$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: bGpAOvhe3CQaWDIrd+kgLOBUs9krD3ANkErYHEusuGU= Subject key identifier: 80:53:D6:9F:A1:B7:DF:6B:02:F9:01:28:52:B7:98:9A:89:5D:7E:4B Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 1383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 48E2 Signing time: Thu 26 Mar 2026 14:20:53 +0000 Manifest this update: Thu 26 Mar 2026 14:20:52 +0000 Manifest next update: Thu 02 Apr 2026 14:20:52 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: N9ZfqWgqwhKnj0vlGwgGsVTu/yQ9cWy39rIRukGu7x8=) 2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: r6K9sT4xz4xltrfN6WopOwvbBDeZ2oXDfmgdeeL8nwY=) 3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: 8j8UggU/cOGDsFTMUgNVbsmPDrBcfc9iBtV2U1i4LIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4995 (0x1383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Mar 26 14:20:52 2026 GMT Not After : Apr 2 14:20:52 2026 GMT Subject: CN=69c540c5-d1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:8a:ad:fb:49:8b:28:98:67:2c:da:d6:9d: 06:60:6d:3a:d3:5d:bc:13:fa:55:4b:5a:b9:78:1d: 01:0c:6b:e0:cc:79:16:78:80:60:10:46:d9:86:72: e5:c8:5f:31:02:41:67:41:e7:02:0e:53:76:30:30: 6f:e8:6d:8d:fd:4c:bf:ce:63:13:42:b8:6a:df:d6: 1c:28:52:c8:7d:f0:65:75:f4:65:04:ed:2f:61:1c: 8a:89:72:d8:2c:7e:a6:70:8a:bd:d7:d9:a3:15:8a: f9:30:52:24:4d:dc:c5:d0:3a:a6:da:5b:9b:7b:b5: 12:b2:ef:39:54:f6:f1:ef:2f:3d:69:7f:6d:61:19: 60:55:a7:f8:36:81:63:5a:42:fb:ea:1a:0f:a5:26: 77:b9:55:76:62:62:e6:24:b4:52:4e:61:46:79:ee: a9:61:dc:28:01:9b:b6:d2:04:d0:06:27:b7:c3:a1: 2a:91:6b:99:5d:b0:fc:2d:f7:87:6c:be:f2:75:34: f3:24:bc:92:7f:89:c9:8b:55:91:de:8c:ce:31:0e: 28:e3:b2:ed:0a:d1:06:52:bb:22:f5:4f:45:e1:7a: d0:18:ee:64:80:b6:ba:1d:d5:2b:48:38:65:f5:c9: 4a:b8:42:dc:f1:c8:e2:cd:5d:8d:37:9c:f4:34:88: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:D6:9F:A1:B7:DF:6B:02:F9:01:28:52:B7:98:9A:89:5D:7E:4B X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:32:c3:c5:55:a2:59:78:c9:7c:aa:21:a3:55:25:45:b6:be: c2:12:24:d9:7f:39:15:81:82:52:45:6b:e1:94:33:7b:5b:34: 06:53:eb:44:7a:90:0a:7e:03:46:d2:aa:75:47:12:c8:f8:2e: 42:f2:cd:b8:91:31:b4:2c:70:3b:9f:f9:b5:ee:8c:47:7b:e9: 89:36:9c:ae:0f:a6:61:fa:c8:bb:8b:4e:b3:4a:c7:68:0a:9c: 6b:42:8e:64:3b:ba:fd:d6:90:9c:df:96:d3:a8:40:b4:c8:fe: 14:5c:d7:2a:a3:27:6d:03:84:d0:de:9e:62:cd:34:49:8e:52: e8:1d:c0:6c:06:6a:f2:a3:46:c0:17:fa:1e:ef:e0:a4:42:b4: 96:23:b5:d4:8f:23:cc:0e:d1:2f:d2:23:ae:03:95:95:08:b4: dc:8e:99:99:ac:91:d5:34:a5:b9:4e:2f:d7:18:4b:37:04:85: 65:83:d5:91:3e:5c:f5:9c:9b:de:e2:bd:e0:e9:66:9a:c4:f2: e7:2f:11:19:8a:db:f3:5b:ef:f9:a3:19:9b:5c:1f:59:e6:88: c6:bd:be:e8:90:d0:66:1a:61:36:ee:51:1b:28:73:c6:ab:86: 8b:f8:e4:ac:4b:f5:51:7a:89:3b:80:02:7a:3d:e9:7d:01:26: 7f:d7:c4:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjYwMzI2MTQyMDUyWhcNMjYwNDAyMTQyMDUyWjAYMRYwFAYD VQQDEw02OWM1NDBjNS1kMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtU6KrftJiyiYZyza1p0GYG060128E/pVS1q5eB0BDGvgzHkWeIBgEEbZhnLl yF8xAkFnQecCDlN2MDBv6G2N/Uy/zmMTQrhq39YcKFLIffBldfRlBO0vYRyKiXLY LH6mcIq919mjFYr5MFIkTdzF0Dqm2lube7USsu85VPbx7y89aX9tYRlgVaf4NoFj WkL76hoPpSZ3uVV2YmLmJLRSTmFGee6pYdwoAZu20gTQBie3w6EqkWuZXbD8LfeH bL7ydTTzJLySf4nJi1WR3ozOMQ4o47LtCtEGUrsi9U9F4XrQGO5kgLa6HdUrSDhl 9clKuELc8cjizV2NN5z0NIhelwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBT1p+h t99rAvkBKFK3mJqJXX5LMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsDLDxVWiWXjJfKoho1UlRba+whIk2X85FYGCUkVr4ZQze1s0BlPrRHqQCn4D RtKqdUcSyPguQvLNuJExtCxwO5/5te6MR3vpiTacrg+mYfrIu4tOs0rHaAqca0KO ZDu6/daQnN+W06hAtMj+FFzXKqMnbQOE0N6eYs00SY5S6B3AbAZq8qNGwBf6Hu/g pEK0liO11I8jzA7RL9IjrgOVlQi03I6ZmayR1TSluU4v1xhLNwSFZYPVkT5c9Zyb 3uK94OlmmsTy5y8RGYrb81vv+aMZm1wfWeaIxr2+6JDQZhphNu5RGyhzxquGi/jk rEv1UXqJO4ACej3pfQEmf9fEYg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:43:16 2026 by rpki-client