$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: rJJk9CtSh0nK9GpT6IWXeWNJwKiPvQNRsRYHXMOQ6d4= Subject key identifier: D9:79:36:4D:47:3B:A9:88:EB:77:2A:3A:1E:AD:53:CC:AB:72:7C:DC Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 07CF Signing time: Mon 02 Mar 2026 01:28:53 +0000 Manifest this update: Mon 02 Mar 2026 01:28:51 +0000 Manifest next update: Mon 09 Mar 2026 01:28:51 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: zKZ8qbPkkg37WCRq1DR0od06ANjxiDeDm1ns1zOvyA0=) 2: 7B75895EC99D11F0BD81DF1AC4F9AE02.roa (hash: CpHakjoJNpQLy5cg8/Xfvy4R2eIDozpEPL0dWHnAR64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Mar 2 01:28:51 2026 GMT Not After : Mar 9 01:28:51 2026 GMT Subject: CN=69a4e7d4-566a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:37:13:14:5c:86:c7:40:36:f7:2e:20:16: 07:b4:6d:cf:11:5b:90:35:d9:ae:b7:f5:a8:52:71: a7:8c:da:68:8a:bb:34:18:f7:e1:96:c3:b2:62:a7: 33:05:4e:31:d3:9d:98:86:ef:18:0c:47:16:30:5c: 43:12:14:0d:8b:17:46:ba:36:a6:03:9d:e4:20:58: 85:84:9e:cb:53:63:bd:f8:53:d7:7a:b0:2e:1e:6a: 4c:ef:9f:f1:fe:81:af:cc:a7:13:e9:46:c1:eb:22: 7e:0a:05:91:b9:c4:e8:83:89:9a:af:7d:2d:fa:92: 4f:30:f8:60:f6:dd:3b:4f:81:c3:68:bf:4d:28:2d: 0c:37:66:e3:c3:e2:2b:d9:fc:50:b8:21:17:f6:7d: cc:01:a3:64:93:fd:6a:f3:aa:35:fa:f3:16:4e:a3: 97:77:f7:31:69:4f:09:a7:3c:d1:82:38:fb:b3:aa: 3a:95:eb:63:d4:81:67:f5:77:c7:63:d9:0a:10:60: e3:08:90:78:80:2e:53:ab:a8:24:3d:e7:ff:ea:53: 06:08:50:5e:c6:67:59:80:f8:a2:39:97:64:1d:84: f4:1a:1f:bb:fe:20:9e:8f:7e:c7:09:6d:97:f1:57: af:c2:79:df:64:a9:70:b3:53:73:76:dc:8a:51:69: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:79:36:4D:47:3B:A9:88:EB:77:2A:3A:1E:AD:53:CC:AB:72:7C:DC X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1d:07:c8:af:a6:e4:21:4c:4f:05:ad:3f:55:ac:84:26:31: b6:f3:7d:a4:8f:1c:93:ce:c0:0c:7c:33:3d:3b:1d:31:fe:de: 23:9d:29:78:00:f4:f7:43:64:2b:e1:bc:52:1a:d1:f6:9e:16: 55:10:e5:41:f5:72:01:73:1a:80:a5:f2:ca:c2:81:69:b1:8d: 15:09:8a:9f:a2:48:90:2c:73:c3:97:78:14:f2:0d:12:bb:76: 2c:b6:75:7a:d7:47:7c:2e:59:b8:e6:6d:92:fc:32:18:80:74: 80:75:6a:4d:3f:ca:42:c3:b5:51:94:b5:79:12:97:97:da:ac: c9:65:57:4b:d7:b0:85:2b:b9:bb:44:b6:18:e3:cc:68:35:52: 5f:d8:e2:bf:87:91:65:b0:66:fd:04:c6:fe:e2:96:46:1e:4f: 7b:2e:2b:7c:eb:6c:87:a6:e1:22:09:df:cb:0a:a5:7c:28:af: 7e:69:1c:cd:54:f5:23:4b:1a:64:c1:e6:86:ef:88:0a:0c:81: f0:c7:da:6c:2d:83:11:0e:c6:02:ab:00:3a:9a:e1:10:a7:a7: 19:ca:fe:25:98:d8:2c:9a:c5:b8:87:d8:1a:93:b9:fe:4e:69: 27:c3:5f:a7:cc:b2:2d:12:7c:ac:70:94:79:a0:3a:29:72:75: 2d:21:e1:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjYwMzAyMDEyODUxWhcNMjYwMzA5MDEyODUxWjAYMRYwFAYD VQQDEw02OWE0ZTdkNC01NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc43ExRchsdANvcuIBYHtG3PEVuQNdmut/WoUnGnjNpoirs0GPfhlsOyYqcz BU4x052Yhu8YDEcWMFxDEhQNixdGujamA53kIFiFhJ7LU2O9+FPXerAuHmpM75/x /oGvzKcT6UbB6yJ+CgWRucTog4mar30t+pJPMPhg9t07T4HDaL9NKC0MN2bjw+Ir 2fxQuCEX9n3MAaNkk/1q86o1+vMWTqOXd/cxaU8JpzzRgjj7s6o6letj1IFn9XfH Y9kKEGDjCJB4gC5Tq6gkPef/6lMGCFBexmdZgPiiOZdkHYT0Gh+7/iCej37HCW2X 8VevwnnfZKlws1NzdtyKUWlC/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNl5Nk1H O6mI63cqOh6tU8yrcnzcMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgx0HyK+m5CFMTwWtP1WshCYxtvN9pI8ck87ADHwzPTsdMf7eI50peAD090Nk K+G8UhrR9p4WVRDlQfVyAXMagKXyysKBabGNFQmKn6JIkCxzw5d4FPINErt2LLZ1 etdHfC5ZuOZtkvwyGIB0gHVqTT/KQsO1UZS1eRKXl9qsyWVXS9ewhSu5u0S2GOPM aDVSX9jiv4eRZbBm/QTG/uKWRh5Pey4rfOtsh6bhIgnfywqlfCivfmkczVT1I0sa ZMHmhu+ICgyB8MfabC2DEQ7GAqsAOprhEKenGcr+JZjYLJrFuIfYGpO5/k5pJ8Nf p8yyLRJ8rHCUeaA6KXJ1LSHhAQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:03:59 2026 by rpki-client