$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: QkY83CmZj3HNhZB5H0tRp+UiPb13G1sahryK+xZ4B4c= Subject key identifier: 3B:41:A8:25:E0:3A:F4:72:4A:55:82:EA:FE:C5:97:F0:1B:80:14:45 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 3549 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 3519 Signing time: Mon 02 Mar 2026 15:16:50 +0000 Manifest this update: Mon 02 Mar 2026 15:16:50 +0000 Manifest next update: Mon 09 Mar 2026 15:16:50 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: IWO79HZTfLQhOVP+kRRbR5C5FO0jK3Ad3XP3yPoYKFc=) 2: 504CB1588D3911F093856C71C4F9AE02.roa (hash: XbsPrmHsv3A3kJ0QH0nWqPm+aVwo38LG2afXIGK/eHk=) 3: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: ZiQ3Fa8zlV9SFju5CJ4G2vzDiYjT+FvEBz+HNh9KOzk=) 4: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: UcggPbJhgE8EGS4IdplCk/tp4RjY1CPQccDnakbA59Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Mar 2 15:16:50 2026 GMT Not After : Mar 9 15:16:50 2026 GMT Subject: CN=69a5a9e2-7a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:31:7e:e1:8a:cd:1e:7a:62:52:d8:cb:3e: 41:9d:21:3e:d5:90:85:5a:29:b9:26:db:1f:b7:fe: 5d:2c:4b:ea:37:3a:f8:1b:7c:bb:b2:fa:05:fd:bf: 40:d4:b9:f2:38:a7:3f:a6:b2:75:2a:2a:17:08:48: b7:cf:81:f2:29:59:23:c6:a9:8f:00:6f:bf:28:ce: 84:5d:37:d5:aa:2e:43:cb:b5:49:0d:d2:46:66:04: b8:e3:58:91:28:37:66:08:62:23:e7:36:d8:6f:15: 94:d0:fe:20:fe:01:c0:6b:27:dd:92:de:ec:2f:cd: fb:4b:28:13:41:bc:5d:c3:4b:57:eb:6c:59:6a:3b: 31:a9:a6:8b:b6:96:06:cb:75:04:69:76:6b:a8:74: 01:9e:29:47:5b:4b:ee:f6:63:87:ae:d4:66:3d:41: 42:97:27:b4:ad:93:3e:93:bc:66:3c:dd:93:a1:17: 1f:77:01:7a:2a:4e:40:5a:3e:4d:a3:11:32:35:40: ec:6b:43:c4:51:f7:9f:13:79:2d:08:63:73:d1:d3: 33:ea:f4:f0:1a:85:95:68:61:fb:81:5c:20:47:77: 44:d2:cf:5c:4d:38:36:95:3a:7e:44:af:cc:e5:1f: a8:da:ff:7d:59:4f:df:5e:e0:b6:e1:37:c9:42:85: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:41:A8:25:E0:3A:F4:72:4A:55:82:EA:FE:C5:97:F0:1B:80:14:45 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:57:b9:fa:c0:ff:bc:fa:d4:99:64:5a:f1:26:be:5e:d9:72: 79:11:28:d4:4b:54:94:09:54:04:84:9f:51:60:58:04:3b:0c: ac:7d:89:ff:b5:8b:8c:c8:1b:de:11:c8:cc:61:94:4c:88:42: 7b:37:0a:ae:c8:f7:2c:92:1e:db:ff:77:e0:95:14:02:40:ac: 74:90:b8:66:b2:e4:b1:47:b8:6e:0f:19:61:ae:1b:25:4a:5d: ec:0b:2d:fe:b0:54:75:7e:eb:6e:ff:13:75:99:38:4f:b8:34: 5d:65:1e:07:b2:f5:20:aa:63:d5:33:8f:4a:4d:0f:7f:25:67: 16:19:6f:71:9b:e2:11:24:f5:2a:a2:63:c3:cc:62:f2:8f:74: 1d:5c:80:c2:6f:63:ad:f0:e8:bc:80:05:16:38:60:44:06:1f: 60:4e:21:a1:ff:3a:ec:87:b1:e2:41:71:1b:f6:c2:c7:1d:5f: 67:0a:57:f3:d0:d2:8d:58:9f:e5:06:05:e5:4f:de:29:bd:80: 5a:06:f6:8f:88:b8:50:33:2e:30:04:6c:59:b0:1c:40:4c:53: 7d:d9:87:db:23:91:6e:33:48:67:f8:e1:6a:1e:ba:dc:e2:72: 78:4b:ff:5d:ac:51:39:6d:bc:be:86:05:d5:bd:69:f3:de:34: 74:63:79:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjYwMzAyMTUxNjUwWhcNMjYwMzA5MTUxNjUwWjAYMRYwFAYD VQQDEw02OWE1YTllMi03YTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3ExfuGKzR56YlLYyz5BnSE+1ZCFWim5Jtsft/5dLEvqNzr4G3y7svoF/b9A 1LnyOKc/prJ1KioXCEi3z4HyKVkjxqmPAG+/KM6EXTfVqi5Dy7VJDdJGZgS441iR KDdmCGIj5zbYbxWU0P4g/gHAayfdkt7sL837SygTQbxdw0tX62xZajsxqaaLtpYG y3UEaXZrqHQBnilHW0vu9mOHrtRmPUFClye0rZM+k7xmPN2ToRcfdwF6Kk5AWj5N oxEyNUDsa0PEUfefE3ktCGNz0dMz6vTwGoWVaGH7gVwgR3dE0s9cTTg2lTp+RK/M 5R+o2v99WU/fXuC24TfJQoVb/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtBqCXg OvRySlWC6v7Fl/AbgBRFMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiVe5+sD/vPrUmWRa8Sa+XtlyeREo1EtUlAlUBISfUWBYBDsMrH2J/7WLjMgb 3hHIzGGUTIhCezcKrsj3LJIe2/934JUUAkCsdJC4ZrLksUe4bg8ZYa4bJUpd7Ast /rBUdX7rbv8TdZk4T7g0XWUeB7L1IKpj1TOPSk0PfyVnFhlvcZviEST1KqJjw8xi 8o90HVyAwm9jrfDovIAFFjhgRAYfYE4hof867Iex4kFxG/bCxx1fZwpX89DSjVif 5QYF5U/eKb2AWgb2j4i4UDMuMARsWbAcQExTfdmH2yORbjNIZ/jhah663OJyeEv/ XaxROW28voYF1b1p8940dGN5ng== -----END CERTIFICATE-----Generated at Mon Mar 2 19:43:20 2026 by rpki-client