$ rpki-client -vvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft File: xF0041r6UWc07r4-Xaxxv0jh1fM.mft (raw, json) Hash identifier: bNoU8Pd9IhoH2oyFzTlOefRBpbuaOpe6eeknQkPSfXk= Subject key identifier: 31:80:C7:D7:87:E2:DA:D4:98:58:CA:5F:8A:AB:FF:7C:63:AD:5B:62 Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3 Certificate issuer: /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft Manifest number: 15 Signing time: Sun 01 Mar 2026 22:58:45 +0000 Manifest this update: Sun 01 Mar 2026 22:58:44 +0000 Manifest next update: Sun 08 Mar 2026 22:58:44 +0000 Files and hashes: 1: xF0041r6UWc07r4-Xaxxv0jh1fM.crl (hash: BGzZw5+NY7+fwObUM4OWzTNv+lTHiKjCvQ5WtYkvAr0=) 2: F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (hash: yjnXkRteWHLrAWaY0SI5HenHlG2jMnDyPtfiXVc0ocE=) 3: F3BA62BEFD9011F0AC0D2AEE5B6F56BC.roa (hash: uptBY6wFl2QHwxZyV1lQF5/JSNliOAj9gdAHyWOKOKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3 Validity Not Before: Mar 1 22:58:44 2026 GMT Not After : Mar 8 22:58:44 2026 GMT Subject: CN=69a4c4a5-5d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f7:5a:f3:7e:d2:12:08:cf:e9:d8:b1:2c:d3: 6a:96:f4:7b:95:01:07:33:36:8d:20:2a:55:a9:0d: 7f:a0:69:df:19:2b:2b:09:53:4b:9e:58:50:c6:94: e4:80:6c:1f:9d:0c:d5:c2:0d:27:91:dc:81:a4:1f: b8:c3:f9:fc:56:bf:7f:60:e6:45:99:57:fe:e0:78: 18:23:4d:18:0e:84:bb:f6:94:95:fa:49:3d:90:6f: 73:de:10:b0:0c:41:bb:57:33:93:9c:1b:fb:7b:04: d4:f8:84:f9:fa:55:eb:2f:0f:ba:98:b8:a5:eb:5f: 63:0f:e1:7d:67:75:88:e6:67:b6:f1:22:13:aa:b6: 7f:cf:88:cc:49:c9:5b:ac:51:ec:a3:50:41:5d:dd: 6e:2c:7d:a7:bd:b0:47:95:3c:58:fe:9b:3e:a7:c7: 26:f6:44:8d:25:cb:a4:02:4c:d4:6c:77:f7:7e:21: f0:bb:23:7e:d2:5c:9b:bb:cd:5a:b5:68:43:4b:15: c7:c5:0e:56:c6:45:f8:a8:15:9d:79:c6:c5:db:bc: ca:1e:3d:69:67:23:e3:e0:d6:10:dc:26:a9:fc:01: 08:f3:0b:96:e2:a5:d2:e4:82:51:e2:83:59:8a:e0: b9:01:c4:19:77:00:a1:e3:60:cf:d9:df:1c:0c:5a: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:80:C7:D7:87:E2:DA:D4:98:58:CA:5F:8A:AB:FF:7C:63:AD:5B:62 X509v3 Authority Key Identifier: keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:90:9e:ac:3d:cc:6c:ed:ac:83:12:3e:4e:00:5c:25:8a:97: 9c:2d:dc:a2:22:5e:41:a8:78:ca:7e:d9:8b:d1:76:d3:6b:5e: 87:f5:74:7c:ed:a0:54:e0:23:7b:fd:ea:b0:9c:8a:24:90:cd: 