$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: xVi+Yacqeqv9F+8dgMwiusSaqQqXb7P2EOesUE6dZpk= Subject key identifier: DF:BE:A1:E5:08:1C:1D:46:D9:7C:C9:BB:40:DB:3D:7A:AD:9E:9A:DD Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 11F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 11E5 Signing time: Thu 26 Mar 2026 17:07:30 +0000 Manifest this update: Thu 26 Mar 2026 17:07:30 +0000 Manifest next update: Thu 02 Apr 2026 17:07:30 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: Lo7X//WH/wEwDpSfdXsXXhjbiQBDlj0uii8AufUuUsE=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: mlIgB88PCS5Mz8+wugRjkrAqhDyAGod+aFCp2Xz2bCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4594 (0x11f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Mar 26 17:07:30 2026 GMT Not After : Apr 2 17:07:30 2026 GMT Subject: CN=69c567d2-3c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:ef:b0:e4:3c:d9:5d:7f:22:12:66:99:e6: 6a:c9:b5:17:78:8d:19:f3:d3:d5:34:3e:ad:20:18: 95:fb:fc:56:17:ed:4c:ad:20:7c:8c:af:49:c2:6f: e9:e5:9a:a9:c3:66:84:3b:8d:88:78:15:1e:30:4a: 0a:26:2d:fb:e2:7a:59:0d:59:54:2e:7c:d6:7e:ce: b6:90:79:f2:98:26:63:e8:ce:87:1d:63:07:4c:36: b1:3f:49:e2:b6:c7:b8:4f:b8:de:33:4d:e5:b9:61: 78:88:be:9c:9e:75:4f:7d:ed:55:e8:e1:85:ff:c6: 2c:65:36:7d:03:8a:3c:86:fe:60:a4:f2:a4:04:03: c1:c3:bb:5c:be:f7:6a:60:e8:e6:60:e1:ec:b7:3e: d7:07:d1:d5:83:91:74:70:ef:4b:03:81:71:19:96: b0:c9:bb:7b:f6:da:f0:77:35:c9:4b:d8:29:68:8d: 61:b6:35:02:8e:89:e9:d2:32:c4:9a:6e:e5:3f:5e: 46:98:f0:9b:81:3b:4a:52:b4:e6:14:d3:85:12:4e: 3c:57:45:fd:d8:f4:55:7e:a1:88:29:69:0a:2d:75: fa:fc:ed:2b:9a:19:a6:f6:8f:62:65:d5:56:0c:db: 62:f0:1a:55:e3:b3:80:6e:0b:a0:6f:78:0e:46:b2: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:A1:E5:08:1C:1D:46:D9:7C:C9:BB:40:DB:3D:7A:AD:9E:9A:DD X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0c:47:37:9c:33:a4:4a:59:99:bc:8f:d6:49:80:bf:80:c9: 8d:7a:84:05:f3:b1:c7:e4:a4:a3:b7:d2:01:e8:d7:db:15:01: 4f:04:55:88:62:6a:d8:75:42:b3:3b:4f:c3:2e:a2:35:13:1e: 31:80:39:fa:7a:22:a6:aa:01:56:e2:b7:28:0f:7c:05:1f:a5: ca:d5:98:97:4e:a5:80:e8:5e:5e:87:f9:34:e1:e1:6d:cf:3a: 83:d7:9c:1e:b1:f8:9a:bf:56:67:9a:f2:25:ea:bc:da:1e:7c: da:6c:3a:d1:ea:5f:93:cb:4d:78:3a:db:42:57:22:18:f4:6d: e8:db:fb:4b:c7:ab:5a:a4:e9:76:95:7b:72:ce:df:13:7c:a4: a9:62:aa:fe:60:d6:8a:39:27:b9:f4:1a:81:d4:92:7d:52:d3: de:10:66:ad:14:b1:cf:a7:fb:2a:e3:b7:f4:31:00:d9:0b:ce: 1d:ff:1a:1b:ca:d6:f1:cf:63:f7:4a:45:50:25:21:4b:5e:35: c5:ba:b8:bc:6f:2a:66:f1:c5:19:a5:59:8f:3e:f9:0a:da:1d: 0c:23:7f:bb:27:2e:be:5e:4b:97:a7:46:79:a5:69:59:c6:1d: 0c:c3:f2:b1:5e:ad:67:24:7b:db:40:5e:21:47:0a:1d:d6:2b: 4b:fe:0e:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjYwMzI2MTcwNzMwWhcNMjYwNDAyMTcwNzMwWjAYMRYwFAYD VQQDEw02OWM1NjdkMi0zYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cLvsOQ82V1/IhJmmeZqybUXeI0Z89PVND6tIBiV+/xWF+1MrSB8jK9Jwm/p 5Zqpw2aEO42IeBUeMEoKJi374npZDVlULnzWfs62kHnymCZj6M6HHWMHTDaxP0ni tse4T7jeM03luWF4iL6cnnVPfe1V6OGF/8YsZTZ9A4o8hv5gpPKkBAPBw7tcvvdq YOjmYOHstz7XB9HVg5F0cO9LA4FxGZawybt79trwdzXJS9gpaI1htjUCjonp0jLE mm7lP15GmPCbgTtKUrTmFNOFEk48V0X92PRVfqGIKWkKLXX6/O0rmhmm9o9iZdVW DNti8BpV47OAbgugb3gORrJMlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN++oeUI HB1G2XzJu0DbPXqtnprdMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARAxHN5wzpEpZmbyP1kmAv4DJjXqEBfOxx+Sko7fSAejX2xUBTwRViGJq2HVC sztPwy6iNRMeMYA5+noipqoBVuK3KA98BR+lytWYl06lgOheXof5NOHhbc86g9ec HrH4mr9WZ5ryJeq82h582mw60epfk8tNeDrbQlciGPRt6Nv7S8erWqTpdpV7cs7f E3ykqWKq/mDWijknufQagdSSfVLT3hBmrRSxz6f7KuO39DEA2QvOHf8aG8rW8c9j 90pFUCUhS141xbq4vG8qZvHFGaVZjz75CtodDCN/uycuvl5Ll6dGeaVpWcYdDMPy sV6tZyR720BeIUcKHdYrS/4OOw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:12 2026 by rpki-client