$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json) Hash identifier: mRomPYcNguQZc4ySUZyFx5mzqLVHNU4rdW7pwwkSvwI= Subject key identifier: 38:B7:25:C3:1E:F9:AC:95:05:C4:A5:F8:11:89:01:E5:62:32:68:05 Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft Manifest number: 0326 Signing time: Sun 01 Mar 2026 22:41:32 +0000 Manifest this update: Sun 01 Mar 2026 22:41:32 +0000 Manifest next update: Sun 08 Mar 2026 22:41:32 +0000 Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: gsgnxiOebNtBAgdKrwXx184ge5+dL8yejBusb1GuXjs=) 2: 94584738031A11ED934E3D58C4F9AE02.roa (hash: OaWwFBJ2VuraLrnztPga6D3zvzu6QrQ5pOtTXqQFSQI=) 3: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: Jhz4r7a7iCxB4QnIuBoSZs0NvgYjtq+Y2BQvYiRhg6E=) 4: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ZTRqgNwjBkeuivQjU7gcegMWDfuZgfLXOKzQP0Bh2cg=) 5: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: oqSNYumQsq3ZDteZzV5l2Z7zpv8vOsyYUQUAq+amOrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: Mar 1 22:41:32 2026 GMT Not After : Mar 8 22:41:32 2026 GMT Subject: CN=69a4c09c-405a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:bf:ee:f6:f8:96:3f:69:b4:65:ad:f2:12: ca:99:a3:85:53:2e:bf:57:4a:a1:5b:aa:b6:46:b0: 0c:eb:36:db:4a:4b:b9:a6:eb:66:5c:22:94:56:82: 22:fa:db:20:b5:11:7b:39:14:0f:2e:07:56:3c:e0: 0e:d3:6d:f6:41:7b:af:ad:10:d0:68:55:a8:52:83: 21:9f:50:1c:e5:40:02:20:da:ad:b4:a9:fb:ab:d0: ec:1b:ec:22:ad:4c:5f:12:25:eb:25:56:28:18:0e: 56:15:be:b1:62:b7:fb:d2:e6:93:ee:4a:1c:28:da: e8:2e:6b:6f:bb:a7:ba:1f:a5:96:fc:74:24:9d:26: 65:b9:51:45:7a:cb:12:35:47:c2:7b:6e:f7:24:7b: 4a:4b:66:b1:a8:29:9b:a6:55:9b:ec:56:09:43:19: 85:bf:08:3f:f2:cb:a6:f9:82:87:42:c2:ad:a1:a3: 20:a3:53:cf:15:ab:8d:89:49:7a:55:cb:f8:82:3f: 8f:68:86:cb:46:5f:8b:2a:ed:4b:53:51:10:45:7e: 1f:42:57:e2:7f:f1:79:97:a9:a2:02:1e:f6:81:ce: c1:2b:7d:a7:dd:f2:c7:83:07:84:74:86:b8:23:a8: 25:cd:de:2e:22:a2:bf:3e:bb:a3:4b:ae:f4:07:67: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B7:25:C3:1E:F9:AC:95:05:C4:A5:F8:11:89:01:E5:62:32:68:05 X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:9a:a8:bc:d4:a0:a0:15:47:17:49:88:24:b8:f4:21:f4:dc: 66:7b:f6:61:9b:8a:e6:21:0e:1f:b6:88:56:f6:6a:25:3b:7b: ca:f3:e3:7b:d2:a7:9b:ee:67:a1:a8:2f:c4:d0:06:72:9e:eb: 2c:3d:3c:94:c1:84:9d:32:ba:0a:8a:2b:60:70:2c:39:6a:2c: 55:9c:28:c7:08:05:e3:38:17:97:4d:27:93:16:b1:15:4a:3a: b7:24:31:da:79:2d:ae:64:fc:09:b4:b3:85:28:fa:d9:cd:b7: 6f:c1:df:96:e9:cc:23:98:bf:6d:fc:27:34:a8:19:a4:44:1b: a9:db:d4:dd:dd:0a:a0:17:68:98:3f:d3:9b:e1:86:e6:8c:41: b7:f3:34:aa:6c:34:7c:0b:82:ec:f0:60:e9:7c:36:f0:95:fb: 95:03:90:dc:b6:0c:1e:5e:de:8c:eb:e9:c1:e3:db:d4:8b:99: 36:f8:62:74:6f:f8:a9:03:f8:cb:9e:9a:d4:6b:21:6c:95:10: ac:27:94:85:fd:68:20:34:96:67:89:ea:df:58:b7:93:e8:6a: 2e:26:3e:a3:82:d1:a1:22:ff:2e:2e:5d:4a:3b:77:49:92:fc: 58:b4:e6:3d:57:ec:62:fe:13:70:c5:07:1e:07:34:e7:7a:96: 58:21:20:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjYwMzAxMjI0MTMyWhcNMjYwMzA4MjI0MTMyWjAYMRYwFAYD VQQDEw02OWE0YzA5Yy00MDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdO/7vb4lj9ptGWt8hLKmaOFUy6/V0qhW6q2RrAM6zbbSku5putmXCKUVoIi +tsgtRF7ORQPLgdWPOAO0232QXuvrRDQaFWoUoMhn1Ac5UACINqttKn7q9DsG+wi rUxfEiXrJVYoGA5WFb6xYrf70uaT7kocKNroLmtvu6e6H6WW/HQknSZluVFFessS NUfCe273JHtKS2axqCmbplWb7FYJQxmFvwg/8sum+YKHQsKtoaMgo1PPFauNiUl6 Vcv4gj+PaIbLRl+LKu1LU1EQRX4fQlfif/F5l6miAh72gc7BK32n3fLHgweEdIa4 I6glzd4uIqK/PrujS670B2c/IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDi3JcMe +ayVBcSl+BGJAeViMmgFMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho RXh2TV9xSDN0NnZUVWRJeTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAspqovNSgoBVHF0mIJLj0IfTcZnv2YZuK5iEOH7aIVvZqJTt7yvPje9Knm+5n oagvxNAGcp7rLD08lMGEnTK6CoorYHAsOWosVZwoxwgF4zgXl00nkxaxFUo6tyQx 2nktrmT8CbSzhSj62c23b8HflunMI5i/bfwnNKgZpEQbqdvU3d0KoBdomD/Tm+GG 5oxBt/M0qmw0fAuC7PBg6Xw28JX7lQOQ3LYMHl7ejOvpwePb1IuZNvhidG/4qQP4 y56a1GshbJUQrCeUhf1oIDSWZ4nq31i3k+hqLiY+o4LRoSL/Li5dSjt3SZL8WLTm PVfsYv4TcMUHHgc053qWWCEgkQ== -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:04 2026 by rpki-client