$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: sESo58PPfKf2Y9s/QrVnslJHsSEHB0AUwhP4wfUyWck= Subject key identifier: 46:28:5A:BD:F1:8B:0C:F0:DC:70:2F:60:4B:40:F4:A9:5D:08:92:6E Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0277 Signing time: Mon 02 Mar 2026 01:27:28 +0000 Manifest this update: Mon 02 Mar 2026 01:27:27 +0000 Manifest next update: Mon 09 Mar 2026 01:27:27 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: CDEuzupOgFtgf1se3v7Cew/ALkm/BUTkbj2139RNy+M=) 2: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 0JBG3JjfF5NTvz1BrXwe7qxV2dsEYREu6KbN96r4FFw=) 3: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: SV+bZOpveaF6gRb1xTwAjvC4Ahc21Acwt2F034JPZjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Mar 2 01:27:27 2026 GMT Not After : Mar 9 01:27:27 2026 GMT Subject: CN=69a4e780-0e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:c3:d1:29:36:2f:a1:ca:0c:a5:0c:05:cd: fd:68:f1:b3:a6:bc:4e:4e:0d:b0:39:e3:03:b7:af: a0:71:57:d6:1c:45:ca:d1:06:76:43:c2:70:34:0d: 27:04:a3:98:1b:d4:4a:97:05:ec:94:7c:9a:7c:83: 39:34:85:2f:e7:a1:78:76:8b:ed:6e:7c:57:24:cc: 8f:29:ae:f8:1e:4b:4b:02:3d:b9:9b:57:e0:2c:80: 8c:3d:13:03:a2:c4:11:ff:db:05:83:9a:7e:ff:3d: cc:64:19:c8:69:47:2f:17:59:b5:0d:6c:cf:5e:48: 34:18:7f:d0:3e:0b:ea:57:0d:63:96:b1:6d:00:57: a5:59:f5:58:02:73:77:d4:e2:c9:5b:3a:d6:55:5c: de:1b:b0:9f:fc:3c:28:e8:f4:84:21:e7:06:b8:03: b6:d0:f1:34:9f:4b:9a:de:c4:4e:ab:17:9a:48:3d: b4:5c:6a:25:a5:a6:ab:96:bc:70:bd:d2:40:21:4a: 12:d6:7e:c1:85:ba:a0:b2:43:b5:1d:3e:34:da:1b: f7:d1:ab:34:86:f2:40:85:4c:c3:e6:f7:72:f3:10: 8e:3c:97:83:8e:2f:80:e8:ad:f5:d7:2d:76:8a:ae: 1e:a6:ba:41:98:fb:26:d5:79:c4:6a:bb:52:e9:cf: c5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:28:5A:BD:F1:8B:0C:F0:DC:70:2F:60:4B:40:F4:A9:5D:08:92:6E X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:03:96:c4:fd:07:f2:6e:92:12:d5:25:64:4b:cd:a8:3a:69: fa:22:bf:44:3b:c7:65:5b:d0:34:f9:05:8b:3e:14:76:66:cb: 4a:1d:94:21:ed:ed:02:6d:00:2b:af:9a:23:e7:f6:c2:27:29: 46:24:89:f7:85:bf:49:9a:70:01:03:3a:17:67:3e:87:af:cb: 78:ef:16:49:8c:34:35:4c:04:29:77:8c:90:2e:2c:57:64:1c: 0f:9b:ef:1d:79:ee:5e:08:ff:ce:74:3a:7b:7b:19:ab:e3:26: 90:17:e6:2a:1f:2e:eb:ea:be:f7:29:d0:aa:f9:d6:e4:66:01: bf:e8:77:ab:ae:d1:09:12:c6:7b:9c:8b:ee:3b:d6:b2:a6:e2: 58:cd:0b:42:95:05:72:3e:e9:c8:a6:5c:5c:01:12:52:41:9f: c0:b1:60:1e:10:24:e8:71:cf:16:1e:4c:5e:0b:55:c8:ee:0a: 75:7b:76:3d:c4:94:b6:c1:d4:06:94:43:bd:35:c9:5d:6b:d7: eb:81:6e:1a:f4:cb:2f:60:e3:a8:26:e4:60:5c:62:3e:a2:79: 16:67:0b:99:b7:ba:67:45:71:62:b0:b4:94:4f:47:fb:ce:9c: 93:f0:4c:45:c6:c9:23:61:99:da:7e:95:95:b1:e7:db:ad:72: c8:14:87:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjYwMzAyMDEyNzI3WhcNMjYwMzA5MDEyNzI3WjAYMRYwFAYD VQQDEw02OWE0ZTc4MC0wZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR7D0Sk2L6HKDKUMBc39aPGzprxOTg2wOeMDt6+gcVfWHEXK0QZ2Q8JwNA0n BKOYG9RKlwXslHyafIM5NIUv56F4dovtbnxXJMyPKa74HktLAj25m1fgLICMPRMD osQR/9sFg5p+/z3MZBnIaUcvF1m1DWzPXkg0GH/QPgvqVw1jlrFtAFelWfVYAnN3 1OLJWzrWVVzeG7Cf/Dwo6PSEIecGuAO20PE0n0ua3sROqxeaSD20XGolpaarlrxw vdJAIUoS1n7BhbqgskO1HT402hv30as0hvJAhUzD5vdy8xCOPJeDji+A6K311y12 iq4eprpBmPsm1XnEartS6c/FJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYoWr3x iwzw3HAvYEtA9KldCJJuMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlgOWxP0H8m6SEtUlZEvNqDpp+iK/RDvHZVvQNPkFiz4UdmbLSh2UIe3tAm0A K6+aI+f2wicpRiSJ94W/SZpwAQM6F2c+h6/LeO8WSYw0NUwEKXeMkC4sV2QcD5vv HXnuXgj/znQ6e3sZq+MmkBfmKh8u6+q+9ynQqvnW5GYBv+h3q67RCRLGe5yL7jvW sqbiWM0LQpUFcj7pyKZcXAESUkGfwLFgHhAk6HHPFh5MXgtVyO4KdXt2PcSUtsHU BpRDvTXJXWvX64FuGvTLL2DjqCbkYFxiPqJ5FmcLmbe6Z0VxYrC0lE9H+86ck/BM RcbJI2GZ2n6VlbHn261yyBSHkw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:22:35 2026 by rpki-client