$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft File: xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json) Hash identifier: zrOtetO5MVdt8BDrRSTjsr9R9bJSRIEGTDBHBRQmAxU= Subject key identifier: 79:1D:67:85:FB:F7:17:9C:09:E7:14:84:FD:E5:1A:EE:28:5B:80:A9 Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 Certificate issuer: /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft Manifest number: 28 Signing time: Sun 01 Mar 2026 10:15:27 +0000 Manifest this update: Sun 01 Mar 2026 10:15:27 +0000 Manifest next update: Sun 08 Mar 2026 10:15:27 +0000 Files and hashes: 1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: xIeBrxovPzkm52t9h5tetY61nMMUawJVj7aHMiFRs2M=) 2: A9AB917CDF2A11F092E976D2656F56BC.roa (hash: 2MH7BDCr/HiI9duO5pISv49IgB4HZsB0I/lhscn+60c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Validity Not Before: Mar 1 10:15:27 2026 GMT Not After : Mar 8 10:15:27 2026 GMT Subject: CN=69a411bf-0a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:b6:75:bc:22:73:3a:64:b4:35:13:fc:17: 83:30:28:ac:a0:24:28:a2:ca:a1:55:fd:d3:89:e4: 72:98:74:8c:63:7f:55:ea:9a:dd:d9:1a:5d:1b:2a: e2:b1:4f:9a:67:83:f5:75:98:ff:5e:1d:c3:81:f1: de:27:8c:26:5e:dd:b1:0f:0a:a8:ad:9a:4e:61:bf: b5:b3:fa:dc:8e:71:dc:b0:1c:3e:92:3d:47:10:45: 58:2b:b7:2c:e0:5f:53:49:40:0c:94:a5:65:6a:d9: 98:ca:97:e5:b8:1a:de:f5:8c:76:d4:f4:b6:f9:db: 48:a4:b5:c5:57:57:b0:04:24:4f:c1:58:3c:7c:04: 6e:2c:f8:33:a1:c9:cc:94:e8:33:64:4d:26:ef:0b: d3:66:18:ee:cc:90:86:27:53:3b:fe:11:67:cc:49: 70:56:9b:0d:4f:70:51:93:a3:77:6b:0d:77:b8:b5: 6b:0b:d6:79:5a:fc:28:86:9b:76:d7:41:16:4d:20: 77:a3:39:cd:68:68:dc:91:20:6a:eb:6e:65:34:46: be:53:14:25:fa:11:4e:e6:98:b1:90:34:9b:d5:ab: e6:3c:93:a9:46:aa:ea:80:03:02:1c:92:34:9a:4f: 87:43:66:78:d5:03:37:55:99:c6:d4:da:fb:ba:23: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:67:85:FB:F7:17:9C:09:E7:14:84:FD:E5:1A:EE:28:5B:80:A9 X509v3 Authority Key Identifier: keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:34:98:3d:d5:69:f2:1d:61:b6:7c:15:ed:ec:39:7f:7d:cc: 2d:22:b3:cd:dd:1d:61:d8:dd:1f:d9:c4:67:d0:5e:6d:40:07: 91:16:57:0e:ea:dc:e3:45:de:0d:dc:4f:b0:b0:98:cb:7c:55: 9e:b0:3e:4b:f7:13:65:17:fe:81:9e:93:04:78:52:6c:80:8a: a1:cf:c6:a7:5e:44:33:06:df:e7:e6:fd:8f:a8:d6:fa:2b:cf: 63:26:f0:1f:52:e2:0e:15:ba:a6:e8:8c:a9:4d:f7:33:4f:29: e1:69:c1:26:4c:92:e2:55:2d:3f:c2:72:2a:f7:8a:bd:ad:cc: 16:91:38:0b:e6:8f:e4:38:52:57:69:ff:b1:82:c5:b2:f0:d5: 5e:b5:df:a2:91:c6:54:92:83:f3:b1:ca:41:36:ab:9d:7a:79: a1:2f:fa:c7:50:f9:24:17:57:98:e5:46:d8:bd:04:d1:13:f8: 3c:cf:97:2a:ed:e6:13:23:01:ed:db:61:47:aa:49:dc:22:d7: 7e:99:69:6d:8d:44:b8:7d:ff:ce:d3:5a:3c:85:24:2e:c5:47: 5e:35:eb:27:fb:75:92:29:69:28:92:ac:e0:8f:9f:b4:c0:90: 3d:a9:b5:09:4f:15:c9:aa:7e:2b:7c:86:28:ba:ea:ce:92:59: 5c:10:74:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjFBOTExMC8GA1UEBRMoQzQ3MjM5RkZGNUNGNzg4NTIxN0ZDNkNBOTAxQjdBMzI3 ODA4MzFGMDAeFw0yNjAzMDExMDE1MjdaFw0yNjAzMDgxMDE1MjdaMBgxFjAUBgNV BAMTDTY5YTQxMWJmLTBhNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKhLZ1vCJzOmS0NRP8F4MwKKygJCiiyqFV/dOJ5HKYdIxjf1Xqmt3ZGl0bKuKx T5png/V1mP9eHcOB8d4njCZe3bEPCqitmk5hv7Wz+tyOcdywHD6SPUcQRVgrtyzg X1NJQAyUpWVq2ZjKl+W4Gt71jHbU9Lb520iktcVXV7AEJE/BWDx8BG4s+DOhycyU 6DNkTSbvC9NmGO7MkIYnUzv+EWfMSXBWmw1PcFGTo3drDXe4tWsL1nla/CiGm3bX QRZNIHejOc1oaNyRIGrrbmU0Rr5TFCX6EU7mmLGQNJvVq+Y8k6lGquqAAwIckjSa T4dDZnjVAzdVmcbU2vu6I7KBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeR1nhfv3 F5wJ5xSE/eUa7ihbgKkwHwYDVR0jBBgwFoAUxHI5//XPeIUhf8bKkBt6MngIMfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MUE5Lzc1MjhCM0IwREYy NzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlVaGY4YktrQnQ2TW5nSU1m QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEhJNV9fWFBlSVVoZjhiS2tCdDZNbmdJTWZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MUE5Lzc1MjhCM0IwREYyNzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlV aGY4YktrQnQ2TW5nSU1mQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeNJg91WnyHWG2fBXt7Dl/fcwtIrPN3R1h2N0f2cRn0F5tQAeRFlcO6tzjRd4N 3E+wsJjLfFWesD5L9xNlF/6BnpMEeFJsgIqhz8anXkQzBt/n5v2PqNb6K89jJvAf UuIOFbqm6IypTfczTynhacEmTJLiVS0/wnIq94q9rcwWkTgL5o/kOFJXaf+xgsWy 8NVetd+ikcZUkoPzscpBNqudenmhL/rHUPkkF1eY5UbYvQTRE/g8z5cq7eYTIwHt 22FHqkncItd+mWltjUS4ff/O01o8hSQuxUdeNesn+3WSKWkokqzgj5+0wJA9qbUJ TxXJqn4rfIYouurOkllcEHTq -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:36 2026 by rpki-client