$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: r5Tf+uDn+fO6sDwchyvgBV4Oy/OMdJAMrpwsXxd6WAk= Subject key identifier: 4F:54:87:B7:EA:24:05:E7:F2:49:2E:53:C0:B5:25:D4:5C:8A:DB:C0 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: E8 Signing time: Sun 01 Mar 2026 06:30:39 +0000 Manifest this update: Sun 01 Mar 2026 06:30:39 +0000 Manifest next update: Sun 08 Mar 2026 06:30:39 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: KNUxUXBvPQQm4Qcz87IImtsorVSqzv3nfWymOMKr9v0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Mar 1 06:30:39 2026 GMT Not After : Mar 8 06:30:39 2026 GMT Subject: CN=69a3dd0f-fc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:c2:4f:f5:36:8f:27:96:68:cc:39:9b:1d: ab:a6:7b:ab:81:7b:0e:35:e4:42:b0:c5:54:e1:3e: 29:81:f7:3e:3a:f7:89:83:a6:1d:9f:23:71:d2:8f: 79:5f:51:2c:56:4c:53:0a:89:16:36:c7:29:e3:e2: ca:4c:67:f7:2e:76:be:bb:18:83:ab:50:81:65:16: ac:07:3e:d2:ce:14:40:9d:65:05:f5:b5:5d:25:4b: 13:92:54:bf:d0:37:07:97:ec:30:f2:ec:ea:7c:01: fe:f7:6c:3f:0c:4f:5e:05:3b:53:55:f9:db:1a:43: 78:b0:9a:9a:62:40:28:c5:b8:42:38:12:dc:40:47: c7:3d:5b:51:dc:00:71:74:ae:32:ab:4d:50:5f:97: 29:4c:d6:4c:7c:46:54:f2:75:1b:4a:18:f1:7e:5f: 65:ed:3a:4a:9e:2f:52:dd:f8:84:cd:5a:77:df:74: b1:75:49:89:f6:1d:2c:42:df:8c:4e:8b:cc:87:2b: ee:e0:78:fb:34:f6:c4:77:2b:64:3c:3a:de:75:9c: 03:ab:5d:90:21:b5:87:26:61:b2:63:9a:8e:58:42: da:af:73:4a:c0:e9:c1:42:60:07:52:1e:87:6f:9f: 60:65:3d:99:ca:63:ae:b1:fc:0e:16:45:51:0e:0c: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:87:B7:EA:24:05:E7:F2:49:2E:53:C0:B5:25:D4:5C:8A:DB:C0 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:fa:b7:4d:89:06:0c:ba:99:c7:f5:d3:5f:6b:97:fd:61:67: e7:1e:70:b9:a2:f7:ff:e8:c4:8b:2a:72:44:90:bb:4f:fb:ad: d7:62:2d:81:67:43:52:02:6c:a7:ec:dd:8f:76:df:33:4e:fb: 39:52:f7:68:50:d3:48:11:18:15:9c:bb:87:1b:db:56:02:9c: 53:b2:ff:2c:f2:68:24:8f:06:72:d1:ba:7e:94:27:ca:20:72: ca:1a:99:11:1b:2b:77:76:92:e2:2c:c6:1e:02:e4:9f:5d:c5: 6a:b7:df:37:f3:ad:cc:f6:8a:0f:ee:87:1e:a9:88:3a:d1:52: 19:92:eb:45:69:d2:c1:9d:4d:d9:75:37:dc:0a:d2:dd:27:0a: e9:85:68:a5:8a:b5:2b:6a:38:c0:51:5e:ba:e1:fe:33:0f:03: 2c:ee:b8:33:9c:61:3d:eb:b7:79:54:0b:83:23:53:ea:1f:2a: 8e:31:ea:6d:ce:94:20:c3:e6:cd:8a:f7:ee:fb:a3:44:7b:d6: 7d:2f:00:46:8f:9c:f2:67:0b:fd:9e:71:96:d5:1b:56:51:f4: 85:4f:6d:8a:df:ae:c9:ad:d2:63:a5:3a:16:c0:1a:dc:dd:9c: d9:cc:68:50:6b:0c:69:d5:e5:b6:8a:6e:6b:e8:b8:e9:a0:a4: 99:03:86:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKDVFRjVFMUE1ODVDNDhFMkJDNDUwQkE3MkY0QzMxMzQ2 ODBFNTJCMEQwHhcNMjYwMzAxMDYzMDM5WhcNMjYwMzA4MDYzMDM5WjAYMRYwFAYD VQQDEw02OWEzZGQwZi1mYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQfCT/U2jyeWaMw5mx2rpnurgXsONeRCsMVU4T4pgfc+OveJg6YdnyNx0o95 X1EsVkxTCokWNscp4+LKTGf3Lna+uxiDq1CBZRasBz7SzhRAnWUF9bVdJUsTklS/ 0DcHl+ww8uzqfAH+92w/DE9eBTtTVfnbGkN4sJqaYkAoxbhCOBLcQEfHPVtR3ABx dK4yq01QX5cpTNZMfEZU8nUbShjxfl9l7TpKni9S3fiEzVp333SxdUmJ9h0sQt+M TovMhyvu4Hj7NPbEdytkPDredZwDq12QIbWHJmGyY5qOWELar3NKwOnBQmAHUh6H b59gZT2ZymOusfwOFkVRDgz3EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9Uh7fq JAXn8kkuU8C1JdRcitvAMB8GA1UdIwQYMBaAFF714aWFxI4rxFC6cvTDE0aA5SsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS9FMUFFNTQ3Q0Ix MzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWppdkVVTHB5OU1NVFJvRGxL dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS9FMUFFNTQ3Q0IxMzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWpp dkVVTHB5OU1NVFJvRGxLdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsfq3TYkGDLqZx/XTX2uX/WFn5x5wuaL3/+jEiypyRJC7T/ut12ItgWdDUgJs p+zdj3bfM077OVL3aFDTSBEYFZy7hxvbVgKcU7L/LPJoJI8GctG6fpQnyiByyhqZ ERsrd3aS4izGHgLkn13FarffN/OtzPaKD+6HHqmIOtFSGZLrRWnSwZ1N2XU33ArS 3ScK6YVopYq1K2o4wFFeuuH+Mw8DLO64M5xhPeu3eVQLgyNT6h8qjjHqbc6UIMPm zYr37vujRHvWfS8ARo+c8mcL/Z5xltUbVlH0hU9tit+uya3SY6U6FsAa3N2c2cxo UGsMadXltopua+i46aCkmQOGRQ== -----END CERTIFICATE-----Generated at Sun Mar 1 21:07:30 2026 by rpki-client