$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: Zu9KBdADwd+o8YAxfViSdHCXFmPNU0HDY5A0hlkzuTs= Subject key identifier: 15:72:AE:4A:9E:AB:60:5C:70:4E:94:9E:BC:DC:C2:C9:90:31:0C:14 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 11E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 11D8 Signing time: Mon 02 Mar 2026 00:08:48 +0000 Manifest this update: Mon 02 Mar 2026 00:08:46 +0000 Manifest next update: Mon 09 Mar 2026 00:08:46 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: IGk+gOT9xT3nUG61s0aP0YkHuvFyZlJRjSk6dpW+Fec=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: mlIgB88PCS5Mz8+wugRjkrAqhDyAGod+aFCp2Xz2bCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4581 (0x11e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Mar 2 00:08:46 2026 GMT Not After : Mar 9 00:08:46 2026 GMT Subject: CN=69a4d50f-dc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:ef:b3:c3:34:25:d4:d1:4d:8f:1a:34:46: 5c:35:42:2a:04:8e:25:fc:fe:fd:97:08:2b:97:32: 11:86:fb:41:a9:30:fc:16:6e:8c:c1:4d:5a:50:a2: f5:3b:1f:84:8e:0c:c2:b5:0c:5c:89:6d:a9:6e:9c: a6:d7:23:91:02:a1:c6:1c:10:69:40:70:3e:5b:6b: 0e:68:bb:6f:81:a7:df:5c:8b:51:38:7d:74:d7:7b: a2:3d:17:ec:d6:0e:e1:e6:85:49:c0:9d:56:67:74: b4:4a:17:fe:3a:d9:9b:99:09:d9:79:a1:6e:04:fa: 84:3a:05:2a:af:49:7a:df:23:68:2f:ec:b4:81:2c: 48:9d:9f:c8:61:14:3e:f1:52:d2:fb:15:26:db:cc: 53:49:82:e3:4b:ee:f6:9c:ed:de:58:3b:c8:9d:87: 20:3d:f4:bf:6f:8b:42:b5:8a:f3:50:44:48:ba:9f: 4c:e4:d2:41:6f:22:0a:93:9a:f2:ab:a7:75:69:c7: 9d:13:5b:61:60:6c:b1:9a:10:9b:e8:17:04:ad:d6: 76:df:83:4f:1b:49:8d:b2:4b:04:39:fd:fd:32:52: fa:81:60:bd:5a:75:28:c9:62:8a:fa:50:dc:5c:b7: 27:9a:57:d2:c7:da:0f:5a:c7:86:b4:c5:df:0b:e7: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:72:AE:4A:9E:AB:60:5C:70:4E:94:9E:BC:DC:C2:C9:90:31:0C:14 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:2b:f8:36:68:bc:0b:44:df:94:e8:82:97:f4:05:a7:45:8f: 3d:af:20:74:bb:fc:e1:68:ed:c3:47:47:99:59:1a:2a:76:fa: bd:24:88:be:ae:31:d1:08:02:22:e2:c4:14:3f:ec:d3:a1:96: 5e:bc:75:9d:7d:3e:0f:97:42:85:ac:06:f7:18:2c:d4:10:1d: 79:7a:7d:be:0e:e2:2a:34:a1:1c:9a:12:69:f1:08:e5:60:dd: 01:da:e4:49:da:4e:74:6e:76:e0:d4:68:60:92:23:dd:f6:89: 45:e7:df:96:82:1c:44:1d:f9:c4:24:c4:3a:65:44:7a:16:bf: 06:8d:c4:c9:2c:e0:41:0b:71:e5:8b:73:dd:ac:ae:fc:39:9d: 85:e2:c2:84:91:c6:1b:83:3f:1c:1b:3d:67:7c:f9:64:4c:c5: ab:78:b5:55:c7:a5:60:76:25:05:e7:5c:3e:81:a6:bc:55:09: b1:e3:4e:71:0b:3d:76:ad:49:45:e3:74:95:16:ab:51:be:10: a8:d8:de:b7:77:79:9c:11:2d:0c:14:68:fd:2b:b5:b8:c1:0d: ac:ca:a2:ed:6b:d6:71:dd:aa:e2:5c:ae:17:7e:63:11:c2:8d: f7:a3:01:f6:b8:6d:61:00:16:fb:ed:1e:26:a0:08:a1:28:18: 81:c5:46:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjYwMzAyMDAwODQ2WhcNMjYwMzA5MDAwODQ2WjAYMRYwFAYD VQQDEw02OWE0ZDUwZi1kYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszDvs8M0JdTRTY8aNEZcNUIqBI4l/P79lwgrlzIRhvtBqTD8Fm6MwU1aUKL1 Ox+EjgzCtQxciW2pbpym1yORAqHGHBBpQHA+W2sOaLtvgaffXItROH1013uiPRfs 1g7h5oVJwJ1WZ3S0Shf+OtmbmQnZeaFuBPqEOgUqr0l63yNoL+y0gSxInZ/IYRQ+ 8VLS+xUm28xTSYLjS+72nO3eWDvInYcgPfS/b4tCtYrzUERIup9M5NJBbyIKk5ry q6d1acedE1thYGyxmhCb6BcErdZ234NPG0mNsksEOf39MlL6gWC9WnUoyWKK+lDc XLcnmlfSx9oPWseGtMXfC+dtOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVyrkqe q2BccE6UnrzcwsmQMQwUMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZyv4Nmi8C0TflOiCl/QFp0WPPa8gdLv84Wjtw0dHmVkaKnb6vSSIvq4x0QgC IuLEFD/s06GWXrx1nX0+D5dChawG9xgs1BAdeXp9vg7iKjShHJoSafEI5WDdAdrk SdpOdG524NRoYJIj3faJReffloIcRB35xCTEOmVEeha/Bo3EySzgQQtx5Ytz3ayu /DmdheLChJHGG4M/HBs9Z3z5ZEzFq3i1VcelYHYlBedcPoGmvFUJseNOcQs9dq1J ReN0lRarUb4QqNjet3d5nBEtDBRo/Su1uMENrMqi7WvWcd2q4lyuF35jEcKN96MB 9rhtYQAW++0eJqAIoSgYgcVGYA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:45 2026 by rpki-client