$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json) Hash identifier: siQAUZzQaUHw+JgL0pxFsS69UjW2F1hiEQgkUScBHIs= Subject key identifier: 53:CC:36:EA:45:AA:2A:A8:B5:AB:82:1C:D7:AD:49:6F:9F:D0:62:35 Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft Manifest number: 0175 Signing time: Wed 25 Mar 2026 03:56:31 +0000 Manifest this update: Wed 25 Mar 2026 03:56:31 +0000 Manifest next update: Wed 01 Apr 2026 03:56:31 +0000 Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: phH5SR2400RIqoSLiaWFwjedVB9DicQevP6T3ByMp0o=) 2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: DKo1dNSY0/MC6eYJVV90BVwNV83Azf/Byd1oG5pYyiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Validity Not Before: Mar 25 03:56:31 2026 GMT Not After : Apr 1 03:56:31 2026 GMT Subject: CN=69c35cef-c52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:47:21:7c:98:af:de:a3:0e:97:13:0c:3b: 90:17:45:d9:a5:f8:28:9c:28:ea:9c:37:41:4b:b1: fe:8b:57:e3:2c:fb:5b:30:02:31:ca:1c:e3:fe:12: 2f:66:87:99:02:38:40:b0:15:5d:e0:18:8f:ed:bc: 96:75:30:f5:b2:33:fd:ba:ff:c1:50:b9:36:79:b5: 71:e5:d9:4b:13:d6:29:7a:b0:62:86:88:53:56:b9: 02:2f:61:31:fa:89:75:ce:4f:bd:13:4b:e8:74:d1: 4d:8b:1e:10:ab:51:99:a9:01:d1:d1:34:56:71:d8: e7:24:0a:4f:4a:a0:7e:ff:12:06:be:99:b5:47:aa: 57:3b:a2:71:60:0c:60:a9:6c:30:dc:d0:9a:6f:53: 1b:ec:51:3c:7c:82:b2:68:fb:02:2d:13:c9:be:cb: c9:c1:ac:eb:fb:cf:2b:82:e9:45:e5:9b:6d:6f:5d: 33:12:71:2d:88:3a:94:42:ef:76:7f:b0:cb:42:e0: ff:0a:36:25:45:c7:51:41:01:6a:ac:9f:0b:ef:82: ea:66:9e:d2:3b:4b:c4:8b:b8:33:2d:fd:1e:1f:27: 6d:a8:fb:c7:6d:16:cc:e9:29:db:05:3e:17:73:77: 80:20:73:c0:1b:3e:6a:ed:c2:0d:1d:88:71:84:63: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CC:36:EA:45:AA:2A:A8:B5:AB:82:1C:D7:AD:49:6F:9F:D0:62:35 X509v3 Authority Key Identifier: keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:fb:54:e9:d6:c1:96:13:37:6c:60:d6:1d:32:e6:be:b8:d6: 74:35:c0:ab:70:cf:f3:5b:fd:da:ef:77:7c:70:d3:b7:08:cb: 94:c8:90:16:e0:d9:6a:82:9a:92:de:a3:3d:c5:9c:2c:7e:32: 4b:6c:03:f5:3b:5f:e9:55:8c:8a:12:6f:a9:8c:c7:d9:5e:75: c2:14:7a:5e:47:a5:7b:43:34:23:67:53:9d:55:fb:b7:5b:85: e8:f2:4f:e7:bd:7a:62:e6:8a:37:64:56:45:ab:37:d6:1b:15: 1a:0a:30:63:1e:23:e5:d6:6f:c5:e4:ff:1b:d7:79:2a:c5:1a: 57:0d:2f:af:66:4f:5d:87:5b:d6:2f:13:39:29:01:78:03:e5: dd:78:10:49:df:23:5e:30:c8:ed:0e:c8:81:be:69:07:2d:f5: cc:68:20:74:a6:3d:37:6a:d4:01:83:3f:73:7d:96:82:62:8d: 8e:78:33:b0:27:18:fe:7c:2e:2c:f5:0b:10:42:23:0a:43:f6: 81:7c:ab:06:b6:25:f4:59:ab:9b:28:63:b1:b6:a7:f7:f7:60: 51:ed:84:f2:c5:5a:c0:74:91:8a:1e:cd:ff:2c:87:91:e2:3a: e3:2d:d9:9a:0c:1f:99:10:02:1b:6f:36:b3:c4:65:b7:73:ae: cd:ae:20:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDVFMjMzOUQxRUFBRjUzNDlBMTM4QTQ3OTdEQTgyRDBF QjRERkE5RUMwHhcNMjYwMzI1MDM1NjMxWhcNMjYwNDAxMDM1NjMxWjAYMRYwFAYD VQQDEw02OWMzNWNlZi1jNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8VHIXyYr96jDpcTDDuQF0XZpfgonCjqnDdBS7H+i1fjLPtbMAIxyhzj/hIv ZoeZAjhAsBVd4BiP7byWdTD1sjP9uv/BULk2ebVx5dlLE9YperBihohTVrkCL2Ex +ol1zk+9E0vodNFNix4Qq1GZqQHR0TRWcdjnJApPSqB+/xIGvpm1R6pXO6JxYAxg qWww3NCab1Mb7FE8fIKyaPsCLRPJvsvJwazr+88rgulF5Zttb10zEnEtiDqUQu92 f7DLQuD/CjYlRcdRQQFqrJ8L74LqZp7SO0vEi7gzLf0eHydtqPvHbRbM6SnbBT4X c3eAIHPAGz5q7cINHYhxhGMt1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPMNupF qiqotauCHNetSW+f0GI1MB8GA1UdIwQYMBaAFF4jOdHqr1NJoTikeX2oLQ6036ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC80QzkwMEYxQ0VB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUwbWhPS1I1ZmFndERyVGZx ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hpTTUwZXF2VTBtaE9LUjVmYWd0RHJUZnFldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC80QzkwMEYxQ0VBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUw bWhPS1I1ZmFndERyVGZxZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFftU6dbBlhM3bGDWHTLmvrjWdDXAq3DP81v92u93fHDTtwjLlMiQFuDZaoKa kt6jPcWcLH4yS2wD9Ttf6VWMihJvqYzH2V51whR6Xkele0M0I2dTnVX7t1uF6PJP 5716YuaKN2RWRas31hsVGgowYx4j5dZvxeT/G9d5KsUaVw0vr2ZPXYdb1i8TOSkB eAPl3XgQSd8jXjDI7Q7Igb5pBy31zGggdKY9N2rUAYM/c32WgmKNjngzsCcY/nwu LPULEEIjCkP2gXyrBrYl9Fmrmyhjsban9/dgUe2E8sVawHSRih7N/yyHkeI64y3Z mgwfmRACG282s8Rlt3Ouza4g5g== -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:28 2026 by rpki-client