$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: RXi87aZLNdaPjCYsm86LeUvIMU3+L/YylfRTNhDT+jc= Subject key identifier: 2D:9D:A0:4F:60:21:08:32:20:BD:B8:5D:61:85:0F:96:7D:26:BE:AC Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 0846 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 0840 Signing time: Sat 28 Feb 2026 21:11:11 +0000 Manifest this update: Sat 28 Feb 2026 21:11:10 +0000 Manifest next update: Sat 07 Mar 2026 21:11:10 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: srPYjZXCNUbC2XucRITQ+5G4qyKh+u+1EUjQHCSlBsc=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: d9YDBLOSLP/FYANr6D5ENZatQDGA2KDEhAgJYQsuAaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Feb 28 21:11:10 2026 GMT Not After : Mar 7 21:11:10 2026 GMT Subject: CN=69a359ef-706a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:08:ec:c2:9e:c5:8a:5f:73:a3:8d:61:b9: c2:15:fa:22:df:85:66:3a:6d:11:56:61:48:77:75: 74:a5:99:78:c6:c8:d6:27:3e:d1:28:39:26:5f:2a: 81:a8:02:9e:c7:36:18:c6:9b:95:6a:bc:4b:e7:63: 11:ac:41:9a:21:f1:0c:b6:a4:67:82:f9:03:3e:93: 29:dd:53:7c:75:db:60:d3:78:a2:57:04:92:8c:d3: 2a:ff:4b:6f:a1:39:fb:ff:87:e9:49:d6:5b:eb:11: ff:60:5b:2c:65:13:0c:68:34:d8:29:2c:79:cd:5e: c8:44:4c:4f:10:a7:79:05:9c:e0:d1:35:96:41:3e: fd:a9:bf:2f:d0:ab:75:d5:ac:11:b7:22:bb:1e:90: 71:33:33:49:7f:57:3d:c8:a7:88:37:54:fb:c7:c0: f0:69:0e:ce:d2:b4:a7:86:e3:5c:62:d1:cc:e4:1e: c7:a1:57:a0:8c:0c:26:fb:6f:2e:2f:e7:17:09:5b: d6:53:c6:be:f0:ec:14:c8:c9:94:63:10:95:34:50: 1e:c6:a0:c0:9d:f3:c0:f0:51:6d:fa:df:d0:18:50: df:65:b3:74:af:7d:02:ac:72:8d:0f:d3:c7:26:6d: eb:32:6a:5b:b6:28:25:2c:b1:e6:37:61:53:19:e7: aa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9D:A0:4F:60:21:08:32:20:BD:B8:5D:61:85:0F:96:7D:26:BE:AC X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:19:e3:17:ed:1a:97:93:6a:bf:ac:6d:76:2e:83:45:c8:f7: b9:23:e7:53:49:cd:25:ee:df:9a:8d:38:18:4f:30:b1:e0:4e: 27:07:ec:c0:d6:75:9c:ab:6c:a8:24:9a:9f:40:a0:44:30:78: fd:30:0f:96:d4:d1:02:55:49:16:7a:d7:75:f0:6c:65:06:6a: 4d:83:37:e5:23:80:ae:82:47:72:06:cd:71:62:59:34:80:8a: 46:d5:47:4a:b4:43:85:66:84:08:e0:4f:8c:bf:1e:f7:53:ae: 1c:06:47:36:de:00:ac:a1:87:34:ba:c0:f7:d8:27:ba:19:a6: 1b:a7:2f:dd:f7:58:2b:10:67:f7:19:7a:0c:64:44:eb:15:61: a3:cd:6c:b3:a4:b2:e3:47:b3:73:cc:76:1d:e9:19:ea:8c:0d: ca:ed:c3:95:1c:09:2d:ef:ff:2c:f1:6a:da:5c:1f:bb:2b:2e: 75:fd:48:4a:ad:be:53:f6:5d:71:a3:78:51:2c:d4:bb:71:fc: 98:98:9e:a3:58:62:1d:c0:97:c0:c4:87:68:92:5a:bc:75:ee: 89:49:50:75:c1:8e:55:eb:99:62:f8:4a:93:8b:6a:14:86:d6: ba:7b:5e:13:e7:de:85:4d:7d:c4:9c:94:9e:f4:18:cf:06:14: ce:4d:88:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjYwMjI4MjExMTEwWhcNMjYwMzA3MjExMTEwWjAYMRYwFAYD VQQDDA02OWEzNTllZi03MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aAI7MKexYpfc6ONYbnCFfoi34VmOm0RVmFId3V0pZl4xsjWJz7RKDkmXyqB qAKexzYYxpuVarxL52MRrEGaIfEMtqRngvkDPpMp3VN8ddtg03iiVwSSjNMq/0tv oTn7/4fpSdZb6xH/YFssZRMMaDTYKSx5zV7IRExPEKd5BZzg0TWWQT79qb8v0Kt1 1awRtyK7HpBxMzNJf1c9yKeIN1T7x8DwaQ7O0rSnhuNcYtHM5B7HoVegjAwm+28u L+cXCVvWU8a+8OwUyMmUYxCVNFAexqDAnfPA8FFt+t/QGFDfZbN0r30CrHKND9PH Jm3rMmpbtiglLLHmN2FTGeeqnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2doE9g IQgyIL24XWGFD5Z9Jr6sMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnBnjF+0al5Nqv6xtdi6DRcj3uSPnU0nNJe7fmo04GE8wseBOJwfswNZ1nKts qCSan0CgRDB4/TAPltTRAlVJFnrXdfBsZQZqTYM35SOAroJHcgbNcWJZNICKRtVH SrRDhWaECOBPjL8e91OuHAZHNt4ArKGHNLrA99gnuhmmG6cv3fdYKxBn9xl6DGRE 6xVho81ss6Sy40ezc8x2HekZ6owNyu3DlRwJLe//LPFq2lwfuysudf1ISq2+U/Zd caN4USzUu3H8mJieo1hiHcCXwMSHaJJavHXuiUlQdcGOVeuZYvhKk4tqFIbWunte E+fehU19xJyUnvQYzwYUzk2I3A== -----END CERTIFICATE-----Generated at Sun Mar 1 21:07:31 2026 by rpki-client