$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: uOkaB98rHixhQ7QP9FUpTqamGyVaLcxen7UmpgsnxbQ= Subject key identifier: 01:17:ED:35:7F:4F:98:9C:5A:F6:4A:08:33:72:51:6C:9F:A9:32:FB Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 0247 Signing time: Tue 24 Mar 2026 22:52:29 +0000 Manifest this update: Tue 24 Mar 2026 22:52:29 +0000 Manifest next update: Tue 31 Mar 2026 22:52:29 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: OmyEDPCJl/sI5m0iJAo0uaPmkDK8J+oqkAlg2rxsjB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Mar 24 22:52:29 2026 GMT Not After : Mar 31 22:52:29 2026 GMT Subject: CN=69c315ad-ab8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9b:c2:d1:d4:91:ff:a7:98:9e:c1:60:46:08: c4:57:62:3a:53:d6:5a:6f:a0:ab:76:63:53:cf:0a: d4:e0:63:05:a6:f5:92:45:f7:91:d9:2e:65:d6:b2: 9b:18:45:37:9d:77:79:e7:78:5e:17:ae:83:88:9d: 2e:94:d8:20:51:54:3f:c2:b9:1b:be:cc:57:c2:c7: 1a:dd:5e:f7:a5:ce:01:d8:6c:77:43:2b:f7:c2:bf: 4b:93:c4:b2:7b:0a:43:a7:ea:89:a3:47:17:16:ec: e2:a4:4c:22:b9:79:7f:09:2f:a6:1a:83:a5:33:6f: 4b:ad:1a:36:4c:05:ed:fc:ae:b8:5a:e3:be:c6:fe: cb:1d:d9:ea:59:99:2f:ae:d0:ed:f6:13:f6:0f:43: 16:9a:4a:9e:a0:24:92:1a:f4:2a:4d:85:fa:ec:6c: 0f:ec:9f:9d:51:76:c1:93:69:47:55:31:68:ad:f7: 9d:de:ba:e5:03:b8:f6:b8:66:30:59:0a:da:5b:90: 52:68:94:07:ba:28:fd:c3:39:ac:7b:df:dd:1b:87: f6:3e:81:52:2c:8b:6d:61:fe:ee:19:0a:0b:99:fd: dd:17:44:ce:a0:b7:57:90:64:df:f1:96:73:42:4c: ee:f5:31:0b:10:36:1a:66:2a:41:81:7f:77:d9:40: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:ED:35:7F:4F:98:9C:5A:F6:4A:08:33:72:51:6C:9F:A9:32:FB X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1e:80:86:d9:59:3e:d3:d9:39:8c:3e:4e:f2:4d:27:d7:4a: 56:87:55:71:52:eb:db:9b:90:15:bf:84:2e:3e:79:38:05:19: e1:d1:d0:e2:87:90:03:70:d7:9b:14:41:1f:44:57:ad:6c:0c: 16:1a:f3:f1:a8:4c:e0:3e:dd:ca:8f:0b:a6:f8:f7:73:38:09: b4:35:f7:06:d0:b1:2f:aa:f8:24:7d:3b:a8:8d:c9:cb:d8:c5: 7f:24:7d:f6:b3:91:ff:a5:5d:c0:80:0e:aa:46:3b:94:c2:8c: 32:d1:1b:42:82:e0:9d:c9:f2:a0:de:8b:c3:c8:39:44:e5:1c: dd:12:30:f5:97:65:87:6e:39:f3:ea:41:04:30:22:26:eb:08: c8:8a:1a:da:44:c5:d3:50:67:49:da:f1:95:99:a0:28:7c:9c: db:0b:df:89:6e:99:98:fe:d7:2d:b7:ac:83:b3:7e:55:be:78: ec:3d:1f:9c:ee:91:2f:00:f3:bb:55:37:fe:20:16:4e:17:e8: dd:23:b6:81:8d:72:45:ce:a5:c3:1a:86:a4:ff:35:34:79:1b: fd:43:a1:6e:d9:c5:30:88:e0:24:9a:b0:bb:1f:11:2b:74:62: 59:cc:3a:5b:6b:aa:62:11:de:33:35:3d:17:d0:8f:37:02:e2: 25:f2:09:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjYwMzI0MjI1MjI5WhcNMjYwMzMxMjI1MjI5WjAYMRYwFAYD VQQDEw02OWMzMTVhZC1hYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5vC0dSR/6eYnsFgRgjEV2I6U9Zab6CrdmNTzwrU4GMFpvWSRfeR2S5l1rKb GEU3nXd553heF66DiJ0ulNggUVQ/wrkbvsxXwsca3V73pc4B2Gx3Qyv3wr9Lk8Sy ewpDp+qJo0cXFuzipEwiuXl/CS+mGoOlM29LrRo2TAXt/K64WuO+xv7LHdnqWZkv rtDt9hP2D0MWmkqeoCSSGvQqTYX67GwP7J+dUXbBk2lHVTForfed3rrlA7j2uGYw WQraW5BSaJQHuij9wzmse9/dG4f2PoFSLIttYf7uGQoLmf3dF0TOoLdXkGTf8ZZz Qkzu9TELEDYaZipBgX932UDFcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEX7TV/ T5icWvZKCDNyUWyfqTL7MB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQB6AhtlZPtPZOYw+TvJNJ9dKVodVcVLr25uQFb+ELj55OAUZ4dHQ4oeQA3DX mxRBH0RXrWwMFhrz8ahM4D7dyo8Lpvj3czgJtDX3BtCxL6r4JH07qI3Jy9jFfyR9 9rOR/6VdwIAOqkY7lMKMMtEbQoLgncnyoN6Lw8g5ROUc3RIw9Zdlh2458+pBBDAi JusIyIoa2kTF01BnSdrxlZmgKHyc2wvfiW6ZmP7XLbesg7N+Vb547D0fnO6RLwDz u1U3/iAWThfo3SO2gY1yRc6lwxqGpP81NHkb/UOhbtnFMIjgJJqwux8RK3RiWcw6 W2uqYhHeMzU9F9CPNwLiJfIJtg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:18 2026 by rpki-client