$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json) Hash identifier: y9FSWvxexWhRRHr/06TX7+Zm5UytzDX71mRDRUdsYUU= Subject key identifier: 56:19:97:3F:09:07:ED:14:95:35:7E:54:26:A8:F6:F9:1A:2D:B7:DF Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft Manifest number: 0438 Signing time: Sun 01 Mar 2026 23:35:39 +0000 Manifest this update: Sun 01 Mar 2026 23:35:37 +0000 Manifest next update: Sun 08 Mar 2026 23:35:37 +0000 Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: hpJE08GTsoPJ4h0sy9X6hrj+5RUn8/SAZwELU6ftBEM=) 2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: R1kKwFNj36W6IRglByknWfdXy03O545HprKbQBj8ylg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Validity Not Before: Mar 1 23:35:37 2026 GMT Not After : Mar 8 23:35:37 2026 GMT Subject: CN=69a4cd4b-5bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0c:4c:6b:1e:2b:1d:6a:8c:ef:a3:ff:fc:f1: c9:9b:5a:01:c7:1d:c5:f2:18:45:ca:4f:25:04:c2: af:3a:b2:2d:3b:2d:6b:0e:c0:8e:aa:e5:13:9c:a9: 44:75:0e:2e:7c:ff:c6:15:5e:3a:e6:75:be:b9:aa: e9:c3:88:11:02:86:20:5c:0c:ca:23:bb:f2:4e:a0: e8:c1:87:45:99:e1:db:08:c5:9a:d0:7f:60:fb:16: 59:43:51:a1:80:62:bb:96:79:e7:17:04:61:8a:b2: 6e:dd:d0:e9:e9:70:3d:c2:c9:e0:20:09:77:2b:48: 92:cb:62:4c:f4:ad:cb:5c:15:b3:2c:51:55:63:4f: af:f3:76:3c:a7:db:30:47:fb:1f:5b:04:fb:12:cb: 3c:79:82:47:c2:49:5e:d0:6d:3c:e4:1a:2b:62:4a: 9d:bc:e6:98:bc:0b:f6:c3:d4:b4:3a:4b:c0:67:9f: 4c:88:5e:92:c7:14:0b:ac:60:a7:71:d0:24:02:37: ac:56:89:d4:eb:94:a1:1b:25:a7:e5:b4:2b:b9:90: 32:60:36:1e:46:99:df:a8:42:dc:7b:b0:2d:1f:55: bd:3d:df:c4:2a:fa:4f:f9:69:14:f2:50:b3:9a:1a: 20:ee:3d:fd:8c:a1:d4:76:f2:94:be:db:72:c7:0b: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:19:97:3F:09:07:ED:14:95:35:7E:54:26:A8:F6:F9:1A:2D:B7:DF X509v3 Authority Key Identifier: keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fc:50:0b:2c:47:98:53:8b:bc:28:30:2f:6d:57:b4:aa:34: ea:ba:e7:27:70:09:e6:de:f0:87:de:67:cc:b6:c3:28:f3:31: 10:57:75:6f:56:2b:99:90:4b:9a:8b:8d:17:63:66:40:09:ac: 67:46:bc:d4:6a:c8:d6:c1:f7:2b:c8:81:c9:8f:23:ee:67:d1: 86:80:37:13:b9:5a:ce:e8:c0:c2:af:4b:27:b3:d7:c9:d8:95: a8:f7:d5:cc:e2:46:e8:24:db:d4:6c:3d:e8:7c:19:6d:97:22: 82:aa:63:79:f1:c2:69:0c:aa:9a:1a:fa:6b:da:12:c9:9b:82: 19:2d:af:46:7d:4d:79:f7:f8:21:9e:fd:30:4e:c5:fc:ca:0a: 9e:35:fc:c7:2c:71:ce:26:16:4f:60:75:fe:6b:4d:61:03:4e: 67:16:69:02:bd:5c:dc:e5:2e:88:a7:ff:c8:a1:c4:b4:92:73: d4:fd:c8:03:af:39:26:7e:30:b9:9f:5d:ed:28:4c:ae:7f:85: 03:df:9b:89:e0:67:ca:59:ac:a4:fe:16:94:38:fd:4f:1a:d2: 14:77:c5:6d:7b:d5:00:10:17:67:98:2e:d3:92:4f:35:f8:77: 7f:73:12:d7:e6:4a:fa:95:e6:f5:7b:49:f9:de:02:6d:86:2e: ad:29:2c:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRERjVENzY1MDQw QjkyNDFBQzcwHhcNMjYwMzAxMjMzNTM3WhcNMjYwMzA4MjMzNTM3WjAYMRYwFAYD VQQDEw02OWE0Y2Q0Yi01YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gxMax4rHWqM76P//PHJm1oBxx3F8hhFyk8lBMKvOrItOy1rDsCOquUTnKlE dQ4ufP/GFV465nW+uarpw4gRAoYgXAzKI7vyTqDowYdFmeHbCMWa0H9g+xZZQ1Gh gGK7lnnnFwRhirJu3dDp6XA9wsngIAl3K0iSy2JM9K3LXBWzLFFVY0+v83Y8p9sw R/sfWwT7Ess8eYJHwkle0G085BorYkqdvOaYvAv2w9S0OkvAZ59MiF6SxxQLrGCn cdAkAjesVonU65ShGyWn5bQruZAyYDYeRpnfqELce7AtH1W9Pd/EKvpP+WkU8lCz mhog7j39jKHUdvKUvttyxwswtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYZlz8J B+0UlTV+VCao9vkaLbffMB8GA1UdIwQYMBaAFMcL89/0UCPUGvTE3112UEC5JBrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGRS85ODE0ODA2Mjk1 NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5UWE5TVRmWFhaUVFMa2tH c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3dnozX1JRSTlRYTlNVGZYWFpRUUxra0dzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDNGRS85ODE0ODA2Mjk1NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5 UWE5TVRmWFhaUVFMa2tHc2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd/xQCyxHmFOLvCgwL21XtKo06rrnJ3AJ5t7wh95nzLbDKPMxEFd1b1YrmZBL mouNF2NmQAmsZ0a81GrI1sH3K8iByY8j7mfRhoA3E7lazujAwq9LJ7PXydiVqPfV zOJG6CTb1Gw96HwZbZcigqpjefHCaQyqmhr6a9oSyZuCGS2vRn1Neff4IZ79ME7F /MoKnjX8xyxxziYWT2B1/mtNYQNOZxZpAr1c3OUuiKf/yKHEtJJz1P3IA685Jn4w uZ9d7ShMrn+FA9+bieBnylmspP4WlDj9TxrSFHfFbXvVABAXZ5gu05JPNfh3f3MS 1+ZK+pXm9XtJ+d4CbYYurSks6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 03:12:17 2026 by rpki-client