$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: wpSr06wSOGJToyeK6vji1w+FSE0KiGSAfkdUg2MY9sg= Subject key identifier: 77:3F:E2:3A:9D:E0:2E:55:1A:75:B9:E1:28:BB:15:85:CE:ED:69:1B Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 03D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 03B6 Signing time: Fri 27 Mar 2026 00:29:40 +0000 Manifest this update: Fri 27 Mar 2026 00:29:39 +0000 Manifest next update: Fri 03 Apr 2026 00:29:39 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: nlPm+UqLvA0Ky6hdQCmwdJpdQk/Tiq+LNePtQ5Q3Lbc=) 2: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 4Abgy+X2ZW9Ha0ytPuEUdXVUheE/F+OPg09zPVRwTxg=) 3: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: VLoma/afTmz4hnI0EdqXpLXgczEhizYxmaDG9CyhcCo=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: MYhon/bKVvfbESU7PH3/suSb5/+YVeHAdnZ0m09ZYpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Mar 27 00:29:39 2026 GMT Not After : Apr 3 00:29:39 2026 GMT Subject: CN=69c5cf73-79d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:83:21:8b:20:42:fb:ac:c3:28:fe:4d:e6: 1e:0a:c8:54:13:18:d7:a4:54:9d:22:ce:32:38:94: f5:99:78:71:f2:89:15:7c:b7:73:de:18:06:ac:31: 82:dc:fa:8d:0c:8f:42:5b:0e:80:2f:c6:f4:f4:3f: 17:8a:ca:7b:83:c7:76:5a:b7:d2:c1:47:f9:42:29: f4:b4:de:35:2e:36:0b:f3:42:89:74:f0:70:6b:13: 2d:48:3c:b0:0f:f7:4f:b8:33:bd:fc:c9:e4:3d:73: b8:e6:73:e4:d0:7f:fd:2f:5e:9a:c6:e5:20:60:fc: f5:07:ae:62:d8:7c:77:a8:ac:44:2d:f1:bc:fa:db: 13:40:9c:8f:17:24:16:a5:55:20:c6:f8:38:19:02: 75:34:91:3f:c5:04:13:6f:b1:d6:ac:65:c0:68:10: c5:53:43:b5:55:75:ca:e1:b9:67:01:4c:a3:7c:f0: 43:e9:94:bd:81:57:fb:86:ac:80:d3:88:f7:ed:7e: b9:35:66:85:72:e9:66:71:f7:ce:b2:43:da:3d:26: 04:7c:28:4f:93:39:0d:77:d2:e9:7d:78:3c:69:4c: d4:65:45:a7:d7:95:bf:29:7b:c8:b2:d1:d6:a3:7b: e2:99:3e:a7:53:2a:2e:4a:bb:d9:26:04:c2:19:2d: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3F:E2:3A:9D:E0:2E:55:1A:75:B9:E1:28:BB:15:85:CE:ED:69:1B X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:6e:78:4a:a5:01:e8:df:4c:a3:2f:b4:27:e5:af:a3:ea:86: ca:c9:cb:b3:f2:1e:92:f8:5b:b6:98:92:be:e9:76:7b:28:d9: f2:4b:b4:0d:63:a8:f8:65:a9:33:5b:8e:6f:ae:6d:9e:78:f1: d3:1f:c7:fd:0f:a1:d9:ab:0d:5c:7d:f5:6b:a9:bd:9d:b3:21: 1a:79:d7:f6:12:2b:0e:95:6c:d0:bb:bf:f2:0f:bc:e0:58:8a: e8:4d:34:c5:65:63:df:d6:b4:76:50:e2:60:5d:94:f7:83:e1: 1e:c8:56:3e:55:a0:b4:1e:f8:56:cb:5c:f4:44:b9:e2:ce:2b: 39:30:99:96:b1:e1:38:35:91:41:c7:4d:28:ca:d6:e7:f4:7a: 1b:51:27:2e:08:fe:eb:c6:a0:b4:a4:29:ed:a5:a3:47:15:c9: 0b:41:3d:a6:99:4b:27:2b:6c:d3:af:47:25:a4:c4:75:4e:20: af:bf:7c:30:96:3f:c1:69:7b:63:a3:56:08:67:f7:39:ad:ac: e3:ad:53:d9:95:8b:b1:bd:47:09:b0:d5:7c:63:4e:57:49:e1: b7:ad:e0:c8:0e:62:f9:f3:eb:26:a0:09:e8:28:91:1c:a2:eb: 2e:ac:6d:5c:4c:31:9e:1d:6e:31:1c:d3:f6:a4:d5:4f:f4:ce: 70:74:02:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwMzI3MDAyOTM5WhcNMjYwNDAzMDAyOTM5WjAYMRYwFAYD VQQDEw02OWM1Y2Y3My03OWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIuDIYsgQvuswyj+TeYeCshUExjXpFSdIs4yOJT1mXhx8okVfLdz3hgGrDGC 3PqNDI9CWw6AL8b09D8Xisp7g8d2WrfSwUf5Qin0tN41LjYL80KJdPBwaxMtSDyw D/dPuDO9/MnkPXO45nPk0H/9L16axuUgYPz1B65i2Hx3qKxELfG8+tsTQJyPFyQW pVUgxvg4GQJ1NJE/xQQTb7HWrGXAaBDFU0O1VXXK4blnAUyjfPBD6ZS9gVf7hqyA 04j37X65NWaFculmcffOskPaPSYEfChPkzkNd9LpfXg8aUzUZUWn15W/KXvIstHW o3vimT6nUyouSrvZJgTCGS1S1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHc/4jqd 4C5VGnW54Si7FYXO7WkbMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoG54SqUB6N9Moy+0J+Wvo+qGysnLs/IekvhbtpiSvul2eyjZ8ku0DWOo+GWp M1uOb65tnnjx0x/H/Q+h2asNXH31a6m9nbMhGnnX9hIrDpVs0Lu/8g+84FiK6E00 xWVj39a0dlDiYF2U94PhHshWPlWgtB74Vstc9ES54s4rOTCZlrHhODWRQcdNKMrW 5/R6G1EnLgj+68agtKQp7aWjRxXJC0E9pplLJyts069HJaTEdU4gr798MJY/wWl7 Y6NWCGf3Oa2s461T2ZWLsb1HCbDVfGNOV0nht63gyA5i+fPrJqAJ6CiRHKLrLqxt XEwxnh1uMRzT9qTVT/TOcHQCrw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:25 2026 by rpki-client