$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: DA470iF+rn+dgS9clrxMUxQUHHPVg3C5kKqWQUisMYw= Subject key identifier: F8:A2:77:F9:02:C4:50:33:D0:1B:57:18:97:7A:88:B9:9C:3B:2A:9D Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 351D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 351B Signing time: Tue 24 Mar 2026 15:06:28 +0000 Manifest this update: Tue 24 Mar 2026 15:06:28 +0000 Manifest next update: Tue 31 Mar 2026 15:06:28 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: hTAx/WHbhjw7Z3ex47cNEycMb2RgX1FgtDyZWXNCmCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13597 (0x351d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Mar 24 15:06:28 2026 GMT Not After : Mar 31 15:06:28 2026 GMT Subject: CN=69c2a874-c70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:08:96:23:4c:b5:ab:06:d6:5b:9b:05:eb: de:2f:c4:ff:cc:76:19:7e:eb:e1:25:f3:a6:85:cf: e5:4b:00:e1:fa:c7:16:fb:ee:44:02:5d:a9:fa:64: 34:85:49:ee:56:77:98:6a:b0:e0:68:4c:da:31:1c: dc:c1:ee:42:2d:18:3a:d2:77:2e:63:1d:40:a4:4b: 53:01:ff:38:5b:bb:d0:73:09:fd:4d:2f:93:1f:85: cd:6b:46:27:2d:5c:1d:bf:f5:69:cf:4a:31:ab:ac: a9:36:8e:57:65:4f:69:9f:05:48:b7:81:8f:22:c4: 20:a4:f2:e9:ee:53:ff:18:ed:8e:8f:56:c2:56:ab: d5:82:67:f9:7e:88:c1:80:cf:d2:ca:bb:6f:0f:b7: 7f:e6:55:d4:28:92:51:c0:28:d6:a9:58:50:e2:2a: 32:de:4d:bb:37:df:85:03:31:f6:3c:d3:dd:42:66: 2d:a2:83:01:95:c1:b3:6b:be:1b:4d:2e:ce:f6:49: 58:c1:49:c2:cf:59:ce:5a:3b:5a:60:8a:7b:dd:58: 63:01:38:92:ff:8e:2c:63:d7:50:dd:17:d1:12:b9: e5:2c:8a:f5:cd:e5:a4:7d:0f:40:20:34:08:db:d8: 56:b6:97:0e:61:23:c7:02:41:97:d8:0c:8e:39:8e: f6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A2:77:F9:02:C4:50:33:D0:1B:57:18:97:7A:88:B9:9C:3B:2A:9D X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:25:64:57:89:35:40:c7:1b:84:60:f0:fa:2c:49:40:33:90: 8a:9b:c8:6a:ca:be:a5:04:eb:d6:39:69:84:7f:0a:ec:1f:81: 69:b1:e4:35:11:19:1c:fb:7e:3e:8c:11:cb:96:b1:29:37:01: fa:0f:0a:56:7a:2e:3b:88:76:41:e2:f1:fb:3d:78:c8:90:c0: 38:5c:5d:ca:03:9a:c3:42:c9:2c:68:0a:54:09:79:7d:9e:f1: fb:7d:c5:f1:30:43:d3:1e:50:a6:52:c3:6e:1b:94:20:23:82: 46:00:c7:8a:94:40:00:f1:da:1d:c6:4d:cb:d5:43:bb:3e:96: 42:da:5e:c7:7a:1a:c4:40:03:30:f0:10:ad:47:03:3e:9a:30: 2e:37:ec:24:45:a1:c4:fa:30:01:75:75:cf:dd:93:9f:7e:d5: 5f:88:be:ed:d2:90:b0:a2:ea:05:a7:a1:14:51:24:7a:5c:b8: 2c:89:b6:69:55:a0:7e:20:07:99:50:26:ea:aa:fa:2c:59:2d: 9f:4c:b5:00:a0:dd:77:b3:2c:ed:b5:8e:2a:ff:48:18:ef:ca: 65:44:7f:dc:1b:21:14:3f:bf:8c:b6:0e:5f:92:3f:a2:70:d1: 50:0c:bd:f2:c4:e0:12:2b:8c:5a:00:23:94:41:6f:9f:fe:57: c5:a3:d7:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjYwMzI0MTUwNjI4WhcNMjYwMzMxMTUwNjI4WjAYMRYwFAYD VQQDEw02OWMyYTg3NC1jNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwycIliNMtasG1lubBeveL8T/zHYZfuvhJfOmhc/lSwDh+scW++5EAl2p+mQ0 hUnuVneYarDgaEzaMRzcwe5CLRg60ncuYx1ApEtTAf84W7vQcwn9TS+TH4XNa0Yn LVwdv/Vpz0oxq6ypNo5XZU9pnwVIt4GPIsQgpPLp7lP/GO2Oj1bCVqvVgmf5fojB gM/SyrtvD7d/5lXUKJJRwCjWqVhQ4ioy3k27N9+FAzH2PNPdQmYtooMBlcGza74b TS7O9klYwUnCz1nOWjtaYIp73VhjATiS/44sY9dQ3RfRErnlLIr1zeWkfQ9AIDQI 29hWtpcOYSPHAkGX2AyOOY72LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiid/kC xFAz0BtXGJd6iLmcOyqdMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyCVkV4k1QMcbhGDw+ixJQDOQipvIasq+pQTr1jlphH8K7B+BabHkNREZHPt+ PowRy5axKTcB+g8KVnouO4h2QeLx+z14yJDAOFxdygOaw0LJLGgKVAl5fZ7x+33F 8TBD0x5QplLDbhuUICOCRgDHipRAAPHaHcZNy9VDuz6WQtpex3oaxEADMPAQrUcD PpowLjfsJEWhxPowAXV1z92Tn37VX4i+7dKQsKLqBaehFFEkely4LIm2aVWgfiAH mVAm6qr6LFktn0y1AKDdd7Ms7bWOKv9IGO/KZUR/3BshFD+/jLYOX5I/onDRUAy9 8sTgEiuMWgAjlEFvn/5XxaPXRA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:31 2026 by rpki-client