$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: YneS4vyhZRy7FILeHL9r+ONk2MkzMefs4QXc/sO8V5s= Subject key identifier: D0:8D:06:D0:C1:73:3D:6E:C4:C4:55:62:C3:96:0F:7E:B3:32:4A:D8 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0205 Signing time: Wed 25 Mar 2026 02:31:55 +0000 Manifest this update: Wed 25 Mar 2026 02:31:55 +0000 Manifest next update: Wed 01 Apr 2026 02:31:55 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: smaPB+Wyz1dx9jT70AHAYXS0nOOu3kh7UaXajZn7R64=) 2: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: 7UL7W+XoowNRuIfuRKS9SoKzU2RSCaYL5GSAeRQ5fHQ=) 3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: a/sMWsbe2PPLiNo0V4QVI0MPQGpJqfAh/ZXuIbQB9VE=) 4: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: xUQFAVTTdAa8CqNrRE2SBv3wHjSfgqDOaaBb6DaJIhs=) 5: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: aKljY48TNAmDYgzUHTH7Yg9ZPBKBFIkH7Kz1QZqrLgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Mar 25 02:31:55 2026 GMT Not After : Apr 1 02:31:55 2026 GMT Subject: CN=69c3491b-c893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:ec:20:fc:a4:b8:1b:40:ce:dd:23:e3:a1: 5f:a3:4d:66:22:00:a4:cc:ac:5d:6f:c2:0c:1f:ed: bb:9b:82:89:ea:d9:44:09:34:6e:bc:ee:e3:42:70: f8:06:7b:c9:0f:1c:d0:f1:63:0d:2f:50:51:cd:3d: e5:9c:fb:a9:e3:24:7b:e0:3e:5e:10:d1:0c:1c:b4: a4:a1:2e:4a:b1:7d:c3:16:49:f1:f8:35:79:cb:36: 01:8f:53:f2:05:d2:6a:96:7e:9f:5a:1a:ae:0d:39: 9f:cd:61:8a:d5:58:38:ef:a8:6c:17:81:a5:5a:2f: eb:7d:c4:81:11:57:a0:bc:78:93:c8:4a:c2:12:77: ac:d0:7d:1e:4d:3d:af:91:1f:ec:7d:95:f5:45:dd: 53:f2:d5:86:ef:9a:3d:a6:91:3d:4a:6b:9e:9e:31: b9:2e:45:b6:ca:7c:53:d7:78:bf:24:ee:2f:32:f1: ba:2c:47:82:20:ee:f7:51:ba:74:fb:8e:ee:63:c2: 23:e1:85:03:de:77:3e:af:10:58:92:cc:f2:34:21: b5:6b:0d:64:ce:46:67:ce:b4:2c:3d:11:86:fe:b3: 95:a8:83:b2:e9:61:fd:76:25:68:c9:5a:cf:cf:d9: db:50:59:ae:de:86:05:dd:46:d6:6c:4e:4e:48:4c: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8D:06:D0:C1:73:3D:6E:C4:C4:55:62:C3:96:0F:7E:B3:32:4A:D8 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4b:19:dc:32:d3:31:18:5a:85:0c:04:a7:fe:13:fc:67:65: cc:3a:87:5a:c1:f4:5c:7c:22:c1:ec:ac:23:6c:d0:b9:c9:1d: a4:a6:41:4a:54:c6:b6:0e:64:9d:51:87:43:e9:20:b0:7a:61: 50:39:a5:19:96:58:0b:7f:75:36:cc:f6:4e:ff:ee:a4:c1:5b: 69:c1:23:45:12:b1:a6:7b:74:3a:16:0e:c4:f6:3a:c8:2b:7f: c3:c0:03:39:2d:14:28:e3:b1:e7:d9:a9:37:72:3c:b4:0e:fd: 28:65:21:bb:4a:ec:12:d1:09:ba:94:da:f1:07:68:2f:ca:02: c7:35:f7:8b:f2:dc:b9:cb:36:ea:91:0b:74:fc:90:8b:e6:9e: eb:e9:9f:12:07:29:41:e5:56:2e:1c:a0:51:74:cd:73:c8:1d: d0:53:7c:c1:e2:f1:59:b7:17:df:9d:c3:af:9a:11:81:97:d6: d9:f1:92:aa:fe:d8:60:94:0f:2a:ca:39:cc:43:b5:0e:ec:15: 8a:c5:e3:84:5d:9d:23:bb:9e:31:e2:ee:39:f9:a7:40:21:b4: 5b:e0:13:80:a0:a0:e7:c9:76:ed:a1:c6:1c:1c:9d:7c:ed:d1: ef:81:4e:54:9a:d5:e0:23:94:26:d4:7c:2a:cf:3e:46:db:d2: b4:31:00:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjYwMzI1MDIzMTU1WhcNMjYwNDAxMDIzMTU1WjAYMRYwFAYD VQQDEw02OWMzNDkxYi1jODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nnsIPykuBtAzt0j46Ffo01mIgCkzKxdb8IMH+27m4KJ6tlECTRuvO7jQnD4 BnvJDxzQ8WMNL1BRzT3lnPup4yR74D5eENEMHLSkoS5KsX3DFknx+DV5yzYBj1Py BdJqln6fWhquDTmfzWGK1Vg476hsF4GlWi/rfcSBEVegvHiTyErCEnes0H0eTT2v kR/sfZX1Rd1T8tWG75o9ppE9SmuenjG5LkW2ynxT13i/JO4vMvG6LEeCIO73Ubp0 +47uY8Ij4YUD3nc+rxBYkszyNCG1aw1kzkZnzrQsPRGG/rOVqIOy6WH9diVoyVrP z9nbUFmu3oYF3UbWbE5OSEwmHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCNBtDB cz1uxMRVYsOWD36zMkrYMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl0sZ3DLTMRhahQwEp/4T/GdlzDqHWsH0XHwiweysI2zQuckdpKZBSlTGtg5k nVGHQ+kgsHphUDmlGZZYC391Nsz2Tv/upMFbacEjRRKxpnt0OhYOxPY6yCt/w8AD OS0UKOOx59mpN3I8tA79KGUhu0rsEtEJupTa8QdoL8oCxzX3i/Lcucs26pELdPyQ i+ae6+mfEgcpQeVWLhygUXTNc8gd0FN8weLxWbcX353Dr5oRgZfW2fGSqv7YYJQP Kso5zEO1DuwVisXjhF2dI7ueMeLuOfmnQCG0W+ATgKCg58l27aHGHBydfO3R74FO VJrV4COUJtR8Ks8+RtvStDEA0A== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:33 2026 by rpki-client