$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: JSHaWUtgWRroXaWCttSElZEXNcDJ7HslbcNMgIP3Ncw= Subject key identifier: 05:0B:15:A4:31:58:E7:22:78:C0:2C:AC:6F:61:04:C1:23:4C:79:72 Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 0A33 Signing time: Thu 26 Mar 2026 19:37:17 +0000 Manifest this update: Thu 26 Mar 2026 19:37:16 +0000 Manifest next update: Thu 02 Apr 2026 19:37:16 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: JZHcUK+TXMUW5ipPpWJMGjK/Pe6t8rSzArQIr8p3bKM=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: Mar 26 19:37:16 2026 GMT Not After : Apr 2 19:37:16 2026 GMT Subject: CN=69c58aed-3208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:3d:a0:ce:75:cd:b2:b4:18:75:f2:41:54: 69:5c:a6:a8:9f:46:c2:73:83:68:9f:8c:28:8c:92: d6:e7:7d:dc:19:59:43:7e:1e:4b:d7:f6:cc:0b:9e: 4c:d7:b4:d5:b9:d9:4d:12:86:59:39:3f:95:95:04: 22:7f:5f:41:57:31:cd:fb:72:9e:a5:f1:26:18:63: c9:5b:2c:4c:ef:aa:03:75:c7:77:0a:7d:8b:17:2a: 84:f2:11:fe:19:70:18:06:70:6b:eb:6b:ef:11:96: 8f:e4:6e:e4:6d:b0:e5:f4:12:45:2c:57:b1:72:56: 72:f6:d9:fd:8c:cd:68:cd:f9:25:75:13:70:c2:48: d6:67:66:8b:fb:c7:16:c7:83:b0:63:83:42:54:1f: f0:ff:4b:a5:dc:b2:1d:73:ce:7d:61:d2:18:9b:06: bd:5b:30:e4:72:cc:95:da:0b:db:6b:fd:df:fd:27: 37:77:4e:b9:1d:d3:9e:3f:29:ae:7f:36:eb:58:87: 0e:c3:1e:e0:dd:b5:02:8d:a3:af:c5:55:2e:55:5b: 85:cd:60:c3:cc:0b:db:04:6d:d6:27:6e:ec:9e:b8: 18:66:4e:a6:4b:3b:39:cd:6a:bf:51:38:a6:6e:ac: 71:89:d7:7d:d4:87:bc:b0:87:99:3d:a2:1e:da:43: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0B:15:A4:31:58:E7:22:78:C0:2C:AC:6F:61:04:C1:23:4C:79:72 X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8f:e3:ea:90:6c:e5:7a:83:d4:29:f1:20:eb:a4:10:9c:b6: 48:82:17:64:86:4f:07:ff:12:ef:89:fd:b6:71:b9:b8:d2:76: 6c:44:24:11:14:c7:c3:77:64:e1:19:ce:f3:10:55:38:be:ab: 0e:4c:6a:92:f3:d5:4c:dc:24:ac:80:14:8e:0b:b4:a8:54:d7: 9a:03:c8:94:9f:a6:c9:10:7b:cc:2a:59:da:19:da:c8:3e:10: e2:df:d6:66:9d:7d:88:4e:11:fc:16:76:d9:f4:bd:26:33:c8: e5:36:67:08:42:0d:b3:4a:8c:e5:cc:38:df:58:c4:c9:b3:9e: a0:3f:49:ed:ee:2f:87:7f:28:b9:a5:68:d0:a2:94:dc:b7:6d: 31:7c:d3:c6:92:08:13:62:e8:b7:88:70:f1:37:de:8b:cf:c6: ca:ea:dc:88:24:8b:01:47:d3:70:de:7d:81:0a:26:ea:a0:4a: 58:cd:ba:00:da:18:85:c1:50:d5:2b:02:22:ba:a1:45:8a:aa: 2a:3c:4a:f8:90:a8:7d:39:ed:f3:c1:af:2c:d4:e6:63:66:92: 1b:f4:37:64:9d:37:f5:84:24:fe:2b:f3:53:8c:c6:e4:6e:12: d1:ed:20:ed:0c:a8:1c:77:53:ff:23:c3:52:df:ec:aa:de:4f: a5:c1:b8:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjYwMzI2MTkzNzE2WhcNMjYwNDAyMTkzNzE2WjAYMRYwFAYD VQQDEw02OWM1OGFlZC0zMjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQI9oM51zbK0GHXyQVRpXKaon0bCc4Non4wojJLW533cGVlDfh5L1/bMC55M 17TVudlNEoZZOT+VlQQif19BVzHN+3KepfEmGGPJWyxM76oDdcd3Cn2LFyqE8hH+ GXAYBnBr62vvEZaP5G7kbbDl9BJFLFexclZy9tn9jM1ozfkldRNwwkjWZ2aL+8cW x4OwY4NCVB/w/0ul3LIdc859YdIYmwa9WzDkcsyV2gvba/3f/Sc3d065HdOePymu fzbrWIcOwx7g3bUCjaOvxVUuVVuFzWDDzAvbBG3WJ27snrgYZk6mSzs5zWq/UTim bqxxidd91Ie8sIeZPaIe2kMPDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAULFaQx WOcieMAsrG9hBMEjTHlyMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO4/j6pBs5XqD1CnxIOukEJy2SIIXZIZPB/8S74n9tnG5uNJ2bEQkERTHw3dk 4RnO8xBVOL6rDkxqkvPVTNwkrIAUjgu0qFTXmgPIlJ+myRB7zCpZ2hnayD4Q4t/W Zp19iE4R/BZ22fS9JjPI5TZnCEINs0qM5cw431jEybOeoD9J7e4vh38ouaVo0KKU 3LdtMXzTxpIIE2Lot4hw8Tfei8/GyurciCSLAUfTcN59gQom6qBKWM26ANoYhcFQ 1SsCIrqhRYqqKjxK+JCofTnt88GvLNTmY2aSG/Q3ZJ039YQk/ivzU4zG5G4S0e0g 7QyoHHdT/yPDUt/sqt5PpcG4Cg== -----END CERTIFICATE-----Generated at Fri Mar 27 01:00:16 2026 by rpki-client