$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: qKpITGNsBKp8dJvqGhsfOMmIR7n2IT5og33/oS/jrhA= Subject key identifier: 57:2D:37:2A:BD:EE:24:99:BB:27:30:82:E1:83:58:35:D3:54:1F:B1 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0D70 Signing time: Mon 02 Mar 2026 01:18:08 +0000 Manifest this update: Mon 02 Mar 2026 01:18:07 +0000 Manifest next update: Mon 09 Mar 2026 01:18:07 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: CY8z7nlbERQO2kwEcPPB/HoeaMrMgrNpEbg+oCwd+k8=) 2: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) 3: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) 4: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) 5: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) 6: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Mar 2 01:18:07 2026 GMT Not After : Mar 9 01:18:07 2026 GMT Subject: CN=69a4e550-9388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:b3:5a:34:ae:24:75:77:24:5c:f5:bb:5f: 46:6b:55:b9:09:b2:1e:d2:65:71:8c:b7:e1:8d:49: 96:7e:1d:f3:76:f5:e1:91:fc:67:6b:71:a6:6c:bd: 50:0e:02:53:90:dc:df:4d:59:df:2a:ad:68:4c:9e: 4f:87:7c:7c:28:7d:cd:ce:77:91:74:60:58:c3:f7: fb:44:32:b2:08:8a:e0:b9:50:bb:60:01:44:91:d8: f8:45:7d:72:74:49:37:ba:ad:53:bf:c2:64:12:c4: 18:a3:8a:2c:8a:74:fd:87:05:11:c9:29:d9:9a:0d: f2:17:f6:ee:f6:f8:6e:d0:bd:4a:b8:14:02:74:2a: cb:cf:1d:1f:43:28:fc:08:a9:29:9d:94:f9:8a:d1: 5d:f8:05:14:04:37:59:27:b8:af:9a:6c:b0:f8:45: 9e:f5:b4:81:3b:7a:9d:15:1d:8c:71:8e:b2:cc:e9: ea:78:87:61:47:9f:63:57:d8:b0:4e:60:21:4a:26: c6:9a:0a:10:7b:68:cc:c0:8f:7d:35:1e:b4:2f:81: a2:0f:d4:38:9e:f4:5a:6b:62:88:32:7b:21:27:69: e9:f2:14:60:c9:ef:ed:10:a5:1a:ee:1f:69:cc:73: 1e:89:e6:a3:e2:08:89:f6:bd:41:1c:1b:b2:ab:62: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2D:37:2A:BD:EE:24:99:BB:27:30:82:E1:83:58:35:D3:54:1F:B1 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d4:98:70:2e:5c:3d:42:ec:d8:49:a9:58:c2:c3:ea:d5:8f: b4:2e:9d:f9:c3:ad:b7:a6:dd:44:0f:97:c6:8a:99:85:d4:de: ca:df:5d:56:19:af:72:58:e6:a1:b1:a1:cb:3c:9c:81:fe:11: cd:33:89:16:6a:5a:9f:26:0f:17:c5:6c:b0:81:8f:23:6c:c3: 5b:5e:65:59:b3:18:83:09:12:47:79:c5:ee:03:e8:c7:34:32: 10:67:a5:61:bc:d8:25:d4:83:79:61:df:52:c7:1e:99:ec:fa: 69:b3:69:83:05:e8:60:63:f2:dd:0d:ba:ec:c4:75:f2:45:15: 79:a4:9e:9b:ad:67:95:ea:6e:0d:75:a5:34:e0:b6:cb:54:d8: 02:f7:dd:6b:e0:ed:5b:53:7c:4c:0a:91:76:16:ed:1b:bd:f7: 0b:e7:00:9e:fd:c1:57:85:98:d6:16:01:b2:10:1b:b2:5a:25: ae:bc:a9:b1:78:b3:5e:ce:d9:53:53:68:60:6b:24:f5:57:bd: c2:c1:0a:5e:79:32:59:b1:69:07:ba:55:77:8a:86:d6:53:e6: 3a:d2:ba:81:24:d4:62:c3:7f:cd:18:30:82:c0:31:ef:55:06: 2b:0b:73:56:c1:f4:f2:8b:d5:8b:d4:b9:7a:be:a8:96:98:52: fd:a4:c5:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwMzAyMDExODA3WhcNMjYwMzA5MDExODA3WjAYMRYwFAYD VQQDEw02OWE0ZTU1MC05Mzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8GzWjSuJHV3JFz1u19Ga1W5CbIe0mVxjLfhjUmWfh3zdvXhkfxna3GmbL1Q DgJTkNzfTVnfKq1oTJ5Ph3x8KH3NzneRdGBYw/f7RDKyCIrguVC7YAFEkdj4RX1y dEk3uq1Tv8JkEsQYo4osinT9hwURySnZmg3yF/bu9vhu0L1KuBQCdCrLzx0fQyj8 CKkpnZT5itFd+AUUBDdZJ7ivmmyw+EWe9bSBO3qdFR2McY6yzOnqeIdhR59jV9iw TmAhSibGmgoQe2jMwI99NR60L4GiD9Q4nvRaa2KIMnshJ2np8hRgye/tEKUa7h9p zHMeieaj4giJ9r1BHBuyq2KnkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFctNyq9 7iSZuycwguGDWDXTVB+xMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQdSYcC5cPULs2EmpWMLD6tWPtC6d+cOtt6bdRA+XxoqZhdTeyt9dVhmvcljm obGhyzycgf4RzTOJFmpanyYPF8VssIGPI2zDW15lWbMYgwkSR3nF7gPoxzQyEGel YbzYJdSDeWHfUscemez6abNpgwXoYGPy3Q267MR18kUVeaSem61nlepuDXWlNOC2 y1TYAvfda+DtW1N8TAqRdhbtG733C+cAnv3BV4WY1hYBshAbslolrrypsXizXs7Z U1NoYGsk9Ve9wsEKXnkyWbFpB7pVd4qG1lPmOtK6gSTUYsN/zRgwgsAx71UGKwtz VsH08ovVi9S5er6olphS/aTFmQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:24:35 2026 by rpki-client