$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft File: xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json) Hash identifier: VSw1yZVorAkpB0x1vQNIGPmsBoqgLl5z4ax7K8mysc8= Subject key identifier: 42:A7:5D:41:84:66:9A:29:66:ED:79:8B:C3:F8:54:30:E2:08:C4:21 Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91 Certificate issuer: /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft Manifest number: 44 Signing time: Wed 25 Mar 2026 07:35:56 +0000 Manifest this update: Wed 25 Mar 2026 07:35:56 +0000 Manifest next update: Wed 01 Apr 2026 07:35:56 +0000 Files and hashes: 1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: Fppg0gZb8WmgtHAJpeTSDSwtn8u7d1dUUaeTb/JcHmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891 Validity Not Before: Mar 25 07:35:56 2026 GMT Not After : Apr 1 07:35:56 2026 GMT Subject: CN=69c3905c-c7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:9b:8e:73:ac:ba:0a:b3:ac:36:d4:39:31: b4:54:c6:1c:6d:09:61:58:e6:6d:76:31:71:89:c2: a9:c8:ec:f9:71:0f:8e:69:c7:2d:70:3f:d7:f6:55: df:b8:e7:66:d9:4c:67:1f:60:93:78:1e:8c:14:f7: 23:63:e0:98:35:93:7c:51:db:d7:5f:69:d5:c4:b8: 5b:3a:41:ae:e9:80:7a:ba:95:a4:7f:93:dd:4f:51: fd:30:7a:ab:f6:0e:1d:7c:0a:dc:14:02:db:cc:be: 4c:89:c2:98:fd:7d:1f:ec:b7:4f:0b:77:d8:7e:bc: 5d:22:a0:b5:41:4e:ac:a4:00:fc:b3:70:96:6b:d8: 5a:7e:e3:ae:72:02:38:db:b0:de:46:7e:08:bd:29: 9b:32:e9:f6:9c:1d:7d:9b:98:98:9e:7e:10:69:58: 06:36:aa:b0:ff:cc:c4:58:8a:e6:81:62:aa:00:7e: bd:38:39:9e:b9:82:a7:f2:e2:e9:0e:4c:28:f5:27: ad:27:19:a9:4a:8a:83:f5:c3:71:11:30:17:aa:16: 5f:f4:89:94:0e:f9:28:19:be:1e:fc:d3:65:78:65: ee:eb:3d:d8:6f:20:31:e6:8f:27:a0:15:d0:66:29: 9f:73:d2:7e:85:a0:7f:aa:53:81:af:ca:50:1c:28: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A7:5D:41:84:66:9A:29:66:ED:79:8B:C3:F8:54:30:E2:08:C4:21 X509v3 Authority Key Identifier: keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fd:1f:46:14:88:ec:9b:eb:36:64:39:16:91:c3:bc:33:8f: 2b:ba:9c:97:69:e7:61:87:54:a9:90:80:48:d8:2a:1c:a6:a6: d5:80:f3:e4:78:53:e7:f7:4a:b0:80:ff:23:87:53:f5:4f:f9: 4b:9e:e9:56:dd:bc:85:9c:1f:b8:b3:4a:63:61:28:5b:0d:28: 16:61:0c:d5:7d:d7:bc:34:34:b0:c7:ce:7b:b7:4b:56:ec:c0: 9d:73:0c:84:74:a6:24:59:98:96:9c:0e:32:84:78:e9:91:28: 00:08:df:66:b3:e6:ca:99:fc:e1:33:06:3c:26:07:eb:fd:5c: fb:53:ed:ef:21:bd:7e:3c:4e:51:c8:3b:26:30:c9:0f:14:64: 67:67:77:56:b6:d8:07:56:4c:eb:da:1e:fd:20:87:68:7c:bb: ff:50:f8:80:ae:83:c0:63:4f:dc:d3:c6:29:ab:15:c2:a7:3e: 87:88:4b:1a:0c:b6:3f:83:32:25:a9:3e:f2:4b:47:bb:06:f1: e3:81:d6:1f:6d:8a:6d:33:69:f5:d2:11:64:c1:c2:9e:73:23: 9f:bb:7a:a5:de:b0:bc:f0:5f:05:97:87:a2:70:2c:c4:35:88: fe:b2:65:dd:05:0b:ff:e2:71:62:dc:58:8e:7d:6c:69:0e:46: 2e:ce:77:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0YzRDExMC8GA1UEBRMoQzQ0NUEwMDRGQzQ0RDc1MTc5NUE5MTlEQjg0RjE0QTE2 MDQ1Mzg5MTAeFw0yNjAzMjUwNzM1NTZaFw0yNjA0MDEwNzM1NTZaMBgxFjAUBgNV BAMTDTY5YzM5MDVjLWM3ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5VpuOc6y6CrOsNtQ5MbRUxhxtCWFY5m12MXGJwqnI7PlxD45pxy1wP9f2Vd+4 52bZTGcfYJN4HowU9yNj4Jg1k3xR29dfadXEuFs6Qa7pgHq6laR/k91PUf0weqv2 Dh18CtwUAtvMvkyJwpj9fR/st08Ld9h+vF0ioLVBTqykAPyzcJZr2Fp+465yAjjb sN5Gfgi9KZsy6facHX2bmJiefhBpWAY2qrD/zMRYiuaBYqoAfr04OZ65gqfy4ukO TCj1J60nGalKioP1w3ERMBeqFl/0iZQO+SgZvh7802V4Ze7rPdhvIDHmjyegFdBm KZ9z0n6FoH+qU4GvylAcKApLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQqddQYRm milm7XmLw/hUMOIIxCEwHwYDVR0jBBgwFoAUxEWgBPxE11F5WpGduE8UoWBFOJEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjNELzg4RUQyMDRFQzZB MzExRjBCNjlBQzk1NUM0RjlBRTAyL3hFV2dCUHhFMTFGNVdwR2R1RThVb1dCRk9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEVXZ0JQeEUxMUY1V3BHZHVFOFVvV0JGT0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjNELzg4RUQyMDRFQzZBMzExRjBCNjlBQzk1NUM0RjlBRTAyL3hFV2dCUHhFMTFG NVdwR2R1RThVb1dCRk9KRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAq/R9GFIjsm+s2ZDkWkcO8M48rupyXaedhh1SpkIBI2CocpqbVgPPkeFPn90qw gP8jh1P1T/lLnulW3byFnB+4s0pjYShbDSgWYQzVfde8NDSwx857t0tW7MCdcwyE dKYkWZiWnA4yhHjpkSgACN9ms+bKmfzhMwY8Jgfr/Vz7U+3vIb1+PE5RyDsmMMkP FGRnZ3dWttgHVkzr2h79IIdofLv/UPiAroPAY0/c08YpqxXCpz6HiEsaDLY/gzIl qT7yS0e7BvHjgdYfbYptM2n10hFkwcKecyOfu3ql3rC88F8Fl4eicCzENYj+smXd BQv/4nFi3FiOfWxpDkYuzndp -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:47 2026 by rpki-client