$ rpki-client -vvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft File: X8G2OMzN_5nWRFZVKcgHCGhomzE.mft (raw, json) Hash identifier: DP6Z1V6ll0LB2KCHmDvWG+v+637/3LG/uN6mm//qWLI= Subject key identifier: 10:2A:BE:FE:0D:7E:8B:B3:EA:7F:80:0E:3E:6E:81:30:D2:86:FA:E9 Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31 Certificate issuer: /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft Manifest number: CD Signing time: Wed 25 Mar 2026 06:01:56 +0000 Manifest this update: Wed 25 Mar 2026 06:01:55 +0000 Manifest next update: Wed 01 Apr 2026 06:01:55 +0000 Files and hashes: 1: X8G2OMzN_5nWRFZVKcgHCGhomzE.crl (hash: ugm4q1vSeb+6K9XRfIuvBOv/MF7oPrdUFjEgv32AFd0=) 2: AA456842107211F09A9E631FC4F9AE02.roa (hash: LcGkey/fSRG4e+wg3SB8Jm7E3DdOa6idSZbn5QgtWZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31 Validity Not Before: Mar 25 06:01:55 2026 GMT Not After : Apr 1 06:01:55 2026 GMT Subject: CN=69c37a54-6445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:bb:10:67:96:05:5d:38:ec:d2:a1:bf:ec:9a: 1e:a6:5b:20:f6:d8:29:90:86:6b:0e:c5:69:ac:45: 09:36:11:67:f7:c2:b6:36:54:23:ac:e7:79:0b:4e: a5:98:30:74:79:c1:af:ab:58:84:77:6e:50:4f:a0: 18:f5:7a:04:20:e8:b8:d3:90:2e:3b:cc:ac:ec:21: 33:cf:c8:01:de:5e:e0:24:a2:6f:b4:36:90:8a:d0: 13:9b:2e:24:ea:e1:58:d2:ea:be:65:c8:51:7e:e7: 0e:06:c4:bb:e3:38:95:00:3a:84:01:47:b6:2d:04: 6d:b2:a6:51:51:14:0e:cd:5e:b7:ab:cc:83:38:0f: 96:7f:80:be:9f:40:a6:03:cc:fd:76:f7:70:a0:ac: f5:97:c3:45:1f:84:50:36:bd:d6:e8:9a:f5:10:a2: 65:50:1e:bf:79:6a:6d:44:bd:b3:81:f2:47:fd:d3: 28:3c:d4:6a:be:3d:14:9c:da:fc:cf:7d:2d:89:43: e4:68:1e:80:fb:0d:db:d7:62:0a:78:10:39:39:a4: 2c:d8:62:e1:0e:96:44:49:9c:8d:07:0f:c6:54:51: 7b:c3:ab:24:ca:e2:60:f3:28:9d:51:d2:6e:73:3f: e5:4c:12:7d:b7:db:b8:af:cb:be:ce:3a:94:4b:9c: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2A:BE:FE:0D:7E:8B:B3:EA:7F:80:0E:3E:6E:81:30:D2:86:FA:E9 X509v3 Authority Key Identifier: keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7a:f7:bd:fa:3d:9a:f6:ab:3d:9e:91:70:c3:b4:ec:15:3d: f0:f4:9b:9b:44:56:13:d2:2e:38:c6:f8:0a:57:0a:07:5c:90: 5a:d8:f0:9c:88:48:36:3a:fb:a0:40:9f:6b:ea:1c:2d:57:7f: 46:d6:11:11:c3:c5:7b:98:30:ca:2f:01:06:76:88:ce:7d:bd: 2a:f5:84:e6:90:77:89:1a:7f:20:5b:89:b6:51:8f:95:2c:19: 92:ae:44:17:d2:01:f8:01:6e:0e:37:ea:40:27:05:98:82:6b: 59:1e:45:ef:b2:94:c5:49:1b:44:a9:db:75:5b:5f:08:f8:2a: 23:37:5f:60:e4:cc:2c:2e:05:8b:0e:83:25:61:8d:cb:02:94: de:79:41:81:81:7e:90:e8:08:71:00:27:1b:cd:f1:c9:53:33: 5f:9f:d3:2e:69:64:92:d0:eb:5b:1f:78:ad:d2:ee:06:93:7c: c9:d2:ab:69:1c:cd:33:5a:97:6c:20:a9:be:ea:f0:e0:59:53: eb:1c:19:01:2e:a1:9e:04:0e:9f:7c:de:7e:3c:5d:e9:c0:49: 42:43:9a:fe:35:da:52:02:ce:79:11:d5:36:1a:56:b7:5a:22: 90:47:23:d8:09:b4:d4:6d:24:c2:f0:80:3f:2e:bc:ad:3c:d7: 6f:e0:34:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyOEUxMTAvBgNVBAUTKDVGQzFCNjM4Q0NDREZGOTlENjQ0NTY1NTI5QzgwNzA4 Njg2ODlCMzEwHhcNMjYwMzI1MDYwMTU1WhcNMjYwNDAxMDYwMTU1WjAYMRYwFAYD VQQDEw02OWMzN2E1NC02NDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+7sQZ5YFXTjs0qG/7Joeplsg9tgpkIZrDsVprEUJNhFn98K2NlQjrOd5C06l mDB0ecGvq1iEd25QT6AY9XoEIOi405AuO8ys7CEzz8gB3l7gJKJvtDaQitATmy4k 6uFY0uq+ZchRfucOBsS74ziVADqEAUe2LQRtsqZRURQOzV63q8yDOA+Wf4C+n0Cm A8z9dvdwoKz1l8NFH4RQNr3W6Jr1EKJlUB6/eWptRL2zgfJH/dMoPNRqvj0UnNr8 z30tiUPkaB6A+w3b12IKeBA5OaQs2GLhDpZESZyNBw/GVFF7w6skyuJg8yidUdJu cz/lTBJ9t9u4r8u+zjqUS5wJKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAqvv4N fouz6n+ADj5ugTDShvrpMB8GA1UdIwQYMBaAFF/BtjjMzf+Z1kRWVSnIBwhoaJsx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI4RS9DREEzQTcxRUY1 OUIxMUVGQTRGNTcxMjhDNEY5QUUwMi9YOEcyT016Tl81bldSRlpWS2NnSENHaG9t ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4RzJPTXpOXzVuV1JGWlZLY2dIQ0dob216RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTI4RS9DREEzQTcxRUY1OUIxMUVGQTRGNTcxMjhDNEY5QUUwMi9YOEcyT016Tl81 bldSRlpWS2NnSENHaG9tekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoXr3vfo9mvarPZ6RcMO07BU98PSbm0RWE9IuOMb4ClcKB1yQWtjwnIhINjr7 oECfa+ocLVd/RtYREcPFe5gwyi8BBnaIzn29KvWE5pB3iRp/IFuJtlGPlSwZkq5E F9IB+AFuDjfqQCcFmIJrWR5F77KUxUkbRKnbdVtfCPgqIzdfYOTMLC4Fiw6DJWGN ywKU3nlBgYF+kOgIcQAnG83xyVMzX5/TLmlkktDrWx94rdLuBpN8ydKraRzNM1qX bCCpvurw4FlT6xwZAS6hngQOn3zefjxd6cBJQkOa/jXaUgLOeRHVNhpWt1oikEcj 2Am01G0kwvCAPy68rTzXb+A0LQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:25 2026 by rpki-client