$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json) Hash identifier: 2EUV2QEDAFyRk+qkt5fLopdqtQo1baxE/hRUAN5Hkrk= Subject key identifier: 31:F4:3F:C0:93:D9:13:5E:26:57:6C:2A:57:2F:97:83:7D:1F:E7:44 Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft Manifest number: 44 Signing time: Wed 25 Mar 2026 07:36:03 +0000 Manifest this update: Wed 25 Mar 2026 07:36:03 +0000 Manifest next update: Wed 01 Apr 2026 07:36:03 +0000 Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: wCTBdvsjGcUn+rMmSdcXS0wfdgBbyYqcPBejmnfygjg=) 2: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=) 3: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=) 4: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Validity Not Before: Mar 25 07:36:03 2026 GMT Not After : Apr 1 07:36:03 2026 GMT Subject: CN=69c39063-d5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:6a:5b:91:88:76:e3:d0:c9:1d:e3:28:c9: 3d:6f:fb:93:94:2b:73:f2:bb:f6:19:8b:3a:46:76: 6b:44:38:79:a3:6f:19:04:4c:ab:bf:1e:9b:8a:b2: 14:0e:4a:5e:c7:f0:c5:72:4b:dd:b8:75:2e:3e:58: dc:48:1c:78:97:86:be:78:64:34:2f:4a:a7:13:b6: e7:75:76:cc:ef:bf:ab:f5:e3:3d:0f:da:00:68:de: ec:ee:d7:62:af:ec:02:2f:ae:c4:41:10:2f:d5:eb: 86:ee:9d:05:7f:77:f6:1d:2d:a1:cb:ae:b4:62:0a: 98:c0:bf:84:59:c6:1f:97:fa:a8:bc:3a:e6:58:15: b7:18:d7:ba:28:76:fc:6d:f9:c2:11:10:3e:34:5b: c4:77:de:44:3b:9b:99:d6:ec:10:2e:46:9c:0c:12: 9a:f5:e7:1f:3f:06:eb:af:e5:f7:bc:be:06:e3:10: 4c:d5:6a:3b:bf:a8:bb:b2:11:73:9d:44:51:de:12: 1c:06:39:d8:64:0c:3c:98:16:49:04:3c:4d:7a:0a: bd:d0:3f:3f:65:74:01:a9:ca:b0:1e:07:bc:dc:7a: b8:63:72:75:d2:5d:f2:a0:4e:58:d4:5c:ec:65:86: 7a:1a:8e:16:cb:53:92:f9:c9:bd:e9:2a:2c:82:65: dd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F4:3F:C0:93:D9:13:5E:26:57:6C:2A:57:2F:97:83:7D:1F:E7:44 X509v3 Authority Key Identifier: keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5e:07:42:3b:6e:67:0e:6e:f9:ea:51:07:1d:bc:08:16:2a: 21:c1:c4:19:3b:ec:06:53:25:3b:72:5f:47:45:ff:56:45:64: 07:91:19:d2:98:2d:7b:98:11:be:71:03:c4:92:a8:fe:54:c9: 59:8c:46:89:7c:f5:50:04:b2:3f:3d:aa:d5:6a:29:b8:d5:82: 9f:fc:fe:d2:21:2d:e4:b2:fb:7c:fb:91:0e:21:6c:b9:4c:69: bb:20:c1:c5:f1:20:df:df:95:26:01:0f:29:8f:35:51:eb:ce: 0a:2b:f9:ff:4b:b0:9a:8d:f4:33:aa:a4:c2:d4:1b:55:f5:a4: 6c:8a:76:63:14:6b:71:8a:74:5c:bc:1f:9e:29:de:ef:d4:4c: 97:c9:ea:2b:eb:20:e1:a1:3f:69:67:07:7a:14:bd:10:83:b1: 8a:e4:ee:1d:a2:27:2c:ee:95:8a:66:c0:54:36:ed:b3:4c:76: 8c:e1:b3:22:56:d1:43:64:b6:c3:64:af:72:69:2e:f1:75:85: dd:a6:24:36:41:dd:45:37:a9:45:7c:58:af:f2:5f:81:3f:15: 01:6d:5c:90:ea:70:08:36:e0:a0:23:04:f8:3e:4b:cd:d7:e5: 74:9f:9e:68:53:3e:9b:d1:1e:82:99:e5:c4:d7:58:72:9e:23: 73:19:09:44 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Mjk4QzExMC8GA1UEBRMoNUZDMjZCOTI4REVEQzkwQzM5MUNDNEY1MjlCQTdCOUUw OUE1MDQ2RTAeFw0yNjAzMjUwNzM2MDNaFw0yNjA0MDEwNzM2MDNaMBgxFjAUBgNV BAMTDTY5YzM5MDYzLWQ1Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHvWpbkYh249DJHeMoyT1v+5OUK3Pyu/YZizpGdmtEOHmjbxkETKu/HpuKshQO Sl7H8MVyS924dS4+WNxIHHiXhr54ZDQvSqcTtud1dszvv6v14z0P2gBo3uzu12Kv 7AIvrsRBEC/V64bunQV/d/YdLaHLrrRiCpjAv4RZxh+X+qi8OuZYFbcY17oodvxt +cIRED40W8R33kQ7m5nW7BAuRpwMEpr15x8/Buuv5fe8vgbjEEzVaju/qLuyEXOd RFHeEhwGOdhkDDyYFkkEPE16Cr3QPz9ldAGpyrAeB7zcerhjcnXSXfKgTljUXOxl hnoajhbLU5L5yb3pKiyCZd39AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMfQ/wJPZ E14mV2wqVy+Xg30f50QwHwYDVR0jBBgwFoAUX8Jrko3tyQw5HMT1Kbp7ngmlBG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyOThDL0FDNUU4QUMyQzZE MDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3NUhNVDFLYnA3bmdtbEJH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDhKcmtvM3R5UXc1SE1UMUticDduZ21sQkc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy OThDL0FDNUU4QUMyQzZEMDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3 NUhNVDFLYnA3bmdtbEJHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdXgdCO25nDm756lEHHbwIFiohwcQZO+wGUyU7cl9HRf9WRWQHkRnSmC17mBG+ cQPEkqj+VMlZjEaJfPVQBLI/ParVaim41YKf/P7SIS3ksvt8+5EOIWy5TGm7IMHF 8SDf35UmAQ8pjzVR684KK/n/S7CajfQzqqTC1BtV9aRsinZjFGtxinRcvB+eKd7v 1EyXyeor6yDhoT9pZwd6FL0Qg7GK5O4doics7pWKZsBUNu2zTHaM4bMiVtFDZLbD ZK9yaS7xdYXdpiQ2Qd1FN6lFfFiv8l+BPxUBbVyQ6nAINuCgIwT4PkvN1+V0n55o Uz6b0R6CmeXE11hyniNzGQlE -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:02 2026 by rpki-client