$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: wSYJWf4MDmT+kkmmW9J3L6Si0EsWhLyzEUyacPIZvB8= Subject key identifier: 79:F0:60:F1:94:97:40:37:A1:4C:49:AF:B9:38:79:B8:A6:17:6B:8E Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 08EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 08DC Signing time: Thu 26 Mar 2026 20:15:51 +0000 Manifest this update: Thu 26 Mar 2026 20:15:50 +0000 Manifest next update: Thu 02 Apr 2026 20:15:50 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: 38/nxueDnzSI+TnpBEvpxBmmwPn0AYfZihTSOJFiMnI=) 2: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: x5+raeLBFBsuJLXzYfMJr0ORy85GDM9eQZw+pvlyKEo=) 3: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: qZ3PJo0PmY9ezmHmQvTDErn7qslnxEuobh+f3U89VNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Mar 26 20:15:50 2026 GMT Not After : Apr 2 20:15:50 2026 GMT Subject: CN=69c593f6-7c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:7f:d1:48:23:0f:5a:ef:d8:f3:db:0f:10: 19:eb:e7:5b:0a:53:0f:c2:dc:91:c8:c2:f1:85:0a: 26:f5:9b:31:24:ac:da:45:61:5a:a9:1f:79:27:3d: f5:7c:5a:f1:b0:e9:25:d6:82:06:ea:be:dc:85:06: a7:bc:1c:2a:5f:7c:30:13:4f:88:92:22:76:f6:b7: a6:44:04:d0:ce:f5:d9:2f:00:2d:94:fc:1b:dc:11: bd:ac:3b:e9:d0:22:38:2e:b1:3c:8d:1b:eb:98:21: bc:b9:de:38:a7:6e:76:34:0f:4c:f8:2f:77:75:66: f0:70:07:1c:d1:fe:3e:3b:b9:ad:a6:82:44:fb:5d: 72:19:e0:e3:d1:cd:a3:37:08:8e:53:12:b2:87:e0: 8b:3b:a1:7d:0d:d0:1f:a1:87:bb:1e:be:bd:d7:42: a2:a1:f9:04:53:56:7e:c0:52:f9:ba:d0:de:93:3a: 4c:c0:b3:d2:d2:6d:3b:f2:da:c8:32:4c:eb:43:ea: a4:9a:f8:c0:44:52:57:8b:a3:a7:32:69:b9:e1:0a: 76:07:b2:6b:08:46:f5:cf:12:f7:09:9a:f0:e9:b5: de:72:64:05:ab:24:72:a1:36:85:4b:4e:e2:e6:99: 41:ec:fd:d9:ca:86:6d:af:43:f0:5c:fb:0e:da:03: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F0:60:F1:94:97:40:37:A1:4C:49:AF:B9:38:79:B8:A6:17:6B:8E X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:96:7c:bb:db:69:dc:b2:36:90:06:13:e3:c1:9a:19:8b:26: 6d:44:4d:32:5f:da:b2:7b:68:9c:87:3b:6e:d3:e6:71:48:ef: 62:c2:f5:df:24:15:e8:9c:93:a2:60:77:86:cd:45:23:08:f8: 70:b7:43:11:84:d6:64:f7:1c:93:5e:2b:8f:16:d7:01:58:c8: ec:15:f5:2a:35:52:fb:aa:d0:2e:61:ea:cf:f3:7d:7d:2f:b9: 90:00:3b:5d:6d:f7:eb:bf:20:d3:99:57:38:68:05:b2:ca:7a: 2f:31:3d:08:e6:5d:e0:cf:a5:6e:92:49:cf:c6:45:8f:31:4a: 84:30:a4:94:d1:09:d7:76:34:3e:c5:5e:bf:bf:2c:a7:03:6c: 57:ce:f9:d0:5c:62:a7:5c:fa:1e:7e:7c:8f:76:19:ac:28:dd: 5c:a8:77:c7:b7:ae:08:d4:19:68:87:6b:37:b6:24:61:3f:96: 88:b9:18:72:8e:af:8f:e0:e8:75:1d:36:45:83:9e:31:38:30: 08:0c:d0:2c:24:02:87:90:28:d3:2a:81:73:ac:59:b7:b2:25: 3e:90:f5:a3:70:ed:79:89:92:b4:84:d7:3a:9d:59:2b:7e:90: eb:66:74:74:28:7d:61:03:38:a8:3f:b6:be:9b:df:10:14:21: 29:6a:a7:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjYwMzI2MjAxNTUwWhcNMjYwNDAyMjAxNTUwWjAYMRYwFAYD VQQDEw02OWM1OTNmNi03YzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooR/0UgjD1rv2PPbDxAZ6+dbClMPwtyRyMLxhQom9ZsxJKzaRWFaqR95Jz31 fFrxsOkl1oIG6r7chQanvBwqX3wwE0+IkiJ29remRATQzvXZLwAtlPwb3BG9rDvp 0CI4LrE8jRvrmCG8ud44p252NA9M+C93dWbwcAcc0f4+O7mtpoJE+11yGeDj0c2j NwiOUxKyh+CLO6F9DdAfoYe7Hr6910KiofkEU1Z+wFL5utDekzpMwLPS0m078trI MkzrQ+qkmvjARFJXi6OnMmm54Qp2B7JrCEb1zxL3CZrw6bXecmQFqyRyoTaFS07i 5plB7P3ZyoZtr0PwXPsO2gOduwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHnwYPGU l0A3oUxJr7k4ebimF2uOMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb5Z8u9tp3LI2kAYT48GaGYsmbURNMl/asntonIc7btPmcUjvYsL13yQV6JyT omB3hs1FIwj4cLdDEYTWZPcck14rjxbXAVjI7BX1KjVS+6rQLmHqz/N9fS+5kAA7 XW33678g05lXOGgFssp6LzE9COZd4M+lbpJJz8ZFjzFKhDCklNEJ13Y0PsVev78s pwNsV8750Fxip1z6Hn58j3YZrCjdXKh3x7euCNQZaIdrN7YkYT+WiLkYco6vj+Do dR02RYOeMTgwCAzQLCQCh5Ao0yqBc6xZt7IlPpD1o3DteYmStITXOp1ZK36Q62Z0 dCh9YQM4qD+2vpvfEBQhKWqnQw== -----END CERTIFICATE-----Generated at Fri Mar 27 08:11:18 2026 by rpki-client