$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: bYrvGCWtAqEcyPOZ65h6itFZ9+weVBZz6Q+4mziY65E= Subject key identifier: 95:1E:D3:72:05:6A:51:93:14:DF:E9:47:5C:E9:78:43:52:E9:31:4C Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: A0 Signing time: Mon 02 Mar 2026 00:07:39 +0000 Manifest this update: Mon 02 Mar 2026 00:07:36 +0000 Manifest next update: Mon 09 Mar 2026 00:07:36 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: a30CMGGlVjjmwXm4kv2r1V4s4y7Vpyzb4Z4715MuwOM=) 2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: KM3zcDRIYT9oq/Wkhlh7FP99EJLA5sWO1MorkCKVVvE=) 3: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZrHF5584bIbw0rUT6cH6d1iQqKS+jq5enJN7gFGvxy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Mar 2 00:07:36 2026 GMT Not After : Mar 9 00:07:36 2026 GMT Subject: CN=69a4d4ca-8391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:30:1c:8d:17:21:f0:2b:e2:fa:d8:5e:0f: a6:5b:97:98:ff:cd:2e:01:0f:18:4c:3f:ae:b7:e1: b6:f2:e3:1d:52:d4:7c:f3:8f:ac:28:19:71:50:9a: 69:88:2f:25:c0:72:c4:a6:62:87:e2:2e:d9:b5:5c: 0c:4e:55:40:ce:68:45:11:c6:60:1c:cd:7d:51:95: 96:a0:76:f1:3e:04:bd:52:1b:70:95:e2:27:67:7e: b2:92:72:b5:10:c3:59:36:51:a0:e1:dd:82:56:b7: 3a:65:7c:7f:50:fb:f3:aa:9f:ca:5b:47:d8:d6:7f: 26:7a:61:25:7e:3a:92:fd:c3:bd:1f:ec:9e:24:3d: 99:20:60:cb:62:60:1b:e0:89:a8:f5:98:04:e0:c1: b0:7b:ab:5b:9c:43:e4:08:02:11:18:6e:4a:c7:38: f6:93:86:99:9d:92:c1:0d:58:6c:ac:de:fa:bd:c8: cf:3f:d2:43:9e:25:cb:bb:b2:e9:37:17:a6:9e:5e: 64:4b:f4:82:6d:95:b5:59:fc:54:a3:67:1d:d0:ca: a8:41:8d:63:18:77:0a:71:68:17:e4:49:f7:48:50: ee:9b:4a:35:d0:13:23:00:9b:78:f8:78:6d:d3:d8: 0d:c5:7f:2c:6e:53:06:02:7e:c8:ec:f0:8e:3b:8f: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1E:D3:72:05:6A:51:93:14:DF:E9:47:5C:E9:78:43:52:E9:31:4C X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:45:77:3c:0e:f2:c0:14:e2:ea:b4:ee:d1:63:b0:2d:dc:d4: 6a:4e:c5:f8:ee:07:d9:72:62:2f:d6:46:21:5b:32:45:f4:fc: a9:fe:f8:06:60:65:cf:26:54:02:c1:d4:bd:61:ef:4c:88:7e: e1:ad:21:ab:88:ae:cf:b7:75:64:39:90:24:9c:53:c3:ac:d7: 11:9a:b1:cb:1e:eb:4f:5d:94:38:9d:2f:d8:35:55:22:ac:fe: 87:88:f9:2a:80:86:2e:aa:26:64:c0:af:c1:8d:8d:a8:51:de: 66:0e:3d:dd:ea:8c:46:9c:f2:cc:71:86:1b:47:5a:00:9b:19: 20:6f:29:6f:c5:d7:3d:f7:85:e5:a2:b7:19:f9:44:c8:98:aa: 0d:c3:e7:d5:57:42:c2:7e:76:f6:e5:24:47:2b:47:48:12:14: f0:a1:60:58:ea:1c:cd:af:bd:bf:ba:2c:ef:85:07:be:34:6d: c1:96:53:b2:c6:e8:81:f2:4c:ef:7f:0a:d1:6a:0e:13:fa:af: 2f:bc:b8:68:84:18:30:e5:58:f9:f6:fb:22:8a:99:ca:a7:22: f8:2c:61:39:45:8d:e3:5b:58:ef:16:c2:4a:46:c9:7b:43:0e: 0b:09:9f:e2:5f:12:d9:62:44:76:1f:73:8b:36:78:47:4b:95: 74:ae:93:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKDVEQjc1QjJERjk0RDA0NDc0QTZFNUUyRDRCNzhDQzA4 NEJGQzJBNkMwHhcNMjYwMzAyMDAwNzM2WhcNMjYwMzA5MDAwNzM2WjAYMRYwFAYD VQQDEw02OWE0ZDRjYS04MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryowHI0XIfAr4vrYXg+mW5eY/80uAQ8YTD+ut+G28uMdUtR884+sKBlxUJpp iC8lwHLEpmKH4i7ZtVwMTlVAzmhFEcZgHM19UZWWoHbxPgS9UhtwleInZ36yknK1 EMNZNlGg4d2CVrc6ZXx/UPvzqp/KW0fY1n8memElfjqS/cO9H+yeJD2ZIGDLYmAb 4Imo9ZgE4MGwe6tbnEPkCAIRGG5Kxzj2k4aZnZLBDVhsrN76vcjPP9JDniXLu7Lp Nxemnl5kS/SCbZW1WfxUo2cd0MqoQY1jGHcKcWgX5En3SFDum0o10BMjAJt4+Hht 09gNxX8sblMGAn7I7PCOO48v/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUe03IF alGTFN/pR1zpeENS6TFMMB8GA1UdIwQYMBaAFF23Wy35TQRHSm5eLUt4zAhL/Cps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS8wOTVGNkM4QzI2 N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJFZEtibDR0UzNqTUNFdjhL bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS8wOTVGNkM4QzI2N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJF ZEtibDR0UzNqTUNFdjhLbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA0V3PA7ywBTi6rTu0WOwLdzUak7F+O4H2XJiL9ZGIVsyRfT8qf74BmBlzyZU AsHUvWHvTIh+4a0hq4iuz7d1ZDmQJJxTw6zXEZqxyx7rT12UOJ0v2DVVIqz+h4j5 KoCGLqomZMCvwY2NqFHeZg493eqMRpzyzHGGG0daAJsZIG8pb8XXPfeF5aK3GflE yJiqDcPn1VdCwn529uUkRytHSBIU8KFgWOocza+9v7os74UHvjRtwZZTssbogfJM 738K0WoOE/qvL7y4aIQYMOVY+fb7IoqZyqci+CxhOUWN41tY7xbCSkbJe0MOCwmf 4l8S2WJEdh9zizZ4R0uVdK6TEg== -----END CERTIFICATE-----Generated at Mon Mar 2 06:46:36 2026 by rpki-client