$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: nIVh3Q+UIBbfc0X9QFo7FnKLS7fNcDAAtBsyB2ASbdU= Subject key identifier: AF:04:70:1E:47:98:27:3E:84:75:9B:93:3C:B6:BA:61:1C:83:9F:BB Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 06D7 Signing time: Tue 24 Mar 2026 21:55:58 +0000 Manifest this update: Tue 24 Mar 2026 21:55:57 +0000 Manifest next update: Tue 31 Mar 2026 21:55:57 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: CtPIjrWHK8KYru9s1rEKXtT/SRywxTzmScKx2bVvxaM=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: aDPXdcJkf4Q3bEJLDiYToXTVljTbQsc9tq+SGxeE8gY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Mar 24 21:55:57 2026 GMT Not After : Mar 31 21:55:57 2026 GMT Subject: CN=69c3086e-0403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:db:f5:2b:be:b9:09:d7:e7:f4:4e:1c:93: 9e:c0:b6:13:6a:12:10:6e:bb:e7:cd:c0:66:c4:cd: 23:95:18:b3:f0:37:2c:4d:75:ab:70:63:81:7e:46: ce:68:50:59:ce:ec:4e:00:77:b8:30:16:0f:44:04: 61:e8:4f:b2:a0:0b:57:e1:d6:e2:f8:21:5b:89:f3: f7:33:ec:0a:19:fd:1c:57:6e:ad:4f:f2:39:7b:73: 42:b8:8c:0a:51:41:c1:c1:52:d0:23:48:e6:5c:22: 1b:10:e7:30:d6:00:31:15:40:74:a4:d0:32:06:2e: be:00:0a:14:23:ea:e5:ae:96:15:9d:2e:b7:e0:be: a2:7d:e9:ea:e6:eb:61:bb:5e:c8:70:75:9d:a3:10: 4e:f3:ba:d8:69:c0:a9:83:d3:7e:05:8f:cd:c0:20: da:f8:74:41:bc:a7:b0:cd:aa:68:9e:fb:37:1f:95: c4:b9:6d:0d:16:20:d2:f8:56:d8:9a:ff:9b:76:a5: 1d:94:cf:e8:ae:43:98:49:0b:8c:ab:38:fe:e7:fe: 9a:00:80:6f:7e:fb:e0:c3:03:b1:1c:93:ac:be:8d: d8:eb:7b:cc:b8:ba:06:f3:3b:f8:9a:30:b2:50:a4: 85:04:58:57:7f:e0:f6:b2:c2:11:88:25:90:19:c7: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:04:70:1E:47:98:27:3E:84:75:9B:93:3C:B6:BA:61:1C:83:9F:BB X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:86:2c:dd:b5:f4:1e:f6:76:f8:79:02:8c:df:00:71:29:2c: ab:8b:20:60:18:d8:99:15:b3:ae:8d:34:23:d1:e5:c1:f7:27: 15:32:d2:db:cb:6d:8c:25:0e:4f:ca:31:aa:09:c2:4a:09:fe: 8f:b3:bc:84:cb:73:92:96:94:9d:f0:38:88:27:45:65:fc:ae: 4f:ce:fc:d7:0a:c0:67:10:a7:9c:97:69:86:a3:88:ff:a6:b4: 8e:8e:e4:d1:93:b7:cb:cb:9d:91:9a:67:97:07:58:03:2c:34: 1e:56:a7:ed:a2:02:0d:64:38:f8:d0:b6:cc:da:3f:7e:89:c7: e7:0c:48:de:26:d7:7c:4f:f7:04:d7:bb:c8:78:fa:ad:3b:dd: e6:f4:0a:db:8f:36:de:b6:9c:ec:6d:50:da:da:b2:03:70:84: 3d:0b:07:b8:63:8d:bd:5b:74:e7:1e:78:0c:b5:e0:f3:7e:03: fb:a8:2c:3a:9c:5b:e5:cf:4c:2f:ad:2c:0b:d6:8d:1e:99:44: 2a:80:e3:38:fc:9d:eb:30:30:45:67:e9:6a:22:fc:b8:10:a3: 97:f2:b1:c6:0b:8c:8c:12:38:84:ce:32:e3:e5:5e:a0:03:89: 5c:7d:ec:df:55:46:9c:7f:98:96:a6:4e:2c:5e:20:3f:59:d4: d4:5a:70:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjYwMzI0MjE1NTU3WhcNMjYwMzMxMjE1NTU3WjAYMRYwFAYD VQQDEw02OWMzMDg2ZS0wNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiGDb9Su+uQnX5/ROHJOewLYTahIQbrvnzcBmxM0jlRiz8DcsTXWrcGOBfkbO aFBZzuxOAHe4MBYPRARh6E+yoAtX4dbi+CFbifP3M+wKGf0cV26tT/I5e3NCuIwK UUHBwVLQI0jmXCIbEOcw1gAxFUB0pNAyBi6+AAoUI+rlrpYVnS634L6ifenq5uth u17IcHWdoxBO87rYacCpg9N+BY/NwCDa+HRBvKewzaponvs3H5XEuW0NFiDS+FbY mv+bdqUdlM/orkOYSQuMqzj+5/6aAIBvfvvgwwOxHJOsvo3Y63vMuLoG8zv4mjCy UKSFBFhXf+D2ssIRiCWQGcdFWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8EcB5H mCc+hHWbkzy2umEcg5+7MB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHIYs3bX0HvZ2+HkCjN8AcSksq4sgYBjYmRWzro00I9HlwfcnFTLS28ttjCUO T8oxqgnCSgn+j7O8hMtzkpaUnfA4iCdFZfyuT8781wrAZxCnnJdphqOI/6a0jo7k 0ZO3y8udkZpnlwdYAyw0Hlan7aICDWQ4+NC2zNo/fonH5wxI3ibXfE/3BNe7yHj6 rTvd5vQK24823rac7G1Q2tqyA3CEPQsHuGONvVt05x54DLXg834D+6gsOpxb5c9M L60sC9aNHplEKoDjOPyd6zAwRWfpaiL8uBCjl/KxxguMjBI4hM4y4+VeoAOJXH3s 31VGnH+YlqZOLF4gP1nU1FpwQA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:32 2026 by rpki-client