$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft File: XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft (raw, json) Hash identifier: +CtvnUmDU0pMdtM0LzpjgnWw3XKthytO0KElyvCxye4= Subject key identifier: 70:1A:AF:84:D2:D9:97:DD:2D:DD:D6:B9:67:4D:21:F5:AD:80:68:19 Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft Manifest number: 0A6C Signing time: Tue 24 Mar 2026 19:25:24 +0000 Manifest this update: Tue 24 Mar 2026 19:25:23 +0000 Manifest next update: Tue 31 Mar 2026 19:25:23 +0000 Files and hashes: 1: XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl (hash: EfpFfyXS6kUMjIwpmsllf90D34h1lE9K2V0mZlU2McU=) 2: 97E61FE46F2111EB85D19531C4F9AE02.roa (hash: F/VFxbWKijK0FBQMOwCi6caTAlncQZjF9P40j+MjDLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B34, serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Validity Not Before: Mar 24 19:25:23 2026 GMT Not After : Mar 31 19:25:23 2026 GMT Subject: CN=69c2e524-6d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:4f:82:d5:88:d7:b3:c4:99:16:ba:71:dc: e7:c1:ef:a2:85:ce:af:45:52:c2:37:d5:39:0e:67: 12:f9:6b:60:f7:9b:f1:0f:05:02:65:6d:46:d2:c9: 4f:ab:f4:4a:e1:97:4a:8c:e9:58:9b:12:28:fd:6f: 67:49:fc:22:98:56:bb:0f:52:0c:1e:3c:1d:c2:1c: e1:55:58:3e:ad:9f:d5:e7:0f:cf:73:01:91:fd:33: 65:e1:86:5f:9a:8a:bf:34:ad:2e:4f:0b:10:81:e5: 8a:f4:b9:d7:2a:66:34:c5:24:84:f8:c3:0a:85:cc: b3:21:80:ae:f8:50:13:58:22:c7:36:06:7c:5b:85: 4f:27:90:c9:a7:11:14:44:08:c7:5c:a3:93:70:28: c0:99:3c:45:a4:24:b6:f4:55:12:bf:ee:f5:89:25: 45:ab:bf:b7:2b:04:37:19:72:62:aa:e4:c9:48:3d: 33:63:10:5a:01:3a:3c:26:cb:dd:7a:93:7f:72:d4: 23:b5:3c:7d:ab:c1:aa:6e:0e:a0:ff:f2:44:a8:74: 66:d9:69:3d:79:87:27:a6:a5:bd:ec:f5:c9:bc:5e: e6:44:d8:ea:83:c2:58:cc:1f:02:5b:a9:24:dc:2b: 47:10:d6:7b:4e:84:ff:85:15:04:3e:a0:43:70:70: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:AF:84:D2:D9:97:DD:2D:DD:D6:B9:67:4D:21:F5:AD:80:68:19 X509v3 Authority Key Identifier: keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9e:13:b5:0f:d3:4e:01:44:23:92:7c:72:7d:58:80:f6:d4: ea:78:b8:14:83:7f:0e:f4:18:cf:56:2d:bc:04:1f:8d:3a:9f: b4:c0:1b:d3:2a:7f:82:5f:c7:38:68:af:70:ef:c0:4c:87:02: 52:24:71:31:b8:3c:47:65:3a:2b:a2:52:f7:1f:4d:54:cd:cf: 13:cb:6f:70:21:1c:1f:66:60:19:8a:28:b3:ed:23:b2:d1:42: 31:49:c4:79:7d:09:bf:9d:82:d8:c7:f1:d1:f3:50:84:1d:6c: 41:b2:8a:e5:3e:b9:01:25:97:d6:03:08:c3:2a:64:24:88:1a: 28:5a:2e:7e:08:47:6b:cc:fb:27:d7:b4:db:35:b8:ec:2d:73: 84:b8:4d:9f:20:d1:1a:45:4c:ab:48:08:41:77:4e:18:a9:be: 64:a0:63:35:21:1d:07:48:16:26:b8:03:99:af:fe:60:29:a0: a8:36:dc:00:6c:64:d4:b7:7c:51:fa:ec:3e:f7:e1:ef:da:8c: 6b:7b:b1:e5:bb:a6:8b:7e:5f:86:8b:62:e6:97:81:14:23:05: 11:01:01:46:e8:24:b8:d3:58:1d:98:cc:da:8e:c3:53:01:d3: cc:96:e2:87:12:eb:aa:45:7f:f5:15:8b:29:93:86:f4:c4:b1: cd:67:71:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMzQxMTAvBgNVBAUTKDVERjEwMkUyQTVFNzM2NzcyMUMxMThEQkVDREE2MDJB ODAyOUVFOTQwHhcNMjYwMzI0MTkyNTIzWhcNMjYwMzMxMTkyNTIzWjAYMRYwFAYD VQQDEw02OWMyZTUyNC02ZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhy5PgtWI17PEmRa6cdznwe+ihc6vRVLCN9U5DmcS+Wtg95vxDwUCZW1G0slP q/RK4ZdKjOlYmxIo/W9nSfwimFa7D1IMHjwdwhzhVVg+rZ/V5w/PcwGR/TNl4YZf moq/NK0uTwsQgeWK9LnXKmY0xSSE+MMKhcyzIYCu+FATWCLHNgZ8W4VPJ5DJpxEU RAjHXKOTcCjAmTxFpCS29FUSv+71iSVFq7+3KwQ3GXJiquTJSD0zYxBaATo8Jsvd epN/ctQjtTx9q8Gqbg6g//JEqHRm2Wk9eYcnpqW97PXJvF7mRNjqg8JYzB8CW6kk 3CtHENZ7ToT/hRUEPqBDcHDAbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAar4TS 2ZfdLd3WuWdNIfWtgGgZMB8GA1UdIwQYMBaAFF3xAuKl5zZ3IcEY2+zaYCqAKe6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIzNC82MDM3RDVEQzgy QTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5uY2h3UmpiN05wZ0tvQXA3 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmRUM0cVhuTm5jaHdSamI3TnBnS29BcDdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIzNC82MDM3RDVEQzgyQTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5u Y2h3UmpiN05wZ0tvQXA3cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVJ4TtQ/TTgFEI5J8cn1YgPbU6ni4FIN/DvQYz1YtvAQfjTqftMAb0yp/gl/H OGivcO/ATIcCUiRxMbg8R2U6K6JS9x9NVM3PE8tvcCEcH2ZgGYoos+0jstFCMUnE eX0Jv52C2Mfx0fNQhB1sQbKK5T65ASWX1gMIwypkJIgaKFoufghHa8z7J9e02zW4 7C1zhLhNnyDRGkVMq0gIQXdOGKm+ZKBjNSEdB0gWJrgDma/+YCmgqDbcAGxk1Ld8 UfrsPvfh79qMa3ux5bumi35fhoti5peBFCMFEQEBRugkuNNYHZjM2o7DUwHTzJbi hxLrqkV/9RWLKZOG9MSxzWdxew== -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:31 2026 by rpki-client