$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: wko0xqChVMbT0YSdAZgaJbEMxzUllDf24B5WvGG+Ygg= Subject key identifier: E3:D5:06:59:67:68:92:8D:D0:5E:D8:DF:F1:DE:C6:91:83:31:A2:4A Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CF3 Signing time: Tue 24 Mar 2026 18:12:52 +0000 Manifest this update: Tue 24 Mar 2026 18:12:51 +0000 Manifest next update: Tue 31 Mar 2026 18:12:51 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: PRXWzxlF7ED9l+Egkj2NVHv36DY3OOFzrkBB9gQwDeY=) 2: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=) 3: F0202A84B36311F082F02072C4F9AE02.roa (hash: rVfs6LGzrLN0wWbbQ4d7gHO9mKYMBzycz9A93jxHPEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Mar 24 18:12:51 2026 GMT Not After : Mar 31 18:12:51 2026 GMT Subject: CN=69c2d424-f790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:74:57:5f:14:85:32:8a:0c:11:a4:3a:92: 78:2e:68:fe:36:80:3d:38:17:89:ac:c0:7e:73:6c: db:0c:67:b3:e0:c2:f4:19:fa:b1:a1:40:05:0c:5d: c1:e5:6a:64:f8:07:ec:ca:8f:63:6c:24:56:62:3b: 25:14:6b:fc:7a:eb:d4:a4:f0:c2:c2:6d:d6:fd:a3: a0:02:a2:8b:8c:7f:6d:5d:fb:dd:4d:d0:b2:22:0c: dd:0b:c8:41:92:65:18:20:fc:c2:46:11:39:d7:69: d1:af:57:5e:49:b8:b9:87:ee:12:2d:48:46:d5:0a: 50:f4:24:68:42:d2:e4:e1:2d:f8:f4:bb:aa:c4:33: ba:d4:3f:ce:3a:e7:10:f6:76:51:16:01:1f:18:e0: 99:d8:c4:cd:66:cc:71:4a:53:4d:7b:9a:5a:62:74: 38:b6:71:c1:8d:0f:13:97:72:ef:5b:1c:5b:9f:a9: 72:e4:e1:50:f4:68:2b:1a:9b:b9:e9:38:e1:55:af: a4:e0:40:ff:ac:7a:e3:61:73:76:7c:6d:5a:0d:ac: 03:de:8a:05:27:df:42:61:8c:97:45:17:49:b7:21: fb:0a:f2:91:a8:22:39:f3:c7:47:fd:2f:4d:03:d5: 56:74:aa:35:7e:66:7f:6d:a1:9d:ab:77:4e:fb:07: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D5:06:59:67:68:92:8D:D0:5E:D8:DF:F1:DE:C6:91:83:31:A2:4A X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:34:87:c0:70:ce:02:70:db:c5:68:b3:85:1e:31:bd:8e:4e: df:97:db:6a:ae:66:ac:3c:1e:73:6d:ef:82:fb:bf:b9:04:f9: ab:6d:df:80:d5:60:9b:20:31:83:af:d6:76:d2:ea:95:6d:87: 7c:c7:d5:58:af:3f:64:22:a7:8b:c8:bc:25:0c:2d:3e:7c:a5: 8f:a4:6f:36:7d:94:e8:e7:22:f7:3d:de:a7:ca:6a:ab:60:a7: f1:ef:8a:2f:76:ab:2f:56:29:78:cb:36:45:2c:c0:08:3f:96: e7:b5:02:b1:14:1f:44:90:eb:60:9b:d5:dd:17:53:69:41:0d: c5:fc:77:49:0c:df:28:fb:92:4c:a8:a6:6c:34:96:a1:04:d1: 7a:ce:8a:4f:d1:43:b6:92:98:65:c5:b2:93:e2:8d:b3:6a:d5: b7:b7:89:16:cf:a7:ea:c8:59:d6:a2:97:07:43:33:35:e1:6e: e9:dc:b3:6a:d5:60:ba:3c:8c:b7:a0:36:9f:a6:94:a1:41:a5: d2:ac:6b:f8:de:a7:49:c8:15:dd:a4:0e:28:14:71:8f:99:84: f3:09:9c:8a:88:96:4a:f4:65:65:8b:45:ac:58:52:9c:de:ff: 28:3a:08:60:dc:20:8b:87:03:f2:ec:0c:3f:4e:65:b1:2a:4c: f0:53:62:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjYwMzI0MTgxMjUxWhcNMjYwMzMxMTgxMjUxWjAYMRYwFAYD VQQDEw02OWMyZDQyNC1mNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtU10V18UhTKKDBGkOpJ4Lmj+NoA9OBeJrMB+c2zbDGez4ML0GfqxoUAFDF3B 5Wpk+Afsyo9jbCRWYjslFGv8euvUpPDCwm3W/aOgAqKLjH9tXfvdTdCyIgzdC8hB kmUYIPzCRhE512nRr1deSbi5h+4SLUhG1QpQ9CRoQtLk4S349LuqxDO61D/OOucQ 9nZRFgEfGOCZ2MTNZsxxSlNNe5paYnQ4tnHBjQ8Tl3LvWxxbn6ly5OFQ9GgrGpu5 6TjhVa+k4ED/rHrjYXN2fG1aDawD3ooFJ99CYYyXRRdJtyH7CvKRqCI588dH/S9N A9VWdKo1fmZ/baGdq3dO+weINQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPVBlln aJKN0F7Y3/HexpGDMaJKMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHTSHwHDOAnDbxWizhR4xvY5O35fbaq5mrDwec23vgvu/uQT5q23fgNVgmyAx g6/WdtLqlW2HfMfVWK8/ZCKni8i8JQwtPnylj6RvNn2U6Oci9z3ep8pqq2Cn8e+K L3arL1YpeMs2RSzACD+W57UCsRQfRJDrYJvV3RdTaUENxfx3SQzfKPuSTKimbDSW oQTRes6KT9FDtpKYZcWyk+KNs2rVt7eJFs+n6shZ1qKXB0MzNeFu6dyzatVgujyM t6A2n6aUoUGl0qxr+N6nScgV3aQOKBRxj5mE8wmcioiWSvRlZYtFrFhSnN7/KDoI YNwgi4cD8uwMP05lsSpM8FNiwg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:55 2026 by rpki-client