99:82:1b:90:2a:93:96:fe:bc:ed:c5:10:94:03:37:3f:68:49: ed:a9:92:6b:41:a2:b2:0d:61:d3:d2:06:af:43:f7:43:17:33: 76:da:e9:b4:00:d1:eb:bc:cc:f7:32:28:c8:59:70:f9:98:ba: 15:47:44:c9:7a:cc:24:ef:80:ef:c7:b8:0d:93:4e:79:b6:eb: 4f:62:92:94:01:e4:5b:15:eb:65:6f:5b:da:46:3a:51:42:58: a3:59:60:b5:d6:93:71:6a:1c:a7:7e:a0:53:7c:5a:2c:d1:c9: 14:7e:82:bb:a4:7d:a7:b1:fd:83:9d:fc:90:be:a2:78:e2:e6: 3c:1e:b6:4c:52:ea:47:47:3c:3a:90:0f:4e:11:51:bd:a5:5c: cb:13:c1:7e:e8:29:be:1e:e0:63:44:de:29:9c:33:34:73:c5: 03:30:22:69:9b:92:e5:e6:7f:28:c9:8d:78:b2:38:19:03:96: 49:b4:3c:27:e5:e0:a5:98:da:dc:85:13:42:f6:ed:9c:b5:88: 52:ec:7e:21 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTI3MzExMC8GA1UEBRMoQzQ1RDM0RTM1QUZBNTE2NzM0RUVCRTNFNURBQzcxQkY0 OEUxRDVGMzAeFw0yNjAzMDEyMjU4NDRaFw0yNjAzMDgyMjU4NDRaMBgxFjAUBgNV BAMTDTY5YTRjNGE1LTVkMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM91rzftISCM/p2LEs02qW9HuVAQczNo0gKlWpDX+gad8ZKysJU0ueWFDGlOSA bB+dDNXCDSeR3IGkH7jD+fxWv39g5kWZV/7geBgjTRgOhLv2lJX6ST2Qb3PeELAM QbtXM5OcG/t7BNT4hPn6VesvD7qYuKXrX2MP4X1ndYjmZ7bxIhOqtn/PiMxJyVus UeyjUEFd3W4sfae9sEeVPFj+mz6nxyb2RI0ly6QCTNRsd/d+IfC7I37SXJu7zVq1 aENLFcfFDlbGRfioFZ15xsXbvMoePWlnI+Pg1hDcJqn8AQjzC5bipdLkglHig1mK 4LkBxBl3AKHjYM/Z3xwMWgOFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMYDH14fi 2tSYWMpfiqv/fGOtW2IwHwYDVR0jBBgwFoAUxF0041r6UWc07r4+Xaxxv0jh1fMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBMjczLzEzRDMyNURDRkQ5 MDExRjA5OUFCQ0IzOTVCNkY1NkJDL3hGMDA0MXI2VVdjMDdyNC1YYXh4djBqaDFm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEYwMDQxcjZVV2MwN3I0LVhheHh2MGpoMWZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB MjczLzEzRDMyNURDRkQ5MDExRjA5OUFCQ0IzOTVCNkY1NkJDL3hGMDA0MXI2VVdj MDdyNC1YYXh4djBqaDFmTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOkJ6sPcxs7ayDEj5OAFwlipecLdyiIl5BqHjKftmL0XbTa16H9XR87aBU4CN7 /eqwnIokkM2ZghuQKpOW/rztxRCUAzc/aEntqZJrQaKyDWHT0gavQ/dDFzN22um0 ANHrvMz3MijIWXD5mLoVR0TJeswk74Dvx7gNk055tutPYpKUAeRbFetlb1vaRjpR QlijWWC11pNxahynfqBTfFos0ckUfoK7pH2nsf2DnfyQvqJ44uY8HrZMUupHRzw6 kA9OEVG9pVzLE8F+6Cm+HuBjRN4pnDM0c8UDMCJpm5Ll5n8oyY14sjgZA5ZJtDwn 5eClmNrchRNC9u2ctYhS7H4h -----END CERTIFICATE-----Generated at Mon Mar 2 09:28:00 2026 by rpki-client