$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: wPocOkRwQoAz3OlVZNxAjU/e5VkHCM7wxbVdzAe3Rdw= Subject key identifier: DA:7C:E9:90:62:D3:44:D0:9C:67:F5:4C:1D:A3:2E:18:9C:1A:00:6E Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 3567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 353F Signing time: Tue 24 Mar 2026 14:18:27 +0000 Manifest this update: Tue 24 Mar 2026 14:18:27 +0000 Manifest next update: Tue 31 Mar 2026 14:18:27 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: ONyOkfz6boXlFa9nxTz5zVaitg8jFnBG2wZau6of/sg=) 2: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: x81djxirc4TZ7LBWsfaYDwm6dEqBh0TJcdGGB4pBfl8=) 3: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: uTwgdWpEtjV1ALHAM8OqP3F4AfwGv1rbWW6ZiHZWVyg=) 4: 074A1CE2F1FD11F0BDA01C59486F56BC.roa (hash: PbRvsMPaciwk4aKrh1Gz2k+CLsuW70foiScaNfZvE3I=) 5: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: kemAcHttVJ/67VTbPvla1uxc5lCQKg8ypYYWxu51V6g=) 6: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: x1jt7itPjnC6MQbNejsBQgbeqBxLH2bZYuNPNtNXfYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13671 (0x3567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Mar 24 14:18:27 2026 GMT Not After : Mar 31 14:18:27 2026 GMT Subject: CN=69c29d33-02f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:88:f8:cf:3c:1c:10:11:cb:5f:f0:e4:b1: 65:8c:50:55:bd:56:e7:ee:bd:ab:3e:32:73:31:94: c5:fc:6c:db:8b:8c:86:87:b4:2c:12:32:bf:a8:29: dd:7c:31:61:2b:5b:64:6c:4e:87:cf:b4:6f:e9:56: bd:4c:ff:f3:3b:b7:a7:87:3d:b2:c3:6f:30:26:19: 10:a1:81:52:9a:7d:3d:82:59:06:22:96:5a:de:e3: a6:43:34:8b:5a:20:c4:50:ed:06:2a:66:f1:67:63: 38:98:78:f9:70:a4:a7:84:0f:e8:5a:c4:b3:5f:4c: 91:d7:56:b2:ef:53:56:e4:ba:78:c8:c3:ca:d8:b3: 23:9e:97:15:6e:3d:6f:f5:ab:06:00:b5:d3:87:5b: 0c:43:65:75:23:e9:7b:61:c5:21:2b:b2:95:8a:6c: 92:2a:13:ab:9a:4b:21:81:2b:77:8a:b0:b5:28:d6: bc:9b:2a:b5:79:1f:7a:73:9d:f2:bd:ac:53:de:3f: b4:85:19:f0:89:ec:a9:b5:a4:84:44:1b:0e:48:9c: 6e:1d:1b:7e:7d:1a:72:87:e5:c5:8e:c6:a5:9a:c4: 5c:33:d4:20:4c:f6:f7:39:5c:d9:c1:a8:32:d3:10: 48:b1:43:7f:85:74:e0:ce:e7:38:47:86:8d:ef:1c: 73:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7C:E9:90:62:D3:44:D0:9C:67:F5:4C:1D:A3:2E:18:9C:1A:00:6E X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a1:37:62:69:62:14:92:44:95:0f:a3:d4:3e:0a:0b:a3:a5: 2a:fa:3c:41:b4:c3:47:56:12:3b:d7:dc:17:2d:ba:cc:74:32: 72:c8:de:bd:db:f0:d1:81:6b:57:34:06:b6:9d:dd:21:0c:34: 7f:f5:cf:f1:bc:81:ad:98:5a:43:3e:3b:fb:f5:ce:2e:2e:f8: a0:f6:58:97:f0:ae:69:e9:ab:b7:48:ee:7a:d8:07:0e:16:5b: 03:56:45:c3:63:19:d6:65:b5:a6:d4:54:54:07:b1:77:04:ff: 74:5e:80:06:55:8d:a6:88:f8:8b:5a:9f:b6:45:62:f6:b5:ad: b6:96:07:0f:5f:71:bf:d8:6d:9a:89:4a:a2:2b:a4:d7:34:b1: ae:44:d1:a4:f1:1b:a3:aa:03:5b:21:b6:cf:34:66:8d:b0:17: dc:fb:fe:59:2c:b6:8e:41:cc:07:ed:b1:12:88:ce:82:ec:a2: f8:b5:d9:c0:be:0a:c9:cb:48:6a:dc:36:07:a7:5f:08:34:40: d0:8b:05:68:a5:3c:c9:58:e8:a2:82:68:b9:b0:65:f4:d6:8a: 9b:41:a4:15:b9:d2:15:9d:0e:cd:9c:44:21:03:1e:b2:65:6a: 3c:4a:c3:b6:08:a3:d6:70:00:ab:6e:6b:f9:e5:e7:86:bb:87: 7e:a5:55:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwMzI0MTQxODI3WhcNMjYwMzMxMTQxODI3WjAYMRYwFAYD VQQDEw02OWMyOWQzMy0wMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUaI+M88HBARy1/w5LFljFBVvVbn7r2rPjJzMZTF/Gzbi4yGh7QsEjK/qCnd fDFhK1tkbE6Hz7Rv6Va9TP/zO7enhz2yw28wJhkQoYFSmn09glkGIpZa3uOmQzSL WiDEUO0GKmbxZ2M4mHj5cKSnhA/oWsSzX0yR11ay71NW5Lp4yMPK2LMjnpcVbj1v 9asGALXTh1sMQ2V1I+l7YcUhK7KVimySKhOrmkshgSt3irC1KNa8myq1eR96c53y vaxT3j+0hRnwieyptaSERBsOSJxuHRt+fRpyh+XFjsalmsRcM9QgTPb3OVzZwagy 0xBIsUN/hXTgzuc4R4aN7xxz1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNp86ZBi 00TQnGf1TB2jLhicGgBuMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtKE3YmliFJJElQ+j1D4KC6OlKvo8QbTDR1YSO9fcFy26zHQycsjevdvw0YFr VzQGtp3dIQw0f/XP8byBrZhaQz47+/XOLi74oPZYl/Cuaemrt0juetgHDhZbA1ZF w2MZ1mW1ptRUVAexdwT/dF6ABlWNpoj4i1qftkVi9rWttpYHD19xv9htmolKoiuk 1zSxrkTRpPEbo6oDWyG2zzRmjbAX3Pv+WSy2jkHMB+2xEojOguyi+LXZwL4KyctI atw2B6dfCDRA0IsFaKU8yVjoooJoubBl9NaKm0GkFbnSFZ0OzZxEIQMesmVqPErD tgij1nAAq25r+eXnhruHfqVVGA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:46 2026 by rpki-client