$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: NRBnEDniy8bK24QZb9iHd8J9BFB05NlwF0wY7zd+tmQ= Subject key identifier: 76:FE:17:8C:F4:EE:20:B9:A7:27:D3:D2:52:F7:79:7A:F3:29:62:B9 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 044D Signing time: Wed 25 Mar 2026 00:04:13 +0000 Manifest this update: Wed 25 Mar 2026 00:04:12 +0000 Manifest next update: Wed 01 Apr 2026 00:04:12 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: OVvVItWtWaatN7jcDLQJjYsYPjfIx6QUge4vrFgyuiI=) 2: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 3: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) 4: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) 5: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: ORf56ozU5OuuYhJ3jJBGO/DKLOqT1LcBoA7dCCaBtMw=) 6: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) 7: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) 8: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) 9: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1171 (0x493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Mar 25 00:04:12 2026 GMT Not After : Apr 1 00:04:12 2026 GMT Subject: CN=69c3267d-2eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:78:d0:0b:85:a9:7f:73:be:d6:6b:01:9f:66: 32:f9:88:11:65:ee:dd:a8:38:77:d7:14:d2:8e:88: 0d:d7:5c:c3:40:05:68:74:68:15:be:7f:27:f0:13: 41:fe:3c:e4:36:f6:e5:72:08:11:5e:e9:10:f2:98: 7a:bc:db:de:54:cd:ba:c0:b1:54:5f:7e:f8:da:38: a4:14:ff:f6:b4:9a:0e:ea:94:6e:f9:1e:39:ba:f8: e3:1f:1f:d6:73:cf:7e:e9:7b:d0:cf:db:6c:24:60: 06:0c:89:96:c2:97:fe:45:8d:79:c5:04:93:23:02: 64:24:c1:26:4d:2e:76:97:d4:e0:1a:2c:ee:bf:77: 8e:1d:57:6d:12:05:02:65:97:df:ae:8e:d7:50:ab: b3:eb:9c:b0:9a:71:27:00:02:53:3a:d8:c9:b5:c0: 58:1b:f2:48:82:47:6a:73:93:81:b4:8d:15:af:fb: 89:9f:10:22:60:07:56:c9:2f:ae:68:0d:e2:bf:62: c5:77:eb:45:a4:e0:8f:33:0b:54:aa:d7:c4:a6:f9: 4e:13:6f:ba:50:74:3a:02:e4:38:a6:13:89:0d:1d: bc:ca:c2:a1:36:a2:e8:6e:15:77:32:dc:37:2e:e0: e3:9f:bb:dc:8d:b4:61:86:50:0c:74:1a:8c:bf:13: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FE:17:8C:F4:EE:20:B9:A7:27:D3:D2:52:F7:79:7A:F3:29:62:B9 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:44:6b:06:d4:fb:07:1f:3c:e4:7a:ce:9e:f3:a1:16:40:e0: 6b:4e:9c:df:c7:c6:2e:41:31:6b:74:e4:c2:e8:b2:21:03:22: 2e:dd:ab:5b:fd:80:c6:7a:2b:f5:f2:af:7a:e0:6b:f6:9b:0f: 74:c7:13:5c:8c:38:cb:65:64:b2:dc:02:23:95:bd:85:cd:eb: 39:62:3f:9c:2c:4c:e7:1a:75:28:26:96:34:f3:a0:a7:8d:01: 9c:3e:aa:3e:48:da:e0:5c:62:72:87:63:ff:eb:e1:6e:db:a0: 22:5e:2e:2d:a0:07:fb:54:cf:4a:59:a9:52:c0:d8:dc:01:0d: 93:2d:fd:17:ec:98:9b:a0:1a:8d:7e:74:a1:f5:f3:3f:3a:8f: b5:47:d5:45:dd:01:65:59:c5:8e:af:44:25:39:0d:b1:78:f7: 8a:ca:cc:11:8f:8b:85:48:3a:0c:d6:df:ea:eb:1c:e7:4b:7a: e9:34:35:a7:bc:1d:49:cd:89:5f:ae:42:4f:ea:c5:0a:ce:0a: 7a:15:54:54:e8:c8:78:e9:e8:d1:df:18:5d:f4:fd:e5:1a:2c: 55:2b:b8:0b:bb:66:31:e3:71:d3:17:5b:28:e2:10:1b:d4:e3: 6f:44:43:0d:be:2c:0a:4f:06:ed:d0:53:07:85:50:57:25:af: c1:c8:7f:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwMzI1MDAwNDEyWhcNMjYwNDAxMDAwNDEyWjAYMRYwFAYD VQQDEw02OWMzMjY3ZC0yZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XjQC4Wpf3O+1msBn2Yy+YgRZe7dqDh31xTSjogN11zDQAVodGgVvn8n8BNB /jzkNvblcggRXukQ8ph6vNveVM26wLFUX3742jikFP/2tJoO6pRu+R45uvjjHx/W c89+6XvQz9tsJGAGDImWwpf+RY15xQSTIwJkJMEmTS52l9TgGizuv3eOHVdtEgUC ZZffro7XUKuz65ywmnEnAAJTOtjJtcBYG/JIgkdqc5OBtI0Vr/uJnxAiYAdWyS+u aA3iv2LFd+tFpOCPMwtUqtfEpvlOE2+6UHQ6AuQ4phOJDR28ysKhNqLobhV3Mtw3 LuDjn7vcjbRhhlAMdBqMvxPxsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHb+F4z0 7iC5pyfT0lL3eXrzKWK5MB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj0RrBtT7Bx885HrOnvOhFkDga06c38fGLkExa3TkwuiyIQMiLt2rW/2Axnor 9fKveuBr9psPdMcTXIw4y2VkstwCI5W9hc3rOWI/nCxM5xp1KCaWNPOgp40BnD6q Pkja4Fxicodj/+vhbtugIl4uLaAH+1TPSlmpUsDY3AENky39F+yYm6AajX50ofXz PzqPtUfVRd0BZVnFjq9EJTkNsXj3isrMEY+LhUg6DNbf6usc50t66TQ1p7wdSc2J X65CT+rFCs4KehVUVOjIeOno0d8YXfT95RosVSu4C7tmMeNx0xdbKOIQG9Tjb0RD Db4sCk8G7dBTB4VQVyWvwch/Zg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:36:04 2026 by rpki-client