$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: rgE1Go3cGHTGOgLPUVgmWQAWzYKuNCaRG6SdcB6dHv8= Subject key identifier: 8E:96:FF:36:F9:8D:75:32:E7:E9:68:7D:8D:5C:BE:E8:42:20:C1:A8 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 0192 Signing time: Wed 25 Mar 2026 03:38:28 +0000 Manifest this update: Wed 25 Mar 2026 03:38:27 +0000 Manifest next update: Wed 01 Apr 2026 03:38:27 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: yq2JP/gu4uDKT46CQ4d+ZGB2Lumie/dKXH1lp1B1jUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Mar 25 03:38:27 2026 GMT Not After : Apr 1 03:38:27 2026 GMT Subject: CN=69c358b4-77f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:e7:ee:72:bf:d5:9d:36:49:af:76:53:34: bd:df:2e:a0:7a:d5:c3:c4:08:3f:a5:00:db:04:ae: d4:55:b8:dc:05:53:8d:2d:c7:cc:7d:2d:9a:13:7f: a5:14:83:6b:64:fd:33:4c:ea:7e:e3:26:60:86:d3: df:31:d2:5d:97:bc:58:82:4e:92:5e:a2:3a:a8:c2: c0:7e:96:74:9b:b6:19:ae:56:93:e4:c4:2b:c9:97: 9f:4a:71:a1:c4:8a:f6:8b:87:83:b6:07:17:a7:12: 1b:fd:fc:a5:3e:08:13:12:10:f9:34:47:ba:68:83: 72:6d:6f:53:c6:29:85:b8:21:a9:8a:f7:7f:d1:8a: 99:b0:30:ee:68:0f:23:87:80:e0:b4:cd:30:18:f3: f3:b2:10:b7:30:22:31:e8:f9:12:1f:09:6d:34:73: 71:34:ec:d9:7b:1e:57:92:0d:cd:4d:5f:d7:1c:79: 6b:60:1c:37:29:68:48:4f:c8:e9:4e:00:bf:4f:da: 14:8e:28:ac:47:2e:2f:de:ed:c9:2a:3c:2a:72:2b: 86:7f:fb:99:8d:89:2f:aa:b0:6d:15:4c:cc:6b:ed: 65:5d:c2:fb:ab:d6:b2:d6:06:02:59:c2:02:d8:19: 13:d2:6b:ea:3a:ef:32:6a:9f:c3:9b:d5:29:49:21: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:96:FF:36:F9:8D:75:32:E7:E9:68:7D:8D:5C:BE:E8:42:20:C1:A8 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a2:3a:af:26:28:c7:66:7a:d8:66:ce:4c:fd:62:17:82:67: fc:bf:31:f9:05:90:80:da:4f:36:9e:5d:2a:d2:38:51:f9:af: 61:96:80:3f:07:68:a5:8e:92:be:74:a4:e1:23:f1:ba:19:77: 19:ed:25:86:45:5c:55:7a:51:f8:9f:b9:e3:d7:42:56:30:50: c8:89:e7:38:82:a9:db:78:78:8e:04:ea:78:1a:7f:58:ac:23: 2a:91:3e:ca:c4:4f:7d:33:6f:44:68:f9:99:cd:15:ed:ba:ca: 0e:42:3b:e8:21:79:af:7e:c4:d2:e9:c3:76:ed:9b:52:3b:f9: 6f:46:21:1a:b1:f5:9b:85:1b:8a:5f:e8:59:c2:88:44:73:63: ec:3b:2a:41:23:1b:ff:40:9d:37:1c:a8:03:99:3c:15:e0:42: bc:4c:aa:fc:47:e9:60:d7:a5:61:39:07:52:d1:30:d2:61:4f: ac:66:73:66:e3:c4:de:15:7e:76:f6:f5:4f:66:f0:b8:3d:71: 3c:c5:00:73:ba:b5:fc:52:59:af:39:37:ef:81:8c:b5:20:c1: 57:61:4a:57:e9:ba:55:bd:e6:c1:9f:c3:33:f1:db:ab:0e:6e: fc:65:47:fd:ff:2a:3e:86:1e:b7:17:aa:c8:b3:b4:c0:16:dd: b5:ee:2f:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjYwMzI1MDMzODI3WhcNMjYwNDAxMDMzODI3WjAYMRYwFAYD VQQDEw02OWMzNThiNC03N2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN7n7nK/1Z02Sa92UzS93y6getXDxAg/pQDbBK7UVbjcBVONLcfMfS2aE3+l FINrZP0zTOp+4yZghtPfMdJdl7xYgk6SXqI6qMLAfpZ0m7YZrlaT5MQryZefSnGh xIr2i4eDtgcXpxIb/fylPggTEhD5NEe6aINybW9TximFuCGpivd/0YqZsDDuaA8j h4DgtM0wGPPzshC3MCIx6PkSHwltNHNxNOzZex5Xkg3NTV/XHHlrYBw3KWhIT8jp TgC/T9oUjiisRy4v3u3JKjwqciuGf/uZjYkvqrBtFUzMa+1lXcL7q9ay1gYCWcIC 2BkT0mvqOu8yap/Dm9UpSSEhswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6W/zb5 jXUy5+lofY1cvuhCIMGoMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY6I6ryYox2Z62GbOTP1iF4Jn/L8x+QWQgNpPNp5dKtI4UfmvYZaAPwdopY6S vnSk4SPxuhl3Ge0lhkVcVXpR+J+549dCVjBQyInnOIKp23h4jgTqeBp/WKwjKpE+ ysRPfTNvRGj5mc0V7brKDkI76CF5r37E0unDdu2bUjv5b0YhGrH1m4Ubil/oWcKI RHNj7DsqQSMb/0CdNxyoA5k8FeBCvEyq/EfpYNelYTkHUtEw0mFPrGZzZuPE3hV+ dvb1T2bwuD1xPMUAc7q1/FJZrzk374GMtSDBV2FKV+m6Vb3mwZ/DM/Hbqw5u/GVH /f8qPoYetxeqyLO0wBbdte4vyg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:25 2026 by rpki-client