$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: urtPBxIjW58XxI/teNR03fmPHOdh+oVbcfnhBaFtLJU= Subject key identifier: 04:86:32:95:A3:67:91:3C:D1:9F:99:3F:E0:0F:A8:0E:39:DD:F5:7D Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 01C2 Signing time: Sun 01 Mar 2026 04:35:12 +0000 Manifest this update: Sun 01 Mar 2026 04:35:11 +0000 Manifest next update: Sun 08 Mar 2026 04:35:11 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: bWn8Z8RWE0dQAyBEKrXmlzawTYDLG3gNk+bAMacOfBw=) 2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=) 3: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=) 4: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0=) 5: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: 4F6WXMQnkc6O0hYawZzx3De82Qtz5srkx6WGHHAwdQk=) 6: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: cK+N9izYWqB7nJ2gb9CD89n2r86dl3xekNBy66q5a0Q=) 7: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=) 8: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Mar 1 04:35:11 2026 GMT Not After : Mar 8 04:35:11 2026 GMT Subject: CN=69a3c200-0e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:f9:84:d9:63:f6:e9:89:c9:77:5f:5d:24: cd:67:55:cf:c6:1a:5f:ca:b6:77:d2:48:d3:6e:61: f1:aa:4e:8e:10:f2:91:57:31:53:00:93:34:c0:9a: 93:91:67:23:81:0b:4b:c0:74:44:47:82:c6:49:cc: f8:7a:73:87:16:a7:35:75:63:ad:0c:09:5f:79:5e: 4a:b2:1b:86:34:3d:3e:fd:1b:80:8d:7e:7f:04:a9: d2:2a:9e:36:55:3f:d3:08:48:65:61:91:88:8d:73: 5b:f8:de:d9:8a:87:8d:1f:5a:8c:56:ac:8a:d8:64: 84:3b:0c:de:e3:75:ff:ce:c4:37:26:51:2c:f0:b6: d9:41:1c:4a:04:b1:1c:d9:ea:ef:66:49:6a:94:84: 37:09:34:d1:b8:67:ef:8b:08:fd:6b:38:43:16:63: a1:ea:74:23:50:35:49:b7:b0:5f:b0:6d:92:b4:00: 5d:3f:b7:8b:3c:49:b7:60:85:3d:33:fd:3e:02:54: 8e:b9:35:7e:76:13:1d:36:42:d0:20:f2:4e:08:80: 59:dc:bb:fd:90:50:fa:68:2b:1c:08:ec:c9:06:0c: 9a:02:b5:67:aa:63:65:37:35:e7:64:60:44:23:a8: 95:36:86:a2:e5:fd:08:45:69:72:4b:d9:ef:c8:16: 13:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:86:32:95:A3:67:91:3C:D1:9F:99:3F:E0:0F:A8:0E:39:DD:F5:7D X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:37:b6:47:ab:36:39:9a:70:31:e5:26:a6:db:7b:25:6a:4f: f6:f7:8b:fb:0b:87:d8:e9:3e:0e:16:58:89:8c:27:c7:19:fd: e0:4f:48:7e:00:09:fc:09:60:52:5f:b1:9e:e2:0a:50:6a:35: 81:0a:b8:48:67:de:9e:23:d4:a2:ab:f3:67:fb:7b:30:11:15: 03:14:80:88:3e:41:c1:00:ae:09:9a:60:21:5b:36:23:a3:29: 18:fc:ac:2a:e7:92:a8:9a:42:a2:36:21:05:6d:fe:13:cd:70: 09:c8:19:3a:65:3e:d3:04:0c:bc:b7:16:a8:31:1d:5d:cd:11: c0:e3:19:98:78:89:8d:89:64:c7:6f:49:37:57:4d:f7:c4:c0: 89:7d:1e:0b:ce:b2:7c:05:c7:c6:33:e3:16:2b:10:74:2f:83: 20:e7:73:c8:14:95:2d:f6:db:73:29:1c:29:30:51:77:4a:c4: 69:63:ad:ed:e8:e3:42:9d:62:54:b8:59:b0:14:fe:95:f8:05: f2:54:c2:b0:2f:f8:f0:2f:58:a3:34:41:98:e8:6f:d6:c2:cc: da:a9:b4:48:f8:a5:1d:13:b1:b5:71:54:70:2a:78:53:7c:ec: 68:3a:6a:9a:93:b0:f6:80:49:00:df:00:bc:f2:03:a3:95:d0: 27:d4:da:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjYwMzAxMDQzNTExWhcNMjYwMzA4MDQzNTExWjAYMRYwFAYD VQQDDA02OWEzYzIwMC0wZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbf5hNlj9umJyXdfXSTNZ1XPxhpfyrZ30kjTbmHxqk6OEPKRVzFTAJM0wJqT kWcjgQtLwHRER4LGScz4enOHFqc1dWOtDAlfeV5KshuGND0+/RuAjX5/BKnSKp42 VT/TCEhlYZGIjXNb+N7ZioeNH1qMVqyK2GSEOwze43X/zsQ3JlEs8LbZQRxKBLEc 2ervZklqlIQ3CTTRuGfviwj9azhDFmOh6nQjUDVJt7BfsG2StABdP7eLPEm3YIU9 M/0+AlSOuTV+dhMdNkLQIPJOCIBZ3Lv9kFD6aCscCOzJBgyaArVnqmNlNzXnZGBE I6iVNoai5f0IRWlyS9nvyBYToQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASGMpWj Z5E80Z+ZP+APqA453fV9MB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEze2R6s2OZpwMeUmptt7JWpP9veL+wuH2Ok+DhZYiYwnxxn94E9IfgAJ/Alg Ul+xnuIKUGo1gQq4SGfeniPUoqvzZ/t7MBEVAxSAiD5BwQCuCZpgIVs2I6MpGPys KueSqJpCojYhBW3+E81wCcgZOmU+0wQMvLcWqDEdXc0RwOMZmHiJjYlkx29JN1dN 98TAiX0eC86yfAXHxjPjFisQdC+DIOdzyBSVLfbbcykcKTBRd0rEaWOt7ejjQp1i VLhZsBT+lfgF8lTCsC/48C9YozRBmOhv1sLM2qm0SPilHROxtXFUcCp4U3zsaDpq mpOw9oBJAN8AvPIDo5XQJ9Taeg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:41:21 2026 by rpki-client