$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json) Hash identifier: bWe86lyO73pndXvdk85XfcHMluur3mp3+XzP39y1BNg= Subject key identifier: 1D:18:31:96:33:F6:E1:7A:2A:32:84:4C:0D:A0:5C:FC:AC:8A:3E:83 Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft Manifest number: 0C6D Signing time: Mon 02 Mar 2026 00:30:00 +0000 Manifest this update: Mon 02 Mar 2026 00:29:58 +0000 Manifest next update: Mon 09 Mar 2026 00:29:58 +0000 Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: S2izpEJBCclCZLMXa7yn6wqA8fIyJUtRB9zPKK0ARhw=) 2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: gxk+S+SUlMn2ngV82PSC9JOZzFOOnOePusJT8k4+nyo=) 3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: H5CunTLT/XgKq2SwHf28FqluOr+v48qBnb84ZQFyC+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Validity Not Before: Mar 2 00:29:58 2026 GMT Not After : Mar 9 00:29:58 2026 GMT Subject: CN=69a4da08-0e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:68:27:38:3d:2f:d8:d0:50:74:e4:1d:53: 7f:28:c1:16:d9:86:67:04:e6:6c:b5:54:b4:c2:02: 29:45:93:06:99:be:cb:0b:8f:06:92:60:f1:b5:ef: d8:3e:69:21:2d:34:08:8e:c6:5c:71:f4:ac:1f:15: 2f:ec:4b:fb:63:0a:aa:81:58:23:e7:a0:89:bf:17: 8d:f9:b4:7b:b9:f5:f0:38:95:82:1e:fb:3d:c3:37: 44:06:46:2b:bc:87:8a:77:6f:1f:4d:2c:f0:d7:4c: 20:d7:92:64:b4:99:af:14:b6:6d:a4:ed:c9:1c:7e: b5:c8:65:d5:a7:34:2b:2d:d7:53:e1:4d:ce:ce:76: 1d:a7:f2:f4:c4:e6:7d:b9:5f:00:60:3f:04:52:fa: 79:78:cd:b5:86:86:a7:b6:6c:8d:b1:76:0f:36:7d: e8:b0:2c:16:13:db:a7:51:dc:f2:52:7e:fe:5d:cf: 33:f5:fa:0b:bc:a6:70:74:37:b9:a3:de:ad:ce:11: 7f:01:82:ae:8d:6d:fa:04:8e:79:48:f1:48:05:48: ba:dc:3a:48:9e:bf:fe:80:91:69:2d:d3:96:12:a7: 64:5f:b7:a2:fb:14:a6:dc:d3:0a:8b:41:5c:f1:96: 99:74:d2:1f:91:11:ab:0f:80:7d:7b:7e:9f:05:3d: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:18:31:96:33:F6:E1:7A:2A:32:84:4C:0D:A0:5C:FC:AC:8A:3E:83 X509v3 Authority Key Identifier: keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:51:e8:0c:0b:21:1c:b8:e9:fa:7b:c6:2e:88:a8:06:ac:46: 5d:75:4f:72:cb:44:4f:41:6b:81:65:91:d9:cc:7b:be:90:4b: 08:39:6c:b5:fe:9a:ac:b8:53:43:27:1a:41:11:f6:ac:46:7f: 1f:43:f9:67:0a:d3:b7:3e:2a:ca:49:b1:9c:a1:db:1c:d5:c4: 30:5b:bb:31:36:95:94:ca:3f:d8:7c:f0:71:71:83:a1:62:6d: 72:0f:93:34:df:0a:b3:e9:d4:78:17:46:c3:48:d7:35:03:e7: 6b:f6:2e:ce:08:45:c7:ff:2a:b8:e2:2e:59:5e:c1:00:56:80: 9d:a5:5b:56:fa:0e:eb:0a:20:f7:1f:49:b9:b4:92:69:f0:86: cc:b5:55:2d:f4:70:cc:c6:65:d7:1e:a9:c8:93:5a:b6:01:12: 14:2f:f3:90:a8:e0:10:0c:8d:67:4d:4c:7d:c7:2c:08:a5:78: 9f:3d:fa:49:75:9c:0f:f3:c6:46:93:2f:e0:6f:0e:d0:76:21: f8:69:df:08:96:6e:1c:f9:bd:ab:b9:db:47:87:9d:5b:b7:ec: 2a:4d:dc:b5:46:9b:cf:2e:79:cf:53:b8:79:59:b4:4c:a3:7f: 11:c6:61:82:50:3a:ea:c8:26:c7:c2:29:31:f0:d3:87:77:8d: 54:e1:56:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND OEZEODU5MzkwHhcNMjYwMzAyMDAyOTU4WhcNMjYwMzA5MDAyOTU4WjAYMRYwFAYD VQQDEw02OWE0ZGEwOC0wZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPhoJzg9L9jQUHTkHVN/KMEW2YZnBOZstVS0wgIpRZMGmb7LC48GkmDxte/Y PmkhLTQIjsZccfSsHxUv7Ev7YwqqgVgj56CJvxeN+bR7ufXwOJWCHvs9wzdEBkYr vIeKd28fTSzw10wg15JktJmvFLZtpO3JHH61yGXVpzQrLddT4U3OznYdp/L0xOZ9 uV8AYD8EUvp5eM21hoantmyNsXYPNn3osCwWE9unUdzyUn7+Xc8z9foLvKZwdDe5 o96tzhF/AYKujW36BI55SPFIBUi63DpInr/+gJFpLdOWEqdkX7ei+xSm3NMKi0Fc 8ZaZdNIfkRGrD4B9e36fBT1ACwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0YMZYz 9uF6KjKETA2gXPysij6DMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ OWJaUi1HU1RKZlBJX1lXVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPFHoDAshHLjp+nvGLoioBqxGXXVPcstET0FrgWWR2cx7vpBLCDlstf6arLhT QycaQRH2rEZ/H0P5ZwrTtz4qykmxnKHbHNXEMFu7MTaVlMo/2HzwcXGDoWJtcg+T NN8Ks+nUeBdGw0jXNQPna/YuzghFx/8quOIuWV7BAFaAnaVbVvoO6wog9x9JubSS afCGzLVVLfRwzMZl1x6pyJNatgESFC/zkKjgEAyNZ01MfccsCKV4nz36SXWcD/PG RpMv4G8O0HYh+GnfCJZuHPm9q7nbR4edW7fsKk3ctUabzy55z1O4eVm0TKN/EcZh glA66sgmx8IpMfDTh3eNVOFW2A== -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:32 2026 by rpki-client