$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft File: X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json) Hash identifier: +LBjdhYKEdvdsZeaaEaUoZev1/10bU2a/pTV+UKTkQA= Subject key identifier: 33:DD:5C:0C:D4:80:B5:5A:5C:B9:72:55:E4:BF:85:73:B8:34:6F:C5 Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 Certificate issuer: /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft Manifest number: 07BC Signing time: Tue 24 Mar 2026 21:09:04 +0000 Manifest this update: Tue 24 Mar 2026 21:09:04 +0000 Manifest next update: Tue 31 Mar 2026 21:09:04 +0000 Files and hashes: 1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: QBODNnWJ8dvTMjAavKIZMIgsyCE/xTCMM5RKKL+UW3s=) 2: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: FiJS4cFwnxf/JxN138pQZVaNHd2K178xuIIaltslIoU=) 3: FA93793637C011EB97405947C4F9AE02.roa (hash: ldXQuS9J+x+tniCGZo6XJVyJ4zu+DPyHUrx89zjZ/Vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Validity Not Before: Mar 24 21:09:04 2026 GMT Not After : Mar 31 21:09:04 2026 GMT Subject: CN=69c2fd70-d7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:e5:65:70:3a:04:c2:31:0b:f7:d3:f2:ed: ab:d8:34:80:94:02:02:dc:a0:ec:d5:f6:a0:f2:35: 35:7a:8f:26:63:ee:9a:c5:39:83:87:7e:61:0f:86: bf:e2:9f:7f:7b:12:42:1e:5e:8b:c3:25:96:11:ce: 49:2a:44:24:70:22:33:a1:7e:81:be:e8:5e:7b:d9: 78:30:d8:20:d7:bb:d5:7b:0c:50:27:b9:ac:30:47: cd:a6:7e:be:90:99:2f:60:b8:10:ca:b8:cf:87:7e: ab:7a:f7:38:80:cc:dc:13:20:9f:76:59:c3:50:38: 07:66:59:2d:39:d9:46:92:83:0f:a7:f2:18:8d:4a: e2:f0:f7:a4:dd:c8:38:7d:17:10:9f:f2:83:d3:57: 6f:a4:92:23:be:c4:1e:10:68:a8:5a:3c:41:c0:7e: 55:ba:6b:c2:35:c2:a1:1f:08:5a:c0:0f:81:9f:e1: f0:b1:a2:5b:7a:c2:90:df:e5:85:ee:7e:69:99:6f: c1:13:9d:5e:b7:bd:c3:d7:2d:9b:b7:c8:6b:c6:3f: 43:40:69:48:ce:3a:34:3c:57:1f:b1:ab:b5:4c:c2: 71:5b:be:88:ba:50:a1:26:e4:e0:d5:b0:e5:f0:f2: 55:d6:95:d3:8a:f3:14:28:d4:48:e8:07:c6:ef:a6: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:5C:0C:D4:80:B5:5A:5C:B9:72:55:E4:BF:85:73:B8:34:6F:C5 X509v3 Authority Key Identifier: keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a8:70:e2:1c:15:d6:a6:3d:87:9f:c4:44:73:c7:24:10:60: 02:96:ff:9f:02:db:c8:46:1d:a3:80:df:bc:bd:68:57:5c:46: 7a:e5:68:10:aa:50:e7:68:fe:95:b1:10:5c:65:65:aa:52:59: 68:91:96:11:70:cd:80:46:8d:9f:01:64:1d:a4:2c:e7:ef:52: 8c:1a:97:d9:d6:e6:4f:b1:ad:dc:4e:2b:a4:30:39:77:ef:ee: 8e:1c:12:7b:6e:f9:d8:c8:3e:55:cf:3a:d1:2c:8e:fa:06:47: 75:38:36:16:a8:46:08:19:10:82:30:f7:0f:75:2e:cf:60:fe: a5:d3:02:db:c9:79:9d:69:f4:62:5b:ec:4a:ad:2d:b3:42:39: ec:34:f8:83:56:94:d8:2d:fd:0a:9e:09:42:32:75:46:c8:22: 34:ad:ff:39:c2:dc:30:ab:cd:0c:f2:db:17:48:27:0d:f6:ec: 76:4c:95:81:12:75:e4:44:6a:46:89:eb:92:63:ac:9d:fe:e6: f6:fe:20:13:dc:1a:11:07:16:08:f7:55:bf:cd:1c:a5:83:2e: 88:c7:7d:b2:8d:81:f0:cd:d9:4c:16:db:48:d7:53:b7:ee:45: 4a:f8:56:06:ac:08:32:12:69:d9:6d:54:51:d3:23:82:13:bc: bd:ce:eb:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx MjA1RjA4NTEwHhcNMjYwMzI0MjEwOTA0WhcNMjYwMzMxMjEwOTA0WjAYMRYwFAYD VQQDEw02OWMyZmQ3MC1kN2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfPlZXA6BMIxC/fT8u2r2DSAlAIC3KDs1fag8jU1eo8mY+6axTmDh35hD4a/ 4p9/exJCHl6LwyWWEc5JKkQkcCIzoX6Bvuhee9l4MNgg17vVewxQJ7msMEfNpn6+ kJkvYLgQyrjPh36revc4gMzcEyCfdlnDUDgHZlktOdlGkoMPp/IYjUri8Pek3cg4 fRcQn/KD01dvpJIjvsQeEGioWjxBwH5VumvCNcKhHwhawA+Bn+HwsaJbesKQ3+WF 7n5pmW/BE51et73D1y2bt8hrxj9DQGlIzjo0PFcfsau1TMJxW76IulChJuTg1bDl 8PJV1pXTivMUKNRI6AfG76YmnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPdXAzU gLVaXLlyVeS/hXO4NG/FMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3 QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDQ5MS85MjlCREJDMjM3QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4 V0k2d0ZkVUI0eGNTQmZDRkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATqhw4hwV1qY9h5/ERHPHJBBgApb/nwLbyEYdo4DfvL1oV1xGeuVoEKpQ52j+ lbEQXGVlqlJZaJGWEXDNgEaNnwFkHaQs5+9SjBqX2dbmT7Gt3E4rpDA5d+/ujhwS e2752Mg+Vc860SyO+gZHdTg2FqhGCBkQgjD3D3Uuz2D+pdMC28l5nWn0YlvsSq0t s0I57DT4g1aU2C39Cp4JQjJ1RsgiNK3/OcLcMKvNDPLbF0gnDfbsdkyVgRJ15ERq RonrkmOsnf7m9v4gE9waEQcWCPdVv80cpYMuiMd9so2B8M3ZTBbbSNdTt+5FSvhW BqwIMhJp2W1UUdMjghO8vc7rnw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:57 2026 by rpki-client