$ rpki-client -vvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft File: XDlbosoKv2WIhyaHTHgktpt4mZU.mft (raw, json) Hash identifier: uBqka2LgOCh/hJcE7TGacYkbsSeNuBq9r5yLFt4GfWs= Subject key identifier: A4:87:15:08:AF:84:76:11:3E:B5:50:10:E7:3A:FC:84:AF:D9:B1:C4 Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Certificate serial: 0ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft Manifest number: 0EC9 Signing time: Mon 02 Mar 2026 00:07:18 +0000 Manifest this update: Mon 02 Mar 2026 00:07:17 +0000 Manifest next update: Mon 09 Mar 2026 00:07:17 +0000 Files and hashes: 1: XDlbosoKv2WIhyaHTHgktpt4mZU.crl (hash: yz09B1co+cDVKDjI3yZuwyEdEpyNDbzXy3VSbz1ng/s=) 2: AECDA1B0448F11EDACC30815C4F9AE02.roa (hash: FqhmTiuHqY8gw1t5J7HJvzNjKMgTbM9279JGx7rvFLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Validity Not Before: Mar 2 00:07:17 2026 GMT Not After : Mar 9 00:07:17 2026 GMT Subject: CN=69a4d4b6-cae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:58:18:65:e3:5c:0c:e4:f7:3b:08:4d:fb: 99:ea:05:83:5a:d9:52:0e:60:76:97:a0:23:6d:9e: 3a:51:5c:f2:a2:79:ac:6e:06:15:54:8f:55:75:51: fe:f8:53:ba:2d:8a:f5:16:60:dd:3f:a3:9e:bc:5e: 03:9a:a4:66:39:2e:93:5b:b8:13:ad:25:14:42:76: f8:e0:3f:be:94:c2:fc:c9:8a:d4:aa:74:c9:29:6e: 3d:2e:14:fd:c6:2d:15:92:d2:60:e2:a7:11:45:de: 07:07:d2:f2:50:fb:89:83:fb:1e:98:2d:70:30:e1: b9:7d:4f:c2:e6:f3:c0:bf:7a:17:24:a6:2d:aa:c6: 96:82:77:e8:40:b4:c4:41:0c:67:7f:6f:61:9f:94: c0:07:2b:1b:8c:0c:94:aa:59:6b:53:f4:c9:8d:a1: 0f:99:02:93:ab:b6:d8:51:94:6f:b8:b2:49:ea:f6: ed:d9:38:f6:c3:5a:64:4b:1f:ea:68:02:57:3a:31: 19:44:e2:84:e8:14:0f:63:78:b1:16:f5:3f:ae:6d: 5c:00:95:b6:04:19:a6:8b:72:b1:bb:14:9a:8b:da: f3:e2:65:03:8a:4a:d8:0e:f7:2d:3e:a0:f7:4c:e4: 46:45:9f:70:d4:82:54:41:96:93:32:7e:d0:ca:26: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:87:15:08:AF:84:76:11:3E:B5:50:10:E7:3A:FC:84:AF:D9:B1:C4 X509v3 Authority Key Identifier: keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:15:a9:5d:1b:aa:79:c2:e9:5a:22:ff:2b:99:88:4c:c4:78: 81:29:be:ea:7b:23:82:44:82:5e:42:29:4d:0a:ec:f8:ff:da: d5:e1:31:94:f0:aa:89:ff:54:84:77:72:a9:13:61:c3:4a:19: 3f:fb:e5:85:3c:dd:c0:1e:e4:21:5e:73:11:de:72:fb:c4:b5: 10:1c:4d:71:ce:45:d3:29:24:fb:7c:36:a4:7c:fb:2d:94:6a: 40:4f:88:01:d7:84:04:ca:91:02:1c:ba:2c:cf:9f:c8:4f:4d: fa:a8:fe:2f:92:3b:c7:5e:e2:98:6d:06:8a:58:47:29:1a:16: c7:5e:ec:2d:39:57:31:2a:78:b8:83:7a:3d:86:1a:38:24:4e: ec:fc:b2:c1:07:f8:8f:9b:a3:54:3f:c4:8d:3b:3f:b5:20:79: 7f:41:07:d4:7b:5e:ec:41:39:db:ea:58:a1:d7:44:86:0f:b4: ea:b2:97:23:4e:4c:42:8d:58:41:50:61:f4:76:dd:1d:57:0f: f1:b5:48:8e:ba:d3:be:bf:e7:f9:5e:a7:f2:07:4a:a5:26:db: af:9c:86:17:99:b9:17:d2:71:8b:09:a6:92:0b:72:98:ef:e8: f8:47:45:18:d9:58:b8:bd:4d:92:f2:3f:c4:80:b5:88:95:36: cb:bc:99:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY2RTUxMTAvBgNVBAUTKDVDMzk1QkEyQ0EwQUJGNjU4ODg3MjY4NzRDNzgyNEI2 OUI3ODk5OTUwHhcNMjYwMzAyMDAwNzE3WhcNMjYwMzA5MDAwNzE3WjAYMRYwFAYD VQQDEw02OWE0ZDRiNi1jYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OtYGGXjXAzk9zsITfuZ6gWDWtlSDmB2l6AjbZ46UVzyonmsbgYVVI9VdVH+ +FO6LYr1FmDdP6OevF4DmqRmOS6TW7gTrSUUQnb44D++lML8yYrUqnTJKW49LhT9 xi0VktJg4qcRRd4HB9LyUPuJg/semC1wMOG5fU/C5vPAv3oXJKYtqsaWgnfoQLTE QQxnf29hn5TABysbjAyUqllrU/TJjaEPmQKTq7bYUZRvuLJJ6vbt2Tj2w1pkSx/q aAJXOjEZROKE6BQPY3ixFvU/rm1cAJW2BBmmi3KxuxSai9rz4mUDikrYDvctPqD3 TORGRZ9w1IJUQZaTMn7Qyiak4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSHFQiv hHYRPrVQEOc6/ISv2bHEMB8GA1UdIwQYMBaAFFw5W6LKCr9liIcmh0x4JLabeJmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjZFNS81NjQzMDU4NkEy NzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3YyV0loeWFIVEhna3RwdDRt WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEbGJvc29LdjJXSWh5YUhUSGdrdHB0NG1aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjZFNS81NjQzMDU4NkEyNzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3Yy V0loeWFIVEhna3RwdDRtWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjBWpXRuqecLpWiL/K5mITMR4gSm+6nsjgkSCXkIpTQrs+P/a1eExlPCqif9U hHdyqRNhw0oZP/vlhTzdwB7kIV5zEd5y+8S1EBxNcc5F0ykk+3w2pHz7LZRqQE+I AdeEBMqRAhy6LM+fyE9N+qj+L5I7x17imG0GilhHKRoWx17sLTlXMSp4uIN6PYYa OCRO7PyywQf4j5ujVD/EjTs/tSB5f0EH1Hte7EE52+pYoddEhg+06rKXI05MQo1Y QVBh9HbdHVcP8bVIjrrTvr/n+V6n8gdKpSbbr5yGF5m5F9JxiwmmkgtymO/o+EdF GNlYuL1NkvI/xIC1iJU2y7yZXg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:17 2026 by rpki-client