$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: Gmed7oZE8qCpQFUdXXRf0acuyf/VY/uPUVBhoZXoK/E= Subject key identifier: 37:CD:04:D3:1B:28:76:DF:81:C1:51:A3:BB:6F:2F:09:2B:CF:C4:3F Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 315E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 30E1 Signing time: Tue 24 Mar 2026 15:24:36 +0000 Manifest this update: Tue 24 Mar 2026 15:24:35 +0000 Manifest next update: Tue 31 Mar 2026 15:24:35 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: LigK9mGANjjch4sQjfuGBxHPImv/LW4pEGEtp22I7DM=) 2: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: tIuCeWt8loP5ZmBWFAM7052UGdSqIBcg6mUyDDDPLo0=) 3: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: /FrpL0qVU1o4ddXI6hWw5Yj8pF2l/G6Nolhot450TQg=) 4: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: de2C8Xu2sn4wIkObgdX6KvmUkB+P2+zRTh51LUtEnFY=) 5: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wbfTUnUAKsJRrWfnHjlaeLodofy5Oo1bl9O6vPfn9a4=) 6: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: BRSGBu/6q3GwQLt600UgprgrzUqX0i//fWpSz8ak1m0=) 7: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: y5ciIKx3lqS7z/BR3HumcZnil59gOk0O6RNJFaL0JeY=) 8: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: UIF18yXEMKB6Xi+ID1n3xjpnZMc0AimyXBIjScTOYBA=) 9: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: wmmz/QZK42uhoPNkWkDZAabuw7FDO3k7EWNvm0NWAOw=) 10: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: ccU5A3TwZ5EmSAvHoBQM+S9rDORLffXDKuCFeSF3XaM=) 11: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: w6jopDYdBCSKneIqUB+uGylPK/ivurOX7DEN4AdjgnA=) 12: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: Mu9rMlzhoKL6wcm2IQfT1fYiz3u1EpWT7mob7q7u//c=) 13: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: gko9Q35KdBOiYMYQc7V0na7o/2+tf0Ti0oIVrHZBvXA=) 14: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: ZCk+fEsQHe2jlnBNkTm2b7TPnu7HbyKCFYwP585vSWU=) 15: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: SmQ5CGEJCE3s9/YNxwJXtFcb33wFKBOX7DlFwf6j2G4=) 16: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: fcJYmXSZeVG/6eLQqu0NVh0YwupBcKyyjG3vFyzIP2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12638 (0x315e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Mar 24 15:24:35 2026 GMT Not After : Mar 31 15:24:35 2026 GMT Subject: CN=69c2acb4-be86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:51:e5:c3:59:3c:9c:e3:f1:b1:14:64:83: b5:ab:47:d2:e9:74:e4:8f:0d:16:07:9d:5f:9a:9a: b7:da:08:51:1c:c7:f7:70:b4:d4:ec:ed:7e:2e:5a: 36:8a:15:50:b2:cf:b3:57:77:d9:bb:53:f2:ef:1a: 55:0e:cf:3f:7a:e3:2b:8e:70:52:1b:4f:65:e0:7e: 