$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: LFnfWvyTk+P46skBFdgr7nebrn0moGkrCpStq4yRYng= Subject key identifier: 1F:F5:75:D5:2F:52:90:BB:82:F0:65:3E:8E:DE:F7:F0:1B:13:3D:67 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 0234 Signing time: Wed 25 Mar 2026 01:59:59 +0000 Manifest this update: Wed 25 Mar 2026 01:59:59 +0000 Manifest next update: Wed 01 Apr 2026 01:59:59 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: OO6hy5rBt78AqcdivMEr4rh/uHMCjCnbYijRM6s9KDU=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: YiM67MBOQyQiFAZiHKZnFOav4WykQTG7bAqQs/W9ABA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Mar 25 01:59:59 2026 GMT Not After : Apr 1 01:59:59 2026 GMT Subject: CN=69c3419f-a308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:3f:5e:c7:00:de:5c:97:ca:b5:02:e8:88: 1b:50:ca:d7:5e:8a:cf:57:35:fe:0a:cd:65:7e:4a: e9:80:80:46:a8:6a:92:6d:d5:88:ff:51:d0:e5:92: 84:ad:00:9a:ff:90:fb:22:42:df:1d:09:ff:3c:40: c5:ac:8c:0d:3f:da:8f:66:6e:dc:8e:25:6b:ab:1d: 57:d5:f4:40:48:c3:4e:b3:7b:23:13:dc:aa:e7:ae: 0c:0e:9d:0a:c3:4d:cd:6d:ac:c9:ea:5f:f3:19:94: 38:1f:af:ef:5e:8f:05:1e:8d:5f:3b:ae:66:9f:3e: 5d:cb:ae:ca:b5:e0:41:49:7c:41:ea:76:78:d5:6f: a1:d3:dc:c8:44:e1:c3:22:92:1e:a2:78:f9:f5:99: 21:e5:90:13:1e:8c:73:36:89:63:a6:cd:93:64:b3: 7d:d9:03:94:2b:2d:fb:15:c0:1e:4c:39:37:ca:b5: 11:10:c3:4d:b4:dc:15:ff:92:24:dc:d8:97:ec:88: 6d:15:f3:1e:b7:a1:0f:99:51:77:84:ff:cf:ee:2a: f1:52:f0:bf:e5:10:49:b2:67:35:97:17:6e:dd:fa: 6d:90:4a:d8:48:e5:ba:3b:81:83:95:35:9b:d0:d2: e4:cf:6d:aa:0d:95:77:43:7b:38:41:77:3b:c2:79: a0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:75:D5:2F:52:90:BB:82:F0:65:3E:8E:DE:F7:F0:1B:13:3D:67 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a8:02:56:83:d6:9e:c2:37:81:9a:01:90:de:b7:32:06:ed: 30:0a:87:be:b3:73:70:0c:c5:c2:d3:9e:5a:6e:97:ac:46:8d: 11:d3:b8:09:bc:36:be:0c:25:cb:08:2b:4a:65:51:68:fa:58: db:19:17:7a:22:a7:0d:8b:6d:95:74:f7:dd:3c:40:0a:fa:8b: 44:d1:5a:ee:0a:6c:26:fe:58:12:6d:5e:5e:dc:51:b1:ed:7b: 11:6a:e8:0e:7e:52:07:3b:cc:36:c4:50:d0:42:4c:54:a9:4c: a3:51:19:31:ac:6d:6b:04:2c:54:d5:12:8d:6e:e0:6b:c9:92: 8b:a6:3f:b5:71:6e:2e:74:cb:17:0f:d3:27:b7:f7:e9:cb:33: 6d:d8:c0:68:07:ea:61:40:b2:d9:e9:52:79:6f:4b:00:d8:3e: 6f:5b:a7:ef:20:45:e5:64:b1:2c:44:e0:b3:d0:8b:b1:ba:85: 70:75:b6:de:d7:7a:e2:96:88:ff:69:ae:75:53:02:b8:8f:7b: 4c:da:4d:9c:45:76:38:60:8d:54:f8:5d:78:ed:54:f8:7d:d7: 2a:b3:22:42:9b:1e:aa:b0:80:9f:b2:fb:b5:8c:63:cf:02:5a: 72:e3:14:22:13:fb:92:21:8f:7d:43:06:d8:98:5e:1d:61:e2: d8:4a:c7:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjYwMzI1MDE1OTU5WhcNMjYwNDAxMDE1OTU5WjAYMRYwFAYD VQQDEw02OWMzNDE5Zi1hMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue0/XscA3lyXyrUC6IgbUMrXXorPVzX+Cs1lfkrpgIBGqGqSbdWI/1HQ5ZKE rQCa/5D7IkLfHQn/PEDFrIwNP9qPZm7cjiVrqx1X1fRASMNOs3sjE9yq564MDp0K w03NbazJ6l/zGZQ4H6/vXo8FHo1fO65mnz5dy67KteBBSXxB6nZ41W+h09zIROHD IpIeonj59Zkh5ZATHoxzNoljps2TZLN92QOUKy37FcAeTDk3yrUREMNNtNwV/5Ik 3NiX7IhtFfMet6EPmVF3hP/P7irxUvC/5RBJsmc1lxdu3fptkErYSOW6O4GDlTWb 0NLkz22qDZV3Q3s4QXc7wnmgzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/1ddUv UpC7gvBlPo7e9/AbEz1nMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb6gCVoPWnsI3gZoBkN63MgbtMAqHvrNzcAzFwtOeWm6XrEaNEdO4Cbw2vgwl ywgrSmVRaPpY2xkXeiKnDYttlXT33TxACvqLRNFa7gpsJv5YEm1eXtxRse17EWro Dn5SBzvMNsRQ0EJMVKlMo1EZMaxtawQsVNUSjW7ga8mSi6Y/tXFuLnTLFw/TJ7f3 6cszbdjAaAfqYUCy2elSeW9LANg+b1un7yBF5WSxLETgs9CLsbqFcHW23td64paI /2mudVMCuI97TNpNnEV2OGCNVPhdeO1U+H3XKrMiQpseqrCAn7L7tYxjzwJacuMU IhP7kiGPfUMG2JheHWHi2ErHVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:50 2026 by rpki-client