$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: SMgesCNWEeAL5D15txH0rs0lYhfJ/8EkCViHcfEkhYE= Subject key identifier: A6:84:69:7B:E5:3F:8D:F5:51:DB:1F:F7:53:F4:E2:D4:47:8E:90:7F Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 04FF Signing time: Fri 27 Mar 2026 00:59:44 +0000 Manifest this update: Fri 27 Mar 2026 00:59:44 +0000 Manifest next update: Fri 03 Apr 2026 00:59:44 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: 4BTgqtueuhoQaumZ4vtimjGO3VKyPHg8wQcBgI6LaWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Mar 27 00:59:44 2026 GMT Not After : Apr 3 00:59:44 2026 GMT Subject: CN=69c5d680-8c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:cf:40:34:73:c0:63:73:18:e2:e1:be:c1: 2d:26:23:98:4b:d9:0c:7f:4b:92:b2:ac:75:0e:71: 1d:07:e3:6b:29:1b:ae:a9:de:9d:53:7c:b6:d4:ec: 36:08:29:bb:fe:bb:4c:3b:b8:45:dd:76:1f:30:7a: 93:70:0a:49:6f:1e:e5:a5:e6:55:b1:57:64:69:59: fe:61:c6:81:af:ad:d1:f4:d0:c2:c7:b8:e9:7c:73: ee:3b:52:0a:dd:f0:04:2f:8f:34:34:3d:10:00:17: ab:27:92:0b:c0:f9:f7:f3:71:be:19:4f:e2:0e:8d: ef:e8:39:2f:d0:f6:9b:4d:88:07:b4:f4:d0:4e:aa: f8:2c:21:df:5f:12:c5:81:3c:27:f4:2c:6f:06:e2: cf:4d:63:ad:2d:c4:de:1f:73:05:bc:2f:b6:66:f1: 23:68:ed:5f:19:dc:a5:6f:ba:44:10:c5:51:94:2f: 69:d0:9b:af:a0:39:00:1e:0e:3e:b6:63:84:e3:eb: 4e:04:99:f8:02:7c:3e:50:2b:35:3e:6e:3b:8e:c2: 6a:8a:d4:99:70:51:21:4a:06:ab:1d:62:03:5c:b1: 62:db:21:2d:89:a1:eb:8a:77:33:bc:df:4e:c2:2b: 06:7f:f3:16:7a:a4:06:4c:fa:b7:4f:7c:1d:57:bc: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:84:69:7B:E5:3F:8D:F5:51:DB:1F:F7:53:F4:E2:D4:47:8E:90:7F X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:14:28:7b:54:fa:4a:61:e3:bf:62:fc:f4:f2:f4:5f:e1:d3: 8f:73:3d:77:ca:a1:d8:d2:ed:9b:78:20:cc:d1:63:25:e1:64: ed:e2:ca:ca:85:12:ec:73:75:5c:6f:67:16:ce:2b:69:a5:99: c2:dd:e5:f8:07:82:a6:01:96:34:fe:f7:28:ac:db:de:e5:34: 8f:b6:f2:3a:9a:dc:83:29:b1:1a:59:94:61:6e:15:f8:d2:1f: 60:ea:e8:02:8f:8a:0a:db:2f:f0:1b:fb:c9:dd:ad:50:3d:64: b3:47:9d:f4:a6:b4:eb:22:3b:10:41:b0:5b:4a:8e:2c:0c:f5: 8c:8d:dd:a8:14:81:16:e5:3e:81:a6:2f:7b:c7:ae:09:d4:20: c1:c1:5c:d8:17:3f:f3:9d:8e:85:a2:03:a5:1d:87:87:1f:28: 35:43:f3:64:1e:ff:6b:0e:a7:b9:a4:b7:0b:fe:4e:3b:68:c3: c2:c6:56:8b:1a:c6:d2:f8:4f:d5:9a:58:72:8b:75:81:c9:4a: bf:b0:0f:b4:78:d4:2f:88:2e:33:a2:ff:11:b5:4a:93:8f:7e: 5b:4c:01:05:a1:d6:fe:39:d5:15:08:39:aa:64:48:c4:e1:bd: 30:03:d0:bc:08:6a:af:ac:c7:ad:13:e0:5e:b4:fe:6b:2d:af: 37:02:c3:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjYwMzI3MDA1OTQ0WhcNMjYwNDAzMDA1OTQ0WjAYMRYwFAYD VQQDEw02OWM1ZDY4MC04YzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3vPQDRzwGNzGOLhvsEtJiOYS9kMf0uSsqx1DnEdB+NrKRuuqd6dU3y21Ow2 CCm7/rtMO7hF3XYfMHqTcApJbx7lpeZVsVdkaVn+YcaBr63R9NDCx7jpfHPuO1IK 3fAEL480ND0QABerJ5ILwPn383G+GU/iDo3v6Dkv0PabTYgHtPTQTqr4LCHfXxLF gTwn9CxvBuLPTWOtLcTeH3MFvC+2ZvEjaO1fGdylb7pEEMVRlC9p0JuvoDkAHg4+ tmOE4+tOBJn4Anw+UCs1Pm47jsJqitSZcFEhSgarHWIDXLFi2yEtiaHrinczvN9O wisGf/MWeqQGTPq3T3wdV7yQFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaEaXvl P431Udsf91P04tRHjpB/MB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAARQoe1T6SmHjv2L89PL0X+HTj3M9d8qh2NLtm3ggzNFjJeFk7eLKyoUS7HN1 XG9nFs4raaWZwt3l+AeCpgGWNP73KKzb3uU0j7byOprcgymxGlmUYW4V+NIfYOro Ao+KCtsv8Bv7yd2tUD1ks0ed9Ka06yI7EEGwW0qOLAz1jI3dqBSBFuU+gaYve8eu CdQgwcFc2Bc/852OhaIDpR2Hhx8oNUPzZB7/aw6nuaS3C/5OO2jDwsZWixrG0vhP 1ZpYcot1gclKv7APtHjUL4guM6L/EbVKk49+W0wBBaHW/jnVFQg5qmRIxOG9MAPQ vAhqr6zHrRPgXrT+ay2vNwLDKw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:18:48 2026 by rpki-client