$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: F47RlL0v6+QzEm5o70CHv0bdfxEoyiu8yK1z0R44Z3Y= Subject key identifier: D8:22:A2:D1:5D:55:97:0A:8A:6F:56:C9:2A:87:85:14:34:7F:9D:3E Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: D8 Signing time: Sun 01 Mar 2026 07:44:51 +0000 Manifest this update: Sun 01 Mar 2026 07:44:51 +0000 Manifest next update: Sun 08 Mar 2026 07:44:51 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: arMZ4ofM7f5htIvZ0gPBSPzc6Bs02tsVbgmhmNPwnwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Mar 1 07:44:51 2026 GMT Not After : Mar 8 07:44:51 2026 GMT Subject: CN=69a3ee73-08c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:02:22:93:b7:35:ba:1a:fb:13:c0:ec:dd:c8: e2:fb:4c:65:ce:b6:bf:6e:0e:93:bd:3a:5e:3b:b1: a8:30:bd:1f:54:ad:89:9d:c8:2d:2d:3c:ce:2d:23: de:d6:dc:91:80:9a:69:ac:71:0c:bf:5b:a6:a1:77: f0:6e:6b:3e:17:bb:4c:6b:cb:4d:48:12:a6:89:a3: 01:93:45:9f:a2:89:9c:68:44:b4:46:3e:6f:df:4a: 9a:88:66:93:0f:e7:4c:45:e9:77:9a:9c:6d:b9:49: 18:81:b2:74:25:e9:72:23:40:5f:f3:f8:ce:8a:71: fb:05:83:d2:68:81:6a:92:89:83:32:fa:e7:04:69: a6:ff:bb:48:b1:9b:78:76:10:ad:2d:cc:04:40:2f: 31:0b:59:14:2c:aa:30:80:f4:42:0d:5d:c0:4e:48: f3:0e:6d:22:d4:b8:b5:5b:fb:84:05:4d:71:49:ab: 39:0d:6b:8b:04:f1:1c:94:9c:c8:ad:12:6c:8a:cd: f3:bf:4d:25:16:08:1e:0a:b5:da:da:4a:17:53:4c: a3:80:a6:51:04:4d:7d:93:74:8c:8f:81:73:3d:bd: ae:c5:42:f8:95:31:b9:3b:f4:18:12:e2:92:f0:ec: f4:f4:cc:8d:ce:82:67:07:d1:d6:cd:e2:af:41:d3: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:22:A2:D1:5D:55:97:0A:8A:6F:56:C9:2A:87:85:14:34:7F:9D:3E X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ee:c7:db:8b:2c:77:fa:c8:63:a8:4d:07:f3:3a:77:76:6c: 7e:86:79:c1:c0:a2:3d:69:f1:58:69:93:fc:d8:57:f6:65:d3: fa:86:32:05:98:d8:54:1b:14:90:70:77:5a:8e:f4:7a:03:6f: 3a:c8:f6:50:1e:dd:ed:c5:a6:b5:3b:a1:08:c7:a6:6b:cb:11: 1c:c6:3e:45:74:2b:17:43:a6:34:d4:4b:c0:7a:f4:d7:ff:e0: be:21:ee:86:67:0c:19:67:5b:1a:ed:ec:82:e4:33:ad:21:58: 73:18:fe:fd:2b:67:e7:75:39:46:f5:e2:83:04:ee:37:91:9d: 52:01:34:e0:5e:1e:69:ac:dc:b5:bc:fd:45:49:f7:ed:eb:bc: c1:90:99:23:51:18:00:49:8c:8c:63:ab:5d:b5:70:f0:fd:e0: b0:60:ca:95:48:fd:30:97:bf:21:e1:37:39:21:cd:9d:af:56: d5:b8:24:84:ff:15:3e:3c:ca:4a:3e:06:52:13:63:17:ed:b5: d5:0f:01:12:11:3e:fb:b8:43:c3:05:9b:39:f1:5e:09:f8:ed: bf:98:d4:78:47:b3:e0:a0:71:2a:e4:c7:de:43:92:72:bb:46: 00:5a:87:bd:cb:72:93:a5:43:a4:37:21:4f:0f:0d:e9:b2:de: d4:a6:65:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG NUUxOUNBRTgwHhcNMjYwMzAxMDc0NDUxWhcNMjYwMzA4MDc0NDUxWjAYMRYwFAYD VQQDEw02OWEzZWU3My0wOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8AIik7c1uhr7E8Ds3cji+0xlzra/bg6TvTpeO7GoML0fVK2JncgtLTzOLSPe 1tyRgJpprHEMv1umoXfwbms+F7tMa8tNSBKmiaMBk0WfoomcaES0Rj5v30qaiGaT D+dMRel3mpxtuUkYgbJ0JelyI0Bf8/jOinH7BYPSaIFqkomDMvrnBGmm/7tIsZt4 dhCtLcwEQC8xC1kULKowgPRCDV3ATkjzDm0i1Li1W/uEBU1xSas5DWuLBPEclJzI rRJsis3zv00lFggeCrXa2koXU0yjgKZRBE19k3SMj4FzPb2uxUL4lTG5O/QYEuKS 8Oz09MyNzoJnB9HWzeKvQdNpFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgiotFd VZcKim9WySqHhRQ0f50+MB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3 Qm5HUkdUdER1YkwxNFp5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkO7H24ssd/rIY6hNB/M6d3ZsfoZ5wcCiPWnxWGmT/NhX9mXT+oYyBZjYVBsU kHB3Wo70egNvOsj2UB7d7cWmtTuhCMema8sRHMY+RXQrF0OmNNRLwHr01//gviHu hmcMGWdbGu3sguQzrSFYcxj+/Stn53U5RvXigwTuN5GdUgE04F4eaazctbz9RUn3 7eu8wZCZI1EYAEmMjGOrXbVw8P3gsGDKlUj9MJe/IeE3OSHNna9W1bgkhP8VPjzK Sj4GUhNjF+211Q8BEhE++7hDwwWbOfFeCfjtv5jUeEez4KBxKuTH3kOScrtGAFqH vctyk6VDpDchTw8N6bLe1KZl3g== -----END CERTIFICATE-----Generated at Sun Mar 1 20:50:08 2026 by rpki-client