$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json) Hash identifier: svS7b5D/UTQ7VOjXvPiec/SuFkmXHvn4L5NbbURKjbI= Subject key identifier: 96:A1:8B:CC:AC:E9:13:13:97:90:BD:49:7F:64:6B:9F:17:6F:41:DA Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 0553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft Manifest number: 053D Signing time: Sun 01 Mar 2026 00:10:48 +0000 Manifest this update: Sun 01 Mar 2026 00:10:47 +0000 Manifest next update: Sun 08 Mar 2026 00:10:47 +0000 Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: NXkqbXIANVSb6GIoHyF50TEcKxjhNkVY3wzqtBKveDU=) 2: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: NqCe6ivtot+2EiDBeB5rI+v3Md3AvU9IqI8GrM7MqMs=) 3: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: 91lchPpa042FpgG6srtZePU2M6YFFk53ibQ4Z1+SlLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Mar 1 00:10:47 2026 GMT Not After : Mar 8 00:10:47 2026 GMT Subject: CN=69a38408-057c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:65:30:fb:3b:0e:b3:a4:11:a8:82:3c:60: 54:c2:a0:7b:70:57:0e:87:e8:6e:ff:d0:30:7f:b2: db:8a:6f:ff:a1:2d:f6:1c:f0:42:3e:9b:f2:fc:66: 5f:dd:37:13:7b:99:9f:c8:4f:8a:b0:9c:cc:70:6f: b6:50:d2:c0:c2:bd:6b:90:26:d6:56:e6:94:59:19: 0c:f7:ca:a3:cd:3b:83:70:38:b1:70:a7:fe:bb:4b: fb:13:15:b6:d9:86:0e:86:f9:69:7d:10:52:c4:ad: 74:8a:13:af:e0:22:82:06:d0:7a:1e:7c:1e:34:b2: 4d:b0:5b:c3:4f:85:ad:74:a5:93:dc:44:6f:55:2d: 2b:49:50:79:4e:90:52:36:65:0e:44:4a:9d:ae:28: 03:af:a0:f6:5d:f7:88:b7:54:5d:30:74:6d:bc:17: f7:fa:b3:88:23:66:21:6c:db:b8:28:79:98:89:6b: 3f:36:4b:95:53:27:47:be:70:49:73:5b:c1:80:46: 4c:85:94:31:97:a8:21:9b:28:3b:7e:ac:a3:4a:1f: 90:0c:79:34:9f:f2:6f:b7:7c:6b:70:c2:4a:4a:b1: 92:f6:5b:93:5f:bf:d5:7e:6a:93:26:2c:f5:8c:3c: 43:fe:b1:c5:0a:de:93:a6:e3:81:0a:2c:20:05:29: 62:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:8B:CC:AC:E9:13:13:97:90:BD:49:7F:64:6B:9F:17:6F:41:DA X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:62:21:86:9e:f4:84:a9:69:26:8c:15:02:0c:3f:7f:8e:79: bb:65:23:f4:e9:3f:a2:0b:87:15:37:88:76:66:b3:89:5b:8f: 46:40:91:24:f8:c4:20:cd:1f:8c:25:49:5b:ff:82:ea:db:ae: 06:9f:01:99:68:d2:31:42:9e:a2:f6:97:09:fd:de:75:33:41: a7:5e:31:9f:00:c4:8a:83:f6:c7:69:e9:eb:15:89:4a:29:26: b9:2f:48:40:e0:c4:94:c7:74:af:83:f3:24:33:de:f5:b6:73: 4b:bb:bc:af:5a:c6:d7:11:af:33:f7:eb:81:76:4f:71:89:ff: e1:9a:5a:4b:93:2b:11:0c:a5:74:86:86:10:b4:89:ee:bf:6f: c3:69:83:7a:55:c1:70:5e:51:d9:94:5a:ef:b0:2d:23:5d:a6: cb:f4:39:37:3d:7b:90:ab:62:46:a6:5a:3c:99:22:af:b1:4c: 5e:a3:8b:75:4e:d8:ae:e6:da:30:ee:e1:bf:f4:74:86:7f:ec: 14:2a:a6:cb:35:46:5e:e1:6a:46:1e:8a:25:67:1f:15:04:88: ab:76:6e:8a:d0:b7:2b:6e:cf:57:22:3b:e7:7d:b6:7d:d6:8d: 63:0c:22:09:f4:45:ab:9c:e1:93:59:d0:f4:05:32:2c:51:66: 11:be:a5:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjYwMzAxMDAxMDQ3WhcNMjYwMzA4MDAxMDQ3WjAYMRYwFAYD VQQDDA02OWEzODQwOC0wNTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtShlMPs7DrOkEaiCPGBUwqB7cFcOh+hu/9Awf7Lbim//oS32HPBCPpvy/GZf 3TcTe5mfyE+KsJzMcG+2UNLAwr1rkCbWVuaUWRkM98qjzTuDcDixcKf+u0v7ExW2 2YYOhvlpfRBSxK10ihOv4CKCBtB6HnweNLJNsFvDT4WtdKWT3ERvVS0rSVB5TpBS NmUOREqdrigDr6D2XfeIt1RdMHRtvBf3+rOII2YhbNu4KHmYiWs/NkuVUydHvnBJ c1vBgEZMhZQxl6ghmyg7fqyjSh+QDHk0n/Jvt3xrcMJKSrGS9luTX7/VfmqTJiz1 jDxD/rHFCt6TpuOBCiwgBSliRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJahi8ys 6RMTl5C9SX9ka58Xb0HaMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ WEJpU2NqTU52Y3JTcDlBVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhWIhhp70hKlpJowVAgw/f455u2Uj9Ok/oguHFTeIdmaziVuPRkCRJPjEIM0f jCVJW/+C6tuuBp8BmWjSMUKeovaXCf3edTNBp14xnwDEioP2x2np6xWJSikmuS9I QODElMd0r4PzJDPe9bZzS7u8r1rG1xGvM/frgXZPcYn/4ZpaS5MrEQyldIaGELSJ 7r9vw2mDelXBcF5R2ZRa77AtI12my/Q5Nz17kKtiRqZaPJkir7FMXqOLdU7Yruba MO7hv/R0hn/sFCqmyzVGXuFqRh6KJWcfFQSIq3ZuitC3K27PVyI75322fdaNYwwi CfRFq5zhk1nQ9AUyLFFmEb6lDA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:16:49 2026 by rpki-client