$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft File: XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json) Hash identifier: Xrh4bO8Cb6v/acKrZO3OjcQN6s7ZNcFW3KhDHaifGm8= Subject key identifier: D0:6E:9D:AA:BC:AD:1D:B5:03:CA:C7:6A:C1:0E:61:AA:1C:FC:32:4F Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 Certificate issuer: /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft Manifest number: 30 Signing time: Sun 01 Mar 2026 10:08:28 +0000 Manifest this update: Sun 01 Mar 2026 10:08:27 +0000 Manifest next update: Sun 08 Mar 2026 10:08:27 +0000 Files and hashes: 1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: K3x4nuqItOpnni1Tel9hbfWBCrcPgn/7aI4cXXFApsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Validity Not Before: Mar 1 10:08:27 2026 GMT Not After : Mar 8 10:08:27 2026 GMT Subject: CN=69a4101c-073a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:93:8e:b6:56:04:9d:21:f2:eb:77:65:18: 27:90:4b:50:54:88:cd:f3:3e:84:69:55:38:22:df: ca:0b:58:ed:06:25:84:a8:1b:c0:88:c5:75:23:2f: 8f:79:45:b9:8d:06:cd:54:ae:61:35:61:66:52:7d: e5:5f:02:7c:a0:f5:e7:62:56:48:8c:55:66:69:90: 85:bb:b5:99:3c:fb:3f:0f:9c:6f:17:af:ad:21:1f: 2a:85:dd:6a:83:9e:bf:6c:95:ca:61:e9:63:2f:c4: 2b:8c:15:81:51:c0:bd:4f:f9:2e:bb:19:eb:ba:f3: e5:4d:0b:83:26:8b:b0:10:a5:cf:62:73:11:35:53: f7:ae:64:fd:36:0d:ba:0b:10:9f:84:a4:63:84:99: f4:b6:6a:24:85:27:2d:91:40:42:3b:21:99:84:07: d3:d1:df:95:4e:ee:59:17:c1:84:48:a0:c2:91:22: c9:45:7e:b3:fd:cc:c1:00:a1:8d:59:b4:b9:9f:ce: 75:ad:dd:a0:4f:e3:cf:b6:c7:4e:7e:96:d8:48:c3: 90:3a:75:03:ed:c7:66:9c:f4:8f:76:b1:1d:31:cd: 95:78:fb:83:d8:4f:91:6c:ba:1c:1e:1f:5f:92:0b: c0:25:8e:73:d2:b2:0d:b8:02:63:7f:67:4f:e8:77: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6E:9D:AA:BC:AD:1D:B5:03:CA:C7:6A:C1:0E:61:AA:1C:FC:32:4F X509v3 Authority Key Identifier: keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:01:ea:7d:eb:06:45:9e:8c:4e:52:ef:46:93:38:7c:3c:22: 2d:d8:1b:48:4e:0e:f8:ea:87:30:50:fb:4f:91:4b:3f:48:ea: 4d:89:d6:16:2d:ba:2e:b1:5d:ef:65:cc:71:00:65:a2:a5:da: 18:e4:95:46:9a:0f:17:54:5a:28:27:8e:69:50:82:c1:c1:e7: 5d:a5:ac:93:50:c7:95:b2:b2:a6:e4:01:ff:b9:9b:54:b2:b2: b8:f0:86:60:0e:78:d3:11:92:44:cf:53:bb:27:8d:7f:1b:8b: 24:3f:bf:f9:b7:2f:ed:09:06:c5:49:71:80:c1:e1:59:5e:8a: aa:76:11:46:30:d1:fe:82:0e:e8:0b:6e:c6:c0:38:24:ca:ff: b5:12:a8:b9:2e:69:94:e7:c8:18:96:74:27:70:38:08:32:b1: 22:27:40:83:28:c1:a0:aa:f3:b7:c8:00:a2:b3:fd:06:de:c5: 38:9e:34:d5:4b:e7:b5:a2:1a:8d:dc:a0:13:55:6b:4b:f9:e5: 9e:d2:5d:d8:ab:c9:ad:6d:39:35:d6:e9:11:3b:c5:ac:f6:51: ec:75:e8:15:21:e6:bb:bf:5b:a5:81:9f:2f:3e:ca:98:0e:5e: b6:fa:8b:d5:39:c3:69:13:1c:cc:7c:1b:14:fa:47:f5:e0:8c: df:03:69:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NUY4QTExMC8GA1UEBRMoNUUyODhBMjg4MDRBRkZFRUZBMEU0NDQzMTA5NzlEN0NF RTk4RTQzMjAeFw0yNjAzMDExMDA4MjdaFw0yNjAzMDgxMDA4MjdaMBgxFjAUBgNV BAMTDTY5YTQxMDFjLTA3M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWkJOOtlYEnSHy63dlGCeQS1BUiM3zPoRpVTgi38oLWO0GJYSoG8CIxXUjL495 RbmNBs1UrmE1YWZSfeVfAnyg9ediVkiMVWZpkIW7tZk8+z8PnG8Xr60hHyqF3WqD nr9slcph6WMvxCuMFYFRwL1P+S67Geu68+VNC4Mmi7AQpc9icxE1U/euZP02DboL EJ+EpGOEmfS2aiSFJy2RQEI7IZmEB9PR35VO7lkXwYRIoMKRIslFfrP9zMEAoY1Z tLmfznWt3aBP48+2x05+lthIw5A6dQPtx2ac9I92sR0xzZV4+4PYT5FsuhweH1+S C8AljnPSsg24AmN/Z0/od6mHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0G6dqryt HbUDysdqwQ5hqhz8Mk8wHwYDVR0jBBgwFoAUXiiKKIBK/+76DkRDEJedfO6Y5DIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1RjhBL0Q2MTU2MTAwRDNE ODExRjBCNjRCRTY1MkM0RjlBRTAyL1hpaUtLSUJLXy03NkRrUkRFSmVkZk82WTVE SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlpS0tJQktfLTc2RGtSREVKZWRmTzZZNURJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 RjhBL0Q2MTU2MTAwRDNEODExRjBCNjRCRTY1MkM0RjlBRTAyL1hpaUtLSUJLXy03 NkRrUkRFSmVkZk82WTVESS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhAep96wZFnoxOUu9Gkzh8PCIt2BtITg746ocwUPtPkUs/SOpNidYWLbousV3v ZcxxAGWipdoY5JVGmg8XVFooJ45pUILBweddpayTUMeVsrKm5AH/uZtUsrK48IZg DnjTEZJEz1O7J41/G4skP7/5ty/tCQbFSXGAweFZXoqqdhFGMNH+gg7oC27GwDgk yv+1Eqi5LmmU58gYlnQncDgIMrEiJ0CDKMGgqvO3yACis/0G3sU4njTVS+e1ohqN 3KATVWtL+eWe0l3Yq8mtbTk11ukRO8Ws9lHsdegVIea7v1ulgZ8vPsqYDl62+ovV OcNpExzMfBsU+kf14IzfA2kD -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:14 2026 by rpki-client