$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: Fy/gCDBibQ3Dkns1XEwdhk5Z+IbrrxFe+OtJyHZo5dI= Subject key identifier: E5:2D:F1:D6:76:4B:FB:AC:B6:0D:BF:73:92:CD:35:94:20:14:CC:50 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1FBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1FAE Signing time: Tue 24 Mar 2026 15:55:08 +0000 Manifest this update: Tue 24 Mar 2026 15:55:07 +0000 Manifest next update: Tue 31 Mar 2026 15:55:07 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: LNJzielEo1KRdcxjyTHWswrQQftdaWd7Owr6J3AlnIA=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: W76e9AIVTyaTFBKFcxkBKNy/Y9c3O96EbBTxmYrNiiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8125 (0x1fbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Mar 24 15:55:07 2026 GMT Not After : Mar 31 15:55:07 2026 GMT Subject: CN=69c2b3db-498d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:36:07:8d:87:a7:a7:1f:c0:aa:06:3a:df: 20:95:bd:86:cf:4b:12:ab:68:8d:b2:37:51:d3:a2: 63:f4:6e:3a:a2:4f:5d:75:54:c9:d0:93:91:b9:98: b5:ae:69:c6:c8:37:eb:c7:fd:1b:71:1b:e5:7e:fd: 35:7c:5a:db:27:c3:6f:c2:a0:84:3a:64:7f:9d:e1: 44:87:02:6b:57:33:ed:1d:e2:dd:d0:14:2b:13:31: b2:dd:9d:e7:04:82:76:49:d3:a2:cb:af:6a:6a:d6: f2:88:95:c0:fc:c7:48:49:db:35:e6:8c:9a:b5:8a: 28:13:0c:3d:dd:72:a8:54:bd:5e:83:90:88:1b:da: dd:1c:56:42:ef:f8:aa:98:24:58:c8:9a:de:34:1b: 6b:45:74:35:99:06:2d:f7:6a:95:64:c8:b2:fd:0e: 96:7f:44:72:04:9c:4f:7b:94:fd:2a:40:c6:ed:82: 19:75:5a:cc:b5:11:04:48:55:b8:c7:44:e1:e2:b9: a9:4e:26:f7:6e:be:ef:e6:01:8f:50:0a:6c:fc:8b: d3:86:16:d4:fe:94:ba:b5:00:1a:e5:96:1f:bc:00: fd:8d:63:9e:a5:8e:49:d9:f0:94:7a:08:2f:33:8b: 89:91:c2:ae:43:b8:6f:f5:3e:20:1b:8b:84:ca:6c: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2D:F1:D6:76:4B:FB:AC:B6:0D:BF:73:92:CD:35:94:20:14:CC:50 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:75:84:b3:e1:18:c1:93:52:a7:40:b0:f2:b5:29:df:67:10: 63:f1:a1:80:68:25:5d:21:87:97:63:3e:11:b3:3d:45:90:bf: 83:4d:93:7c:16:b3:1a:22:8b:3a:7d:f0:97:ac:9f:cc:4f:11: aa:77:31:c2:ae:5f:03:1c:e9:f5:2e:59:31:a1:99:a5:c8:ed: 05:49:19:30:0c:cb:8b:3b:74:2c:19:c8:0f:33:14:a8:ba:80: 7c:3f:aa:0b:0b:46:fa:54:06:f6:1a:7e:54:21:f2:3a:94:bd: 3f:8c:fb:0b:f2:48:f7:e4:71:28:e2:54:cb:58:5e:e7:a0:a6: 54:fc:90:dd:1b:0a:c4:1c:d8:c5:99:81:c7:68:b4:49:7e:3a: 7b:89:7e:4b:e5:0f:28:fe:ea:99:03:51:84:a7:29:94:63:5b: 67:75:23:fe:bb:4a:e9:54:aa:07:dd:eb:21:7a:2e:a7:b5:23: f3:99:c3:58:f8:a4:06:5e:bb:e2:de:a4:0c:58:4d:c4:c9:0c: 5f:a0:6f:67:6f:4f:3a:36:5d:c5:38:bc:3a:22:74:f3:af:bc: d1:08:f8:fb:fa:0f:c0:b1:dc:ea:8c:a6:10:b2:5e:42:d2:8f: 74:c7:23:24:c7:da:5f:a1:43:e6:5b:60:52:f8:35:d1:2d:69: fc:aa:cc:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjYwMzI0MTU1NTA3WhcNMjYwMzMxMTU1NTA3WjAYMRYwFAYD VQQDEw02OWMyYjNkYi00OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwk2B42Hp6cfwKoGOt8glb2Gz0sSq2iNsjdR06Jj9G46ok9ddVTJ0JORuZi1 rmnGyDfrx/0bcRvlfv01fFrbJ8NvwqCEOmR/neFEhwJrVzPtHeLd0BQrEzGy3Z3n BIJ2SdOiy69qatbyiJXA/MdISds15oyatYooEww93XKoVL1eg5CIG9rdHFZC7/iq mCRYyJreNBtrRXQ1mQYt92qVZMiy/Q6Wf0RyBJxPe5T9KkDG7YIZdVrMtREESFW4 x0Th4rmpTib3br7v5gGPUAps/IvThhbU/pS6tQAa5ZYfvAD9jWOepY5J2fCUeggv M4uJkcKuQ7hv9T4gG4uEymyvgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUt8dZ2 S/ustg2/c5LNNZQgFMxQMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV3WEs+EYwZNSp0Cw8rUp32cQY/GhgGglXSGHl2M+EbM9RZC/g02TfBazGiKL On3wl6yfzE8Rqncxwq5fAxzp9S5ZMaGZpcjtBUkZMAzLizt0LBnIDzMUqLqAfD+q CwtG+lQG9hp+VCHyOpS9P4z7C/JI9+RxKOJUy1he56CmVPyQ3RsKxBzYxZmBx2i0 SX46e4l+S+UPKP7qmQNRhKcplGNbZ3Uj/rtK6VSqB93rIXoup7Uj85nDWPikBl67 4t6kDFhNxMkMX6BvZ29POjZdxTi8OiJ086+80Qj4+/oPwLHc6oymELJeQtKPdMcj JMfaX6FD5ltgUvg10S1p/KrMbg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:21 2026 by rpki-client