$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json) Hash identifier: zXypzPlXkavlVIrxU+ivHa+TIWjUb7dPnVlESM+dDok= Subject key identifier: A1:3F:E1:9A:88:9F:47:7B:74:B2:78:A6:F8:DF:0F:AB:17:25:51:10 Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 09:59:55 +0000 Manifest this update: Sun 01 Mar 2026 09:59:54 +0000 Manifest next update: Sun 08 Mar 2026 09:59:54 +0000 Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: nfV7VUrVxnmZ107S57iDdjTYW3jFYyVgbAirXqlvxfs=) 2: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=) 3: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=) 4: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E Validity Not Before: Mar 1 09:59:54 2026 GMT Not After : Mar 8 09:59:54 2026 GMT Subject: CN=69a40e1b-577d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:69:4e:22:8b:b9:da:26:63:ce:b7:98:eb: bb:85:73:d3:b5:ce:37:2e:09:6d:29:0a:84:7c:ad: 4a:2f:41:ee:68:68:8d:da:26:f6:0c:10:07:68:e0: 64:26:75:16:f2:20:ba:54:f5:ca:f8:38:34:98:eb: 2b:1b:39:9c:2d:a7:5b:63:5f:9a:55:cd:f6:4a:8b: b3:e1:a6:49:25:72:6b:39:da:98:ac:de:61:06:cd: 20:89:33:b1:3d:84:1d:76:5a:21:ae:8b:a0:56:17: 65:2c:24:a8:f5:1e:62:7c:35:af:ed:d3:47:c9:f2: 48:16:9d:55:b8:eb:6a:05:b0:91:c9:44:35:65:6c: 2b:c9:e4:8d:59:6d:d3:0b:05:07:60:9b:10:a7:52: b3:35:67:a2:2e:14:3c:45:47:58:9e:b8:e7:2c:a9: ee:31:8d:4d:1c:63:21:c8:21:72:0c:36:2b:9d:b1: 7a:bd:95:5e:df:f4:2a:22:e5:fb:10:21:aa:1e:85: e1:cf:d5:9f:21:e1:35:3c:c7:7e:33:66:76:48:1a: db:9b:c6:4b:af:2f:b0:ca:5e:41:df:3f:96:e2:01: 30:8a:04:0d:40:18:4a:44:34:9a:dc:c2:42:3f:70: 53:80:60:cd:c1:1a:12:67:0b:4c:44:01:c3:b0:c4: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:E1:9A:88:9F:47:7B:74:B2:78:A6:F8:DF:0F:AB:17:25:51:10 X509v3 Authority Key Identifier: keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:16:1b:0a:71:b3:82:41:8d:c7:6c:a7:64:36:c1:e0:b2:6c: 2b:f5:50:9e:c0:2a:25:0a:3d:0e:f8:da:36:b6:6b:5f:7e:b7: 8e:1e:73:cf:35:18:1d:98:1f:ae:c6:19:86:6e:7f:fa:14:bb: 2c:4d:73:eb:44:48:95:c9:ef:32:2e:a8:e8:d3:41:29:e6:0c: 1e:33:b0:10:2b:c6:5f:2e:3a:b6:ec:55:84:3c:ba:23:b1:0e: 6d:0d:98:d1:37:32:f5:72:ff:96:cd:02:3e:9f:ef:d7:40:47: 18:08:bd:67:11:4d:71:06:19:b6:a7:9c:61:fc:bd:c9:37:e9: af:8f:3c:5c:a1:8d:64:6f:7f:d4:d6:d7:47:0b:28:75:db:44: 4c:81:c5:2f:1a:71:ef:5c:31:5d:af:42:93:24:3f:62:ec:49: 0d:cb:8c:96:ea:a0:ff:08:40:23:3e:10:5d:a1:2b:01:01:d3: b7:0c:ed:a4:f9:83:5c:aa:99:aa:8d:09:7c:e4:63:97:20:42: 51:26:0b:a0:d1:a7:07:a8:f0:a0:41:cf:78:e3:d6:4c:51:8d: b8:73:50:cf:06:8a:a6:28:66:5f:7c:7d:2a:a4:63:a5:9a:69: 43:43:ed:68:48:00:47:5a:a6:dc:ef:07:9b:4c:2a:4b:55:00: 2b:96:a7:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Mjk4QzExMC8GA1UEBRMoNUZDMjZCOTI4REVEQzkwQzM5MUNDNEY1MjlCQTdCOUUw OUE1MDQ2RTAeFw0yNjAzMDEwOTU5NTRaFw0yNjAzMDgwOTU5NTRaMBgxFjAUBgNV BAMTDTY5YTQwZTFiLTU3N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbP2lOIou52iZjzreY67uFc9O1zjcuCW0pCoR8rUovQe5oaI3aJvYMEAdo4GQm dRbyILpU9cr4ODSY6ysbOZwtp1tjX5pVzfZKi7Phpkklcms52pis3mEGzSCJM7E9 hB12WiGui6BWF2UsJKj1HmJ8Na/t00fJ8kgWnVW462oFsJHJRDVlbCvJ5I1ZbdML BQdgmxCnUrM1Z6IuFDxFR1ieuOcsqe4xjU0cYyHIIXIMNiudsXq9lV7f9Coi5fsQ IaoeheHP1Z8h4TU8x34zZnZIGtubxkuvL7DKXkHfP5biATCKBA1AGEpENJrcwkI/ cFOAYM3BGhJnC0xEAcOwxIvTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoT/hmoif R3t0snim+N8PqxclURAwHwYDVR0jBBgwFoAUX8Jrko3tyQw5HMT1Kbp7ngmlBG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyOThDL0FDNUU4QUMyQzZE MDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3NUhNVDFLYnA3bmdtbEJH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDhKcmtvM3R5UXc1SE1UMUticDduZ21sQkc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy OThDL0FDNUU4QUMyQzZEMDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3 NUhNVDFLYnA3bmdtbEJHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6FhsKcbOCQY3HbKdkNsHgsmwr9VCewColCj0O+No2tmtffreOHnPPNRgdmB+u xhmGbn/6FLssTXPrREiVye8yLqjo00Ep5gweM7AQK8ZfLjq27FWEPLojsQ5tDZjR NzL1cv+WzQI+n+/XQEcYCL1nEU1xBhm2p5xh/L3JN+mvjzxcoY1kb3/U1tdHCyh1 20RMgcUvGnHvXDFdr0KTJD9i7EkNy4yW6qD/CEAjPhBdoSsBAdO3DO2k+YNcqpmq jQl85GOXIEJRJgug0acHqPCgQc9449ZMUY24c1DPBoqmKGZffH0qpGOlmmlDQ+1o SABHWqbc7webTCpLVQArlqe7 -----END CERTIFICATE-----Generated at Sun Mar 1 20:50:13 2026 by rpki-client