$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: n7l+l8MFPgGNc2fm2AUomsHeLT2QhdfP3twHMo2t4Jo= Subject key identifier: 82:E0:F1:72:01:05:32:BF:F3:C5:04:9F:40:A4:82:8E:72:FB:BE:97 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CE7 Signing time: Mon 02 Mar 2026 00:25:35 +0000 Manifest this update: Mon 02 Mar 2026 00:25:35 +0000 Manifest next update: Mon 09 Mar 2026 00:25:35 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: GyXquaHfjaf5lAz3/TsXKt9vxaQXD3ztigL64tjyOhw=) 2: F0202A84B36311F082F02072C4F9AE02.roa (hash: rVfs6LGzrLN0wWbbQ4d7gHO9mKYMBzycz9A93jxHPEY=) 3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Mar 2 00:25:35 2026 GMT Not After : Mar 9 00:25:35 2026 GMT Subject: CN=69a4d8ff-143e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:4b:64:11:9b:fd:34:ba:67:98:76:a7:ce: d6:f0:7c:37:7c:68:ab:6d:5b:57:05:84:22:c4:6d: 16:70:db:3a:44:1f:1d:79:63:92:cf:d8:0b:41:ae: 87:65:23:2f:dc:37:af:37:23:9b:e1:ca:cb:0b:e8: 88:1f:ac:9b:72:86:d3:60:3f:09:e7:46:96:5c:fd: 5e:cc:58:cb:cd:19:5a:a3:26:ef:b6:b7:6a:73:55: 90:44:18:56:f7:ba:5e:9d:84:d9:5e:f5:d6:9d:24: 50:5a:35:bb:f1:75:b0:5d:25:40:20:2a:b0:02:99: 84:23:bd:de:7b:58:51:c0:79:a7:25:f3:6c:19:99: 21:d0:f9:9c:ee:12:e6:8b:80:a2:9d:a2:14:71:dc: f9:76:17:bb:82:82:79:6f:c1:40:d8:15:58:11:50: 76:01:60:9e:5d:8f:95:94:65:a8:93:58:f8:cc:be: f8:e2:a7:03:35:92:d6:b1:19:57:e1:01:d4:c6:10: ce:cb:ab:d8:65:d8:c0:48:21:10:46:7d:b3:f1:75: b5:a3:b8:a5:d6:c5:bf:86:46:55:79:93:a0:bf:42: 1c:9e:08:fd:59:60:f1:a7:05:73:9c:14:14:a7:1c: 0c:3d:bf:34:c7:04:76:74:d3:52:f7:1d:24:88:02: 9a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E0:F1:72:01:05:32:BF:F3:C5:04:9F:40:A4:82:8E:72:FB:BE:97 X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f2:65:6a:39:07:1e:65:ec:85:57:1a:b8:f5:57:6b:c6:93: 15:d0:2e:be:8d:aa:00:05:60:81:3a:46:19:c6:3a:30:d9:13: 78:ff:a8:29:3b:58:a3:45:52:99:59:4a:ca:cb:06:22:c2:79: d9:29:ff:30:8f:0c:78:e3:d3:e8:79:63:b7:f3:de:b8:43:1d: cd:84:dc:fd:6d:9c:4b:4e:80:ca:d7:de:66:dd:f0:01:59:cc: 24:77:03:94:19:7d:c8:bf:85:ad:78:c1:f6:7d:a9:c1:3a:60: 5f:62:07:87:2b:01:b4:7f:1f:33:0b:2d:19:2a:c1:37:0f:bd: e1:f8:e1:40:06:26:dd:79:aa:ba:98:13:4e:3a:96:cd:c4:63: 0d:54:ec:92:bb:37:8d:1c:bf:21:41:e7:78:4c:9b:f1:b9:fe: 74:6f:e8:95:ac:7a:69:84:d1:a0:70:25:5e:0f:f2:0c:9a:07: 1f:3e:e7:b8:3d:87:45:d1:d0:8b:e4:5e:41:b9:40:78:5d:6a: f5:ba:0b:40:c3:b2:ee:c4:e1:37:4e:65:fc:0e:a5:7a:a3:e3: a3:9a:6b:62:c1:c6:ac:53:f0:e6:d7:11:3b:3e:6b:4b:1e:cf: 47:a4:8c:1c:e5:7d:13:a3:ee:b7:a3:64:c2:0b:15:69:de:05: 0a:e4:74:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjYwMzAyMDAyNTM1WhcNMjYwMzA5MDAyNTM1WjAYMRYwFAYD VQQDEw02OWE0ZDhmZi0xNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm15LZBGb/TS6Z5h2p87W8Hw3fGirbVtXBYQixG0WcNs6RB8deWOSz9gLQa6H ZSMv3DevNyOb4crLC+iIH6ybcobTYD8J50aWXP1ezFjLzRlaoybvtrdqc1WQRBhW 97penYTZXvXWnSRQWjW78XWwXSVAICqwApmEI73ee1hRwHmnJfNsGZkh0Pmc7hLm i4CinaIUcdz5dhe7goJ5b8FA2BVYEVB2AWCeXY+VlGWok1j4zL744qcDNZLWsRlX 4QHUxhDOy6vYZdjASCEQRn2z8XW1o7il1sW/hkZVeZOgv0Icngj9WWDxpwVznBQU pxwMPb80xwR2dNNS9x0kiAKa3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILg8XIB BTK/88UEn0Ckgo5y+76XMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgvJlajkHHmXshVcauPVXa8aTFdAuvo2qAAVggTpGGcY6MNkTeP+oKTtYo0VS mVlKyssGIsJ52Sn/MI8MeOPT6Hljt/PeuEMdzYTc/W2cS06AytfeZt3wAVnMJHcD lBl9yL+FrXjB9n2pwTpgX2IHhysBtH8fMwstGSrBNw+94fjhQAYm3XmqupgTTjqW zcRjDVTskrs3jRy/IUHneEyb8bn+dG/olax6aYTRoHAlXg/yDJoHHz7nuD2HRdHQ i+ReQblAeF1q9boLQMOy7sThN05l/A6leqPjo5prYsHGrFPw5tcROz5rSx7PR6SM HOV9E6Put6NkwgsVad4FCuR0fw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:13:48 2026 by rpki-client