$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: CN8zgFJozgMnzEEEMAdixHvS1N+TaavTpPtUa6cmFDI= Subject key identifier: 30:49:8B:CC:CE:1E:CB:16:EC:DE:97:2D:5F:B5:7B:4B:F5:74:9C:BF Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0D7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0D73 Signing time: Mon 02 Mar 2026 12:26:43 +0000 Manifest this update: Mon 02 Mar 2026 12:26:43 +0000 Manifest next update: Mon 09 Mar 2026 12:26:43 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: syFSREmjTmutV+N9KM+gtFKmpG2gKBsGPGJ9LosU9QU=) 2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: g7Y2fTPIrRGmI+yyaq93Q8oA6ahVmpPa/2gUU/U5QQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3455 (0xd7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Mar 2 12:26:43 2026 GMT Not After : Mar 9 12:26:43 2026 GMT Subject: CN=69a58203-be52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:c6:fa:36:9e:db:98:71:c0:ee:47:76:f3: 51:40:51:6d:4b:0d:17:f0:76:e3:29:13:17:1b:e9: e0:ac:a0:39:4c:0f:1b:8c:98:a6:e2:e7:63:c5:09: 2a:26:a7:5c:95:b4:db:39:e6:82:e8:0d:0a:c2:b4: 70:ff:f9:94:30:27:d4:d0:d5:fc:8b:b8:f4:ab:60: 02:4c:d0:fd:f9:ac:e6:7d:51:a5:34:5b:07:02:30: f3:c9:b6:8f:ce:38:5f:33:cc:e6:87:ca:47:67:08: 8e:a9:9b:94:01:69:30:af:78:9c:85:59:fb:93:57: f8:c0:7b:2a:58:5f:14:6f:6e:46:83:90:b3:12:15: af:21:41:5d:9d:8f:b5:43:2a:3c:f7:82:62:00:53: a5:25:61:b7:fa:c5:a1:5f:8f:81:db:7e:9b:81:bc: 09:3d:78:08:9f:c1:73:c2:ba:f3:7b:2b:fe:54:c2: 8f:ff:f0:23:70:8d:3e:5d:49:ce:4b:36:34:e4:ca: 8f:f2:ce:60:2a:df:1f:2a:96:05:a3:e9:b0:20:b6: ef:bd:6c:60:8d:40:49:c1:e5:60:01:93:eb:f6:f7: d6:c3:c9:c3:36:34:02:26:19:85:c3:be:a0:8d:47: 5b:01:52:2d:ce:ec:ef:5d:cf:02:76:a5:2d:2a:7c: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:49:8B:CC:CE:1E:CB:16:EC:DE:97:2D:5F:B5:7B:4B:F5:74:9C:BF X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:44:2a:92:3d:36:e6:01:bc:1c:7c:c2:00:54:b2:5d:c6:15: b5:0b:b2:aa:88:7c:a1:6a:59:3f:57:16:7f:c6:92:e4:85:e2: 4c:af:f4:f3:7d:f1:60:c7:16:45:44:cf:27:4f:89:0b:77:07: 54:af:38:ab:89:25:b6:4b:19:25:06:0a:b4:d6:37:cc:b8:e6: e7:00:4c:ac:55:24:d1:69:fe:b6:5a:86:f9:d0:b3:95:e5:75: 7e:c8:bb:57:dd:cf:a0:5e:1b:12:c7:98:7d:c6:2a:85:d7:4e: a1:79:b4:ed:a7:be:c8:4e:ee:e0:0b:3c:59:8c:6c:30:63:c6: 02:ba:d0:2d:8b:53:81:b2:71:be:72:2f:41:aa:1e:d6:c9:aa: e1:0d:6c:6a:46:96:a9:90:9f:75:58:3c:c1:8d:3c:39:3b:d0: 28:e5:6c:df:e6:83:0b:99:c8:25:33:1f:be:c3:3d:d0:b8:76: 06:7f:7d:1f:8f:98:01:9e:37:12:2c:78:a5:a0:0a:81:29:25: 36:59:bd:19:a1:30:4b:1b:df:8f:d1:ef:2a:52:a2:5a:49:3f: d6:3b:45:6f:49:dc:f5:c2:78:c4:4f:32:4f:9e:67:36:e2:26: 14:d2:8d:c3:54:2c:c9:85:b0:61:bf:8d:d3:52:39:bc:d2:84: 1c:af:90:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjYwMzAyMTIyNjQzWhcNMjYwMzA5MTIyNjQzWjAYMRYwFAYD VQQDEw02OWE1ODIwMy1iZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtLG+jae25hxwO5HdvNRQFFtSw0X8HbjKRMXG+ngrKA5TA8bjJim4udjxQkq JqdclbTbOeaC6A0KwrRw//mUMCfU0NX8i7j0q2ACTND9+azmfVGlNFsHAjDzybaP zjhfM8zmh8pHZwiOqZuUAWkwr3ichVn7k1f4wHsqWF8Ub25Gg5CzEhWvIUFdnY+1 Qyo894JiAFOlJWG3+sWhX4+B236bgbwJPXgIn8Fzwrrzeyv+VMKP//AjcI0+XUnO SzY05MqP8s5gKt8fKpYFo+mwILbvvWxgjUBJweVgAZPr9vfWw8nDNjQCJhmFw76g jUdbAVItzuzvXc8CdqUtKnw5ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBJi8zO HssW7N6XLV+1e0v1dJy/MB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJUQqkj025gG8HHzCAFSyXcYVtQuyqoh8oWpZP1cWf8aS5IXiTK/0833xYMcW RUTPJ0+JC3cHVK84q4kltksZJQYKtNY3zLjm5wBMrFUk0Wn+tlqG+dCzleV1fsi7 V93PoF4bEseYfcYqhddOoXm07ae+yE7u4As8WYxsMGPGArrQLYtTgbJxvnIvQaoe 1smq4Q1sakaWqZCfdVg8wY08OTvQKOVs3+aDC5nIJTMfvsM90Lh2Bn99H4+YAZ43 Eix4paAKgSklNlm9GaEwSxvfj9HvKlKiWkk/1jtFb0nc9cJ4xE8yT55nNuImFNKN w1QsyYWwYb+N01I5vNKEHK+QsA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:13:52 2026 by rpki-client