$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: gpSkbXvV+vJZrrnVEPuJkevskudnfLnjG7oIp+ha+jI= Subject key identifier: 9C:99:2B:CD:C8:9E:35:DD:65:C5:AA:31:B8:0B:9E:1F:AE:E3:94:AA Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 57 Signing time: Wed 25 Mar 2026 07:23:09 +0000 Manifest this update: Wed 25 Mar 2026 07:23:08 +0000 Manifest next update: Wed 01 Apr 2026 07:23:08 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: n488Snge5qFccMfYMMQWCzaJfjGJcsXHEHWQ5119DNI=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Mar 25 07:23:08 2026 GMT Not After : Apr 1 07:23:08 2026 GMT Subject: CN=69c38d5d-baa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:96:90:7d:d9:63:95:20:9a:08:40:2c:70: 68:51:0b:e3:6b:e9:b0:0e:02:ce:96:ef:5b:c2:ac: 8b:c8:01:19:1d:97:3c:3d:45:42:25:0f:a3:d1:59: 5d:fc:dd:44:af:08:18:3b:97:4b:ca:9b:76:13:46: 89:f4:db:cc:7a:6e:43:46:ab:7e:0d:56:68:26:35: 1b:a9:30:06:5f:6e:3a:f4:55:03:21:4a:72:34:cb: 65:f2:a0:7d:52:18:28:6f:f5:34:3e:f9:09:30:86: 8f:d7:9f:ac:36:df:48:31:aa:82:ef:bc:39:58:69: ef:8b:dc:9f:e8:50:38:76:5b:c1:3c:75:5d:6a:f6: f0:b1:63:f0:e4:a3:c1:51:32:d6:d3:a0:5d:d1:3d: ed:3e:13:59:84:c5:1d:b8:4e:1e:76:92:5f:11:52: 32:c4:bb:de:d6:58:d6:0c:27:99:ca:d1:b0:1b:e2: 26:2e:37:43:71:98:67:c6:99:1c:73:ac:5a:52:54: ba:c6:75:cd:ff:38:fe:2c:5b:82:e9:f5:1a:75:ce: 92:ef:70:79:5a:eb:9f:17:29:9e:83:b5:b9:90:a2: 4a:f8:07:3b:a7:66:96:0c:3c:2c:89:98:3a:74:c1: 21:20:82:41:4a:32:23:b3:9e:28:f8:84:52:87:a9: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:99:2B:CD:C8:9E:35:DD:65:C5:AA:31:B8:0B:9E:1F:AE:E3:94:AA X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7b:d6:3a:3a:dd:3a:66:6c:23:6c:6f:59:5a:05:01:0d:ce: 56:99:59:45:57:1f:de:85:e6:6c:39:45:a8:01:f9:d1:76:69: 84:f1:e1:39:05:07:c5:bd:7c:31:68:04:4c:64:cd:e2:54:7f: 69:a8:68:ff:69:50:5a:ae:b4:19:8b:50:78:1b:ac:df:ea:b4: 8b:ca:ab:09:0b:9a:39:ee:12:67:43:6f:9f:03:56:c9:7e:d0: 55:1b:f6:1b:3a:31:59:bd:a1:a2:4a:4a:f3:9e:79:54:dd:24: 33:41:19:b2:2d:1c:5c:78:a4:c8:19:89:1d:e2:18:71:a1:39: 08:96:fc:ac:c5:68:1b:cb:96:1c:c9:41:f8:a8:50:f3:0e:cb: 11:3a:5f:9b:7c:f4:37:e0:29:7e:6c:65:51:b6:39:ba:5f:51: 60:b4:15:08:c4:07:49:92:64:9b:67:0c:d9:8a:cf:d2:fc:45: c3:15:60:78:52:33:d6:92:74:70:a7:aa:60:a3:01:35:12:6f: 07:bf:73:64:53:b1:8a:1f:85:83:8b:6d:d9:27:e7:a0:b1:05: 13:78:8f:53:bc:9f:47:89:4c:b1:5c:19:e5:ac:e5:00:3b:6f: f5:bf:8a:0f:eb:56:90:a3:87:41:7c:e9:17:fa:98:9b:4b:aa: e4:8a:a5:bf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoNURERkREMzgzMTU2RkE1QjY1MzQxMTJFOUM4RTE1M0JC MjAwNTdDNjAeFw0yNjAzMjUwNzIzMDhaFw0yNjA0MDEwNzIzMDhaMBgxFjAUBgNV BAMTDTY5YzM4ZDVkLWJhYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZpJaQfdljlSCaCEAscGhRC+Nr6bAOAs6W71vCrIvIARkdlzw9RUIlD6PRWV38 3USvCBg7l0vKm3YTRon028x6bkNGq34NVmgmNRupMAZfbjr0VQMhSnI0y2XyoH1S GChv9TQ++Qkwho/Xn6w230gxqoLvvDlYae+L3J/oUDh2W8E8dV1q9vCxY/Dko8FR MtbToF3RPe0+E1mExR24Th52kl8RUjLEu97WWNYMJ5nK0bAb4iYuN0NxmGfGmRxz rFpSVLrGdc3/OP4sW4Lp9Rp1zpLvcHla658XKZ6DtbmQokr4BzunZpYMPCyJmDp0 wSEggkFKMiOznij4hFKHqQcDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnJkrzcie Nd1lxaoxuAueH67jlKowHwYDVR0jBBgwFoAUXd/dODFW+ltlNBEunI4VO7IAV8Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4L0Y5QjAyODg4QUVG RTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGRfZE9ERlctbHRsTkJFdW5JNFZPN0lBVjhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4L0Y5QjAyODg4QUVGRTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0 bE5CRXVuSTRWTzdJQVY4WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAue9Y6Ot06ZmwjbG9ZWgUBDc5WmVlFVx/eheZsOUWoAfnRdmmE8eE5BQfFvXwx aARMZM3iVH9pqGj/aVBarrQZi1B4G6zf6rSLyqsJC5o57hJnQ2+fA1bJftBVG/Yb OjFZvaGiSkrznnlU3SQzQRmyLRxceKTIGYkd4hhxoTkIlvysxWgby5YcyUH4qFDz DssROl+bfPQ34Cl+bGVRtjm6X1FgtBUIxAdJkmSbZwzZis/S/EXDFWB4UjPWknRw p6pgowE1Em8Hv3NkU7GKH4WDi23ZJ+egsQUTeI9TvJ9HiUyxXBnlrOUAO2/1v4oP 61aQo4dBfOkX+pibS6rkiqW/ -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:03 2026 by rpki-client