$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: L/YJCrF5YH98CLqmysBIcXhH2mgeG9TdRosyTfSH0nU= Subject key identifier: 63:C9:B4:3F:EF:AF:FF:F2:90:FA:37:2B:A2:25:36:8A:84:A8:01:C0 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0CA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0B52 Signing time: Tue 24 Mar 2026 19:35:31 +0000 Manifest this update: Tue 24 Mar 2026 19:35:30 +0000 Manifest next update: Tue 31 Mar 2026 19:35:30 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: 4yycgOAFzKdj+wh0QAKcTZQZ10aj+/ZBzyhbjOOhBHU=) 2: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: Hx4jtOuJzXTTc5VHMURxCz4V4clqTWRLtCDPvPlgRLQ=) 3: 89135068FD2911F09BBA873E426F56BC.roa (hash: k6L2RtaPfs9iJDZ6OaWxGKY/ymoQfy3jPyd5OxyAkZs=) 4: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: 70UT6YcmvBlzj1xKlGcaUiyXDKtBEdfDGecHQzUFaBA=) 5: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: 6WjdsXo2+LZgxWiVDy4rRpY13i0Lx3BV3M/QLcdy5a8=) 6: C255F0921BA611F1A0C1BD34093D8C67.roa (hash: JJB1fRNMQNiQ7UphAqBCNRImICoAXfFr6cutkg5XqI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3237 (0xca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Mar 24 19:35:30 2026 GMT Not After : Mar 31 19:35:30 2026 GMT Subject: CN=69c2e783-ff0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:47:98:d4:78:28:43:5e:7e:84:f3:fe:af: 59:70:ac:50:99:a1:70:b9:1b:e4:5b:b2:6d:33:16: 13:c4:9b:43:d0:d5:15:5f:f4:c8:37:fb:bb:e7:3d: fe:60:dc:e8:c5:75:e2:f7:06:30:04:e5:1e:6b:b5: bd:16:43:d0:6d:47:5f:e4:8e:38:c0:e9:06:3e:93: aa:61:62:8c:33:18:12:44:0e:9b:b3:df:54:aa:42: 23:94:24:20:1c:5f:97:dc:b5:42:91:c4:e6:64:5a: 5d:05:7f:91:67:e3:51:d0:cd:2c:af:3a:4c:ed:ad: 77:c9:26:d3:3a:8b:4d:a5:ff:5b:bf:2b:ec:91:0f: a0:66:a6:ab:fa:50:be:0b:b8:51:39:9a:92:1f:29: 8d:3e:d6:52:47:cb:f5:c4:65:15:f3:63:f8:e7:36: 13:d7:04:77:79:ff:8c:4c:45:c6:ac:8c:c9:d1:8a: 11:19:ab:a0:5e:74:cb:68:9e:be:84:dd:a6:d1:18: 75:15:ca:45:4c:1e:88:20:75:02:1f:29:9f:45:2d: 12:4f:b1:24:eb:54:1f:c7:80:cf:0f:74:30:2f:a1: 83:21:73:ff:5e:f1:ac:14:5c:e5:ad:32:96:fd:7a: 65:c3:67:2d:d7:7d:f0:80:3d:71:c0:73:3c:a4:ee: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C9:B4:3F:EF:AF:FF:F2:90:FA:37:2B:A2:25:36:8A:84:A8:01:C0 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2b:f7:a9:3d:a7:77:32:b6:5b:5f:d8:51:38:c1:4e:fa:9d: 00:b2:32:79:7f:de:94:60:b2:75:dd:16:a8:40:21:85:47:5f: 93:90:e5:f5:a8:e5:c7:7f:51:07:d4:90:d3:e9:f0:68:77:a9: 23:38:f7:5b:27:72:75:3e:6f:c5:94:de:f5:f3:80:71:8c:c4: 7a:42:a5:5c:4e:a5:0e:1a:ce:f3:f1:fb:56:54:9c:bc:f8:d6: 0f:c6:30:ad:f5:27:35:4c:4a:67:87:27:6c:ab:2e:5e:bb:b6: 2b:da:f0:19:ca:18:a4:ff:3d:a7:b2:31:7f:c4:2f:db:45:fc: d3:2c:52:e6:0d:d3:9d:ca:d4:69:26:60:ae:14:19:2f:0e:af: 4a:eb:ec:66:9c:7c:8e:ba:f6:4f:a4:77:83:8a:24:78:10:7c: ed:50:72:0c:43:cb:82:6c:cd:43:37:46:57:9c:d7:d8:67:bc: 1b:5b:de:d4:4c:a4:ec:f1:2c:f0:eb:14:97:b6:c6:78:ce:30: cb:78:bd:87:ec:ac:b4:d4:b8:0b:a8:50:6c:4c:17:b9:af:ee: 1b:67:4f:2f:fe:89:e3:76:8b:16:d6:79:02:f1:8a:3f:20:05: d0:f6:71:b3:0c:1b:eb:69:6c:c9:1f:59:6f:82:39:1a:9b:d1: 2e:da:15:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYwMzI0MTkzNTMwWhcNMjYwMzMxMTkzNTMwWjAYMRYwFAYD VQQDEw02OWMyZTc4My1mZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsZHmNR4KENefoTz/q9ZcKxQmaFwuRvkW7JtMxYTxJtD0NUVX/TIN/u75z3+ YNzoxXXi9wYwBOUea7W9FkPQbUdf5I44wOkGPpOqYWKMMxgSRA6bs99UqkIjlCQg HF+X3LVCkcTmZFpdBX+RZ+NR0M0srzpM7a13ySbTOotNpf9bvyvskQ+gZqar+lC+ C7hROZqSHymNPtZSR8v1xGUV82P45zYT1wR3ef+MTEXGrIzJ0YoRGaugXnTLaJ6+ hN2m0Rh1FcpFTB6IIHUCHymfRS0ST7Ek61Qfx4DPD3QwL6GDIXP/XvGsFFzlrTKW /Xplw2ct133wgD1xwHM8pO5X4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPJtD/v r//ykPo3K6IlNoqEqAHAMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSv3qT2ndzK2W1/YUTjBTvqdALIyeX/elGCydd0WqEAhhUdfk5Dl9ajlx39R B9SQ0+nwaHepIzj3WydydT5vxZTe9fOAcYzEekKlXE6lDhrO8/H7VlScvPjWD8Yw rfUnNUxKZ4cnbKsuXru2K9rwGcoYpP89p7Ixf8Qv20X80yxS5g3TncrUaSZgrhQZ Lw6vSuvsZpx8jrr2T6R3g4okeBB87VByDEPLgmzNQzdGV5zX2Ge8G1ve1Eyk7PEs 8OsUl7bGeM4wy3i9h+ystNS4C6hQbEwXua/uG2dPL/6J43aLFtZ5AvGKPyAF0PZx swwb62lsyR9Zb4I5GpvRLtoVlg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:56 2026 by rpki-client