$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft File: XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json) Hash identifier: rohWz7PIJmjoH58BW+7qJ0RCb/rhtkaAxyWEBCpjflQ= Subject key identifier: 28:58:DD:27:91:2D:03:E4:E9:6F:BF:E0:DF:55:D4:09:64:DF:A8:15 Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB Certificate issuer: /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft Manifest number: 35 Signing time: Wed 25 Mar 2026 07:48:34 +0000 Manifest this update: Wed 25 Mar 2026 07:48:34 +0000 Manifest next update: Wed 01 Apr 2026 07:48:34 +0000 Files and hashes: 1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: efz7ELYlzDot6Wxlf5NY9NhGC8zoFKq5AL8HRarOz2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB Validity Not Before: Mar 25 07:48:34 2026 GMT Not After : Apr 1 07:48:34 2026 GMT Subject: CN=69c39352-70a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:04:93:74:95:12:07:a8:08:6e:4b:9e:8b: 15:58:8a:9d:0f:63:54:3b:e6:24:fd:60:5d:73:27: 89:b0:66:c4:04:08:a6:6f:4d:b9:60:46:85:79:a9: 54:c7:d7:41:b7:d3:dd:02:10:0f:ae:b7:67:0d:0b: 8b:51:71:ce:fd:b0:2a:64:95:67:41:4a:93:a5:fd: 52:9b:b8:94:19:5e:e8:e8:aa:3d:f5:49:16:f5:7c: c6:97:9d:14:59:59:22:df:12:61:cf:22:bf:c7:4b: c1:4b:cc:b8:38:b4:10:f7:32:e1:41:e3:13:b2:96: ec:35:5b:a5:96:a5:16:7b:a1:c9:f8:98:79:09:24: 74:92:ae:d7:a1:2f:53:c1:16:e6:e5:59:b7:12:19: 17:ef:5c:5b:bc:b0:28:14:36:46:f8:09:ec:69:78: 2e:d0:7c:b7:8f:4b:74:7b:ec:29:24:8d:67:04:bf: d1:cb:92:4b:73:cf:41:30:ac:2f:19:ec:51:5e:e5: 6a:0f:34:80:a5:26:22:d4:19:4e:af:a8:6b:56:4b: 82:55:d7:de:d5:96:ee:0d:ab:97:b1:4c:f1:5c:d2: fd:2e:a5:0a:2c:5b:53:90:34:a5:59:33:a0:8d:cc: bc:2e:3c:47:29:80:53:c8:bf:20:6c:60:0c:14:c8: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:58:DD:27:91:2D:03:E4:E9:6F:BF:E0:DF:55:D4:09:64:DF:A8:15 X509v3 Authority Key Identifier: keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:55:1b:86:a4:8a:e2:3e:c6:de:83:9f:06:c6:92:ad:53:a9: a1:97:e9:68:42:b9:e8:e6:6c:53:87:49:a4:db:b6:29:5b:8e: fb:73:d6:04:9a:0d:88:06:68:7a:3d:90:42:09:ec:c2:71:e3: 3b:4f:52:56:4c:2a:21:a3:b4:ca:e1:ed:87:48:2f:85:da:1e: a2:60:2c:d2:80:f3:c4:d7:77:e3:cb:f6:61:df:7e:61:45:46: 1f:8d:99:10:16:65:be:e9:dc:40:9a:44:65:65:36:00:ce:4e: 32:8f:77:53:87:b7:bf:5a:50:69:6d:28:0a:45:ec:8f:1c:b4: c1:bf:40:6e:7c:4f:11:9d:ac:f4:93:92:d7:6c:2f:11:d6:b3: e9:2a:00:05:82:c9:cb:1c:2f:d0:f8:37:34:a5:6b:0e:de:5b: 13:b7:b9:60:6b:a5:18:ef:d8:23:2d:76:98:0a:87:7b:c5:cb: b0:69:32:26:65:34:82:2d:2c:30:20:ad:d4:f9:c5:b9:e1:71: ed:9f:52:08:20:58:fa:13:a0:4b:84:1f:ce:22:ab:49:3a:6b: 54:c7:db:45:c7:aa:57:1e:a2:70:46:e4:63:01:74:1a:67:cc: cf:bb:f7:b1:28:a8:27:1b:d4:a7:f9:36:07:0d:b6:2f:9a:8d: 2b:20:85:05 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MkI5ODExMC8GA1UEBRMoNUMwM0M2QzlDNzI2RkYzRDIwMjc0NzBBMThBMEM4ODIy MkVDNjZGQjAeFw0yNjAzMjUwNzQ4MzRaFw0yNjA0MDEwNzQ4MzRaMBgxFjAUBgNV BAMTDTY5YzM5MzUyLTcwYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz2ASTdJUSB6gIbkueixVYip0PY1Q75iT9YF1zJ4mwZsQECKZvTblgRoV5qVTH 10G3090CEA+ut2cNC4tRcc79sCpklWdBSpOl/VKbuJQZXujoqj31SRb1fMaXnRRZ WSLfEmHPIr/HS8FLzLg4tBD3MuFB4xOyluw1W6WWpRZ7ocn4mHkJJHSSrtehL1PB FublWbcSGRfvXFu8sCgUNkb4CexpeC7QfLePS3R77CkkjWcEv9HLkktzz0EwrC8Z 7FFe5WoPNIClJiLUGU6vqGtWS4JV197Vlu4Nq5exTPFc0v0upQosW1OQNKVZM6CN zLwuPEcpgFPIvyBsYAwUyISPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKFjdJ5Et A+Tpb7/g31XUCWTfqBUwHwYDVR0jBBgwFoAUXAPGyccm/z0gJ0cKGKDIgiLsZvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyQjk4LzIzOUNBMjBFREM5 MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3owZ0owY0tHS0RJZ2lMc1p2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEFQR3ljY21fejBnSjBjS0dLRElnaUxzWnZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy Qjk4LzIzOUNBMjBFREM5MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3ow Z0owY0tHS0RJZ2lMc1p2cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCXVRuGpIriPsbeg58GxpKtU6mhl+loQrno5mxTh0mk27YpW477c9YEmg2IBmh6 PZBCCezCceM7T1JWTCoho7TK4e2HSC+F2h6iYCzSgPPE13fjy/Zh335hRUYfjZkQ FmW+6dxAmkRlZTYAzk4yj3dTh7e/WlBpbSgKReyPHLTBv0BufE8Rnaz0k5LXbC8R 1rPpKgAFgsnLHC/Q+Dc0pWsO3lsTt7lga6UY79gjLXaYCod7xcuwaTImZTSCLSww IK3U+cW54XHtn1IIIFj6E6BLhB/OIqtJOmtUx9tFx6pXHqJwRuRjAXQaZ8zPu/ex KKgnG9Sn+TYHDbYvmo0rIIUF -----END CERTIFICATE-----Generated at Thu Mar 26 20:22:41 2026 by rpki-client