$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: Q4EEDZryhqJBpA2lTIVXP1qNe58WKtAfGb6chECnGY8= Subject key identifier: F4:44:43:5E:EE:26:1E:37:CD:8E:DC:2A:65:A1:14:95:C3:B8:AB:10 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A9F Signing time: Tue 24 Mar 2026 19:19:13 +0000 Manifest this update: Tue 24 Mar 2026 19:19:13 +0000 Manifest next update: Tue 31 Mar 2026 19:19:13 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: +SDPOu2QUVgdSvMxFmXa7o1UNTjUEm3DHi0eHnYXNcg=) 2: 51D92BD25DD711F09B20C44DC4F9AE02.roa (hash: B4LoH4fDzrZQ9oTup1UeZM3R9476hMdyTf7ShMV4V6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Mar 24 19:19:13 2026 GMT Not After : Mar 31 19:19:13 2026 GMT Subject: CN=69c2e3b1-17d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:f6:5a:b4:13:d9:cd:56:ea:21:f6:e2:20: 6b:bf:09:a7:32:9e:55:52:72:3a:fb:72:61:8c:47: e6:d0:61:77:48:78:8b:bb:fa:ed:a7:82:01:4c:76: e5:df:e4:3a:c0:63:aa:b7:bd:6d:4d:2b:95:35:92: de:91:d7:c2:05:9a:ea:a6:6f:ed:4b:25:1b:0b:c0: b5:9e:17:f0:f7:0e:8f:07:26:64:4e:4b:be:77:df: b3:d6:33:cf:c0:3e:23:88:a9:bd:d7:70:63:6b:92: 04:e1:4d:90:7c:fb:9e:53:93:bc:f9:6a:33:3f:77: cd:91:21:f7:37:78:94:f6:75:1d:19:6b:13:f9:a5: da:92:4e:0b:fb:41:d4:71:f2:72:ec:b1:38:35:ea: 68:16:2f:a6:e5:30:06:77:90:f0:a2:72:30:95:2d: d2:0b:82:c4:04:e5:4c:18:7e:04:65:62:d2:8e:65: 83:21:09:1d:bb:cf:5e:31:2d:c5:64:b6:40:ee:71: c3:ee:19:91:6d:70:fc:f0:f3:8a:30:e4:bc:f7:ae: 4b:ab:05:4f:9a:65:40:ba:92:86:4b:cd:e2:8f:3f: 1d:2c:34:ad:74:9e:78:75:ae:4f:d9:4f:4a:a3:95: c1:b8:e8:37:04:8d:8d:f8:30:38:2a:97:3f:3c:bc: e3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:43:5E:EE:26:1E:37:CD:8E:DC:2A:65:A1:14:95:C3:B8:AB:10 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c5:7c:bd:a2:89:69:4b:68:84:5e:b1:1b:e1:e2:00:10:a0: ad:0d:fc:bb:26:38:3e:ea:bc:24:37:6b:d9:cb:55:1f:41:7c: cc:b0:1b:db:82:69:1e:c0:08:8a:b2:ff:c4:6a:2d:53:b9:d5: 55:7b:4c:c0:c2:99:fc:31:0c:78:df:1e:5c:72:f2:05:0c:e1: 20:69:69:50:e6:d6:25:fa:3f:dd:6c:d2:66:20:58:98:08:12: 02:9f:ff:76:fb:9d:64:49:b4:15:ae:ee:af:bc:ec:e7:eb:e2: 35:ea:08:4b:31:12:de:b8:97:99:c0:99:3c:75:e8:96:ed:de: f8:50:32:c8:e2:1b:d8:e1:04:5c:42:e3:3c:7e:1b:25:af:c7: 0a:e7:a3:fc:e0:73:68:12:6d:40:ff:5d:cc:c0:8f:fe:6e:ad: 91:95:77:4f:54:ac:14:12:dd:3a:c1:ed:e7:64:e4:2f:9d:a5: 7d:68:21:c3:64:eb:1e:85:1a:fb:19:17:cc:c9:22:c0:a2:e5: 56:73:1f:96:10:0e:36:a5:fe:06:47:18:4b:8e:8e:c0:93:b1: b6:b3:63:cb:40:54:43:3d:a3:67:01:52:1f:29:9d:3b:7e:8f: 89:a1:36:1b:d4:2d:63:14:36:de:6b:ac:2d:f1:39:34:a8:ab: 4f:b7:47:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjYwMzI0MTkxOTEzWhcNMjYwMzMxMTkxOTEzWjAYMRYwFAYD VQQDEw02OWMyZTNiMS0xN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0v2WrQT2c1W6iH24iBrvwmnMp5VUnI6+3JhjEfm0GF3SHiLu/rtp4IBTHbl 3+Q6wGOqt71tTSuVNZLekdfCBZrqpm/tSyUbC8C1nhfw9w6PByZkTku+d9+z1jPP wD4jiKm913Bja5IE4U2QfPueU5O8+WozP3fNkSH3N3iU9nUdGWsT+aXakk4L+0HU cfJy7LE4NepoFi+m5TAGd5DwonIwlS3SC4LEBOVMGH4EZWLSjmWDIQkdu89eMS3F ZLZA7nHD7hmRbXD88POKMOS8965LqwVPmmVAupKGS83ijz8dLDStdJ54da5P2U9K o5XBuOg3BI2N+DA4Kpc/PLzjJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPREQ17u Jh43zY7cKmWhFJXDuKsQMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAncV8vaKJaUtohF6xG+HiABCgrQ38uyY4Puq8JDdr2ctVH0F8zLAb24JpHsAI irL/xGotU7nVVXtMwMKZ/DEMeN8eXHLyBQzhIGlpUObWJfo/3WzSZiBYmAgSAp// dvudZEm0Fa7ur7zs5+viNeoISzES3riXmcCZPHXolu3e+FAyyOIb2OEEXELjPH4b Ja/HCuej/OBzaBJtQP9dzMCP/m6tkZV3T1SsFBLdOsHt52TkL52lfWghw2TrHoUa +xkXzMkiwKLlVnMflhAONqX+BkcYS46OwJOxtrNjy0BUQz2jZwFSHymdO36PiaE2 G9QtYxQ23musLfE5NKirT7dH3w== -----END CERTIFICATE-----Generated at Thu Mar 26 20:47:02 2026 by rpki-client