$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: jM9SIm3Ptzu3JzIXEnWxGq4RamH6N2VavDZgVU/RMbw= Subject key identifier: 44:08:1A:77:E5:9C:77:BD:BA:44:06:FD:1F:AF:76:74:45:E1:45:04 Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 020A Signing time: Wed 25 Mar 2026 02:20:02 +0000 Manifest this update: Wed 25 Mar 2026 02:20:01 +0000 Manifest next update: Wed 01 Apr 2026 02:20:01 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: Fim9PHPom59QbPxl9+6jzzdWBx6uFj+oQa40pULfCA8=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: DSwrQXXqByoPFQJXpbDE85/HMdoqbU+SR14BjY//Wvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: Mar 25 02:20:01 2026 GMT Not After : Apr 1 02:20:01 2026 GMT Subject: CN=69c34652-fdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d2:80:9c:65:8c:c7:50:3b:da:c7:74:b4:dd: db:88:66:25:40:f9:1d:8f:48:bd:3d:b2:27:4e:aa: 51:90:92:69:cd:9c:70:85:24:59:21:fb:35:d5:7d: 9d:76:ee:83:a7:20:bb:04:0e:30:f2:a8:fc:38:6b: e0:85:d6:a6:de:19:0e:6b:bf:d7:d2:3b:8d:96:d6: a6:12:6d:cd:98:44:75:07:8d:e5:fa:ec:d8:44:b9: 3f:3b:77:ef:de:2c:2e:b1:fc:d3:40:72:a6:5e:b9: 25:04:ae:07:4e:91:79:44:93:b8:1b:0f:06:a3:64: 46:c0:77:1d:4b:b1:61:be:c1:18:c6:03:cc:3f:88: 2d:36:ad:05:99:20:5c:f5:6c:87:be:e7:f3:07:a7: 97:12:b9:ee:f1:2a:a3:6c:e7:f7:0f:52:1d:ed:63: 0d:b0:a6:34:67:94:ed:bb:40:83:d8:72:e1:8b:e0: a5:d2:14:50:13:3b:98:19:c0:00:42:ec:89:b0:da: 39:ef:49:ad:42:6a:08:7d:f2:26:5c:f3:dc:2d:bc: b2:0a:2c:b3:c3:b8:05:cf:5a:10:f9:9e:19:6a:f8: 14:2f:4a:74:03:18:f3:51:a1:ec:35:db:5f:58:09: 26:b1:24:81:38:30:45:5c:53:e2:b9:db:26:c6:f0: ce:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:1A:77:E5:9C:77:BD:BA:44:06:FD:1F:AF:76:74:45:E1:45:04 X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:a3:7c:cf:27:77:f9:a6:47:06:88:b6:e2:a2:70:ff:e7:33: ae:9c:80:9e:d3:2c:98:af:58:9a:ac:1f:56:d4:e6:e5:c9:f3: 7d:da:27:88:e1:c9:cc:8a:2f:18:f7:1d:6c:e0:5c:69:68:9a: 71:5e:8d:eb:58:c2:59:e0:dc:d0:dc:45:33:77:d9:64:60:72: 4b:80:8e:14:f9:88:b1:7f:54:6d:e9:67:71:dc:99:09:df:18: 31:64:37:6f:42:dc:f8:ce:ce:9a:38:2f:6d:b4:4c:ac:d8:9d: 53:03:88:a8:8b:ff:06:56:7b:c5:a4:3f:c0:41:b0:b4:13:50: ad:de:97:8f:2b:f1:34:36:d6:af:db:bd:dc:9a:21:ff:e2:79: ee:e3:b5:10:eb:c1:0e:91:04:3b:a2:cf:59:21:50:e7:bf:c1: fe:f9:8d:d9:6f:7a:ca:2f:f2:c7:df:35:0e:e2:ee:5f:7c:e8: fb:c0:d1:ad:31:35:a7:14:ce:9d:9d:5b:28:48:83:b2:e0:87: 3f:1b:31:c6:a3:e7:0a:a2:b3:cb:40:a7:8b:b3:8b:84:a2:d5: 41:98:9e:f0:6b:f3:49:ab:71:7f:c8:9b:c4:0c:27:dc:6e:06: 04:49:bd:ee:75:bb:d2:3d:f4:d5:28:de:78:76:69:21:a3:6c: f1:5f:d4:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjYwMzI1MDIyMDAxWhcNMjYwNDAxMDIyMDAxWjAYMRYwFAYD VQQDEw02OWMzNDY1Mi1mZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi9KAnGWMx1A72sd0tN3biGYlQPkdj0i9PbInTqpRkJJpzZxwhSRZIfs11X2d du6DpyC7BA4w8qj8OGvghdam3hkOa7/X0juNltamEm3NmER1B43l+uzYRLk/O3fv 3iwusfzTQHKmXrklBK4HTpF5RJO4Gw8Go2RGwHcdS7FhvsEYxgPMP4gtNq0FmSBc 9WyHvufzB6eXErnu8SqjbOf3D1Id7WMNsKY0Z5Ttu0CD2HLhi+Cl0hRQEzuYGcAA QuyJsNo570mtQmoIffImXPPcLbyyCiyzw7gFz1oQ+Z4ZavgUL0p0AxjzUaHsNdtf WAkmsSSBODBFXFPiudsmxvDO3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQIGnfl nHe9ukQG/R+vdnRF4UUEMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANKN8zyd3+aZHBoi24qJw/+czrpyAntMsmK9YmqwfVtTm5cnzfdoniOHJzIov GPcdbOBcaWiacV6N61jCWeDc0NxFM3fZZGByS4COFPmIsX9UbelncdyZCd8YMWQ3 b0Lc+M7OmjgvbbRMrNidUwOIqIv/BlZ7xaQ/wEGwtBNQrd6XjyvxNDbWr9u93Joh /+J57uO1EOvBDpEEO6LPWSFQ57/B/vmN2W96yi/yx981DuLuX3zo+8DRrTE1pxTO nZ1bKEiDsuCHPxsxxqPnCqKzy0Cni7OLhKLVQZie8GvzSatxf8ibxAwn3G4GBEm9 7nW70j301SjeeHZpIaNs8V/U+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:46 2026 by rpki-client