$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: ZitBa3H3qWk9qHebycYNhvWH/SLle/CgN3QHdBzwOPw= Subject key identifier: 23:90:CA:5C:B7:2B:54:32:3C:F6:FF:D0:CD:F8:4C:74:ED:A9:F4:71 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 14E4 Signing time: Tue 24 Mar 2026 18:55:21 +0000 Manifest this update: Tue 24 Mar 2026 18:55:21 +0000 Manifest next update: Tue 31 Mar 2026 18:55:21 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: JNPrt4pC+O1HCWjOX3eIGoOboCeFT7vAF02T/k2sGuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Mar 24 18:55:21 2026 GMT Not After : Mar 31 18:55:21 2026 GMT Subject: CN=69c2de19-2e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:cc:d7:91:7d:c1:e4:b0:1c:c7:48:63:13: 0c:9d:26:8e:be:34:01:64:05:87:da:44:3a:e0:aa: e0:f9:9f:b6:75:8f:53:1a:fa:e0:a8:c9:fa:9c:76: 85:09:5e:a7:9e:31:05:61:64:15:a1:4c:0f:c6:cf: 74:a2:11:e3:a6:46:be:b2:6a:a2:00:49:26:c2:94: 08:e9:f3:da:03:a1:8f:42:2d:36:ff:6f:da:22:7a: 59:af:25:70:6a:5e:e2:f5:fa:2b:a5:be:40:e5:cf: 61:48:47:76:c9:a0:22:9e:78:24:39:0a:d2:cc:f6: 17:84:89:1a:5d:10:a2:96:6c:04:97:9f:b7:3b:eb: d5:c7:dc:2c:96:80:8f:ae:14:d7:bc:55:d5:7e:f1: 92:2e:59:39:ac:7f:bb:f1:fa:61:a2:54:15:24:d2: 87:9f:4b:09:62:6c:cf:c3:ca:32:7f:3b:df:2e:40: ff:29:47:42:b3:ec:4a:d6:1b:8a:0b:97:2b:8a:6e: 25:67:08:33:e3:57:ec:57:25:86:4c:3f:c3:0c:15: e7:50:76:01:a8:e5:d9:4d:7a:ca:d2:71:ab:3c:a6: aa:c2:53:2e:e0:72:0f:5e:4a:b3:52:b9:3c:e6:b5: 2c:ac:dd:e1:98:ba:55:79:b9:d2:4e:b3:97:71:cf: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:90:CA:5C:B7:2B:54:32:3C:F6:FF:D0:CD:F8:4C:74:ED:A9:F4:71 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6b:af:90:a2:dd:59:36:31:fa:8d:17:a3:33:04:51:76:a2: 26:31:8a:04:3b:5a:78:e6:a0:f6:f0:7a:6a:9c:57:50:fc:01: 0d:e7:38:13:ba:f0:95:fe:fd:66:b2:10:1f:72:a0:98:f7:9b: 55:38:86:c6:a9:87:0e:ac:7e:3f:a5:bb:ce:3a:6e:9e:06:9c: aa:5b:42:41:a5:f2:77:80:89:45:3b:14:5e:ac:3a:ec:8d:5b: 51:e3:36:01:f5:33:ba:ae:ae:fa:2c:1a:8e:51:60:64:58:29: 6e:93:88:1f:f8:94:ad:41:91:8d:b2:6c:63:97:54:2c:f6:d0: 8c:4e:e2:f2:c2:70:5b:d8:05:28:ba:c8:56:f6:e3:a6:8c:e7: e5:65:7a:87:ae:2e:cc:f0:e4:cd:b5:b2:ba:e3:2b:86:84:57: 7a:b8:19:27:30:e4:86:8f:81:18:4b:61:b0:34:58:92:de:68: b1:11:47:cc:b0:e1:c7:63:dd:1b:ba:b7:99:3a:b2:00:22:d7: 1d:8f:5f:f1:a6:bd:19:ad:a9:b4:65:48:38:98:f8:24:ec:1a: be:44:bc:c2:74:ab:80:f2:b6:91:c7:02:ca:56:1e:db:8b:28: 04:25:79:ad:03:ea:17:aa:8d:a7:33:5e:8b:8e:be:14:e0:3b: cf:03:2e:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjYwMzI0MTg1NTIxWhcNMjYwMzMxMTg1NTIxWjAYMRYwFAYD VQQDEw02OWMyZGUxOS0yZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh/M15F9weSwHMdIYxMMnSaOvjQBZAWH2kQ64Krg+Z+2dY9TGvrgqMn6nHaF CV6nnjEFYWQVoUwPxs90ohHjpka+smqiAEkmwpQI6fPaA6GPQi02/2/aInpZryVw al7i9forpb5A5c9hSEd2yaAinngkOQrSzPYXhIkaXRCilmwEl5+3O+vVx9wsloCP rhTXvFXVfvGSLlk5rH+78fpholQVJNKHn0sJYmzPw8oyfzvfLkD/KUdCs+xK1huK C5crim4lZwgz41fsVyWGTD/DDBXnUHYBqOXZTXrK0nGrPKaqwlMu4HIPXkqzUrk8 5rUsrN3hmLpVebnSTrOXcc+x3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOQyly3 K1QyPPb/0M34THTtqfRxMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADWuvkKLdWTYx+o0XozMEUXaiJjGKBDtaeOag9vB6apxXUPwBDec4E7rwlf79 ZrIQH3KgmPebVTiGxqmHDqx+P6W7zjpungacqltCQaXyd4CJRTsUXqw67I1bUeM2 AfUzuq6u+iwajlFgZFgpbpOIH/iUrUGRjbJsY5dULPbQjE7i8sJwW9gFKLrIVvbj pozn5WV6h64uzPDkzbWyuuMrhoRXergZJzDkho+BGEthsDRYkt5osRFHzLDhx2Pd G7q3mTqyACLXHY9f8aa9Ga2ptGVIOJj4JOwavkS8wnSrgPK2kccCylYe24soBCV5 rQPqF6qNpzNei46+FOA7zwMumQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:13 2026 by rpki-client