$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: F3MSxXjUr0tuquv7k9/BhViJv7MHOs3nG2FJKm1uVqU= Subject key identifier: A2:04:F9:9F:57:79:89:41:B3:85:E8:A8:EA:69:1F:7B:D8:42:1E:78 Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 01AF Signing time: Wed 25 Mar 2026 03:21:49 +0000 Manifest this update: Wed 25 Mar 2026 03:21:49 +0000 Manifest next update: Wed 01 Apr 2026 03:21:49 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: txOuYIp3e3su2BYeEWeNnL/xNY4VmUfSL9790j7GXUk=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: alib+UnyJdcp5QK+xSWFYIjYS/kjVCRiqsWyoxYGVsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Mar 25 03:21:49 2026 GMT Not After : Apr 1 03:21:49 2026 GMT Subject: CN=69c354cd-8dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:56:ab:1b:04:10:9a:c3:8f:1e:d4:2c:8e: 91:a2:a9:d6:0a:7e:17:20:0f:f1:8b:86:43:e1:f6: d0:20:bf:97:68:78:15:d0:53:3f:c7:be:37:e3:c6: 4a:0e:27:bc:76:11:b0:0a:47:a3:6b:03:35:cf:fd: 80:71:21:81:28:19:51:7d:5b:7d:21:1e:72:05:d4: 56:d6:35:6c:2e:69:b5:73:29:44:55:ac:07:61:0d: 6f:8c:75:fb:d7:80:0c:83:69:3c:19:8c:ee:b7:4a: 27:ca:83:62:df:dc:98:75:ff:c3:09:dd:ca:4f:ac: 6d:e7:a5:ec:5e:72:fa:c0:15:86:26:78:cc:64:e5: 72:84:22:45:d9:f5:34:b8:9a:ff:26:56:a0:c4:52: 7c:ab:36:40:b9:48:37:6f:5b:81:51:83:37:81:af: e8:6a:b2:50:c3:07:1e:32:79:48:71:f3:0d:cf:22: 8a:2c:fc:03:9e:d7:53:f1:31:df:2b:64:7b:ae:ba: a6:d2:0f:e2:c7:d7:03:e2:f9:de:56:df:12:ea:44: 4f:cc:8b:ec:00:07:b4:f9:7c:44:ca:b3:5f:0b:0e: 0b:d8:3a:f5:5b:5f:ca:0c:2c:7a:96:73:f5:7d:bf: 9f:51:dd:b0:f8:ca:42:f1:a5:8f:3d:99:8a:5e:03: 23:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:F9:9F:57:79:89:41:B3:85:E8:A8:EA:69:1F:7B:D8:42:1E:78 X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2f:fc:18:c7:93:fb:d7:28:3b:d0:c5:96:15:19:51:55:45: 17:be:bb:96:b2:25:7c:6e:58:fe:55:28:82:e4:5d:e4:ba:e6: 82:b7:69:07:b0:94:80:7a:7d:7a:02:f2:f3:af:1e:43:7d:41: ad:46:3b:fa:e5:5d:52:1b:82:20:70:65:b4:9c:55:ce:17:a4: 64:23:5f:27:fd:61:12:3e:22:9f:a7:26:5b:bf:31:af:c0:9b: b0:20:28:c7:91:35:67:b9:5d:c6:b1:81:70:7b:18:2c:52:3c: 69:f1:a4:18:90:f1:3e:bb:22:a0:58:6b:1b:83:c5:22:c6:66: 01:82:06:1f:1d:71:79:60:a4:72:a2:17:07:ee:1a:b8:50:d2: 80:db:92:a1:14:0d:bf:1a:34:7b:2a:e4:d3:63:b6:ca:f8:e9: a4:6e:c8:26:9f:5f:49:71:1c:7c:a1:4d:5f:46:b1:f5:63:1a: 4a:35:76:fd:90:00:f5:05:fc:a3:dd:77:d1:8f:02:3f:d8:a2: 0d:bb:07:2e:2e:b3:74:f9:c7:56:b7:2b:34:fc:ba:6d:73:e2: 11:4b:53:3d:0c:c6:64:da:fb:24:ef:b3:21:5c:af:64:ee:cf: 2b:34:3b:53:4a:db:9a:e1:4d:48:04:09:0c:18:13:2c:a0:0f: 57:38:a3:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjYwMzI1MDMyMTQ5WhcNMjYwNDAxMDMyMTQ5WjAYMRYwFAYD VQQDEw02OWMzNTRjZC04ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/tWqxsEEJrDjx7ULI6RoqnWCn4XIA/xi4ZD4fbQIL+XaHgV0FM/x74348ZK Die8dhGwCkejawM1z/2AcSGBKBlRfVt9IR5yBdRW1jVsLmm1cylEVawHYQ1vjHX7 14AMg2k8GYzut0onyoNi39yYdf/DCd3KT6xt56XsXnL6wBWGJnjMZOVyhCJF2fU0 uJr/JlagxFJ8qzZAuUg3b1uBUYM3ga/oarJQwwceMnlIcfMNzyKKLPwDntdT8THf K2R7rrqm0g/ix9cD4vneVt8S6kRPzIvsAAe0+XxEyrNfCw4L2Dr1W1/KDCx6lnP1 fb+fUd2w+MpC8aWPPZmKXgMjvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIE+Z9X eYlBs4XoqOppH3vYQh54MB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUi/8GMeT+9coO9DFlhUZUVVFF767lrIlfG5Y/lUoguRd5LrmgrdpB7CUgHp9 egLy868eQ31BrUY7+uVdUhuCIHBltJxVzhekZCNfJ/1hEj4in6cmW78xr8CbsCAo x5E1Z7ldxrGBcHsYLFI8afGkGJDxPrsioFhrG4PFIsZmAYIGHx1xeWCkcqIXB+4a uFDSgNuSoRQNvxo0eyrk02O2yvjppG7IJp9fSXEcfKFNX0ax9WMaSjV2/ZAA9QX8 o9130Y8CP9iiDbsHLi6zdPnHVrcrNPy6bXPiEUtTPQzGZNr7JO+zIVyvZO7PKzQ7 U0rbmuFNSAQJDBgTLKAPVzijyg== -----END CERTIFICATE-----Generated at Thu Mar 26 09:09:20 2026 by rpki-client