$ rpki-client -vvf rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft File: xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft (raw, json) Hash identifier: aqLSh8q41hnMSH4UUKwopjuj4E8mTkjKr54OECPwkhg= Subject key identifier: 20:B4:BC:03:72:6F:50:DB:0B:A7:6F:57:73:CE:EF:0B:91:3B:F6:97 Authority key identifier: C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64 Certificate issuer: /CN=A917D488/serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft Manifest number: 46 Signing time: Fri 27 Mar 2026 07:52:07 +0000 Manifest this update: Fri 27 Mar 2026 07:52:07 +0000 Manifest next update: Fri 03 Apr 2026 07:52:07 +0000 Files and hashes: 1: xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl (hash: mpANXj6yU+86LMkeniYlsOdKDQ3V1FHXggG3wv3nW88=) 2: 038304DEC11F11F0A9F08209C4F9AE02.roa (hash: Y37EvjA3svHQwyGXd0a+TXPBLOFhRYmTcbPi/KdjSGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D488, serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64 Validity Not Before: Mar 27 07:52:07 2026 GMT Not After : Apr 3 07:52:07 2026 GMT Subject: CN=69c63727-2c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5e:f7:3e:d9:a8:2f:67:a8:2a:45:56:9f:f8: 9c:f3:4c:0c:19:7a:e9:95:58:cb:e1:f0:fe:ff:b0: 9d:e0:8f:f4:f1:47:ff:4e:5d:aa:c3:83:07:97:31: b6:46:97:04:40:6d:67:cb:86:b8:db:95:48:20:34: 75:9f:ae:a5:63:bc:aa:30:98:f7:44:0f:4a:86:5f: 60:53:ca:20:e9:7d:de:55:98:04:1c:e2:b0:23:ac: e2:2b:08:d6:c5:09:22:6a:61:8c:f1:5e:d9:ef:ae: be:ba:ca:30:83:4f:0b:30:65:0c:ec:14:b1:5b:6c: a7:62:3f:eb:69:dd:6e:67:14:91:89:1f:41:5e:74: 2c:58:3b:5a:93:6d:24:a5:5f:aa:cf:6a:6e:01:f0: 3c:e8:e0:b4:d0:01:c7:1a:3a:0a:ff:41:65:4c:22: da:eb:23:a5:57:c7:f0:75:d4:6f:80:74:52:22:68: 7e:fe:20:a1:be:25:05:66:b1:e4:44:23:4f:d6:28: 3f:ce:bf:fe:55:fb:56:17:92:01:b1:2c:9d:82:33: 51:d0:25:52:a9:61:2e:05:8d:ff:aa:9a:7f:66:ae: 7a:61:ed:78:b7:00:be:e5:86:37:8c:dd:6b:f5:94: a8:ff:ac:91:79:b4:ba:1b:17:dc:30:3f:59:86:d3: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B4:BC:03:72:6F:50:DB:0B:A7:6F:57:73:CE:EF:0B:91:3B:F6:97 X509v3 Authority Key Identifier: keyid:C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:69:a2:44:d8:a0:cb:8b:20:25:d8:5e:e9:50:7b:d2:56:2e: 96:d3:fc:e9:f9:93:43:ca:e8:b3:5c:b9:53:d8:64:b0:c6:4d: 43:7f:17:cd:66:e6:8e:a4:f7:d9:ab:8e:42:86:72:c0:53:f2: c5:ce:a2:d6:64:c8:5d:62:96:82:95:92:d7:3b:2f:73:d7:63: 8e:0c:4f:55:01:e8:18:7c:a4:3e:66:8a:c8:12:04:12:04:48: 25:d6:e3:24:85:50:95:2e:e0:25:a1:e4:52:c9:d8:c4:d1:aa: b2:c2:bd:30:24:8b:ae:2c:c9:96:d2:2b:2f:09:12:bf:9c:b6: cd:87:a1:69:b3:1b:ae:51:6d:4c:a1:9c:ab:e3:a0:26:29:b5: 49:8c:f7:a5:c0:f6:ce:65:3f:54:c8:5b:cb:59:84:d4:7c:5b: 2b:69:08:45:dd:9e:d9:8e:98:f8:6a:3d:43:57:c6:23:61:ce: 07:1b:9a:79:f6:25:18:1b:49:a6:cb:ff:6b:e8:9a:b6:78:6c: 2d:eb:db:4a:75:19:8f:48:2e:7e:86:bb:6d:b6:cd:c2:0d:16: d2:25:91:4b:f8:13:93:d1:b7:0a:1a:36:81:63:82:40:7b:f9: a8:42:cf:8a:71:c9:5a:a1:ca:4b:e7:7d:9b:28:ef:e4:3e:c3: ff:ac:cd:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDQ4ODExMC8GA1UEBRMoQzQzQzhGRURBNDU1MTA1OTIyOThCNUI5NTNFMjc5RkJB Q0U0NUE2NDAeFw0yNjAzMjcwNzUyMDdaFw0yNjA0MDMwNzUyMDdaMBgxFjAUBgNV BAMTDTY5YzYzNzI3LTJjOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUXvc+2agvZ6gqRVaf+JzzTAwZeumVWMvh8P7/sJ3gj/TxR/9OXarDgweXMbZG lwRAbWfLhrjblUggNHWfrqVjvKowmPdED0qGX2BTyiDpfd5VmAQc4rAjrOIrCNbF CSJqYYzxXtnvrr66yjCDTwswZQzsFLFbbKdiP+tp3W5nFJGJH0FedCxYO1qTbSSl X6rPam4B8Dzo4LTQAccaOgr/QWVMItrrI6VXx/B11G+AdFIiaH7+IKG+JQVmseRE I0/WKD/Ov/5V+1YXkgGxLJ2CM1HQJVKpYS4Fjf+qmn9mrnph7Xi3AL7lhjeM3Wv1 lKj/rJF5tLobF9wwP1mG0xyJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUILS8A3Jv UNsLp29Xc87vC5E79pcwHwYDVR0jBBgwFoAUxDyP7aRVEFkimLW5U+J5+6zkWmQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENDg4LzhENzMzQUNBQzEx RTExRjA4RERFODc4N0M0RjlBRTAyL3hEeVA3YVJWRUZraW1MVzVVLUo1LTZ6a1dt US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveER5UDdhUlZFRmtpbUxXNVUtSjUtNnprV21RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE NDg4LzhENzMzQUNBQzExRTExRjA4RERFODc4N0M0RjlBRTAyL3hEeVA3YVJWRUZr aW1MVzVVLUo1LTZ6a1dtUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWaaJE2KDLiyAl2F7pUHvSVi6W0/zp+ZNDyuizXLlT2GSwxk1DfxfNZuaOpPfZ q45ChnLAU/LFzqLWZMhdYpaClZLXOy9z12OODE9VAegYfKQ+ZorIEgQSBEgl1uMk hVCVLuAloeRSydjE0aqywr0wJIuuLMmW0isvCRK/nLbNh6FpsxuuUW1MoZyr46Am KbVJjPelwPbOZT9UyFvLWYTUfFsraQhF3Z7Zjpj4aj1DV8YjYc4HG5p59iUYG0mm y/9r6Jq2eGwt69tKdRmPSC5+hrttts3CDRbSJZFL+BOT0bcKGjaBY4JAe/moQs+K cclaocpL532bKO/kPsP/rM3L -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:35 2026 by rpki-client