$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json) Hash identifier: WkzaBVRAV4r2Zg4AFgqioIVAS945l3Vfa7Nb2EsfqYM= Subject key identifier: A9:41:AD:9F:2F:F1:39:2D:4E:D4:28:CF:0D:0D:D6:21:6C:5D:C2:C0 Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft Manifest number: 0158 Signing time: Sun 01 Mar 2026 06:00:27 +0000 Manifest this update: Sun 01 Mar 2026 06:00:26 +0000 Manifest next update: Sun 08 Mar 2026 06:00:26 +0000 Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: /GHV7DzqeV7if6rzkm2KRSy5MWgaIdriA53Ld6LROns=) 2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: K+g6F2DggfqAEcFUFS+CObch7aX7JFtpiO+kkOJ8Xy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Validity Not Before: Mar 1 06:00:26 2026 GMT Not After : Mar 8 06:00:26 2026 GMT Subject: CN=69a3d5fa-1fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:bc:2c:29:80:66:8c:d7:c2:7b:b0:a0:26: ef:f5:29:8a:86:6d:32:51:ec:04:0d:15:70:b6:84: f4:58:7e:85:d8:83:02:2c:08:61:cc:ea:77:dc:f2: e8:73:06:36:8d:43:fc:d8:d9:d4:42:87:6d:8a:34: c1:2c:1a:5e:43:21:db:05:21:1e:34:a7:69:23:7b: 91:fa:24:85:6c:29:7a:3e:49:29:74:d2:81:8a:b7: 7a:05:cd:e5:35:c3:4b:0d:7f:92:a7:ed:25:cb:b3: 2e:46:46:28:07:ec:d9:12:13:40:21:dd:c5:67:46: 98:15:4a:09:f2:6a:a2:7e:50:ad:53:22:d1:fc:b2: 33:55:d7:3e:1d:b5:cc:91:22:c4:7a:9a:44:6f:87: f3:07:cb:69:94:be:60:2b:94:91:e3:c1:ff:2e:29: 65:66:ca:d3:69:8a:d8:11:11:8f:df:ea:80:fe:00: 97:99:98:2b:d6:0d:6c:e8:33:59:eb:29:a1:a7:38: 22:b2:8d:23:ae:94:f8:c1:71:47:c7:19:9c:9a:5a: 97:ea:b3:ea:48:32:a1:77:a5:5c:b2:f2:f3:73:27: 33:3d:e1:27:ed:78:f2:28:c1:a6:01:3c:6f:34:42: fb:be:c2:fd:e5:d0:3e:74:33:1a:aa:54:24:fd:44: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:41:AD:9F:2F:F1:39:2D:4E:D4:28:CF:0D:0D:D6:21:6C:5D:C2:C0 X509v3 Authority Key Identifier: keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:14:bf:7a:c9:91:03:56:35:52:35:b2:42:f8:2a:ab:61:b5: ec:d8:14:51:ef:08:bb:c4:af:83:20:70:e9:dd:62:a4:a5:1e: f4:7e:bf:87:2c:da:bf:4f:44:66:9b:e2:38:1f:20:d4:d2:17: b6:11:96:68:1a:9a:58:c5:64:79:cf:42:8a:91:b6:fc:95:1c: 87:4f:d1:40:ca:4a:5d:79:10:ea:ca:9f:77:7c:ab:1c:7e:05: a2:1d:8e:28:5a:b3:6a:e5:e7:41:91:50:19:a3:b1:67:d8:59: bf:c1:9b:01:fb:03:23:cb:85:c0:97:ab:67:fc:db:7f:70:2c: 1a:dd:72:7b:98:14:57:ed:bf:a9:11:92:30:05:73:d5:dc:e7: 6e:cc:5b:57:40:ec:a9:fa:22:42:c6:45:7a:30:33:ec:30:25: b7:7b:b9:30:cd:a9:1a:25:19:e9:8f:56:76:8e:a5:f9:70:ad: 62:81:78:46:84:6a:81:45:98:b5:7e:d2:f4:74:c4:10:83:0c: 0c:be:cf:21:bf:ae:91:d6:98:c9:15:1d:10:04:d1:89:06:d5: 60:ba:60:d6:3c:25:af:6c:81:77:d1:0e:76:80:6f:9b:8a:bb: 93:64:b3:ac:a2:2c:7e:63:cb:3b:09:48:93:db:8a:ca:6e:e1: b9:28:bc:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3 ODZDOEFDMEEwHhcNMjYwMzAxMDYwMDI2WhcNMjYwMzA4MDYwMDI2WjAYMRYwFAYD VQQDEw02OWEzZDVmYS0xZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKW8LCmAZozXwnuwoCbv9SmKhm0yUewEDRVwtoT0WH6F2IMCLAhhzOp33PLo cwY2jUP82NnUQodtijTBLBpeQyHbBSEeNKdpI3uR+iSFbCl6PkkpdNKBird6Bc3l NcNLDX+Sp+0ly7MuRkYoB+zZEhNAId3FZ0aYFUoJ8mqiflCtUyLR/LIzVdc+HbXM kSLEeppEb4fzB8tplL5gK5SR48H/LillZsrTaYrYERGP3+qA/gCXmZgr1g1s6DNZ 6ymhpzgiso0jrpT4wXFHxxmcmlqX6rPqSDKhd6VcsvLzcyczPeEn7XjyKMGmATxv NEL7vsL95dA+dDMaqlQk/UTZqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlBrZ8v 8TktTtQozw0N1iFsXcLAMB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm dnd1YlA0NzJOMUI0YklyQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcRS/esmRA1Y1UjWyQvgqq2G17NgUUe8Iu8SvgyBw6d1ipKUe9H6/hyzav09E ZpviOB8g1NIXthGWaBqaWMVkec9CipG2/JUch0/RQMpKXXkQ6sqfd3yrHH4Foh2O KFqzauXnQZFQGaOxZ9hZv8GbAfsDI8uFwJerZ/zbf3AsGt1ye5gUV+2/qRGSMAVz 1dznbsxbV0DsqfoiQsZFejAz7DAlt3u5MM2pGiUZ6Y9Wdo6l+XCtYoF4RoRqgUWY tX7S9HTEEIMMDL7PIb+ukdaYyRUdEATRiQbVYLpg1jwlr2yBd9EOdoBvm4q7k2Sz rKIsfmPLOwlIk9uKym7huSi8bA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:41:21 2026 by rpki-client