$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: NZ5+JKgdzObDS1r6yKpkp7CjunUIVXuHcf6t7g6ZJps= Subject key identifier: 74:39:CD:83:B8:7B:BB:2E:C1:89:52:7E:3B:DB:62:50:B8:09:9C:D2 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 01B7 Signing time: Wed 25 Mar 2026 03:39:30 +0000 Manifest this update: Wed 25 Mar 2026 03:39:29 +0000 Manifest next update: Wed 01 Apr 2026 03:39:29 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: Pm7YyYP+WLLAIaAeP0Kf2jt9UHdb9QrULd6BngOdf9c=) 2: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: xo/EJ3CaHdIPdWdGQ1WzSAADuENiwShLJFxclFWUKsM=) 3: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: A2+Rc3xoTrncaTR95Sq9MBAmQnYMit+OOLZAoM52Nuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Mar 25 03:39:29 2026 GMT Not After : Apr 1 03:39:29 2026 GMT Subject: CN=69c358f1-dc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:d0:2c:b1:6c:73:7d:87:07:db:0f:43:f4: 4f:bf:95:f9:af:f9:56:92:d2:f4:4e:2e:1f:e1:98: f1:69:d9:15:b1:dc:b8:61:95:6e:c7:73:4e:3b:14: a6:09:9d:dd:ba:9b:0e:6b:4d:38:e2:df:2d:64:22: da:1b:71:d6:22:c5:a6:d1:85:5d:97:2a:51:ee:8b: c2:8f:5f:94:58:b1:ce:b4:42:80:8b:8d:ff:15:57: c9:9f:2c:27:64:6c:3a:94:d5:b4:5e:06:d2:f9:6b: 1c:4b:38:d8:88:16:7f:52:74:8f:93:b6:9e:1b:64: d1:8b:3c:9f:7d:e7:72:09:20:ff:10:8f:07:dd:71: b3:54:a5:24:70:b7:56:61:c3:8f:9c:f2:f6:ab:d2: 4d:84:7a:a8:7c:2f:1f:4c:ab:31:f6:6e:8a:a8:3d: 77:3a:59:3f:73:a4:64:ff:f9:36:a4:cf:b2:bb:c4: 67:27:bc:5e:28:28:57:71:d2:5f:69:8b:af:3f:77: 24:b0:cf:5f:59:5b:c5:89:92:e8:dc:21:8b:b5:db: ce:07:5e:2f:a5:db:aa:e8:fe:06:b3:28:13:c6:10: a8:99:2b:10:07:5e:f5:76:82:00:dc:fb:3e:34:a3: 03:d7:a2:26:44:14:3b:5e:0e:02:98:68:8e:82:38: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:39:CD:83:B8:7B:BB:2E:C1:89:52:7E:3B:DB:62:50:B8:09:9C:D2 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3e:05:76:91:c4:36:9c:5f:eb:7a:fa:73:2f:a3:a7:d9:d2: cd:a4:6f:ee:3d:0f:bb:0e:92:a8:2d:5f:19:3d:c0:2a:ea:52: 06:67:e2:dd:27:fc:d7:95:0b:11:e4:9a:95:83:94:e7:1a:61: b1:f5:a0:63:0f:3e:b9:8d:cd:38:8e:aa:69:51:6d:a5:41:41: 1f:6d:39:d9:58:95:f5:aa:37:5d:ee:11:4e:bd:ae:50:8f:35: 65:27:5f:9e:75:e0:ec:30:3d:6a:53:c7:1c:42:e5:1b:3d:4c: cc:3e:73:02:00:26:48:a4:11:e3:76:0f:51:e0:71:8a:f7:6b: ca:df:72:fd:75:c2:0a:63:f1:ac:d0:24:84:b2:6c:ff:c1:d1: e6:ff:82:68:26:a5:6e:80:b2:7c:f1:77:81:9c:79:75:dd:f8: 1a:5d:a9:0d:e3:2c:c5:31:bf:78:9d:67:39:66:4d:64:c0:96: 0c:fe:e5:51:93:db:9a:f2:6d:0b:cf:76:ab:1c:23:50:df:09: 4a:d5:13:d3:a0:16:da:65:de:41:db:0d:18:30:06:ad:d3:5a: a6:99:b4:d9:ed:45:e5:94:05:6c:74:d3:0e:22:fd:cb:6e:9e: 9a:0a:04:5b:cb:de:1d:72:e8:e1:9b:e2:a0:77:5a:ae:e4:31: 6b:2f:56:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjYwMzI1MDMzOTI5WhcNMjYwNDAxMDMzOTI5WjAYMRYwFAYD VQQDEw02OWMzNThmMS1kYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BHQLLFsc32HB9sPQ/RPv5X5r/lWktL0Ti4f4ZjxadkVsdy4YZVux3NOOxSm CZ3dupsOa0044t8tZCLaG3HWIsWm0YVdlypR7ovCj1+UWLHOtEKAi43/FVfJnywn ZGw6lNW0XgbS+WscSzjYiBZ/UnSPk7aeG2TRizyffedyCSD/EI8H3XGzVKUkcLdW YcOPnPL2q9JNhHqofC8fTKsx9m6KqD13Olk/c6Rk//k2pM+yu8RnJ7xeKChXcdJf aYuvP3cksM9fWVvFiZLo3CGLtdvOB14vpduq6P4GsygTxhComSsQB171doIA3Ps+ NKMD16ImRBQ7Xg4CmGiOgjgPxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQ5zYO4 e7suwYlSfjvbYlC4CZzSMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADj4FdpHENpxf63r6cy+jp9nSzaRv7j0Puw6SqC1fGT3AKupSBmfi3Sf815UL EeSalYOU5xphsfWgYw8+uY3NOI6qaVFtpUFBH2052ViV9ao3Xe4RTr2uUI81ZSdf nnXg7DA9alPHHELlGz1MzD5zAgAmSKQR43YPUeBxivdryt9y/XXCCmPxrNAkhLJs /8HR5v+CaCalboCyfPF3gZx5dd34Gl2pDeMsxTG/eJ1nOWZNZMCWDP7lUZPbmvJt C892qxwjUN8JStUT06AW2mXeQdsNGDAGrdNappm02e1F5ZQFbHTTDiL9y26emgoE W8veHXLo4ZvioHdaruQxay9Wbw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:39 2026 by rpki-client