$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: uXSjhZz+cHH/8fSXmml8syqXG9DERyg20Repi1eU66M= Subject key identifier: FB:1D:F1:66:D8:85:C8:C2:55:42:BC:E8:16:A3:4E:DE:41:08:AC:6D Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 1376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 48C8 Signing time: Sun 01 Mar 2026 23:52:15 +0000 Manifest this update: Sun 01 Mar 2026 23:52:13 +0000 Manifest next update: Sun 08 Mar 2026 23:52:13 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: L5aT5N7g93aTTI3ESPC5y7Dh3iu0o1w/YztzSob7QzY=) 2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: r6K9sT4xz4xltrfN6WopOwvbBDeZ2oXDfmgdeeL8nwY=) 3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: 8j8UggU/cOGDsFTMUgNVbsmPDrBcfc9iBtV2U1i4LIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4982 (0x1376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Mar 1 23:52:13 2026 GMT Not After : Mar 8 23:52:13 2026 GMT Subject: CN=69a4d12e-4c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:7d:4e:ea:2d:57:d9:07:87:da:48:87:a5: f7:03:f3:35:7a:02:ec:25:26:e5:e2:e5:39:0e:86: d1:e2:4a:05:aa:3f:88:31:d4:d1:52:65:a8:2a:2e: 5a:3a:c3:8a:e0:b9:61:71:3a:6b:d3:cb:84:10:e3: af:8f:3c:96:15:04:6d:cf:85:47:74:81:a6:78:66: bb:ae:95:af:7b:0a:43:ea:99:89:93:05:2a:15:86: 1c:06:53:7c:2d:cd:b9:99:9f:46:1e:32:86:a8:61: 4e:e5:82:a3:14:2f:85:c2:f6:08:cc:79:e4:b4:e3: a8:17:98:6f:59:b9:a9:9a:f6:3b:4e:bc:ac:81:a7: 89:b0:8c:2e:6f:f8:8a:7a:1f:f4:68:d3:25:6c:5c: 71:bb:4c:9e:41:81:2a:7b:04:c4:94:12:e7:9f:a2: 44:b3:b7:37:a2:fb:be:22:31:2a:63:17:55:ad:ab: 01:d3:3c:e8:11:34:2a:15:8f:c5:bd:29:bb:69:f6: c5:c3:57:14:5a:cf:b3:3d:ea:7a:af:63:30:a1:a1: c0:0b:52:db:ef:61:d7:e1:80:7a:bd:30:df:83:62: 57:fe:5b:bd:01:0d:5f:92:b9:28:a1:f7:2c:3c:3b: 16:df:3a:d4:56:08:bd:f2:0b:89:a7:ed:f7:58:ec: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1D:F1:66:D8:85:C8:C2:55:42:BC:E8:16:A3:4E:DE:41:08:AC:6D X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:96:4e:6a:ad:a9:71:a6:2d:48:13:86:0b:7f:74:7a:0f:a6: cb:28:3c:82:5a:77:fd:91:ec:47:f5:97:c2:b8:8a:2a:f0:30: 19:84:1b:b0:1c:74:d1:02:d9:77:53:df:15:01:47:91:96:5f: 9c:28:e1:d6:7a:5a:7d:46:8c:94:ab:46:54:a0:5f:0b:e8:e1: 00:8e:43:c4:b0:bd:3d:30:c5:81:c1:7a:ed:ae:35:33:9f:1c: af:06:02:d5:8a:f9:0d:30:bb:4f:0c:5c:8f:bd:59:ca:a8:c8: fe:92:21:9f:f4:62:24:fd:eb:2c:dc:ee:72:86:38:e0:79:83: 7c:71:ab:6c:57:69:e5:1c:e5:d2:a5:0d:dd:a0:a6:a2:51:a2: 95:cd:92:6d:39:50:ff:66:a3:b6:74:6d:94:0c:67:b8:bc:8a: e8:e8:09:53:35:44:22:d6:0b:f4:73:8c:e1:1c:9c:93:4c:7f: 80:ca:50:0f:23:9c:14:43:e6:13:38:90:0c:3d:4b:0f:f8:d8: 51:c9:c0:68:a5:f8:e1:19:dd:c3:16:18:25:ff:98:73:dc:38: ef:15:18:b6:4a:05:5e:67:cd:81:20:e5:e7:87:56:32:34:44: fb:0d:5b:b2:56:c9:ba:81:d3:43:14:4b:fe:15:ae:c7:40:f7: 60:28:93:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjYwMzAxMjM1MjEzWhcNMjYwMzA4MjM1MjEzWjAYMRYwFAYD VQQDEw02OWE0ZDEyZS00YzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpB9TuotV9kHh9pIh6X3A/M1egLsJSbl4uU5DobR4koFqj+IMdTRUmWoKi5a OsOK4LlhcTpr08uEEOOvjzyWFQRtz4VHdIGmeGa7rpWvewpD6pmJkwUqFYYcBlN8 Lc25mZ9GHjKGqGFO5YKjFC+FwvYIzHnktOOoF5hvWbmpmvY7TrysgaeJsIwub/iK eh/0aNMlbFxxu0yeQYEqewTElBLnn6JEs7c3ovu+IjEqYxdVrasB0zzoETQqFY/F vSm7afbFw1cUWs+zPep6r2MwoaHAC1Lb72HX4YB6vTDfg2JX/lu9AQ1fkrkoofcs PDsW3zrUVgi98guJp+33WOyOJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsd8WbY hcjCVUK86BajTt5BCKxtMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkpZOaq2pcaYtSBOGC390eg+myyg8glp3/ZHsR/WXwriKKvAwGYQbsBx00QLZ d1PfFQFHkZZfnCjh1npafUaMlKtGVKBfC+jhAI5DxLC9PTDFgcF67a41M58crwYC 1Yr5DTC7Twxcj71ZyqjI/pIhn/RiJP3rLNzucoY44HmDfHGrbFdp5Rzl0qUN3aCm olGilc2SbTlQ/2ajtnRtlAxnuLyK6OgJUzVEItYL9HOM4Ryck0x/gMpQDyOcFEPm EziQDD1LD/jYUcnAaKX44RndwxYYJf+Yc9w47xUYtkoFXmfNgSDl54dWMjRE+w1b slbJuoHTQxRL/hWux0D3YCiTlw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:10:45 2026 by rpki-client