$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: wrloilsGypofbCoxQddkXNHIJImVQVe/w37flnpbDsc= Subject key identifier: 64:D0:46:AF:8F:3F:36:49:3B:66:20:89:17:5F:AD:B3:60:88:78:61 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0283 Signing time: Wed 25 Mar 2026 01:16:19 +0000 Manifest this update: Wed 25 Mar 2026 01:16:19 +0000 Manifest next update: Wed 01 Apr 2026 01:16:19 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: /2NhIwWr4ejlc4fwkDuqdy4WF/rOqrTuBH9wTHukRic=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: SV+bZOpveaF6gRb1xTwAjvC4Ahc21Acwt2F034JPZjM=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 0JBG3JjfF5NTvz1BrXwe7qxV2dsEYREu6KbN96r4FFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Mar 25 01:16:19 2026 GMT Not After : Apr 1 01:16:19 2026 GMT Subject: CN=69c33763-0d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:b4:43:3f:4a:61:dc:23:d2:48:ea:f5:66: 54:16:a7:0f:dd:8a:b5:0c:bb:7a:54:9b:cf:ba:f3: be:b1:ca:98:d0:1f:52:98:2e:6d:8e:04:c3:51:e8: 00:67:81:e8:05:91:a8:15:ea:d5:d5:fc:75:b8:bc: bd:cb:60:8f:64:d4:77:7a:3b:f4:60:ca:e5:70:c6: 94:46:72:e4:83:8a:7f:39:e5:12:e9:d1:3e:e3:75: 8a:7b:e7:ab:15:16:b8:97:24:e9:f5:95:d8:00:03: 3a:64:02:30:f0:c9:6c:be:0b:36:fd:5f:fc:15:1c: 00:f1:ec:01:5e:39:ed:cc:82:d6:ac:dc:9f:b5:95: 27:85:62:6f:e0:97:76:f3:87:11:33:40:d1:18:ee: d3:4a:2d:0a:07:66:fb:1f:b8:90:06:46:3f:c8:df: 0c:0b:0c:a7:90:72:2b:39:73:c6:7a:8f:72:a6:ab: f6:72:62:a9:63:8e:91:3d:01:9e:b8:46:69:d0:c1: 0e:3a:c2:8e:95:12:01:79:5c:81:a9:be:9d:da:54: 1c:6b:57:db:a5:4c:5d:20:b1:2b:57:e7:3b:d8:f5: ff:ea:32:57:c0:3d:de:08:a6:f6:78:06:9e:d2:55: 6e:30:ba:4f:52:64:9b:47:1c:9d:44:31:fa:8a:e8: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D0:46:AF:8F:3F:36:49:3B:66:20:89:17:5F:AD:B3:60:88:78:61 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:da:7a:b0:7b:e8:0f:50:fe:75:fe:45:f3:9e:47:76:f3:c4: 37:22:2f:1a:fe:36:1e:67:4b:38:98:17:e7:93:88:bc:7d:74: 08:c3:ee:3f:9c:aa:1f:4a:cf:b5:de:12:de:93:2f:75:2c:74: 4c:00:6e:6c:b6:98:f0:f2:08:72:0f:66:80:8f:88:8f:b3:5f: 0c:fb:36:7e:bc:bb:ad:e5:5f:38:b5:3b:09:b7:63:69:84:18: 4a:55:ff:0e:af:76:29:78:04:5a:b3:27:49:a8:de:55:b6:ce: e6:fe:0e:74:3f:de:26:32:ac:94:95:6a:4d:e9:f9:44:26:59: 7c:54:18:f2:c5:26:e8:42:c2:6e:48:6c:8c:82:6b:43:53:10: 9e:35:92:a5:cf:3e:fe:65:26:aa:29:f6:b2:b4:20:d4:7a:c9: 34:62:c6:3b:ca:dc:8c:01:34:3c:2e:8f:78:a7:6a:a9:43:ad: 18:f7:57:76:a1:90:f3:42:1f:78:fb:cb:07:c9:f7:a1:ab:b4: 34:52:2f:76:1a:41:68:ca:ea:0e:d3:a6:4c:d2:7f:d6:8d:73: fb:d5:7f:37:1b:37:9d:fa:84:41:78:98:67:d2:ad:65:ae:94: 7d:0f:38:3b:b2:fa:a0:47:76:a5:60:b7:1a:b3:e4:59:44:43: b5:2b:a6:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjYwMzI1MDExNjE5WhcNMjYwNDAxMDExNjE5WjAYMRYwFAYD VQQDEw02OWMzMzc2My0wZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDK0Qz9KYdwj0kjq9WZUFqcP3Yq1DLt6VJvPuvO+scqY0B9SmC5tjgTDUegA Z4HoBZGoFerV1fx1uLy9y2CPZNR3ejv0YMrlcMaURnLkg4p/OeUS6dE+43WKe+er FRa4lyTp9ZXYAAM6ZAIw8Mlsvgs2/V/8FRwA8ewBXjntzILWrNyftZUnhWJv4Jd2 84cRM0DRGO7TSi0KB2b7H7iQBkY/yN8MCwynkHIrOXPGeo9ypqv2cmKpY46RPQGe uEZp0MEOOsKOlRIBeVyBqb6d2lQca1fbpUxdILErV+c72PX/6jJXwD3eCKb2eAae 0lVuMLpPUmSbRxydRDH6iuiyrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTQRq+P PzZJO2YgiRdfrbNgiHhhMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkNp6sHvoD1D+df5F855HdvPENyIvGv42HmdLOJgX55OIvH10CMPuP5yqH0rP td4S3pMvdSx0TABubLaY8PIIcg9mgI+Ij7NfDPs2fry7reVfOLU7CbdjaYQYSlX/ Dq92KXgEWrMnSajeVbbO5v4OdD/eJjKslJVqTen5RCZZfFQY8sUm6ELCbkhsjIJr Q1MQnjWSpc8+/mUmqin2srQg1HrJNGLGO8rcjAE0PC6PeKdqqUOtGPdXdqGQ80If ePvLB8n3oau0NFIvdhpBaMrqDtOmTNJ/1o1z+9V/Nxs3nfqEQXiYZ9KtZa6UfQ84 O7L6oEd2pWC3GrPkWURDtSum+w== -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:07 2026 by rpki-client