$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json) Hash identifier: eZjjjrUP/78zPLS3UB/VX9/ibM9vB3jzCeMcqGHm+HI= Subject key identifier: 91:B6:A8:78:BF:50:CE:64:74:18:48:93:9F:90:0B:32:91:BD:DD:F2 Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft Manifest number: 05EA Signing time: Mon 02 Mar 2026 00:03:25 +0000 Manifest this update: Mon 02 Mar 2026 00:03:23 +0000 Manifest next update: Mon 09 Mar 2026 00:03:23 +0000 Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: pZm6sdtJiMRspn72vPOhJpolppOR4xShiCAWz4ZzvOg=) 2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: 3VA1KwUIIhxyT4ghxT229oTXXd7seGOOX/95PCsXUZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Validity Not Before: Mar 2 00:03:23 2026 GMT Not After : Mar 9 00:03:23 2026 GMT Subject: CN=69a4d3cc-bfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:e0:b6:6c:32:3a:a1:14:43:62:c9:5d:1f: ae:04:d6:26:6b:34:7d:bb:c7:d3:8c:52:39:ed:5d: f2:5a:34:f6:9e:48:54:41:8e:d8:ab:eb:f5:1f:47: 1e:15:c3:50:d8:5e:63:d6:4c:59:9b:54:ca:bb:fa: 10:c5:5a:69:fa:10:7f:4e:30:78:5d:29:3c:bb:7a: f1:09:55:6e:e3:c5:1f:b3:c9:92:b3:83:7b:b8:d5: 95:28:38:9f:a7:78:5a:3e:a4:80:cc:79:5e:83:2e: 3a:fe:3c:c1:8a:c2:c4:45:b7:97:d2:73:c8:c8:6d: 15:89:8e:24:c9:60:ab:fd:0a:40:98:da:ca:87:19: 15:e0:e9:8a:18:31:c6:2c:2c:5b:70:69:a4:55:27: 6a:60:eb:ba:1d:df:70:56:c7:98:08:92:d8:7e:6a: 22:31:d0:ab:ae:9d:c7:db:20:83:0b:c7:b1:8d:df: dd:ba:68:a5:e2:f9:f6:ff:36:4f:96:2c:52:11:40: 80:3a:4a:22:e5:52:60:b0:7a:7e:18:fd:ae:56:0d: ee:be:44:54:b3:ab:c2:7d:1d:52:49:17:19:c3:2d: 19:80:3c:9a:20:55:d5:82:60:ed:ae:3a:55:71:b7: 54:f2:41:bd:d6:cd:e4:56:f0:48:1e:06:d4:82:a2: 5b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:A8:78:BF:50:CE:64:74:18:48:93:9F:90:0B:32:91:BD:DD:F2 X509v3 Authority Key Identifier: keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:50:e5:33:92:e7:2a:2b:ae:8a:c1:0c:d1:49:0c:c2:02:ce: 45:20:18:a9:fb:dd:09:04:c2:cc:58:d9:ec:c3:d9:4c:48:4a: 27:e6:45:40:30:54:d3:30:23:c2:c7:e3:7a:7b:cd:b8:73:ca: 90:27:a4:b4:e7:5b:c4:61:4b:8d:4e:0f:6f:91:d2:de:8f:e6: e2:df:cd:13:58:11:e9:c7:96:7f:f2:d9:12:76:d6:13:e4:af: 42:41:83:28:70:d5:b9:52:c4:09:75:1d:ab:95:eb:90:a3:b9: 34:0b:ee:89:e9:c2:d5:6f:7b:e5:f2:7a:a3:d0:0a:b0:24:03: 4b:31:94:5f:bf:9e:f0:a1:a4:69:71:b0:f1:2f:7b:65:76:ce: aa:17:3e:8d:32:01:38:80:47:68:9d:6e:78:b5:9d:99:bd:5c: c4:95:69:60:52:0e:5b:d3:d6:0f:f1:6d:f4:04:f1:08:96:77: a6:15:f3:1a:dc:8e:f4:23:83:bc:c4:85:90:dd:5a:d8:ba:17: cd:6c:b9:af:50:a3:ba:7f:6f:05:5e:a3:0e:58:e7:76:f0:28: e1:01:22:63:92:78:45:d0:b5:6e:b3:1d:17:3b:c3:cb:ea:c6: a9:f0:bd:e0:ef:5b:68:9d:33:09:b2:c3:ee:9d:22:47:4a:34: 9e:49:66:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2 NDMwMTlCNUUwHhcNMjYwMzAyMDAwMzIzWhcNMjYwMzA5MDAwMzIzWjAYMRYwFAYD VQQDEw02OWE0ZDNjYy1iZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6DgtmwyOqEUQ2LJXR+uBNYmazR9u8fTjFI57V3yWjT2nkhUQY7Yq+v1H0ce FcNQ2F5j1kxZm1TKu/oQxVpp+hB/TjB4XSk8u3rxCVVu48Ufs8mSs4N7uNWVKDif p3haPqSAzHlegy46/jzBisLERbeX0nPIyG0ViY4kyWCr/QpAmNrKhxkV4OmKGDHG LCxbcGmkVSdqYOu6Hd9wVseYCJLYfmoiMdCrrp3H2yCDC8exjd/dumil4vn2/zZP lixSEUCAOkoi5VJgsHp+GP2uVg3uvkRUs6vCfR1SSRcZwy0ZgDyaIFXVgmDtrjpV cbdU8kG91s3kVvBIHgbUgqJbzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJG2qHi/ UM5kdBhIk5+QCzKRvd3yMB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFQi83NzE0OEFDNkVCMDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZP ZmJnZDFYRXd2VTFrTUJtMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABFDlM5LnKiuuisEM0UkMwgLORSAYqfvdCQTCzFjZ7MPZTEhKJ+ZFQDBU0zAj wsfjenvNuHPKkCektOdbxGFLjU4Pb5HS3o/m4t/NE1gR6ceWf/LZEnbWE+SvQkGD KHDVuVLECXUdq5XrkKO5NAvuienC1W975fJ6o9AKsCQDSzGUX7+e8KGkaXGw8S97 ZXbOqhc+jTIBOIBHaJ1ueLWdmb1cxJVpYFIOW9PWD/Ft9ATxCJZ3phXzGtyO9COD vMSFkN1a2LoXzWy5r1Cjun9vBV6jDljndvAo4QEiY5J4RdC1brMdFzvDy+rGqfC9 4O9baJ0zCbLD7p0iR0o0nklmQQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:15:53 2026 by rpki-client