$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: GRm2I07CZWdzsM9a1TPPdouLmbRLdaYpJGyCb98gE2o= Subject key identifier: BA:9B:9E:2B:80:CD:FC:6E:3F:13:2E:15:1C:93:DF:6A:47:43:55:FE Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 3511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 3511 Signing time: Sat 28 Feb 2026 15:08:55 +0000 Manifest this update: Sat 28 Feb 2026 15:08:54 +0000 Manifest next update: Sat 07 Mar 2026 15:08:54 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: vpQEwyQFJVusE6HnIwoZmON96N2JWXLljeVH1IARM9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13585 (0x3511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Feb 28 15:08:54 2026 GMT Not After : Mar 7 15:08:54 2026 GMT Subject: CN=69a30507-efe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:f9:09:53:c3:82:9d:ea:1d:af:d0:c5:97: 31:ce:5c:26:fd:94:3c:0a:3f:43:c1:93:29:0e:f0: 87:56:e4:c4:c6:2f:78:71:7e:41:97:b8:8c:0a:1c: f4:47:5b:9a:5c:9a:4c:a0:dd:11:b5:2d:7e:d0:a9: 61:e3:40:4d:91:35:0b:9d:0d:c9:7d:f3:ed:80:76: d5:90:46:d5:01:0b:84:9f:c2:9c:32:2c:90:3b:ab: 07:ce:18:66:25:38:88:a5:a0:fa:86:9f:e8:c4:a7: e0:a6:ec:ce:ff:d5:41:23:00:e4:15:d3:27:53:c3: e7:60:1c:fa:3e:f2:35:39:b3:41:55:84:cf:f4:b2: e8:81:6d:49:00:cc:ed:a9:ac:8e:2e:f2:7a:9b:e8: b6:2c:a3:28:21:99:a1:dd:4e:94:b1:d2:1b:de:13: 81:75:8d:cf:a1:62:69:fb:ec:2b:b9:0e:83:e1:00: eb:29:21:7d:a9:92:e9:a4:09:76:ce:25:76:ad:8a: 6a:35:50:cc:f1:f8:23:ee:86:99:00:4a:48:67:55: d4:03:17:74:2c:64:95:e5:e1:4d:3b:04:d7:9e:42: 77:e3:ad:ec:ff:c0:86:a5:38:46:91:65:ec:86:bc: 94:90:5d:cc:c6:8a:a0:38:da:8b:b3:2f:ba:9c:af: b3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:9E:2B:80:CD:FC:6E:3F:13:2E:15:1C:93:DF:6A:47:43:55:FE X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1c:24:95:25:3a:40:7f:8f:d3:90:cb:00:0c:c7:24:62:4b: b8:72:7a:14:46:ff:fa:14:f6:66:cd:97:bd:c2:d9:a0:2d:1d: 50:cb:f9:51:bb:cf:98:94:59:f6:ac:1f:6c:21:14:e5:4c:b2: 47:3e:5f:c8:81:23:7e:7c:d4:37:cb:de:d3:22:a1:e0:57:e6: ad:8c:dd:53:14:38:36:9b:df:17:33:b9:04:3f:a0:64:1e:4c: 02:d2:f9:2e:73:3b:30:f9:82:d3:4b:aa:93:5b:41:3f:1a:70: 6c:41:5d:9c:3c:f1:85:b6:11:84:be:f0:e0:b1:a1:00:30:a5: 8b:64:d2:32:7b:0d:1c:b7:77:a8:f8:b8:aa:f8:32:7a:6a:4f: d3:c8:d4:69:00:b4:3e:73:5d:92:dc:87:53:3a:36:80:de:d0: 50:89:57:25:dc:cb:ff:49:24:15:56:fc:f5:61:2c:8f:3d:c7: 45:12:84:c6:99:26:5f:11:11:37:38:86:ca:9d:b6:70:b6:cd: 93:ed:26:1a:5e:12:49:cf:fc:0e:a2:12:ca:0d:e2:d3:28:5f: f6:b0:01:28:4a:f6:f3:27:35:4d:b2:1f:91:6a:d8:87:53:0f: 62:a7:cc:fc:f0:39:22:52:c8:42:7c:e1:3d:1a:d9:c7:c0:e5: 17:2c:fb:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjYwMjI4MTUwODU0WhcNMjYwMzA3MTUwODU0WjAYMRYwFAYD VQQDEw02OWEzMDUwNy1lZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphP5CVPDgp3qHa/QxZcxzlwm/ZQ8Cj9DwZMpDvCHVuTExi94cX5Bl7iMChz0 R1uaXJpMoN0RtS1+0Klh40BNkTULnQ3JffPtgHbVkEbVAQuEn8KcMiyQO6sHzhhm JTiIpaD6hp/oxKfgpuzO/9VBIwDkFdMnU8PnYBz6PvI1ObNBVYTP9LLogW1JAMzt qayOLvJ6m+i2LKMoIZmh3U6UsdIb3hOBdY3PoWJp++wruQ6D4QDrKSF9qZLppAl2 ziV2rYpqNVDM8fgj7oaZAEpIZ1XUAxd0LGSV5eFNOwTXnkJ3463s/8CGpThGkWXs hryUkF3MxoqgONqLsy+6nK+zsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqbniuA zfxuPxMuFRyT32pHQ1X+MB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRwklSU6QH+P05DLAAzHJGJLuHJ6FEb/+hT2Zs2XvcLZoC0dUMv5UbvPmJRZ 9qwfbCEU5UyyRz5fyIEjfnzUN8ve0yKh4FfmrYzdUxQ4NpvfFzO5BD+gZB5MAtL5 LnM7MPmC00uqk1tBPxpwbEFdnDzxhbYRhL7w4LGhADCli2TSMnsNHLd3qPi4qvgy empP08jUaQC0PnNdktyHUzo2gN7QUIlXJdzL/0kkFVb89WEsjz3HRRKExpkmXxER NziGyp22cLbNk+0mGl4SSc/8DqISyg3i0yhf9rABKEr28yc1TbIfkWrYh1MPYqfM /PA5IlLIQnzhPRrZx8DlFyz7pA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:45:27 2026 by rpki-client