:20:a0:e4:24:ce:e2:56:4d:64:c4:a5: 6f:77:68:ae:ad:10:3d:37:00:cb:24:43:a9:92:af: 00:ca:d0:a4:40:9e:18:2b:1b:53:b6:29:4d:76:d0: 50:a5:aa:f1:c0:83:ab:fd:70:c1:ed:46:88:18:6f: 99:53:b1:bd:75:2c:be:25:3c:21:6b:ab:54:0e:1e: 96:0b:1a:03:1e:18:2e:41:a1:53:1c:77:0b:8c:29: 97:3f:1f:57:61:61:cf:f1:0b:f0:a4:fb:3b:0d:59: df:03:50:e6:d0:ca:33:f0:0a:f3:f1:c6:ed:50:f2: e4:1c:a9:d0:0c:f5:8d:5c:b1:b2:2f:29:4f:0d:5d: 3a:02:c1:44:68:4b:0b:5e:6e:5d:72:49:33:2f:ff: 8e:6b:f2:a6:1b:be:66:7a:59:16:b1:9c:b7:e0:74: ff:8c:ce:65:a3:21:17:d9:31:a5:c6:00:c1:5d:90: fb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9D:6D:31:90:69:0F:0B:FE:B1:8B:31:B9:75:46:09:EC:F0:5D:BC X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:92:70:73:dd:69:86:7b:11:ff:6f:6c:aa:5e:46:ab:3e:a3: a9:d1:58:57:62:52:ea:31:24:35:d6:31:32:7d:c7:36:28:f2: 49:ea:9f:20:40:a0:ed:2b:fb:ec:42:6c:58:ce:6e:bf:06:5b: b5:1d:9e:6a:c5:34:a4:c5:76:56:f6:5a:02:f7:5e:cf:42:37: e6:18:95:a1:c8:d3:c1:60:cd:b0:53:09:3d:74:dd:85:db:5a: c2:78:27:dd:7a:67:0a:c9:a5:45:92:e0:89:e1:0c:e1:46:5e: 95:67:1c:ea:de:0c:c5:be:b9:10:6f:bd:8b:80:e5:24:f5:f7: f3:30:51:42:b2:60:c9:92:83:c5:09:90:d7:5c:a6:4e:b0:8c: 83:9a:94:ad:d4:0a:d2:5b:a9:f8:fc:46:89:2d:bc:7a:c9:03: 1c:51:fa:ae:e1:39:80:e7:01:82:df:bc:bf:2d:47:16:32:11: 54:cf:93:44:70:46:b1:a8:48:c2:e8:42:89:62:20:f6:f2:cc: be:e1:06:20:58:17:f1:af:2e:71:40:36:de:e7:32:ac:f7:bf: 2c:15:63:41:8a:cb:a6:eb:58:1b:c3:96:dd:70:5c:a2:38:0b: 63:be:0d:10:5b:71:86:90:85:b6:d9:12:dc:a8:13:f5:0c:60: a1:96:aa:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKEM0MjZENDI2NDAwNjc2NTU1OTczREZFREU0RUIyNjQ0 QkVFRDI4NzMwHhcNMjYwMzI1MDYzNjA1WhcNMjYwNDAxMDYzNjA1WjAYMRYwFAYD VQQDEw02OWMzODI1NS05N2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52olZ31SRgOX3qYId1ypp1IiKFNDRdmLZNOcj3wNUvgyP51Q5fVZ/Y1a5HaR OpRtTyE+kPvSHvyRk/sz4o5d6yDWWb4/AdkqVWGkzyymIKDkJM7iVk1kxKVvd2iu rRA9NwDLJEOpkq8AytCkQJ4YKxtTtilNdtBQparxwIOr/XDB7UaIGG+ZU7G9dSy+ JTwha6tUDh6WCxoDHhguQaFTHHcLjCmXPx9XYWHP8QvwpPs7DVnfA1Dm0Moz8Arz 8cbtUPLkHKnQDPWNXLGyLylPDV06AsFEaEsLXm5dckkzL/+Oa/KmG75melkWsZy3 4HT/jM5loyEX2TGlxgDBXZD7mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMydbTGQ aQ8L/rGLMbl1Rgns8F28MB8GA1UdIwQYMBaAFMQm1CZABnZVWXPf7eTrJkS+7Shz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DMUY3MzA3MjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2RsVlpjOV90NU9zbVJMN3RL SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DMUY3MzA3MjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2Rs VlpjOV90NU9zbVJMN3RLSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4ZJwc91phnsR/29sql5Gqz6jqdFYV2JS6jEkNdYxMn3HNijySeqfIECg7Sv7 7EJsWM5uvwZbtR2easU0pMV2VvZaAvdez0I35hiVocjTwWDNsFMJPXTdhdtawngn 3XpnCsmlRZLgieEM4UZelWcc6t4Mxb65EG+9i4DlJPX38zBRQrJgyZKDxQmQ11ym TrCMg5qUrdQK0lup+PxGiS28eskDHFH6ruE5gOcBgt+8vy1HFjIRVM+TRHBGsahI wuhCiWIg9vLMvuEGIFgX8a8ucUA23ucyrPe/LBVjQYrLputYG8OW3XBcojgLY74N EFtxhpCFttkS3KgT9QxgoZaqnA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:39 2026 by rpki-client