$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json) Hash identifier: vtBg/JuzCxtYhpJna4S/KZOy8WdK4g2/hA6Tqg3KvTE= Subject key identifier: F1:FC:4B:CD:06:C7:2A:87:B1:C6:69:D1:F6:7E:05:70:B4:FC:5E:BC Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft Manifest number: 43 Signing time: Wed 25 Mar 2026 07:34:36 +0000 Manifest this update: Wed 25 Mar 2026 07:34:36 +0000 Manifest next update: Wed 01 Apr 2026 07:34:36 +0000 Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: kivJO8psPmWCARKeJL/A8WU0ZBIchCNnP+dPzjjf/8E=) 2: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wK4ZUFHP7svDczy0YCkmOX/r2Vqw7guLhrYQg+0Ja2I=) 3: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: vM2NU/PkWzUmY2ujZBzsjC1mzDOV/eoIUaPwXnbjazI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Validity Not Before: Mar 25 07:34:36 2026 GMT Not After : Apr 1 07:34:36 2026 GMT Subject: CN=69c3900c-7e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:e9:d0:de:17:01:97:18:95:8f:85:0b:c3: 8b:dd:4a:2d:49:1e:9c:30:74:04:37:64:25:45:8e: c2:0a:0a:c8:2c:f9:b7:42:24:c2:11:3d:9e:47:e4: f7:7e:b5:d3:82:f6:19:cc:2a:e4:10:60:27:f9:f0: 79:97:57:51:4b:43:fe:ed:95:06:50:e6:60:31:13: 8b:24:0b:d2:43:b3:16:a7:52:93:d3:87:bb:cf:6b: 7d:b1:67:55:ce:58:d9:c6:42:a3:4c:07:57:0c:76: 9b:9c:9c:7a:8e:a0:57:bd:c5:b7:9b:a3:9f:7d:17: cd:23:9f:e1:da:54:fa:a1:1c:dd:34:29:f4:3c:0c: a2:5f:df:bf:68:3f:16:86:c8:ff:3a:a7:f4:39:ed: 91:d2:90:70:85:a7:e1:5d:83:55:aa:6d:1f:7a:3f: ad:c6:60:fb:04:3e:0f:96:cd:e7:6c:fd:15:43:ec: 8b:7a:bf:bb:85:6f:18:b6:6b:0b:f3:db:f9:3c:67: e1:64:26:48:78:90:dc:79:63:7c:f2:f4:da:a1:b6: 0e:82:89:34:fe:83:25:4a:81:31:a2:30:bd:3a:91: f8:4d:c5:5f:4f:97:8d:93:84:a7:9d:17:97:42:c6: a4:90:a4:d2:68:b1:ce:e4:6a:31:e9:e6:ff:08:d2: 79:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FC:4B:CD:06:C7:2A:87:B1:C6:69:D1:F6:7E:05:70:B4:FC:5E:BC X509v3 Authority Key Identifier: keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:eb:22:45:46:54:93:ad:dd:24:08:11:f3:ac:a1:2c:61:cc: fd:ff:d7:bb:eb:57:39:40:80:c1:c3:63:6f:20:ed:18:1c:18: 78:cd:9b:c2:f5:3d:ac:3d:e9:ea:2d:12:d8:70:4b:14:6c:40: 09:3a:c3:dc:4f:85:4b:a1:86:45:30:f5:c1:7e:20:d4:94:24: 37:41:9e:b2:4d:12:2a:9d:76:7e:fa:16:86:72:fe:b4:b4:42: d5:d0:6a:72:5d:c9:8b:5f:46:b3:51:4b:62:09:7b:e1:ed:af: b7:2a:4e:89:39:20:b1:66:60:77:da:f8:52:9e:87:94:ef:f0: 4c:06:04:66:24:6b:28:37:19:af:c2:10:c8:b1:de:3b:5d:6c: 76:e6:7a:88:08:9a:8c:23:76:60:aa:59:61:af:9a:39:3b:32: 82:d0:ba:92:82:e8:d3:7d:72:3e:76:bf:55:14:3f:1b:39:5d: 03:ca:81:64:8e:37:80:e8:2f:ca:19:88:d8:5a:fa:20:44:cf: 0a:1b:bb:fa:b1:d9:7f:25:fa:15:ed:45:53:06:27:91:fa:92: a8:e7:38:22:69:0e:8b:bd:28:e3:3c:6b:e1:bc:ca:09:26:25: e0:84:23:d0:5f:f2:e2:13:78:ca:5e:08:41:97:3d:c8:81:97: 41:b0:6d:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0ZDNTExMC8GA1UEBRMoNUNDQTk4Rjg3OEM5MjQwMkUyRjEwNEUyQjhCREFCODE5 MEIxRkFBMjAeFw0yNjAzMjUwNzM0MzZaFw0yNjA0MDEwNzM0MzZaMBgxFjAUBgNV BAMTDTY5YzM5MDBjLTdlNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcIunQ3hcBlxiVj4ULw4vdSi1JHpwwdAQ3ZCVFjsIKCsgs+bdCJMIRPZ5H5Pd+ tdOC9hnMKuQQYCf58HmXV1FLQ/7tlQZQ5mAxE4skC9JDsxanUpPTh7vPa32xZ1XO WNnGQqNMB1cMdpucnHqOoFe9xbebo599F80jn+HaVPqhHN00KfQ8DKJf379oPxaG yP86p/Q57ZHSkHCFp+Fdg1WqbR96P63GYPsEPg+Wzeds/RVD7It6v7uFbxi2awvz 2/k8Z+FkJkh4kNx5Y3zy9Nqhtg6CiTT+gyVKgTGiML06kfhNxV9Pl42ThKedF5dC xqSQpNJosc7kajHp5v8I0nmFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8fxLzQbH KoexxmnR9n4FcLT8XrwwHwYDVR0jBBgwFoAUXMqY+HjJJALi8QTiuL2rgZCx+qIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDRkM1Lzk5OUYwMjQ4QzVB QjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1x SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWE1xWS1IakpKQUxpOFFUaXVMMnJnWkN4LXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD RkM1Lzk5OUYwMjQ4QzVBQjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFM aThRVGl1TDJyZ1pDeC1xSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCi6yJFRlSTrd0kCBHzrKEsYcz9/9e761c5QIDBw2NvIO0YHBh4zZvC9T2sPenq LRLYcEsUbEAJOsPcT4VLoYZFMPXBfiDUlCQ3QZ6yTRIqnXZ++haGcv60tELV0Gpy XcmLX0azUUtiCXvh7a+3Kk6JOSCxZmB32vhSnoeU7/BMBgRmJGsoNxmvwhDIsd47 XWx25nqICJqMI3Zgqllhr5o5OzKC0LqSgujTfXI+dr9VFD8bOV0DyoFkjjeA6C/K GYjYWvogRM8KG7v6sdl/JfoV7UVTBieR+pKo5zgiaQ6LvSjjPGvhvMoJJiXghCPQ X/LiE3jKXghBlz3IgZdBsG3q -----END CERTIFICATE-----Generated at Thu Mar 26 07:35:27 2026 by rpki-client