$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: 8+sLSdltVIFHiz6jEpYQsUBTi2W9up7ZTYIxgYczLzM= Subject key identifier: B0:4C:3E:1B:7A:30:8A:68:6C:B7:66:42:F9:E9:9F:DD:8B:91:9A:EA Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 020E Signing time: Sun 01 Mar 2026 03:47:19 +0000 Manifest this update: Sun 01 Mar 2026 03:47:18 +0000 Manifest next update: Sun 08 Mar 2026 03:47:18 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: L8iAkRB6LLl27L0ZRtdext4H8VJuigTDlaGotMEcnAc=) 2: 3474AD64FAD311ED9CEE0E29C4F9AE02.roa (hash: bZ3DvcSU67WmMaGW0gpbOJ7oihqEunDO2oztcjKXnww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Mar 1 03:47:18 2026 GMT Not After : Mar 8 03:47:18 2026 GMT Subject: CN=69a3b6c7-f25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:f3:92:25:4e:9e:44:de:6c:18:9d:1e:17: f4:f6:ba:4e:a9:83:ea:39:cd:0a:e1:dc:60:1a:03: 4b:ee:f9:7f:2a:d3:6c:5c:0c:13:47:b9:5f:82:dd: 88:be:e1:40:10:24:4e:fb:79:dc:a9:42:58:e9:a0: b9:d1:1d:cd:f4:d2:1e:bc:7a:40:dd:98:29:82:27: 31:e1:3d:4a:69:c0:1c:66:6f:4d:2d:78:63:96:f9: fc:29:85:ce:10:cf:bb:c4:70:11:c6:c2:2a:3c:8a: 19:ad:e9:5d:b3:e6:76:22:3c:25:ab:11:35:a2:e1: b6:35:5b:34:08:d0:d5:3a:53:8f:8e:04:7d:46:bd: 62:bf:35:af:c1:b8:c1:1f:54:b5:7d:be:5c:8f:17: 9a:d0:80:a7:bc:29:49:ba:3a:d5:6c:e4:eb:cc:bd: b8:ac:58:e8:45:01:b1:26:cf:10:a7:bd:cc:e4:08: 9c:ac:d5:aa:57:7c:d5:4e:6c:16:a4:45:47:0c:ad: f8:8c:49:d7:5b:b4:3e:9e:b5:0f:e2:53:15:59:5a: 30:47:2d:e0:c6:e0:6e:cd:82:23:78:90:12:3e:51: 91:79:82:14:a3:25:db:f9:b3:d2:a6:f0:ae:c6:58: ed:ca:a7:bb:ee:28:3c:4e:e8:56:15:a1:bf:ca:86: b4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4C:3E:1B:7A:30:8A:68:6C:B7:66:42:F9:E9:9F:DD:8B:91:9A:EA X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:8d:90:32:87:00:50:7c:c7:10:59:c2:38:43:b6:98:c4:fa: cf:cf:eb:26:81:e3:5c:96:f3:0c:d6:eb:46:79:3d:a2:e2:86: 60:04:64:f5:b6:c9:54:7a:9c:f6:a0:21:f2:65:52:d1:64:4c: 22:c4:7b:a7:a0:13:50:31:67:b4:0e:8a:0d:d9:1b:df:53:90: e2:19:9f:25:88:c9:9f:5f:b3:52:d7:8e:12:04:19:c5:b4:e7: f8:42:0c:d1:d1:59:75:45:60:c7:1b:c9:d5:42:b0:d1:4d:a5: 48:1a:cc:27:67:06:d7:3b:17:c5:2a:21:df:87:c1:03:fb:17: be:e8:cd:45:5d:a2:67:6a:d1:08:e5:b3:15:b9:ac:66:ac:ed: 07:d6:14:75:a7:77:c4:7a:f3:60:ab:6c:4a:95:32:78:7d:49: 64:7c:fe:79:03:57:4a:ab:47:db:b6:47:f1:c0:2f:8a:f7:87: 96:46:a5:78:51:15:dc:01:1b:77:87:00:42:c5:87:39:71:b3: e7:68:9e:0e:3b:d7:00:b5:d0:4d:f3:5d:97:53:ef:ab:14:4f: 97:0b:bf:2d:ca:50:9b:19:38:66:b1:4e:aa:b1:64:9f:9c:10: e7:d8:02:8f:55:df:ee:30:2e:7d:28:95:55:72:84:8a:37:8e: 99:60:97:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYwMzAxMDM0NzE4WhcNMjYwMzA4MDM0NzE4WjAYMRYwFAYD VQQDDA02OWEzYjZjNy1mMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtizzkiVOnkTebBidHhf09rpOqYPqOc0K4dxgGgNL7vl/KtNsXAwTR7lfgt2I vuFAECRO+3ncqUJY6aC50R3N9NIevHpA3Zgpgicx4T1KacAcZm9NLXhjlvn8KYXO EM+7xHARxsIqPIoZrelds+Z2IjwlqxE1ouG2NVs0CNDVOlOPjgR9Rr1ivzWvwbjB H1S1fb5cjxea0ICnvClJujrVbOTrzL24rFjoRQGxJs8Qp73M5AicrNWqV3zVTmwW pEVHDK34jEnXW7Q+nrUP4lMVWVowRy3gxuBuzYIjeJASPlGReYIUoyXb+bPSpvCu xljtyqe77ig8TuhWFaG/yoa0ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBMPht6 MIpobLdmQvnpn92LkZrqMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANY2QMocAUHzHEFnCOEO2mMT6z8/rJoHjXJbzDNbrRnk9ouKGYARk9bbJVHqc 9qAh8mVS0WRMIsR7p6ATUDFntA6KDdkb31OQ4hmfJYjJn1+zUteOEgQZxbTn+EIM 0dFZdUVgxxvJ1UKw0U2lSBrMJ2cG1zsXxSoh34fBA/sXvujNRV2iZ2rRCOWzFbms ZqztB9YUdad3xHrzYKtsSpUyeH1JZHz+eQNXSqtH27ZH8cAviveHlkaleFEV3AEb d4cAQsWHOXGz52ieDjvXALXQTfNdl1PvqxRPlwu/LcpQmxk4ZrFOqrFkn5wQ59gC j1Xf7jAufSiVVXKEijeOmWCXDQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:16 2026 by rpki-client