$ rpki-client -vvf rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft File: xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft (raw, json) Hash identifier: ntIk4EMjotEEt5tCQdO+O+uvdiUl77jmQHT7pch0HqQ= Subject key identifier: 89:B4:9A:E3:D3:63:D1:10:DF:35:94:41:C7:69:B1:2A:3A:50:BC:32 Authority key identifier: C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64 Certificate issuer: /CN=A917D488/serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 09:55:37 +0000 Manifest this update: Sun 01 Mar 2026 09:55:36 +0000 Manifest next update: Sun 08 Mar 2026 09:55:36 +0000 Files and hashes: 1: xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl (hash: fLltsjayNkGCS0YHwRZdTX/11IRvUIr1rAD/iMgCq8I=) 2: 038304DEC11F11F0A9F08209C4F9AE02.roa (hash: Y37EvjA3svHQwyGXd0a+TXPBLOFhRYmTcbPi/KdjSGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D488, serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64 Validity Not Before: Mar 1 09:55:36 2026 GMT Not After : Mar 8 09:55:36 2026 GMT Subject: CN=69a40d18-d1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:e9:5f:c0:c9:5f:c1:2d:9c:11:7e:c2:c4: c4:a8:81:e2:d1:bd:53:52:34:f5:25:6b:62:f0:2b: 06:a2:77:67:b5:24:01:81:8d:9b:f7:ff:51:f0:0b: 4e:e2:ff:49:46:ae:57:78:5f:b4:32:c9:2d:4c:f1: 88:3f:1a:1d:d5:06:0f:fa:e8:cc:66:98:9d:b7:29: 2d:3e:f9:b2:d0:7f:87:b1:f7:4e:c3:f4:9d:a8:46: 89:11:18:7b:73:e1:cb:b4:b3:1b:a1:2d:e7:04:e3: 3f:b2:2a:da:15:3f:c4:44:79:40:04:f6:d4:c5:b0: d4:a4:e8:f6:a1:86:8d:d3:29:a5:29:84:8c:38:4c: cd:81:05:b1:e3:83:af:a4:a0:e5:9d:67:b2:94:21: 76:97:c1:fc:48:0a:e4:04:0d:97:07:28:de:d4:61: 29:40:69:10:06:8a:fd:12:9e:1f:e0:f0:3e:ef:41: 71:3d:d5:c3:b7:e0:a1:1a:c7:eb:f5:7b:fb:68:b7: f7:2b:7a:22:f5:ac:b8:24:a0:f0:fa:7d:d5:36:25: 7f:16:67:84:85:95:16:0c:48:4f:39:53:0d:ab:07: 0a:9e:0a:c4:48:1f:50:4d:d6:0c:78:9c:9e:25:24: 5d:5a:29:c5:9b:be:ea:4d:26:7f:1b:46:4f:7c:05: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B4:9A:E3:D3:63:D1:10:DF:35:94:41:C7:69:B1:2A:3A:50:BC:32 X509v3 Authority Key Identifier: keyid:C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8c:e9:e3:61:a1:99:45:4b:06:4a:7d:a4:eb:e2:db:53:eb: 45:2f:50:cc:38:66:db:73:da:65:bd:eb:b4:b4:f8:58:5c:e3: 34:e5:32:25:12:f3:82:cb:dc:2e:7f:aa:8c:06:b0:27:f4:51: 17:9d:8b:39:c1:6e:db:cb:d8:3a:7b:73:56:6e:d5:45:bb:dc: 63:cb:c4:c4:df:86:fe:0b:a4:d3:48:43:26:ac:11:2e:46:8b: 82:e7:93:ff:be:77:1b:30:4b:62:0c:bf:43:10:ff:7f:18:a2: c6:d4:fe:f1:85:5f:79:70:ca:7f:ec:5a:7b:75:27:28:f9:83: 3c:a6:e3:cc:88:ad:be:f8:ff:4d:ad:ca:7d:37:73:a0:3b:3a: 84:52:12:43:fb:ac:59:f2:fb:8e:1b:28:20:38:c6:46:7d:0b: 79:72:44:f5:ef:2f:b1:66:bc:df:4c:06:39:e9:af:4f:12:fd: 8f:34:9e:ea:6d:a7:de:bb:a5:89:2b:ca:97:ae:b2:4c:0e:9c: fb:b2:92:75:94:3f:e2:99:23:89:ec:f7:e7:b6:87:26:fe:0e: ce:8e:b5:11:24:0a:ea:ea:2d:bb:16:a7:d5:06:20:70:7c:d3: 35:25:94:46:07:9f:90:0d:fd:eb:d6:e9:1e:db:a0:19:a7:24: f8:42:19:00 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDQ4ODExMC8GA1UEBRMoQzQzQzhGRURBNDU1MTA1OTIyOThCNUI5NTNFMjc5RkJB Q0U0NUE2NDAeFw0yNjAzMDEwOTU1MzZaFw0yNjAzMDgwOTU1MzZaMBgxFjAUBgNV BAMTDTY5YTQwZDE4LWQxZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5wOlfwMlfwS2cEX7CxMSogeLRvVNSNPUla2LwKwaid2e1JAGBjZv3/1HwC07i /0lGrld4X7QyyS1M8Yg/Gh3VBg/66MxmmJ23KS0++bLQf4ex907D9J2oRokRGHtz 4cu0sxuhLecE4z+yKtoVP8REeUAE9tTFsNSk6Pahho3TKaUphIw4TM2BBbHjg6+k oOWdZ7KUIXaXwfxICuQEDZcHKN7UYSlAaRAGiv0Snh/g8D7vQXE91cO34KEax+v1 e/tot/creiL1rLgkoPD6fdU2JX8WZ4SFlRYMSE85Uw2rBwqeCsRIH1BN1gx4nJ4l JF1aKcWbvupNJn8bRk98Bd87AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUibSa49Nj 0RDfNZRBx2mxKjpQvDIwHwYDVR0jBBgwFoAUxDyP7aRVEFkimLW5U+J5+6zkWmQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENDg4LzhENzMzQUNBQzEx RTExRjA4RERFODc4N0M0RjlBRTAyL3hEeVA3YVJWRUZraW1MVzVVLUo1LTZ6a1dt US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveER5UDdhUlZFRmtpbUxXNVUtSjUtNnprV21RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE NDg4LzhENzMzQUNBQzExRTExRjA4RERFODc4N0M0RjlBRTAyL3hEeVA3YVJWRUZr aW1MVzVVLUo1LTZ6a1dtUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOjOnjYaGZRUsGSn2k6+LbU+tFL1DMOGbbc9plveu0tPhYXOM05TIlEvOCy9wu f6qMBrAn9FEXnYs5wW7by9g6e3NWbtVFu9xjy8TE34b+C6TTSEMmrBEuRouC55P/ vncbMEtiDL9DEP9/GKLG1P7xhV95cMp/7Fp7dSco+YM8puPMiK2++P9Nrcp9N3Og OzqEUhJD+6xZ8vuOGyggOMZGfQt5ckT17y+xZrzfTAY56a9PEv2PNJ7qbafeu6WJ K8qXrrJMDpz7spJ1lD/imSOJ7Pfntocm/g7OjrURJArq6i27FqfVBiBwfNM1JZRG B5+QDf3r1uke26AZpyT4QhkA -----END CERTIFICATE-----Generated at Sun Mar 1 20:50:15 2026 by rpki-client