$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: DuSDGPh80yVqTGQ/ABMYg3X8WRroVr+oTooni3Yh3kU= Subject key identifier: B7:7F:A2:6E:F8:26:B3:B2:B5:0B:0B:0F:7F:41:44:51:2C:6A:C5:DA Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: F5 Signing time: Wed 25 Mar 2026 04:33:45 +0000 Manifest this update: Wed 25 Mar 2026 04:33:45 +0000 Manifest next update: Wed 01 Apr 2026 04:33:45 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: BrYnYLb0aEUVo78IxAMMKdvDc92V4pjgQK9AJF/jdC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Mar 25 04:33:45 2026 GMT Not After : Apr 1 04:33:45 2026 GMT Subject: CN=69c365a9-6b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:71:39:2b:87:92:ea:39:2d:10:f3:56:58:56: 5f:91:6b:8b:62:13:84:f9:12:1f:72:e2:09:98:0e: 90:34:0c:ce:de:54:36:a2:4d:3c:8d:b1:61:db:a1: 9e:0a:e8:2e:42:b9:dc:4d:42:1e:f0:5b:2e:b3:08: 32:62:f7:88:a7:d6:e7:b0:cc:f0:53:0b:8c:84:20: ed:9e:0f:22:5a:51:d7:71:d5:df:a8:cb:2a:eb:3d: 4c:5d:8e:97:84:7d:3a:b1:3d:b3:6e:fa:e4:72:bf: 48:c9:c3:93:32:0d:5d:2b:0d:9e:38:94:7a:9e:4e: 01:3f:a0:47:e0:f3:c2:ba:67:d8:79:65:a8:56:70: 3e:a7:68:61:f9:57:b5:2a:97:f9:44:2b:56:d0:f7: a4:40:ee:87:55:7a:a8:8f:69:ae:37:97:be:e3:9b: 10:d3:2d:27:2a:16:c7:19:e7:31:91:86:48:28:9b: 49:eb:6f:6b:80:2e:e8:a4:07:25:97:79:a0:c6:44: cf:97:26:5e:75:c9:c7:b6:ba:cd:22:26:78:32:76: 8c:49:72:69:3e:4a:c0:80:c5:b0:a6:81:c8:c5:95: e7:4b:ab:95:cb:e9:64:e1:4e:37:c4:c4:00:df:eb: c2:a3:49:e3:95:12:bc:cf:b5:36:39:04:cb:9b:0f: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7F:A2:6E:F8:26:B3:B2:B5:0B:0B:0F:7F:41:44:51:2C:6A:C5:DA X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f1:6c:bb:85:f0:d0:7d:18:63:11:48:cd:9f:f7:36:ba:0f: 90:03:84:9a:12:bb:06:a4:6f:97:69:0b:b4:3c:f3:f8:ab:23: 9a:95:9a:74:f0:4d:ac:dc:5a:09:2f:67:be:4f:5d:41:08:02: 66:ab:45:df:4e:00:b7:0d:eb:64:d0:b0:8b:b2:e8:b0:f8:25: cd:eb:a4:a1:c1:25:6e:8d:c8:a1:50:7b:f3:07:ca:e7:5f:2d: 0d:8c:4d:69:1c:19:26:9e:ad:2e:99:37:9b:6f:d7:a9:fb:3c: eb:12:1b:c7:0f:86:23:e7:e0:f2:9a:8f:ac:75:dd:7b:8a:f7: 4c:7f:8b:c2:5e:ba:2c:6f:e4:89:d5:5d:28:f7:c5:89:96:5e: e9:d3:2b:da:7c:be:4f:c3:e9:07:58:50:07:45:fb:0a:4f:b6: af:2b:c4:04:cf:a5:5b:18:0a:7c:63:95:5b:77:96:81:de:e6: de:36:e6:d3:ef:2d:a0:5f:41:a5:b7:52:2a:4a:38:1d:7f:c3: eb:42:04:56:ea:1a:e2:13:0a:50:63:e2:e4:ff:ad:0d:1f:88: 14:f7:2c:61:82:b6:27:1d:c8:24:13:b6:9e:52:d1:81:7f:05: da:3e:6a:da:40:97:34:e1:4a:88:f2:1e:47:76:23:d9:d1:a5: fa:1f:f1:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKDVFRjVFMUE1ODVDNDhFMkJDNDUwQkE3MkY0QzMxMzQ2 ODBFNTJCMEQwHhcNMjYwMzI1MDQzMzQ1WhcNMjYwNDAxMDQzMzQ1WjAYMRYwFAYD VQQDEw02OWMzNjVhOS02YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHE5K4eS6jktEPNWWFZfkWuLYhOE+RIfcuIJmA6QNAzO3lQ2ok08jbFh26Ge CuguQrncTUIe8FsuswgyYveIp9bnsMzwUwuMhCDtng8iWlHXcdXfqMsq6z1MXY6X hH06sT2zbvrkcr9IycOTMg1dKw2eOJR6nk4BP6BH4PPCumfYeWWoVnA+p2hh+Ve1 Kpf5RCtW0PekQO6HVXqoj2muN5e+45sQ0y0nKhbHGecxkYZIKJtJ629rgC7opAcl l3mgxkTPlyZedcnHtrrNIiZ4MnaMSXJpPkrAgMWwpoHIxZXnS6uVy+lk4U43xMQA 3+vCo0njlRK8z7U2OQTLmw+lXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLd/om74 JrOytQsLD39BRFEsasXaMB8GA1UdIwQYMBaAFF714aWFxI4rxFC6cvTDE0aA5SsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS9FMUFFNTQ3Q0Ix MzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWppdkVVTHB5OU1NVFJvRGxL dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS9FMUFFNTQ3Q0IxMzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWpp dkVVTHB5OU1NVFJvRGxLdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgvFsu4Xw0H0YYxFIzZ/3NroPkAOEmhK7BqRvl2kLtDzz+KsjmpWadPBNrNxa CS9nvk9dQQgCZqtF304Atw3rZNCwi7LosPglzeukocElbo3IoVB78wfK518tDYxN aRwZJp6tLpk3m2/Xqfs86xIbxw+GI+fg8pqPrHXde4r3TH+Lwl66LG/kidVdKPfF iZZe6dMr2ny+T8PpB1hQB0X7Ck+2ryvEBM+lWxgKfGOVW3eWgd7m3jbm0+8toF9B pbdSKko4HX/D60IEVuoa4hMKUGPi5P+tDR+IFPcsYYK2Jx3IJBO2nlLRgX8F2j5q 2kCXNOFKiPIeR3Yj2dGl+h/xQw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:18 2026 by rpki-client