$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: /V4VfHbi4ZAtO8lJsry81TakvVRL3/IyqFDs9yBClJo= Subject key identifier: 43:D3:7D:F1:3D:FA:58:11:DC:29:F4:71:09:55:D1:23:35:58:E5:8B Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 09D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 09CD Signing time: Thu 26 Mar 2026 19:47:55 +0000 Manifest this update: Thu 26 Mar 2026 19:47:55 +0000 Manifest next update: Thu 02 Apr 2026 19:47:55 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: HiefoxJoo0hTq+Xw65TUASPwNS1FIvFNzD7nmQwvKVQ=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: lDb01SzRr4flIC0mr35RR7fbVzd2VcHd4sFXDjKyy5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Mar 26 19:47:55 2026 GMT Not After : Apr 2 19:47:55 2026 GMT Subject: CN=69c58d6b-d0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:e9:85:85:ff:96:20:eb:68:b8:f4:48:15: 7d:f1:f3:5c:46:46:42:7f:1c:73:92:19:24:ac:e3: 3d:ff:93:00:ab:3b:15:ac:2a:68:10:de:7c:95:b3: 0e:07:06:09:64:62:49:b0:0b:0e:79:02:04:09:d9: 3e:05:ef:82:95:e8:60:9a:d9:48:4e:8b:3a:03:7d: 97:ac:25:73:7c:0b:2d:0e:cf:cc:63:67:0b:34:60: b9:71:e7:eb:a9:eb:42:73:4d:04:c1:3b:23:39:a8: 75:2c:91:30:1f:79:6f:e1:ae:50:c6:7f:16:33:0e: 69:45:55:70:44:8f:84:66:52:27:ef:71:57:dc:da: c7:a5:f3:6a:d4:df:4d:07:dd:3f:71:9d:08:ea:80: ef:13:73:ed:92:5f:26:f6:73:88:f5:dc:ec:13:e4: 38:5c:bd:16:11:07:5a:b9:d4:1f:00:e7:a7:9a:b0: 70:16:b5:14:d3:e4:51:5a:dd:15:04:a3:c8:64:1c: 77:8b:37:ad:26:1b:b0:34:a6:44:d7:26:85:b0:d7: 95:0a:13:21:07:32:db:c5:14:a2:cb:c1:f3:67:88: 00:16:52:cf:94:ff:80:fa:06:d5:5b:f1:41:74:bb: 75:4c:25:aa:6e:5d:79:43:ae:ae:e0:6d:f0:6c:c5: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:7D:F1:3D:FA:58:11:DC:29:F4:71:09:55:D1:23:35:58:E5:8B X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:07:38:d2:5d:6b:ab:92:6b:66:1a:15:67:51:00:40:d2:fc: 9a:4f:3d:29:f3:64:3b:14:9f:7e:3d:14:46:c3:08:c2:95:50: d6:3a:ca:e6:ca:24:77:95:bc:d3:8e:04:8d:30:4d:77:11:c4: a8:8f:7f:14:b6:eb:0e:6d:0b:87:c1:99:eb:dc:fd:51:58:1e: 2d:68:bd:d7:15:d1:40:08:23:7d:87:e3:8c:a0:4e:80:02:a6: 79:f6:1a:13:49:56:ee:4d:b5:fd:f9:c4:81:44:a7:2e:92:f1: 2a:47:25:86:dd:bf:d0:81:d2:3e:2c:17:79:8f:c4:e3:d5:89: 3e:06:9f:71:3f:15:60:5f:d6:c5:dd:6c:95:a5:31:2e:00:93: 85:9f:91:c1:06:e1:23:e2:4c:de:c0:59:1a:de:12:b8:38:bc: 13:40:78:1f:d6:a2:ef:69:21:51:0f:ce:ec:df:ef:d5:34:7a: 57:2b:d4:95:26:1a:0d:78:9e:55:6f:a0:4b:28:4c:08:04:f9: 43:20:0e:0a:d6:3f:80:72:8b:95:e3:36:08:8a:75:31:70:8b: 98:1b:ee:ad:20:64:b8:1b:dc:65:61:bb:34:a6:bb:6c:f9:8e: 9e:09:69:e3:89:54:f6:c1:2b:ac:d0:50:cd:97:64:6d:9a:0a: 87:fa:98:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjYwMzI2MTk0NzU1WhcNMjYwNDAyMTk0NzU1WjAYMRYwFAYD VQQDEw02OWM1OGQ2Yi1kMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWnphYX/liDraLj0SBV98fNcRkZCfxxzkhkkrOM9/5MAqzsVrCpoEN58lbMO BwYJZGJJsAsOeQIECdk+Be+ClehgmtlITos6A32XrCVzfAstDs/MY2cLNGC5cefr qetCc00EwTsjOah1LJEwH3lv4a5Qxn8WMw5pRVVwRI+EZlIn73FX3NrHpfNq1N9N B90/cZ0I6oDvE3Ptkl8m9nOI9dzsE+Q4XL0WEQdaudQfAOenmrBwFrUU0+RRWt0V BKPIZBx3izetJhuwNKZE1yaFsNeVChMhBzLbxRSiy8HzZ4gAFlLPlP+A+gbVW/FB dLt1TCWqbl15Q66u4G3wbMXylQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPTffE9 +lgR3Cn0cQlV0SM1WOWLMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJgc40l1rq5JrZhoVZ1EAQNL8mk89KfNkOxSffj0URsMIwpVQ1jrK5sokd5W8 044EjTBNdxHEqI9/FLbrDm0Lh8GZ69z9UVgeLWi91xXRQAgjfYfjjKBOgAKmefYa E0lW7k21/fnEgUSnLpLxKkclht2/0IHSPiwXeY/E49WJPgafcT8VYF/Wxd1slaUx LgCThZ+RwQbhI+JM3sBZGt4SuDi8E0B4H9ai72khUQ/O7N/v1TR6VyvUlSYaDXie VW+gSyhMCAT5QyAOCtY/gHKLleM2CIp1MXCLmBvurSBkuBvcZWG7NKa7bPmOnglp 44lU9sErrNBQzZdkbZoKh/qYtQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:37:14 2026 by rpki-client