$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft File: XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json) Hash identifier: 3v7RX4bfUVg343VQM4Gnu50m23KmpgdYIZPgrHPVx/w= Subject key identifier: 6E:7B:8D:7C:ED:08:FE:91:7F:11:95:73:2F:0F:3E:18:60:16:4E:3F Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 Certificate issuer: /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft Manifest number: 3D Signing time: Fri 27 Mar 2026 08:04:17 +0000 Manifest this update: Fri 27 Mar 2026 08:04:16 +0000 Manifest next update: Fri 03 Apr 2026 08:04:16 +0000 Files and hashes: 1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: o9e3lGxsAlaStC9RN3XacBIy3hLkCwczyKptAxSYId4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 08:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Validity Not Before: Mar 27 08:04:16 2026 GMT Not After : Apr 3 08:04:16 2026 GMT Subject: CN=69c63a01-2474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:68:24:24:7b:d5:3c:f9:dd:4e:cb:0b:d6: d4:40:e0:78:22:68:4f:06:8f:53:5f:e0:d7:3f:f1: 0f:96:40:9a:bd:25:d1:31:c2:22:4e:61:cd:58:84: d3:15:31:f8:e8:b9:20:e2:3d:cf:b2:40:93:6e:2c: 33:17:5a:37:19:de:5c:02:09:4b:d6:5f:e3:47:56: 9b:93:b7:4e:2c:33:31:ab:38:e3:08:7c:db:4b:3d: 32:d4:86:2c:74:76:d7:a8:e0:a0:57:d1:d4:d3:9a: 5b:c2:1a:8e:10:c0:07:3f:c8:f5:17:0c:79:dd:86: d9:ba:c5:eb:76:f1:9f:b5:26:57:2d:e5:e1:5f:51: 98:9e:f9:d2:23:25:b0:20:58:dd:f4:a0:5d:d7:13: f0:86:54:ab:d5:6b:ed:e8:f9:72:6a:a6:9f:3a:b5: d5:ec:33:62:ea:0e:bd:b7:45:f0:cf:53:cc:e1:6a: 85:ca:9b:0d:fe:b7:42:d9:e6:5d:81:8a:c4:eb:60: af:51:4a:1a:ac:fd:39:11:43:ff:3b:a9:4f:b7:29: 90:d0:24:0a:97:33:0a:bc:90:e7:84:a8:8a:56:7d: 10:ee:ca:28:92:70:57:9a:d5:83:0f:10:c4:60:e5: dd:f9:7a:02:a1:44:1f:82:e6:44:47:d0:71:cf:54: 5d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7B:8D:7C:ED:08:FE:91:7F:11:95:73:2F:0F:3E:18:60:16:4E:3F X509v3 Authority Key Identifier: keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a2:f1:f8:c0:22:97:c4:15:5e:df:1e:70:2b:a6:7e:1b:dc: 56:15:0b:41:a1:fb:71:52:37:34:38:d6:05:52:ae:14:ce:b3: ef:65:98:8f:15:9a:b1:9d:e0:95:32:10:96:f3:5e:dc:11:1d: 2e:df:5a:b4:eb:02:b3:27:ef:7f:0e:ac:9e:b0:c1:ba:f6:27: 63:8c:f2:5c:c3:a8:2d:85:92:07:0f:58:49:a9:86:76:8e:2a: f7:a1:55:c8:db:92:da:8c:23:b3:e0:e3:d9:89:59:3f:b7:72: ef:ea:ee:a8:ef:b0:58:40:ab:ba:80:ef:be:11:42:85:7a:da: 91:64:e2:05:7a:59:81:81:d0:13:bc:e7:20:57:89:c7:f7:d9: 07:f4:37:16:81:8b:70:1b:16:47:ba:3d:b0:a8:5f:5f:10:84: 55:36:11:a6:e9:55:c1:e2:9c:f0:5b:8d:eb:8f:43:2d:89:11: 7a:73:28:95:33:e1:8f:e0:c2:60:10:d6:34:f1:d9:df:da:98: f1:84:63:79:d4:09:51:bd:20:30:d5:a6:16:c9:5f:0d:c8:aa: 63:11:64:fd:f3:70:31:23:0a:ae:83:74:ec:07:46:ad:1a:f9: d5:3b:85:b3:9b:81:d5:f5:53:c9:91:69:38:f0:58:6f:29:d6: 4e:4a:39:99 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NUY4QTExMC8GA1UEBRMoNUUyODhBMjg4MDRBRkZFRUZBMEU0NDQzMTA5NzlEN0NF RTk4RTQzMjAeFw0yNjAzMjcwODA0MTZaFw0yNjA0MDMwODA0MTZaMBgxFjAUBgNV BAMTDTY5YzYzYTAxLTI0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLYmgkJHvVPPndTssL1tRA4HgiaE8Gj1Nf4Nc/8Q+WQJq9JdExwiJOYc1YhNMV MfjouSDiPc+yQJNuLDMXWjcZ3lwCCUvWX+NHVpuTt04sMzGrOOMIfNtLPTLUhix0 dteo4KBX0dTTmlvCGo4QwAc/yPUXDHndhtm6xet28Z+1Jlct5eFfUZie+dIjJbAg WN30oF3XE/CGVKvVa+3o+XJqpp86tdXsM2LqDr23RfDPU8zhaoXKmw3+t0LZ5l2B isTrYK9RShqs/TkRQ/87qU+3KZDQJAqXMwq8kOeEqIpWfRDuyiiScFea1YMPEMRg 5d35egKhRB+C5kRH0HHPVF1rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbnuNfO0I /pF/EZVzLw8+GGAWTj8wHwYDVR0jBBgwFoAUXiiKKIBK/+76DkRDEJedfO6Y5DIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1RjhBL0Q2MTU2MTAwRDNE ODExRjBCNjRCRTY1MkM0RjlBRTAyL1hpaUtLSUJLXy03NkRrUkRFSmVkZk82WTVE SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlpS0tJQktfLTc2RGtSREVKZWRmTzZZNURJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 RjhBL0Q2MTU2MTAwRDNEODExRjBCNjRCRTY1MkM0RjlBRTAyL1hpaUtLSUJLXy03 NkRrUkRFSmVkZk82WTVESS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRovH4wCKXxBVe3x5wK6Z+G9xWFQtBoftxUjc0ONYFUq4UzrPvZZiPFZqxneCV MhCW817cER0u31q06wKzJ+9/DqyesMG69idjjPJcw6gthZIHD1hJqYZ2jir3oVXI 25LajCOz4OPZiVk/t3Lv6u6o77BYQKu6gO++EUKFetqRZOIFelmBgdATvOcgV4nH 99kH9DcWgYtwGxZHuj2wqF9fEIRVNhGm6VXB4pzwW43rj0MtiRF6cyiVM+GP4MJg ENY08dnf2pjxhGN51AlRvSAw1aYWyV8NyKpjEWT983AxIwqug3TsB0atGvnVO4Wz m4HV9VPJkWk48FhvKdZOSjmZ -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:37 2026 by rpki-client