$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: NZcsfnT5OYEnUvWSHVqSuDSOu5dXbT5TsJxblsiv4e0= Subject key identifier: 76:A5:12:4A:8E:B0:AD:93:13:A7:16:0B:0B:B0:04:C0:FF:6F:5F:6C Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 05F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 05F1 Signing time: Tue 24 Mar 2026 22:37:43 +0000 Manifest this update: Tue 24 Mar 2026 22:37:43 +0000 Manifest next update: Tue 31 Mar 2026 22:37:43 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: JyVSVb7LZf6z6f5PIwKoYBBqgEq7mnypk/ycDdfXtoc=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: IP/QJfV6mDMkAmZvNNAznS9XZlWRM/mkzo7SsyQDQEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Mar 24 22:37:43 2026 GMT Not After : Mar 31 22:37:43 2026 GMT Subject: CN=69c31237-36ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:e0:ec:64:a5:b2:c0:ce:f9:3f:56:86:3e: 22:1b:2e:ba:3a:03:e4:44:14:b2:77:8e:91:ba:4b: 5b:7e:b5:14:a2:e6:46:24:c8:66:31:0f:11:a5:df: a9:a6:70:ff:ce:eb:aa:4e:28:bd:d4:9a:6c:2a:2e: 17:53:95:80:1e:7a:aa:9f:16:e7:d6:ad:18:84:5a: fa:43:6f:f5:ac:df:1c:3e:44:c3:e6:ea:bd:27:a3: 19:e9:1e:c7:74:6d:44:87:fd:65:8c:bb:91:29:d5: fe:95:ff:b8:96:20:3f:c4:f6:c9:d8:9b:c3:6d:1c: d3:4f:69:b5:20:8e:e1:0d:66:91:65:95:27:a4:ec: fe:15:dd:76:16:61:cf:0d:f7:e5:97:3f:f1:24:8a: 7a:f1:c3:30:56:18:6d:ca:8c:3b:2a:cc:ff:57:37: 28:c1:45:0f:7c:02:8c:5d:1b:c9:a7:24:d8:95:bf: 8d:24:8a:14:3c:34:c8:0b:1a:d1:d5:60:22:07:dd: 6f:85:8c:1a:07:9c:c2:79:ac:93:22:38:3d:00:e0: 6c:77:25:cd:7f:35:55:3c:9a:52:b7:1f:ce:14:77: 27:f5:84:79:fd:6e:11:11:e7:61:a8:8e:1e:9b:e8: 45:42:b8:f9:ac:ed:f0:a1:4b:ec:77:bb:2b:11:e5: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A5:12:4A:8E:B0:AD:93:13:A7:16:0B:0B:B0:04:C0:FF:6F:5F:6C X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2f:a0:d8:97:04:60:1a:4e:b7:44:ca:a9:d8:ed:dc:26:15: 72:10:93:dd:29:c2:e1:5d:f9:7e:e0:b6:a1:0f:e4:54:e2:93: 91:21:64:20:ba:a3:a1:7f:07:89:f5:23:6f:25:9c:f3:db:be: 1d:6a:2c:02:1a:69:8f:ab:6b:e8:84:ff:b4:d5:fd:62:2e:e2: e0:67:b0:12:55:08:9d:58:eb:2a:70:6a:6b:45:b2:3c:49:aa: 15:9b:67:31:f7:98:38:da:72:e5:f2:82:79:7d:4b:64:93:e8: b8:08:ea:47:0c:a6:70:33:9a:a0:e8:4c:ae:6b:3d:03:07:46: 7a:2e:5d:93:6a:de:2e:fe:48:a3:05:7a:98:30:ba:5f:62:91: a2:60:43:4d:d1:7f:b5:12:26:e6:1e:52:55:51:81:18:a2:05: fa:4e:00:ce:56:d6:f0:46:0c:2a:83:c4:6a:de:69:f4:86:29: 28:ea:31:ee:25:c3:47:9f:69:c4:e9:d6:8e:be:50:7b:f0:6f: df:1a:19:ec:fb:3e:d2:d0:e3:e3:53:47:85:67:f5:99:93:80: 26:53:71:83:96:54:20:53:92:d3:37:3f:94:ee:d0:75:4a:12: b8:35:56:28:d8:28:59:fe:cd:fb:01:fd:1e:2c:1a:d0:39:82: 0f:40:51:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjYwMzI0MjIzNzQzWhcNMjYwMzMxMjIzNzQzWjAYMRYwFAYD VQQDEw02OWMzMTIzNy0zNmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1K3g7GSlssDO+T9Whj4iGy66OgPkRBSyd46RuktbfrUUouZGJMhmMQ8Rpd+p pnD/zuuqTii91JpsKi4XU5WAHnqqnxbn1q0YhFr6Q2/1rN8cPkTD5uq9J6MZ6R7H dG1Eh/1ljLuRKdX+lf+4liA/xPbJ2JvDbRzTT2m1II7hDWaRZZUnpOz+Fd12FmHP Dffllz/xJIp68cMwVhhtyow7Ksz/VzcowUUPfAKMXRvJpyTYlb+NJIoUPDTICxrR 1WAiB91vhYwaB5zCeayTIjg9AOBsdyXNfzVVPJpStx/OFHcn9YR5/W4REedhqI4e m+hFQrj5rO3woUvsd7srEeWYjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHalEkqO sK2TE6cWCwuwBMD/b19sMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcC+g2JcEYBpOt0TKqdjt3CYVchCT3SnC4V35fuC2oQ/kVOKTkSFkILqjoX8H ifUjbyWc89u+HWosAhppj6tr6IT/tNX9Yi7i4GewElUInVjrKnBqa0WyPEmqFZtn MfeYONpy5fKCeX1LZJPouAjqRwymcDOaoOhMrms9AwdGei5dk2reLv5IowV6mDC6 X2KRomBDTdF/tRIm5h5SVVGBGKIF+k4AzlbW8EYMKoPEat5p9IYpKOox7iXDR59p xOnWjr5Qe/Bv3xoZ7Ps+0tDj41NHhWf1mZOAJlNxg5ZUIFOS0zc/lO7QdUoSuDVW KNgoWf7N+wH9Hiwa0DmCD0BRCw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:10:26 2026 by rpki-client