$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: A03ACCGMY53TS4wqBwlPr3IrUpynvgntBVqYbz9t0Hw= Subject key identifier: 5F:18:E9:2F:DE:13:CA:40:33:11:9A:DD:DB:DB:2A:1D:EA:85:8B:75 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 0283 Signing time: Sun 01 Mar 2026 02:47:39 +0000 Manifest this update: Sun 01 Mar 2026 02:47:38 +0000 Manifest next update: Sun 08 Mar 2026 02:47:38 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: 73Jvll1pIMEgGnQHJdgSVn3W9oEuN8m6Cv7k9g7cjvY=) 2: 6121C23230AC11F08C150767C4F9AE02.roa (hash: fShyVa3rIna9iRvZNHAjyEZoQgutIuaEQEMpg+RXaTc=) 3: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: Kuncg/OKHO6KINevgnEgm8twmyohuTIV8xS8NsrR5Yw=) 4: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: D+g5jzuWcvphD1ps8jnw5QvvfxsQjGFWKglonqcWSi0=) 5: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: 4uRsfI3UTikSBwFuE1LkYP4yx1HQPN2T4+sSHop7B54=) 6: 01A55FE8EB8811F09418252C556F56BC.roa (hash: cc3W9FmIzzSNdIP86RaGXeVwpyhrc9hMYXXlcYdLtFY=) 7: 8A537D0CEB8811F09D1C7947556F56BC.roa (hash: lW2YwctCAoweBYNt0+PD17MjebPYE5IEwczeIwzefHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Mar 1 02:47:38 2026 GMT Not After : Mar 8 02:47:38 2026 GMT Subject: CN=69a3a8ca-00f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:b8:c1:1d:00:1c:87:1d:34:d6:db:c6:02: e5:93:e4:52:0e:ef:8f:16:70:de:cf:2e:74:ab:94: f9:7a:da:8a:24:af:e3:50:e1:35:6c:f9:ab:91:10: b3:22:7b:cd:2f:49:15:30:9c:5b:2b:e0:f9:84:42: 42:88:f5:f1:9a:33:ad:95:17:1c:3f:47:4c:8b:69: 8f:4d:67:2f:78:02:eb:d4:93:8a:03:e6:5f:d5:94: cf:0a:cb:84:d4:3c:94:9f:79:ab:55:64:8e:53:8c: 5a:e0:03:5e:4f:37:fb:0e:2f:28:d1:f5:df:64:0a: 95:3c:2c:06:2b:a1:4f:dd:d8:8e:55:22:7a:87:c5: 8a:17:52:29:34:39:4d:ab:74:fd:26:e4:41:56:28: 5b:a1:10:49:d1:27:5e:e2:19:ae:b3:de:5b:e9:fd: d6:44:24:27:24:7f:6a:ce:d8:9b:7d:b6:6c:9e:0e: d2:ab:63:e6:68:d8:49:2a:f0:7e:37:3d:1f:bc:40: 76:68:92:63:e6:78:de:d9:6d:5e:e4:cd:74:36:89: 0f:4f:a4:06:88:fa:4a:ae:46:66:14:81:a8:6a:bf: d8:89:8d:77:3b:0c:d5:c6:e9:e8:a7:6d:9f:33:7f: a4:52:5d:dd:cf:45:e1:7f:91:b1:00:12:f4:f7:4d: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:18:E9:2F:DE:13:CA:40:33:11:9A:DD:DB:DB:2A:1D:EA:85:8B:75 X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d3:e9:0b:78:df:fe:18:69:c3:0e:dc:62:27:ad:32:dc:f6: f6:04:6f:a4:48:9e:05:77:1d:99:3c:85:f9:84:a2:c9:bd:5e: e2:3f:fa:d5:a0:96:02:33:f4:78:e9:38:04:58:c4:20:c4:1f: 9f:3c:5f:f3:94:c9:15:a3:4a:a8:5a:12:ee:0a:89:bf:34:b2: 9e:c9:5a:89:2a:cd:e6:e7:95:47:e4:77:49:1c:49:71:ce:72: 3f:a0:c9:cb:64:b1:ba:23:ec:13:ca:5e:10:ce:85:f0:3f:eb: 74:8f:40:78:24:f2:f1:b2:60:b5:09:7f:0a:68:3e:22:a8:d9: d6:e4:14:15:ca:3a:5a:d9:bc:9c:00:fd:40:7f:75:ef:bb:8a: c0:27:08:81:5a:d1:2b:ab:72:64:1a:1a:3a:b7:a2:38:54:2f: 9a:c1:0f:05:5b:26:d0:a1:2f:9b:00:88:d4:b4:a1:82:af:7b: 54:9c:59:a4:c3:b7:45:7e:7a:38:0f:d1:9e:05:ae:1d:0e:86: fd:fa:14:44:da:be:c0:29:d0:d5:d5:8f:07:05:c5:94:62:c9: 3f:1f:17:d0:9e:6a:bf:69:b2:29:a9:1b:40:fa:48:84:08:4a: cb:73:a9:9b:1f:ff:39:78:3a:9c:f4:8e:e4:24:ff:35:4d:99: af:f5:c6:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjYwMzAxMDI0NzM4WhcNMjYwMzA4MDI0NzM4WjAYMRYwFAYD VQQDDA02OWEzYThjYS0wMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxei4wR0AHIcdNNbbxgLlk+RSDu+PFnDezy50q5T5etqKJK/jUOE1bPmrkRCz InvNL0kVMJxbK+D5hEJCiPXxmjOtlRccP0dMi2mPTWcveALr1JOKA+Zf1ZTPCsuE 1DyUn3mrVWSOU4xa4ANeTzf7Di8o0fXfZAqVPCwGK6FP3diOVSJ6h8WKF1IpNDlN q3T9JuRBVihboRBJ0Sde4hmus95b6f3WRCQnJH9qztibfbZsng7Sq2PmaNhJKvB+ Nz0fvEB2aJJj5nje2W1e5M10NokPT6QGiPpKrkZmFIGoar/YiY13OwzVxunop22f M3+kUl3dz0Xhf5GxABL0901aywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8Y6S/e E8pAMxGa3dvbKh3qhYt1MB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAadPpC3jf/hhpww7cYietMtz29gRvpEieBXcdmTyF+YSiyb1e4j/61aCWAjP0 eOk4BFjEIMQfnzxf85TJFaNKqFoS7gqJvzSynslaiSrN5ueVR+R3SRxJcc5yP6DJ y2SxuiPsE8peEM6F8D/rdI9AeCTy8bJgtQl/Cmg+IqjZ1uQUFco6Wtm8nAD9QH91 77uKwCcIgVrRK6tyZBoaOreiOFQvmsEPBVsm0KEvmwCI1LShgq97VJxZpMO3RX56 OA/RngWuHQ6G/foURNq+wCnQ1dWPBwXFlGLJPx8X0J5qv2myKakbQPpIhAhKy3Op mx//OXg6nPSO5CT/NU2Zr/XGoA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:10:56 2026 by rpki-client