$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json) Hash identifier: WtNm3JId4k/oROWcXJ12GwCDCrWRrj2k4BEaJ/Z9Hcg= Subject key identifier: 62:D4:EF:E1:57:7E:87:B3:FD:9C:F5:D5:4E:0A:3D:E7:9A:69:BC:24 Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft Manifest number: 0138 Signing time: Sun 01 Mar 2026 05:59:21 +0000 Manifest this update: Sun 01 Mar 2026 05:59:20 +0000 Manifest next update: Sun 08 Mar 2026 05:59:20 +0000 Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: HaXhkIDxExvPPA0CPfD5jYx3wFYyCHvw8dANzRVS1wc=) 2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: m0j5NYjPTDIJfmWKHuHfMjMZ9FBAfzwy/hGv/R4OYCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Validity Not Before: Mar 1 05:59:20 2026 GMT Not After : Mar 8 05:59:20 2026 GMT Subject: CN=69a3d5b9-0567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:66:fd:87:58:3e:c7:c4:43:b3:36:d2:85: 34:ab:b3:82:94:7b:a7:be:81:22:57:3e:b7:1d:78: da:cb:57:da:57:9c:18:6b:70:fd:e5:7b:ab:57:84: a4:a6:df:2d:94:33:fd:b1:18:e9:32:0a:88:14:ec: 7c:d8:98:57:30:7d:4b:c5:cb:52:9a:a2:a0:84:ee: 47:4b:1b:ab:72:db:1a:92:29:de:0b:3f:34:3b:ce: 33:8e:a8:85:01:a3:1c:f7:8f:34:16:75:1e:12:15: 4d:65:ac:76:ab:54:90:88:70:6c:b2:0f:cf:d9:37: be:9f:12:df:41:1b:d5:43:f1:9e:11:f0:8b:76:40: a5:db:e9:b3:10:12:f2:5b:af:b9:c4:d4:6c:f3:61: 02:62:e9:8b:f5:d5:dd:b9:c8:f4:fa:14:bb:38:89: 6a:fa:84:dd:b0:ec:9e:02:2f:c6:a8:e6:67:85:c0: 4f:83:4f:61:e7:31:a4:9d:b9:1b:ca:14:f3:6b:3a: 8a:5d:c9:17:45:e9:4e:2c:32:64:ce:cc:d4:10:35: e9:f7:d6:92:63:64:49:71:94:0b:76:62:65:60:f9: 97:f8:5d:3b:68:68:20:95:77:88:80:f8:b4:85:de: c8:dc:8b:2d:3d:6f:a8:03:33:f4:e5:a1:0c:6e:80: a7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D4:EF:E1:57:7E:87:B3:FD:9C:F5:D5:4E:0A:3D:E7:9A:69:BC:24 X509v3 Authority Key Identifier: keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6c:04:b6:ce:5b:59:61:32:0a:7e:78:67:44:f1:0a:aa:81: 88:7d:36:02:58:8c:e7:73:5e:ee:b7:43:a4:25:71:cb:1e:bc: b9:e9:c4:10:fe:76:6a:90:f7:9d:03:27:a6:e0:4f:10:af:e6: 25:44:51:46:21:88:c5:01:c6:0a:15:b6:b1:25:40:3e:b5:e2: 86:70:ea:b1:f0:a7:a7:a0:2d:ce:1a:da:29:1b:e3:00:e9:0c: 21:1e:d9:e7:cb:7f:69:6e:cd:a0:2e:59:6d:e2:c7:3e:fe:a9: 44:4f:90:c1:b3:52:3e:3f:a9:27:14:8f:b5:da:67:9b:da:82: 03:9e:a5:43:92:41:9b:57:21:36:ba:9d:7b:82:44:dd:9f:59: ad:d5:ff:28:a2:fb:af:5f:ea:d2:92:0a:1a:80:d0:fb:a8:09: 41:7e:13:86:e7:4e:9b:83:34:92:57:1b:88:d7:a2:5b:be:ce: 93:0e:14:18:cf:07:13:b0:30:15:75:be:ee:78:d7:30:3b:36: 6a:b4:9c:fb:9c:4a:55:6e:cf:18:4f:42:b5:87:f4:43:07:09: 96:da:6f:64:06:15:cb:0b:fc:f1:b6:4d:a7:d6:85:76:7c:d6: 36:51:f3:7b:4d:08:49:90:5b:d7:f0:70:d7:f1:e6:bf:c8:af: 7b:05:98:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDVGMDRDMDA1RjI4QzI4NTZDN0JCRjQ3NkI5MUM2MkEw MkYyRkM1MUMwHhcNMjYwMzAxMDU1OTIwWhcNMjYwMzA4MDU1OTIwWjAYMRYwFAYD VQQDEw02OWEzZDViOS0wNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUlm/YdYPsfEQ7M20oU0q7OClHunvoEiVz63HXjay1faV5wYa3D95XurV4Sk pt8tlDP9sRjpMgqIFOx82JhXMH1LxctSmqKghO5HSxurctsakineCz80O84zjqiF AaMc9480FnUeEhVNZax2q1SQiHBssg/P2Te+nxLfQRvVQ/GeEfCLdkCl2+mzEBLy W6+5xNRs82ECYumL9dXducj0+hS7OIlq+oTdsOyeAi/GqOZnhcBPg09h5zGknbkb yhTzazqKXckXRelOLDJkzszUEDXp99aSY2RJcZQLdmJlYPmX+F07aGgglXeIgPi0 hd7I3IstPW+oAzP05aEMboCnxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLU7+FX foez/Zz11U4KPeeaabwkMB8GA1UdIwQYMBaAFF8EwAXyjChWx7v0drkcYqAvL8Uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi9FMTcxOTM2MjNE OEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtGYkh1X1IydVJ4aW9DOHZ4 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h3VEFCZktNS0ZiSHVfUjJ1Unhpb0M4dnhSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi9FMTcxOTM2MjNEOEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtG Ykh1X1IydVJ4aW9DOHZ4UncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPWwEts5bWWEyCn54Z0TxCqqBiH02AliM53Ne7rdDpCVxyx68uenEEP52apD3 nQMnpuBPEK/mJURRRiGIxQHGChW2sSVAPrXihnDqsfCnp6AtzhraKRvjAOkMIR7Z 58t/aW7NoC5ZbeLHPv6pRE+QwbNSPj+pJxSPtdpnm9qCA56lQ5JBm1chNrqde4JE 3Z9ZrdX/KKL7r1/q0pIKGoDQ+6gJQX4ThudOm4M0klcbiNeiW77Okw4UGM8HE7Aw FXW+7njXMDs2arSc+5xKVW7PGE9CtYf0QwcJltpvZAYVywv88bZNp9aFdnzWNlHz e00ISZBb1/Bw1/Hmv8ivewWYFw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:34 2026 by rpki-client