$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json) Hash identifier: TcPDcUlRQ/B4333lK7tw1ETPQmDkMe46yHmV64Z+sok= Subject key identifier: F3:78:CB:E0:B9:E6:AA:F0:94:46:9B:42:63:16:A7:E6:75:CF:C6:29 Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft Manifest number: 011C Signing time: Sun 01 Mar 2026 23:40:10 +0000 Manifest this update: Sun 01 Mar 2026 23:40:09 +0000 Manifest next update: Sun 08 Mar 2026 23:40:09 +0000 Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: E3IE3143+tFYmmCV1lxXtyIA099m2zUE0YDzbh2sxJU=) 2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: BKkwn8f0sraXs+4i8iF1ns+62U78NeM1dUZaJxumAOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Validity Not Before: Mar 1 23:40:09 2026 GMT Not After : Mar 8 23:40:09 2026 GMT Subject: CN=69a4ce5a-e01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bd:46:fc:ac:47:3d:8c:d0:78:5a:b2:11:a5: e7:1f:14:65:20:71:73:f9:63:f7:13:7b:88:47:4d: 88:a9:31:7f:a3:ac:07:aa:eb:e0:88:0f:ca:33:d9: ab:a7:2b:f3:1f:46:c9:7a:73:27:6a:90:3f:3f:e8: 3e:7b:22:69:fa:22:f7:a7:21:d6:d8:cf:15:ba:01: 6a:71:39:61:58:5d:4c:f5:b4:db:aa:82:07:71:80: 45:db:a0:02:ab:78:ea:d3:44:8f:0c:21:df:26:20: 89:c5:de:be:01:e3:ef:2a:d8:70:54:5e:2a:ee:75: 5e:83:d3:75:5f:0d:85:12:ea:13:08:a3:72:ef:13: c9:a5:64:e5:06:ab:9d:d5:4b:d1:fa:19:fd:29:d3: 9b:19:47:fb:2a:3e:13:4a:a8:1c:94:d8:c3:a0:4e: 88:bc:68:9e:b4:8b:b4:31:06:f7:83:f7:31:98:30: 0e:ce:60:e9:0b:67:59:6a:a2:9e:0e:ca:d3:dd:ed: 2d:fe:ce:eb:e6:2d:a2:12:27:f7:60:7f:bd:68:6a: d1:32:d6:82:eb:e3:b9:e0:ce:81:59:ec:d0:fa:ee: 94:db:9a:0e:f1:ae:fa:6d:2a:33:cb:3e:d9:f0:bd: c6:8f:4d:a1:a4:39:f9:b6:b6:b8:d6:ac:e8:97:7f: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:78:CB:E0:B9:E6:AA:F0:94:46:9B:42:63:16:A7:E6:75:CF:C6:29 X509v3 Authority Key Identifier: keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f1:e0:b2:98:4f:db:5c:42:25:c3:19:ca:1b:b0:45:9d:f1: dc:4d:7f:6a:26:31:04:cc:27:ba:23:c6:02:c0:e3:d0:06:60: d5:99:b6:06:7a:de:fe:46:ce:b0:74:33:13:05:8d:15:bd:d9: 85:2e:49:bd:43:b4:75:a1:64:45:a3:1f:d8:dc:04:ca:e8:8f: d9:58:08:97:c6:bd:7f:da:2d:a7:c0:88:bf:22:4a:18:fc:19: bd:c7:77:6d:2e:31:ec:01:7a:a8:f0:4f:a7:59:1c:46:ee:fe: fe:59:5a:d4:58:a7:4e:6d:ee:17:88:72:f7:02:5f:59:fa:74: fd:39:d2:13:19:8b:ff:bc:b5:7a:b1:41:a1:cc:3b:e3:00:14: e1:00:70:5c:9a:64:05:45:76:a8:00:39:bf:ad:d3:1f:64:37: 7b:60:7b:f3:49:c0:f0:3f:4e:4f:b8:f3:54:a4:79:47:cc:b7: 37:17:a6:01:fe:bd:4d:c2:b0:fc:ed:aa:a0:2a:48:59:f2:fc: 83:ff:ec:e0:59:4b:c2:42:10:7e:0c:93:ce:bb:ff:e1:6f:ec: 7f:82:d7:a5:d9:df:29:20:44:10:71:0f:3d:4a:54:b2:a9:06: 5e:94:78:53:2b:54:fd:19:a1:e9:c1:f2:00:3a:5e:bb:6c:eb: ee:c1:ec:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTQxMTAvBgNVBAUTKEM2MTU3MDBEN0M4ODhCRTZCQTc1MEFERUNEOTREODg2 NDY4MkUzNjEwHhcNMjYwMzAxMjM0MDA5WhcNMjYwMzA4MjM0MDA5WjAYMRYwFAYD VQQDEw02OWE0Y2U1YS1lMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5r1G/KxHPYzQeFqyEaXnHxRlIHFz+WP3E3uIR02IqTF/o6wHquvgiA/KM9mr pyvzH0bJenMnapA/P+g+eyJp+iL3pyHW2M8VugFqcTlhWF1M9bTbqoIHcYBF26AC q3jq00SPDCHfJiCJxd6+AePvKthwVF4q7nVeg9N1Xw2FEuoTCKNy7xPJpWTlBqud 1UvR+hn9KdObGUf7Kj4TSqgclNjDoE6IvGietIu0MQb3g/cxmDAOzmDpC2dZaqKe DsrT3e0t/s7r5i2iEif3YH+9aGrRMtaC6+O54M6BWezQ+u6U25oO8a76bSozyz7Z 8L3Gj02hpDn5tra41qzol38WrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPN4y+C5 5qrwlEabQmMWp+Z1z8YpMB8GA1UdIwQYMBaAFMYVcA18iIvmunUK3s2U2IZGguNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxNC84RjMzOTk5NjZC RkIxMUVGODQ2MzI2MzVDNEY5QUUwMi94aFZ3RFh5SWktYTZkUXJlelpUWWhrYUM0 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hoVndEWHlJaS1hNmRRcmV6WlRZaGthQzQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxNC84RjMzOTk5NjZCRkIxMUVGODQ2MzI2MzVDNEY5QUUwMi94aFZ3RFh5SWkt YTZkUXJlelpUWWhrYUM0MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAivHgsphP21xCJcMZyhuwRZ3x3E1/aiYxBMwnuiPGAsDj0AZg1Zm2Bnre/kbO sHQzEwWNFb3ZhS5JvUO0daFkRaMf2NwEyuiP2VgIl8a9f9otp8CIvyJKGPwZvcd3 bS4x7AF6qPBPp1kcRu7+/lla1FinTm3uF4hy9wJfWfp0/TnSExmL/7y1erFBocw7 4wAU4QBwXJpkBUV2qAA5v63TH2Q3e2B780nA8D9OT7jzVKR5R8y3NxemAf69TcKw /O2qoCpIWfL8g//s4FlLwkIQfgyTzrv/4W/sf4LXpdnfKSBEEHEPPUpUsqkGXpR4 UytU/Rmh6cHyADpeu2zr7sHs/A== -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:12 2026 by rpki-client