$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: EgxAelpYNS+J7uxv40G1SUddMiJJBduAbCcQL+uiNPo= Subject key identifier: 07:B7:D9:64:CE:C5:F3:85:E3:74:BD:14:80:38:56:51:36:F2:7A:05 Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 1737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 1729 Signing time: Tue 24 Mar 2026 16:31:21 +0000 Manifest this update: Tue 24 Mar 2026 16:31:20 +0000 Manifest next update: Tue 31 Mar 2026 16:31:20 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: l1nz5jO557nc5eR5jju1+vhqxghFGEA8dKuNe9+fOF0=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: n3LIJOsHlARAi65lnMhL3wL2TR8QPk4sPY0Xr04F6l0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5943 (0x1737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Mar 24 16:31:20 2026 GMT Not After : Mar 31 16:31:20 2026 GMT Subject: CN=69c2bc59-d703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:c1:28:a6:06:93:0c:80:fe:f3:ba:01:93: 21:9d:01:92:ca:49:ab:28:aa:06:92:71:14:f1:e7: 62:77:1b:1f:6d:86:f2:03:80:1b:e9:f3:82:05:38: 5f:09:37:b9:78:47:f4:d9:7a:7c:98:4f:0e:48:91: 42:cd:08:83:c4:eb:3c:bd:36:e8:a5:a9:a3:50:c6: d5:47:4f:c9:54:6d:27:4b:13:f1:7a:cc:cd:0b:38: 52:28:5f:3b:e7:a4:80:05:9f:0e:2b:6c:6e:e4:f2: b9:f3:94:82:41:ed:29:aa:bb:6d:d4:2b:6b:bd:f0: 75:34:00:5f:12:20:30:e3:81:45:57:89:89:e4:11: a6:1f:ad:8e:95:d8:98:65:d9:ad:b5:e2:a4:5e:57: 68:3b:ca:7b:b7:35:94:a7:6c:80:3c:c3:04:2c:c0: 02:73:7c:ed:d3:41:7e:2d:c9:ce:33:c9:de:b2:c2: 54:74:a8:cd:76:6b:9a:4d:26:a7:a0:8a:8c:64:e2: 55:b8:16:7a:29:be:2a:f8:fc:ec:da:c9:13:7c:e7: 67:e0:0b:23:20:a7:6c:1f:f1:b5:65:3d:69:2a:0d: 6c:6c:44:8e:e2:95:d7:29:9f:3b:75:9b:74:9c:4a: d7:e9:53:15:e4:d8:14:4f:a2:05:0b:a4:9f:4d:5b: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B7:D9:64:CE:C5:F3:85:E3:74:BD:14:80:38:56:51:36:F2:7A:05 X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:06:ec:c6:71:1e:28:d7:56:79:e1:f0:3c:d0:67:65:49:d1: 84:73:3f:59:db:3b:8a:35:4a:ea:cd:be:c2:a6:94:9a:4d:93: e7:c6:1c:3d:4a:12:0c:66:a8:69:4b:8d:7e:cb:bb:76:d2:9c: fc:87:aa:70:f7:3a:63:10:aa:5e:74:36:2d:c5:06:eb:0c:d8: d7:4d:4d:1b:72:3d:b4:50:57:82:57:d5:b4:71:42:ff:b8:06: f5:87:9b:63:9a:b1:16:fb:be:b0:9b:78:b0:d6:ce:43:35:40: b8:b4:3f:87:eb:f3:7a:62:95:bd:4e:90:cc:ff:63:70:94:b3: ee:ff:e1:c4:c3:7a:55:99:a8:c2:63:5b:43:33:c4:10:72:36: 71:f6:0c:5d:54:7a:46:ee:e7:b4:a3:d6:e2:f9:7f:e4:4b:15: 71:34:b2:47:32:40:36:9a:13:d4:93:56:31:f3:23:f2:fd:97: f8:df:f1:c5:29:be:97:0a:9c:a9:70:5b:c4:dc:4a:7b:9d:e8: df:5c:44:eb:b9:c8:19:0c:36:d1:60:56:3d:b7:5c:57:51:7f: 1c:ac:e1:10:fd:1a:c3:c4:24:92:e1:6b:c3:28:2d:bb:2d:b3: c2:e0:0b:fc:fb:e0:a8:96:dd:7d:99:ca:da:7f:2d:d1:01:9a: 67:78:c9:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjYwMzI0MTYzMTIwWhcNMjYwMzMxMTYzMTIwWjAYMRYwFAYD VQQDEw02OWMyYmM1OS1kNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiovBKKYGkwyA/vO6AZMhnQGSykmrKKoGknEU8edidxsfbYbyA4Ab6fOCBThf CTe5eEf02Xp8mE8OSJFCzQiDxOs8vTbopamjUMbVR0/JVG0nSxPxeszNCzhSKF87 56SABZ8OK2xu5PK585SCQe0pqrtt1CtrvfB1NABfEiAw44FFV4mJ5BGmH62OldiY ZdmtteKkXldoO8p7tzWUp2yAPMMELMACc3zt00F+LcnOM8nessJUdKjNdmuaTSan oIqMZOJVuBZ6Kb4q+Pzs2skTfOdn4AsjIKdsH/G1ZT1pKg1sbESO4pXXKZ87dZt0 nErX6VMV5NgUT6IFC6SfTVtEXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAe32WTO xfOF43S9FIA4VlE28noFMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuQbsxnEeKNdWeeHwPNBnZUnRhHM/Wds7ijVK6s2+wqaUmk2T58YcPUoSDGao aUuNfsu7dtKc/IeqcPc6YxCqXnQ2LcUG6wzY101NG3I9tFBXglfVtHFC/7gG9Yeb Y5qxFvu+sJt4sNbOQzVAuLQ/h+vzemKVvU6QzP9jcJSz7v/hxMN6VZmowmNbQzPE EHI2cfYMXVR6Ru7ntKPW4vl/5EsVcTSyRzJANpoT1JNWMfMj8v2X+N/xxSm+lwqc qXBbxNxKe53o31xE67nIGQw20WBWPbdcV1F/HKzhEP0aw8QkkuFrwygtuy2zwuAL /PvgqJbdfZnK2n8t0QGaZ3jJcg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:28 2026 by rpki-client