50:71:7f:c4:1e:95:22:ab:29:9b:3b:02:d6:e8:a6: 5a:b7:64:c1:aa:f3:d3:be:dd:5f:ad:8b:4f:89:2a: 46:bc:38:5a:06:ef:bf:3b:dc:2e:96:db:d7:ae:34: f7:44:c4:cb:4d:d4:c5:71:f0:d9:dd:88:9b:06:46: f6:cf:ab:08:a8:dd:62:1a:15:26:6d:ea:04:36:be: 24:22:a8:47:c2:d4:23:97:9a:c2:0a:24:8f:9e:f2: d9:d6:bb:ec:13:41:82:2c:6c:f6:9a:28:68:96:6e: 39:dc:e4:11:7e:2e:21:2d:66:dc:95:f7:96:e8:92: 21:19:5b:9b:a9:1a:e7:1c:37:99:4f:a5:aa:f1:61: 78:22:84:5c:f1:2a:0a:73:51:fe:15:02:2d:3e:8f: 87:41:a1:37:f4:37:51:95:db:a6:63:5a:f9:22:be: 63:7e:0c:08:fe:91:f7:6b:89:1b:bc:22:a7:87:6f: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:04:D3:1B:28:76:DF:81:C1:51:A3:BB:6F:2F:09:2B:CF:C4:3F X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d7:d8:9c:1a:ac:8c:d7:86:47:6f:8b:e3:4f:89:cf:4a:b8: 48:da:45:73:91:fc:58:51:4a:e2:fa:96:68:e8:b5:8c:5c:da: a6:33:f9:48:18:cd:5d:8a:cb:2b:14:3e:ce:97:c5:6d:41:c5: fb:3a:7f:0f:6f:dc:83:ba:aa:03:46:12:37:14:1e:c6:47:8c: c2:cf:c8:94:28:16:d0:48:bd:a4:cd:4f:db:31:67:df:3e:6a: d4:6c:87:d4:73:cd:78:a6:ee:57:12:b3:69:71:b1:20:ab:04: 45:df:ec:4f:b6:6c:df:aa:14:9f:92:70:07:f5:cb:8d:cf:66: 22:b3:3b:30:ad:cc:b7:71:ca:6c:9e:1c:f6:ec:60:de:b9:eb: 0d:17:c1:a2:06:2c:16:b0:51:36:bd:6e:bf:28:96:c7:e3:e5: 41:58:45:7b:bc:c0:4f:92:ed:39:89:73:fc:6b:bf:cc:47:31: c6:0d:ec:5e:be:c1:9b:36:4b:4b:69:53:d9:60:3d:98:56:1b: 70:38:b4:a0:a7:ac:f3:b0:04:d1:19:9a:83:ef:3d:a9:d4:62: d4:89:fc:90:91:e5:5f:03:cb:05:cd:44:bf:67:41:56:b5:ca: 9a:b4:56:c6:60:22:a9:74:50:41:aa:98:bb:dd:ef:cc:37:bb: df:e1:30:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjYwMzI0MTUyNDM1WhcNMjYwMzMxMTUyNDM1WjAYMRYwFAYD VQQDEw02OWMyYWNiNC1iZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuFR5cNZPJzj8bEUZIO1q0fS6XTkjw0WB51fmpq32ghRHMf3cLTU7O1+Llo2 ihVQss+zV3fZu1Py7xpVDs8/euMrjnBSG09l4H5QcX/EHpUiqymbOwLW6KZat2TB qvPTvt1frYtPiSpGvDhaBu+/O9wultvXrjT3RMTLTdTFcfDZ3YibBkb2z6sIqN1i GhUmbeoENr4kIqhHwtQjl5rCCiSPnvLZ1rvsE0GCLGz2miholm453OQRfi4hLWbc lfeW6JIhGVubqRrnHDeZT6Wq8WF4IoRc8SoKc1H+FQItPo+HQaE39DdRldumY1r5 Ir5jfgwI/pH3a4kbvCKnh2/G8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfNBNMb KHbfgcFRo7tvLwkrz8Q/MB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlNfYnBqsjNeGR2+L40+Jz0q4SNpFc5H8WFFK4vqWaOi1jFzapjP5SBjNXYrL KxQ+zpfFbUHF+zp/D2/cg7qqA0YSNxQexkeMws/IlCgW0Ei9pM1P2zFn3z5q1GyH 1HPNeKbuVxKzaXGxIKsERd/sT7Zs36oUn5JwB/XLjc9mIrM7MK3Mt3HKbJ4c9uxg 3rnrDRfBogYsFrBRNr1uvyiWx+PlQVhFe7zAT5LtOYlz/Gu/zEcxxg3sXr7BmzZL S2lT2WA9mFYbcDi0oKes87AE0Rmag+89qdRi1In8kJHlXwPLBc1Ev2dBVrXKmrRW xmAiqXRQQaqYu93vzDe73+EwTA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:13 2026 by rpki-client