$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: lA96cE+tLOy/U/h5kbesfSby5Pq6WPrGa1G2f5FaLpg= Subject key identifier: A5:67:EE:19:83:20:83:4A:B5:4E:97:FC:10:FF:8F:E9:9E:F9:57:05 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 01B0 Signing time: Mon 02 Mar 2026 02:43:34 +0000 Manifest this update: Mon 02 Mar 2026 02:43:33 +0000 Manifest next update: Mon 09 Mar 2026 02:43:33 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: 1Q0sm4cws1wE3IiGtUUrHMPzMeVe46R2+VEBGONKuTo=) 2: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: EKcqobGPT0YIgB9tuLCYGjh4SgEoxfYLWulspLHjzR4=) 3: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: lQkA2UuA6rudwMw9C/VwVfCwOScVae7dDKLHprZO4A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Mar 2 02:43:33 2026 GMT Not After : Mar 9 02:43:33 2026 GMT Subject: CN=69a4f956-a651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:41:4a:3e:fe:c9:f4:93:65:9e:71:1e:f1: 4b:e1:80:35:d7:4b:ea:7b:f4:df:c9:7b:d3:4f:73: 03:b7:3f:00:80:9e:eb:48:83:1a:49:7f:1f:7b:93: 79:a9:68:73:d2:f7:07:bf:3b:fc:1b:06:1a:c9:f6: f5:62:57:16:cc:aa:d9:27:8e:10:cf:61:6c:06:a2: 60:45:11:c6:a6:aa:41:72:4e:c2:02:c9:7c:f3:c3: a7:ec:ef:2b:ee:c4:0c:02:64:92:fb:d0:08:d4:5a: 8d:67:2c:ca:30:43:d1:83:49:f5:4c:b3:f1:45:40: b8:c5:35:5a:6b:f3:6e:82:d0:a8:9f:f3:28:5c:7b: ea:84:f4:a0:b9:b9:6a:1b:85:55:cd:a7:15:76:23: e9:c2:71:93:cd:81:ba:31:3c:f4:8c:7c:51:a3:94: ed:a4:dd:8d:26:a2:fb:50:d8:49:84:e2:df:57:aa: dc:6b:fb:2b:73:f9:c8:6e:7a:be:54:6b:c0:63:89: 37:16:07:6a:6c:ca:8c:03:44:0d:32:8a:cc:2d:9c: 1e:be:96:c9:01:d6:e9:0f:33:d0:40:19:86:ec:2a: 84:45:ea:d5:72:4c:a7:43:be:f4:0e:05:07:f0:90: 88:0b:3f:0a:6f:9b:2c:66:64:d1:16:d5:1e:90:41: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:67:EE:19:83:20:83:4A:B5:4E:97:FC:10:FF:8F:E9:9E:F9:57:05 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b3:68:6c:89:9f:63:7a:e7:f2:4e:55:e3:9f:f6:11:76:e9: 6b:e0:b2:38:a0:c1:84:2f:be:42:88:d0:ad:3f:3c:51:1e:3f: 0f:d7:ae:70:1a:68:80:38:be:a3:12:48:20:1b:2a:eb:44:09: cb:3f:32:79:aa:71:1c:f6:ba:6a:a1:27:e6:a0:6b:c8:0b:c1: 2c:ed:14:2b:c3:69:59:2d:b2:64:21:f4:59:2f:70:ab:58:c6: fd:6a:e9:d9:80:c0:b8:15:4a:37:36:f8:fe:86:8d:6c:6b:c7: 70:64:47:11:13:e0:42:75:e2:e4:24:6a:cb:05:14:b1:14:07: 64:96:d5:29:89:2b:fa:7b:79:20:b4:c6:3b:95:b6:73:40:0e: 9c:48:a9:5d:54:e1:c8:90:06:f2:65:63:8e:24:b7:64:05:d8: 16:f5:23:de:92:95:94:65:d2:34:a4:53:6a:76:a3:b1:97:50: a6:48:8c:24:e3:9a:88:13:af:d1:53:5d:39:58:a4:03:50:08: 6e:d9:0d:90:1e:f2:5a:8e:0d:f3:5a:12:6e:23:47:c7:c8:1e: fd:7e:e1:e1:a2:e1:8f:cc:06:38:3e:ef:92:47:c1:78:37:f1: 70:c6:35:6b:5b:5e:01:58:30:90:7e:ff:b1:7c:da:27:3c:c7: 29:71:6a:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjYwMzAyMDI0MzMzWhcNMjYwMzA5MDI0MzMzWjAYMRYwFAYD VQQDEw02OWE0Zjk1Ni1hNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlO1BSj7+yfSTZZ5xHvFL4YA110vqe/TfyXvTT3MDtz8AgJ7rSIMaSX8fe5N5 qWhz0vcHvzv8GwYayfb1YlcWzKrZJ44Qz2FsBqJgRRHGpqpBck7CAsl888On7O8r 7sQMAmSS+9AI1FqNZyzKMEPRg0n1TLPxRUC4xTVaa/NugtCon/MoXHvqhPSgublq G4VVzacVdiPpwnGTzYG6MTz0jHxRo5TtpN2NJqL7UNhJhOLfV6rca/src/nIbnq+ VGvAY4k3FgdqbMqMA0QNMorMLZwevpbJAdbpDzPQQBmG7CqERerVckynQ770DgUH 8JCICz8Kb5ssZmTRFtUekEE3lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVn7hmD IINKtU6X/BD/j+me+VcFMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZbNobImfY3rn8k5V45/2EXbpa+CyOKDBhC++QojQrT88UR4/D9eucBpogDi+ oxJIIBsq60QJyz8yeapxHPa6aqEn5qBryAvBLO0UK8NpWS2yZCH0WS9wq1jG/Wrp 2YDAuBVKNzb4/oaNbGvHcGRHERPgQnXi5CRqywUUsRQHZJbVKYkr+nt5ILTGO5W2 c0AOnEipXVThyJAG8mVjjiS3ZAXYFvUj3pKVlGXSNKRTanajsZdQpkiMJOOaiBOv 0VNdOVikA1AIbtkNkB7yWo4N81oSbiNHx8ge/X7h4aLhj8wGOD7vkkfBeDfxcMY1 a1teAVgwkH7/sXzaJzzHKXFqhw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:02 2026 by rpki-client