$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft File: Xb7wLCg84I1tzonzkSoMMKcBkMg.mft (raw, json) Hash identifier: cW7zk/BFdXjOcFzFFL6IBLP9WIhbLxkFN2PlWrYvpMs= Subject key identifier: 72:0C:36:9B:35:84:AA:45:67:C2:79:35:0D:8B:B8:C4:65:67:CC:6B Authority key identifier: 5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 Certificate issuer: /CN=A91E3E8B/serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft Manifest number: 47 Signing time: Wed 25 Mar 2026 07:30:34 +0000 Manifest this update: Wed 25 Mar 2026 07:30:34 +0000 Manifest next update: Wed 01 Apr 2026 07:30:34 +0000 Files and hashes: 1: Xb7wLCg84I1tzonzkSoMMKcBkMg.crl (hash: 9II5Cp8GjXwM0UEH1dJke8DZyVs6VNHA3bW9Qia3JBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E8B, serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Validity Not Before: Mar 25 07:30:34 2026 GMT Not After : Apr 1 07:30:34 2026 GMT Subject: CN=69c38f1a-4b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:de:8a:92:35:94:f8:29:c9:49:c1:24:3b: 0f:92:f1:22:da:e7:e0:8e:a2:00:23:8a:d1:5c:ac: 2d:33:b6:38:cc:9d:e0:fc:4a:4d:b9:e7:7a:dd:07: 67:dd:16:a3:24:8d:43:7d:7b:2a:ff:26:ae:81:b0: cd:43:9d:b3:b1:fe:3f:ea:7e:35:9c:48:bb:16:e5: e5:66:59:63:2b:64:88:94:3b:a0:3f:da:67:df:d5: 36:81:df:af:32:a0:7c:87:d0:ce:94:72:ee:ac:41: c6:44:db:9d:83:46:a5:e2:fa:f7:ca:13:b6:ba:fb: 22:46:aa:eb:98:4c:d4:c9:1f:1f:fb:38:84:00:76: 6a:64:f6:f5:98:27:d5:60:23:20:f0:a6:b9:d2:96: 7f:9c:21:f1:0f:eb:47:72:32:59:d8:f4:2e:2b:3b: 1b:3e:43:e5:bc:69:ef:20:61:c6:18:4c:f9:a7:f5: 91:06:c0:89:2e:4e:1c:4f:2d:38:8a:6b:a9:d0:fe: 85:0b:12:dd:6f:1c:2f:bc:d1:e0:9e:fa:b3:de:b1: b4:41:b3:ea:40:b3:97:b3:77:e5:1e:e6:06:e0:86: 8c:a7:28:95:ba:ff:f8:de:c7:07:22:3f:d5:93:3b: 91:f9:06:79:7b:33:b1:89:03:86:44:5c:f8:cd:14: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:36:9B:35:84:AA:45:67:C2:79:35:0D:8B:B8:C4:65:67:CC:6B X509v3 Authority Key Identifier: keyid:5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:b1:ef:97:52:d4:41:b0:07:09:6b:c0:43:eb:80:63:66:45: 49:98:56:9e:4a:1d:3b:3a:46:8f:e8:92:9d:90:34:d8:65:13: 78:04:5d:2a:06:c8:5c:ee:e4:10:16:11:e4:23:4a:87:2f:2c: 8b:ad:66:7a:0a:ff:1c:c5:1e:d3:78:4c:d1:44:e3:93:c4:67: 3a:3b:8e:2c:52:3d:54:4d:32:30:1b:9d:26:c7:44:63:f1:5c: db:76:a9:6b:e4:8d:b3:c2:8d:7b:ef:b7:b6:2b:f9:24:9f:88: 00:04:2a:49:a7:4d:29:22:21:10:d8:2c:27:7b:94:d8:09:9b: 30:7f:38:0a:d6:dd:b9:66:9e:6f:42:3f:fe:be:ab:97:c8:e8: f2:78:06:8e:d7:0c:94:ed:8c:35:7e:cf:cd:30:27:b2:c5:42: 20:4e:15:02:a2:a8:68:56:e3:0c:3b:6c:78:e5:f8:fa:ef:b9: e3:c4:ea:39:35:f6:e9:36:8e:97:4e:94:ab:94:19:dd:ea:17: da:93:3b:e4:25:43:1e:0f:b1:2f:3d:79:5a:8d:19:9f:5b:99: 1f:0e:7e:d4:e0:38:e4:1d:7e:78:41:06:5b:eb:cd:a0:f9:64: 9d:0a:e6:b6:2a:6a:79:98:30:17:56:36:1d:b6:43:9e:92:4c: cf:07:65:56 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4QjExMC8GA1UEBRMoNURCRUYwMkMyODNDRTA4RDZEQ0U4OUYzOTEyQTBDMzBB NzAxOTBDODAeFw0yNjAzMjUwNzMwMzRaFw0yNjA0MDEwNzMwMzRaMBgxFjAUBgNV BAMTDTY5YzM4ZjFhLTRiNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0jN6KkjWU+CnJScEkOw+S8SLa5+COogAjitFcrC0ztjjMneD8Sk2553rdB2fd FqMkjUN9eyr/Jq6BsM1DnbOx/j/qfjWcSLsW5eVmWWMrZIiUO6A/2mff1TaB368y oHyH0M6Ucu6sQcZE252DRqXi+vfKE7a6+yJGquuYTNTJHx/7OIQAdmpk9vWYJ9Vg IyDwprnSln+cIfEP60dyMlnY9C4rOxs+Q+W8ae8gYcYYTPmn9ZEGwIkuThxPLTiK a6nQ/oULEt1vHC+80eCe+rPesbRBs+pAs5ezd+Ue5gbghoynKJW6//jexwciP9WT O5H5Bnl7M7GJA4ZEXPjNFHSHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcgw2mzWE qkVnwnk1DYu4xGVnzGswHwYDVR0jBBgwFoAUXb7wLCg84I1tzonzkSoMMKcBkMgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRThCLzA0REUyQjkyQkUy MjExRjBCMzhEQjUxOUM0RjlBRTAyL1hiN3dMQ2c4NEkxdHpvbnprU29NTUtjQmtN Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGI3d0xDZzg0STF0em9uemtTb01NS2NCa01nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RThCLzA0REUyQjkyQkUyMjExRjBCMzhEQjUxOUM0RjlBRTAyL1hiN3dMQ2c4NEkx dHpvbnprU29NTUtjQmtNZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDIse+XUtRBsAcJa8BD64BjZkVJmFaeSh07OkaP6JKdkDTYZRN4BF0qBshc7uQQ FhHkI0qHLyyLrWZ6Cv8cxR7TeEzRROOTxGc6O44sUj1UTTIwG50mx0Rj8Vzbdqlr 5I2zwo1777e2K/kkn4gABCpJp00pIiEQ2Cwne5TYCZswfzgK1t25Zp5vQj/+vquX yOjyeAaO1wyU7Yw1fs/NMCeyxUIgThUCoqhoVuMMO2x45fj677njxOo5NfbpNo6X TpSrlBnd6hfakzvkJUMeD7EvPXlajRmfW5kfDn7U4DjkHX54QQZb682g+WSdCua2 Kmp5mDAXVjYdtkOekkzPB2VW -----END CERTIFICATE-----Generated at Thu Mar 26 05:58:14 2026 by rpki-client