$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json) Hash identifier: Cs9PSs45IhrsInGJ18HYsRLcPBkscBkAM5PCsIzRcw0= Subject key identifier: DB:F4:A1:65:1A:66:16:05:EE:C7:2D:80:7C:A1:B9:C9:A0:F4:EE:AF Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Certificate serial: 10F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft Manifest number: 10E8 Signing time: Thu 26 Mar 2026 17:15:34 +0000 Manifest this update: Thu 26 Mar 2026 17:15:33 +0000 Manifest next update: Thu 02 Apr 2026 17:15:33 +0000 Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: oHfMS4Pa9Cm7bFD///g0Fw/j4LyKeaH9jOvbLSEe+9k=) 2: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 2eE+CDRlSHY5Ior8e4vYqF46aXCqPlrmKLCnk7wj7fQ=) 3: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: HFvIVd/rWVPzXXKKiOWON2cvnwjOeJoH4rrOAqA8YGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4342 (0x10f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Validity Not Before: Mar 26 17:15:33 2026 GMT Not After : Apr 2 17:15:33 2026 GMT Subject: CN=69c569b5-2ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:cc:78:1d:f7:e4:12:f4:c5:44:c2:db:aa: 14:3a:18:04:2d:3c:ff:d2:4f:0d:67:83:d7:c5:6e: 85:93:fc:10:02:9e:79:3d:07:7f:1b:bd:e0:61:2d: a8:b6:1b:69:03:aa:c3:2c:d7:80:bf:e9:1c:ed:0a: 46:96:28:1e:2b:52:4e:61:e2:fc:ae:2a:0c:22:af: 5a:e0:e6:ed:c3:f3:a9:36:60:64:95:8e:a7:04:8e: 7b:02:67:75:a9:19:69:56:8f:db:ca:ea:3d:bc:26: 85:1c:09:95:6c:30:e1:2c:1f:1c:ff:4b:7b:c3:b7: 8b:40:4c:57:44:ef:ea:cb:63:95:3d:7d:87:37:e5: 05:14:db:a5:5a:66:fd:a8:30:44:d1:66:7b:27:25: 46:b9:27:2f:36:c1:c3:75:c1:11:0e:b8:4d:b9:2e: 74:99:5d:bd:19:2b:f5:2c:3a:c7:7c:6a:c9:1f:75: 9d:b3:e8:dd:35:de:0b:9d:79:00:19:31:5e:06:2a: ac:ae:3b:de:1a:44:ee:8f:86:56:eb:5b:64:88:e1: 4e:11:ca:3a:7c:3d:58:c1:d6:47:e2:d1:33:fa:40: 36:c1:16:dc:9d:e2:11:9c:d9:9d:a6:ed:39:9b:0b: 16:3f:70:1d:bd:f9:1b:6e:7b:81:66:b8:61:ed:b4: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F4:A1:65:1A:66:16:05:EE:C7:2D:80:7C:A1:B9:C9:A0:F4:EE:AF X509v3 Authority Key Identifier: keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3c:4d:71:f2:60:96:b8:84:76:41:a8:ca:51:bb:53:46:14: a2:fd:2f:06:87:21:ca:0d:05:49:ab:bf:7a:32:2b:0e:05:9c: fd:b1:6c:b8:6b:68:ac:f4:39:4a:bc:5b:f7:fa:cb:a4:c1:45: 24:ea:97:e7:55:95:ed:cc:0b:15:d1:6f:a7:7e:09:4e:ad:8c: b1:db:92:09:52:7a:fe:9c:d4:c4:f4:34:d7:61:78:07:79:29: a8:b0:33:bf:5a:c4:57:ed:ca:b6:89:55:c9:69:6f:51:ea:9f: 61:64:e0:cb:e0:00:36:b9:5e:b2:39:72:b2:c5:fb:a5:80:a1: b2:03:fb:e5:e6:a0:07:51:02:1d:c3:ad:89:d3:b9:be:05:29: 9e:ef:81:3a:7f:3d:1e:bb:71:72:59:4f:f9:ba:28:4b:cd:58: 7d:aa:bd:de:63:de:1a:ad:c9:ec:4e:a0:4d:29:37:a1:50:24: 73:f4:ce:ec:db:28:c9:45:93:55:54:40:12:db:eb:7b:c1:f4: b3:37:19:8d:f8:4f:38:30:6b:29:ad:e9:e9:13:70:39:40:80: c8:da:df:09:84:b2:41:bf:6f:b8:b4:a1:35:af:a5:fe:ab:60: b0:4d:50:55:a0:6d:80:54:b1:66:2f:40:be:83:9c:6d:35:f2: 03:d8:0a:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1 MUEyMzUwQUYwHhcNMjYwMzI2MTcxNTMzWhcNMjYwNDAyMTcxNTMzWjAYMRYwFAYD VQQDEw02OWM1NjliNS0yZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqi3MeB335BL0xUTC26oUOhgELTz/0k8NZ4PXxW6Fk/wQAp55PQd/G73gYS2o thtpA6rDLNeAv+kc7QpGligeK1JOYeL8rioMIq9a4Obtw/OpNmBklY6nBI57Amd1 qRlpVo/byuo9vCaFHAmVbDDhLB8c/0t7w7eLQExXRO/qy2OVPX2HN+UFFNulWmb9 qDBE0WZ7JyVGuScvNsHDdcERDrhNuS50mV29GSv1LDrHfGrJH3Wds+jdNd4LnXkA GTFeBiqsrjveGkTuj4ZW61tkiOFOEco6fD1YwdZH4tEz+kA2wRbcneIRnNmdpu05 mwsWP3AdvfkbbnuBZrhh7bS1PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNv0oWUa ZhYF7sctgHyhucmg9O6vMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1 cVIxejAyUTg2N3RSb2pVSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABTxNcfJglriEdkGoylG7U0YUov0vBochyg0FSau/ejIrDgWc/bFsuGtorPQ5 Srxb9/rLpMFFJOqX51WV7cwLFdFvp34JTq2MsduSCVJ6/pzUxPQ012F4B3kpqLAz v1rEV+3KtolVyWlvUeqfYWTgy+AANrlesjlyssX7pYChsgP75eagB1ECHcOtidO5 vgUpnu+BOn89HrtxcllP+booS81Yfaq93mPeGq3J7E6gTSk3oVAkc/TO7NsoyUWT VVRAEtvre8H0szcZjfhPODBrKa3p6RNwOUCAyNrfCYSyQb9vuLShNa+l/qtgsE1Q VaBtgFSxZi9AvoOcbTXyA9gKpA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:54:19 2026 by rpki-client