$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: 0RApOZ6oBNpLbID+RhKZuWEysrC55vmRtAc1YnH5uS8= Subject key identifier: 1D:80:87:31:9D:D1:58:26:DC:52:6A:BF:53:B6:F5:CC:D0:F4:7F:15 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 014D Signing time: Wed 25 Mar 2026 04:26:33 +0000 Manifest this update: Wed 25 Mar 2026 04:26:32 +0000 Manifest next update: Wed 01 Apr 2026 04:26:32 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: JySTB7tU+gov2yFzWXLQ82MhcHkzZziC/jb749cOO2c=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Mar 25 04:26:32 2026 GMT Not After : Apr 1 04:26:32 2026 GMT Subject: CN=69c363f8-240f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:e4:79:cb:2d:e3:83:f5:d7:6d:bd:f2:4a: 6d:03:4e:0f:25:e8:a4:31:31:fe:dd:84:4c:0f:58: ce:0a:0b:56:f4:97:91:2b:3e:98:fa:2e:9b:77:e0: 5a:61:9d:45:0d:1b:8a:08:e5:92:21:5b:f3:54:1f: b5:e7:d3:52:55:62:3a:29:34:a1:4d:0b:99:b6:e8: 80:52:07:db:da:8b:25:f3:50:b7:c5:eb:1d:56:cd: ed:2f:37:73:1f:40:8b:18:a3:53:e7:f1:66:b0:65: 80:2f:74:4d:4e:24:d9:d5:1b:57:ad:c7:a2:01:81: e1:61:65:e6:91:dc:fa:71:d2:cc:d0:91:52:22:dd: 7d:50:b2:da:d6:82:18:16:83:95:4e:72:61:5a:85: f6:3c:fd:7d:d0:e4:26:e5:13:64:6f:34:a5:6e:c6: c2:d4:43:82:ca:ef:a5:30:78:d4:70:c1:03:f5:d1: 72:57:fb:6e:99:65:c1:e8:c0:3e:96:9c:3e:f1:82: a2:50:a4:4c:cb:c4:79:c5:66:bf:08:f3:e9:f9:58: 88:9c:67:46:a1:d5:c8:ce:2f:4c:a4:26:bd:fd:61: 84:e1:b9:69:be:00:83:93:cd:f7:2a:24:5e:e2:43: e1:6e:79:9e:1a:b1:a0:3f:d9:88:17:20:cf:51:45: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:80:87:31:9D:D1:58:26:DC:52:6A:BF:53:B6:F5:CC:D0:F4:7F:15 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:3f:c1:32:e7:8e:73:d2:a0:96:02:5b:06:91:ba:e7:cc:5a: 4e:f5:82:ae:cc:99:01:63:c1:0f:6f:4b:b7:03:bd:41:84:ab: 09:94:40:a3:42:3a:e5:bf:b1:25:21:61:9b:ac:de:08:75:a6: 69:4e:ac:9e:5f:66:46:9d:f2:53:6f:9e:80:97:75:d7:d1:17: 01:1a:48:65:13:1a:0b:b3:42:8b:c7:d1:fd:f9:a1:15:81:a2: b7:d7:10:ad:d3:fb:aa:5c:63:ce:c7:fe:4b:21:b4:1e:47:a0: 3e:dd:a0:9f:62:5f:9e:59:d4:ed:69:f3:40:71:a1:6f:6f:1f: 05:8a:b1:68:49:c4:2d:85:e1:0f:05:da:f6:d9:9d:17:a6:48: 70:65:8f:89:7e:53:68:97:d7:72:ce:bc:93:f2:f0:c4:4f:86: 94:60:34:74:88:09:51:10:ab:e5:1b:cb:22:34:f9:2d:b6:e7: be:76:bd:30:db:72:a1:c7:1f:ee:8d:ff:32:11:4f:49:36:21: d6:20:4b:1c:db:2d:12:1f:31:15:c0:2f:a7:45:56:6d:7e:79: 0e:fb:3f:5a:9a:43:70:b7:f4:56:39:94:f7:ca:63:e5:9f:15: 37:2c:f6:36:11:6f:01:6b:ed:c4:37:c7:4a:1d:23:09:be:b3: 24:70:de:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjYwMzI1MDQyNjMyWhcNMjYwNDAxMDQyNjMyWjAYMRYwFAYD VQQDEw02OWMzNjNmOC0yNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnHkecst44P112298kptA04PJeikMTH+3YRMD1jOCgtW9JeRKz6Y+i6bd+Ba YZ1FDRuKCOWSIVvzVB+159NSVWI6KTShTQuZtuiAUgfb2osl81C3xesdVs3tLzdz H0CLGKNT5/FmsGWAL3RNTiTZ1RtXrceiAYHhYWXmkdz6cdLM0JFSIt19ULLa1oIY FoOVTnJhWoX2PP190OQm5RNkbzSlbsbC1EOCyu+lMHjUcMED9dFyV/tumWXB6MA+ lpw+8YKiUKRMy8R5xWa/CPPp+ViInGdGodXIzi9MpCa9/WGE4blpvgCDk833KiRe 4kPhbnmeGrGgP9mIFyDPUUW1/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2AhzGd 0Vgm3FJqv1O29czQ9H8VMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1T/BMueOc9KglgJbBpG658xaTvWCrsyZAWPBD29LtwO9QYSrCZRAo0I65b+x JSFhm6zeCHWmaU6snl9mRp3yU2+egJd119EXARpIZRMaC7NCi8fR/fmhFYGit9cQ rdP7qlxjzsf+SyG0HkegPt2gn2JfnlnU7WnzQHGhb28fBYqxaEnELYXhDwXa9tmd F6ZIcGWPiX5TaJfXcs68k/LwxE+GlGA0dIgJURCr5RvLIjT5Lbbnvna9MNtyoccf 7o3/MhFPSTYh1iBLHNstEh8xFcAvp0VWbX55Dvs/WppDcLf0VjmU98pj5Z8VNyz2 NhFvAWvtxDfHSh0jCb6zJHDeHg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:54 2026 by rpki-client