$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: ObexpyzENlRZ7W4c8bnwIJRq65vddzY/Q0DHYP8k4s8= Subject key identifier: AE:93:49:E4:67:64:0F:A5:8E:BE:DD:72:04:CF:15:0E:02:A6:E2:31 Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 085F Signing time: Tue 24 Mar 2026 20:31:13 +0000 Manifest this update: Tue 24 Mar 2026 20:31:12 +0000 Manifest next update: Tue 31 Mar 2026 20:31:12 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: Fjh4q2ajk0LAPaVRASxWJn75L5rWwya2zikPXXKvNNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Mar 24 20:31:12 2026 GMT Not After : Mar 31 20:31:12 2026 GMT Subject: CN=69c2f491-3925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:dd:52:bd:0d:0f:41:dc:46:4f:66:2c:89: 7d:ee:1f:e9:1e:04:0f:28:da:7f:1b:b6:e4:6a:bb: b8:79:f5:67:eb:4f:2a:81:46:7c:c7:06:46:4e:c6: 6c:04:98:3a:fe:f4:bc:57:2a:22:1f:83:12:9c:3a: 1b:71:7c:eb:b4:8c:4b:00:21:22:14:90:df:39:24: 3c:f4:3f:8a:49:d4:ef:f5:f3:2d:e6:94:8d:d9:f3: 07:2c:54:5f:ed:16:7f:14:db:15:eb:80:98:38:a0: 76:b8:7b:4e:3f:c3:05:6d:2c:f4:d1:02:58:81:ee: 37:6b:df:b1:7b:18:68:a1:6d:f9:3e:99:7c:8e:6f: 92:e6:57:e9:8a:e0:6c:bf:33:31:f6:46:23:00:b7: 06:2e:e4:39:f2:d7:76:88:e7:93:02:3c:67:e8:eb: ba:9e:99:6a:46:ef:f5:e0:18:e1:7c:80:fa:f2:05: e6:e4:68:c0:c1:6b:16:af:9c:16:d8:49:05:6f:9c: ae:66:1d:12:c6:b5:46:e3:a2:13:e9:3d:4e:11:9a: 47:e6:20:eb:7d:a2:43:0b:e0:a3:30:84:f0:9c:70: b0:3e:f5:91:a1:e0:ee:fb:a5:73:64:0d:06:76:12: 3a:67:61:9c:43:08:bb:0f:bf:71:e5:cc:1b:03:62: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:93:49:E4:67:64:0F:A5:8E:BE:DD:72:04:CF:15:0E:02:A6:E2:31 X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:02:85:16:82:0f:26:d9:a6:36:7c:65:7d:80:02:06:a4:18: 0b:f9:c5:6a:6a:d6:e2:9e:37:c2:b9:39:25:f0:ba:4e:55:33: ae:56:f1:c8:6f:67:cb:c0:88:a1:27:45:6f:ff:5b:59:f4:82: 03:f3:42:21:2b:b6:14:51:52:d6:6d:15:37:6d:a5:bb:86:b3: e3:d1:2d:be:ec:f7:10:88:24:3c:24:55:63:fc:3e:c9:a0:6b: aa:a9:f8:e1:25:63:d3:51:ab:3c:c8:82:7e:2b:c4:c1:78:9f: 81:2e:5a:23:3f:4e:a6:d9:35:bb:c2:53:51:18:b3:48:ce:d7: a5:a0:48:87:3b:05:47:c9:2d:47:c5:1d:cf:10:85:20:5d:3c: 03:4b:48:fa:45:72:f5:21:92:de:bb:f0:cd:e0:4c:75:77:9f: 85:ce:7c:3c:65:62:09:7b:51:16:56:7e:df:8c:69:03:3d:1a: df:b1:5a:6d:5c:fa:6d:44:25:53:44:ef:89:82:75:df:f9:39: e7:05:f5:93:fb:59:d6:1c:bb:34:a2:d1:ef:dc:d8:41:7c:bf: 23:d1:18:36:ce:5b:0d:35:b3:98:9e:6d:83:f4:a1:0f:20:f8: 9a:21:77:e4:f0:ec:5a:0d:a9:73:58:1f:77:61:71:cf:05:24: 60:ef:16:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjYwMzI0MjAzMTEyWhcNMjYwMzMxMjAzMTEyWjAYMRYwFAYD VQQDEw02OWMyZjQ5MS0zOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HvdUr0ND0HcRk9mLIl97h/pHgQPKNp/G7bkaru4efVn608qgUZ8xwZGTsZs BJg6/vS8VyoiH4MSnDobcXzrtIxLACEiFJDfOSQ89D+KSdTv9fMt5pSN2fMHLFRf 7RZ/FNsV64CYOKB2uHtOP8MFbSz00QJYge43a9+xexhooW35Ppl8jm+S5lfpiuBs vzMx9kYjALcGLuQ58td2iOeTAjxn6Ou6nplqRu/14BjhfID68gXm5GjAwWsWr5wW 2EkFb5yuZh0SxrVG46IT6T1OEZpH5iDrfaJDC+CjMITwnHCwPvWRoeDu+6VzZA0G dhI6Z2GcQwi7D79x5cwbA2I5+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK6TSeRn ZA+ljr7dcgTPFQ4CpuIxMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEgKFFoIPJtmmNnxlfYACBqQYC/nFamrW4p43wrk5JfC6TlUzrlbxyG9ny8CI oSdFb/9bWfSCA/NCISu2FFFS1m0VN22lu4az49Etvuz3EIgkPCRVY/w+yaBrqqn4 4SVj01GrPMiCfivEwXifgS5aIz9Optk1u8JTURizSM7XpaBIhzsFR8ktR8UdzxCF IF08A0tI+kVy9SGS3rvwzeBMdXefhc58PGViCXtRFlZ+34xpAz0a37FabVz6bUQl U0TviYJ13/k55wX1k/tZ1hy7NKLR79zYQXy/I9EYNs5bDTWzmJ5tg/ShDyD4miF3 5PDsWg2pc1gfd2FxzwUkYO8WNw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:55 2026 by rpki-client