$ rpki-client -vvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft File: xh7aKdRphAjI5WdDhpTVNnJaEn0.mft (raw, json) Hash identifier: VGYhzpmJ1RPlLBhdIn6VApGBJdsRSK88CAi7C5oZosw= Subject key identifier: 32:9D:B4:60:65:01:89:C5:DA:29:B5:BC:7B:41:DE:1A:89:6C:DC:39 Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D Certificate issuer: /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft Manifest number: 19 Signing time: Wed 25 Mar 2026 08:09:37 +0000 Manifest this update: Wed 25 Mar 2026 08:09:36 +0000 Manifest next update: Wed 01 Apr 2026 08:09:36 +0000 Files and hashes: 1: xh7aKdRphAjI5WdDhpTVNnJaEn0.crl (hash: T3BbS4rdWNPgVJpNfJAjq0mUxy0zh4La5rkvQa7F1Nk=) 2: 7FA6A66E072511F18DD83FDE2B3D8C67.roa (hash: Yle2np8VHG9XuuKa/Zf8owqSx1f8Kx45AoedIOUz9Gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D Validity Not Before: Mar 25 08:09:36 2026 GMT Not After : Apr 1 08:09:36 2026 GMT Subject: CN=69c39841-cbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:a8:40:06:f7:53:f4:1c:b4:5e:78:4f:3a: 9d:bc:55:81:0c:d2:06:67:28:16:41:5e:c5:ca:59: 6a:2f:3e:5d:1d:5d:7e:d0:02:3a:ed:5c:93:09:03: 69:ff:52:9d:ae:0b:e0:9f:e4:7d:c5:7d:80:df:68: 3d:cb:b5:3d:89:45:32:5b:78:00:cb:0e:af:83:4e: ef:f4:f2:32:0b:a8:7f:bf:49:ac:09:b6:f7:5e:d9: d3:fb:d1:ea:5e:9b:ac:c6:46:a7:e2:ac:7a:8b:09: e5:a5:ad:49:ac:c5:d1:bd:ca:b0:57:0c:d6:23:d2: b6:19:15:4d:68:83:71:3a:c7:6f:d7:da:ca:f8:7c: 24:72:f0:87:42:f1:5e:52:19:dc:9c:f1:97:71:f8: b7:68:f6:0f:7a:74:d2:9b:74:08:c8:ec:c6:af:eb: 51:8c:ae:4b:6c:44:93:03:6b:28:c0:d7:b5:99:8f: 4b:d5:b7:a9:70:3d:7d:8f:d6:16:fc:d2:31:0e:09: 5a:a8:7e:0e:d0:ce:c8:f6:18:f2:3c:79:3b:91:8c: a3:0b:f2:d1:95:b3:55:f7:9d:d2:f1:e0:ae:9f:d1: ae:01:be:91:4f:19:2a:89:2f:bf:1f:91:b2:d5:b2: 56:20:6c:60:fa:07:c8:7a:a3:cd:69:a5:a5:25:39: 6c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9D:B4:60:65:01:89:C5:DA:29:B5:BC:7B:41:DE:1A:89:6C:DC:39 X509v3 Authority Key Identifier: keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ec:73:55:cc:50:fe:01:c9:aa:be:ad:3f:27:8e:d3:af:10: e1:98:aa:44:8c:9b:d8:93:59:0f:6c:5a:c9:fb:97:8b:ef:87: 14:02:55:c7:3f:2f:00:f5:2f:be:96:f8:c9:af:fa:96:ec:73: 30:3c:02:6b:d0:dc:b2:2a:cb:76:0f:b2:e8:ee:9c:1a:35:58: 55:72:53:cd:07:8a:44:c1:7b:18:3e:ea:b9:ee:41:92:16:c0: a8:e2:4a:93:1c:25:6a:cf:f9:31:f6:c0:8d:a3:aa:b3:ee:26: 87:7b:90:8b:71:85:3d:99:78:75:78:1f:f6:cd:86:15:ff:9f: 36:eb:c6:11:ad:d0:98:31:9e:1d:ad:8c:87:61:f8:47:7a:d7: 60:90:8f:cf:7c:ec:dd:7f:1c:cb:b7:d7:c4:07:c5:ef:d8:b5: 95:07:aa:d7:1e:a1:93:e0:24:33:ea:a4:90:b7:f2:7f:02:f0: 92:61:ef:cf:3d:28:22:4c:ed:b1:65:23:c5:ec:37:f2:0b:7e: 90:37:0c:48:c1:c1:4b:60:65:fc:fa:d8:33:d8:31:5e:67:57: ae:4f:c4:ea:49:24:69:5e:90:96:ca:99:75:08:45:0e:bc:82: 7d:9e:fc:ae:d8:bd:ea:96:cd:de:4d:60:2a:ca:e0:d0:d6:2d: 52:05:1d:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTY2RjExMC8GA1UEBRMoQzYxRURBMjlENDY5ODQwOEM4RTU2NzQzODY5NEQ1MzY3 MjVBMTI3RDAeFw0yNjAzMjUwODA5MzZaFw0yNjA0MDEwODA5MzZaMBgxFjAUBgNV BAMTDTY5YzM5ODQxLWNiZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuTKhABvdT9By0XnhPOp28VYEM0gZnKBZBXsXKWWovPl0dXX7QAjrtXJMJA2n/ Up2uC+Cf5H3FfYDfaD3LtT2JRTJbeADLDq+DTu/08jILqH+/SawJtvde2dP70epe m6zGRqfirHqLCeWlrUmsxdG9yrBXDNYj0rYZFU1og3E6x2/X2sr4fCRy8IdC8V5S Gdyc8Zdx+Ldo9g96dNKbdAjI7Mav61GMrktsRJMDayjA17WZj0vVt6lwPX2P1hb8 0jEOCVqofg7Qzsj2GPI8eTuRjKML8tGVs1X3ndLx4K6f0a4BvpFPGSqJL78fkbLV slYgbGD6B8h6o81ppaUlOWyXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMp20YGUB icXaKbW8e0HeGols3DkwHwYDVR0jBBgwFoAUxh7aKdRphAjI5WdDhpTVNnJaEn0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjZGLzdFMjI5MDE2MDcy MzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFqSTVXZERocFRWTm5KYUVu MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveGg3YUtkUnBoQWpJNVdkRGhwVFZObkphRW4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 NjZGLzdFMjI5MDE2MDcyMzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFq STVXZERocFRWTm5KYUVuMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAW7HNVzFD+Acmqvq0/J47TrxDhmKpEjJvYk1kPbFrJ+5eL74cUAlXHPy8A9S++ lvjJr/qW7HMwPAJr0NyyKst2D7Lo7pwaNVhVclPNB4pEwXsYPuq57kGSFsCo4kqT HCVqz/kx9sCNo6qz7iaHe5CLcYU9mXh1eB/2zYYV/58268YRrdCYMZ4drYyHYfhH etdgkI/PfOzdfxzLt9fEB8Xv2LWVB6rXHqGT4CQz6qSQt/J/AvCSYe/PPSgiTO2x ZSPF7DfyC36QNwxIwcFLYGX8+tgz2DFeZ1euT8TqSSRpXpCWypl1CEUOvIJ9nvyu 2L3qls3eTWAqyuDQ1i1SBR1A -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:31 2026 by rpki-client