$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft File: xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json) Hash identifier: OuFGPOOC9WlRcE/e1Gt6/7sVz6nfSbZwwj/gJi9lV5E= Subject key identifier: 8E:9B:0E:90:03:E4:F5:18:ED:8D:70:66:8B:4F:F2:4E:E7:FD:95:3E Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6 Certificate issuer: /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft Manifest number: 0528 Signing time: Mon 02 Mar 2026 01:44:08 +0000 Manifest this update: Mon 02 Mar 2026 01:44:06 +0000 Manifest next update: Mon 09 Mar 2026 01:44:06 +0000 Files and hashes: 1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: akzvnSlj2gDROjnJOdl1vSIiWs5Wf3n3SK51hYdMrqU=) 2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: bVXZbXIetCBnuQjaSLYLUQur0ysTmVtMviP//NDBnCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6 Validity Not Before: Mar 2 01:44:06 2026 GMT Not After : Mar 9 01:44:06 2026 GMT Subject: CN=69a4eb68-1e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:89:17:6c:11:ed:66:05:2e:14:f5:bd:8b: 89:db:da:a8:9e:78:4e:ba:34:9d:53:c2:4b:e3:43: 7f:42:47:89:c6:00:03:17:40:5a:17:91:d1:1a:f4: 3e:46:a6:f8:79:46:a1:7a:c8:64:d5:50:b6:73:1f: 00:8d:d4:4f:3d:94:b3:dc:e0:e0:b6:77:b7:89:af: e6:0c:99:88:68:4a:3a:0d:03:b8:06:27:99:82:34: d3:df:c2:75:86:89:86:7c:d0:56:1f:17:ef:ff:71: ef:eb:0a:c3:1b:e3:66:e2:77:d4:13:ba:e8:5b:7a: 15:1d:8f:5e:5c:e6:22:70:29:47:61:a5:a4:a7:d5: 27:b8:d3:3c:87:e8:e4:7a:af:5f:5f:78:a4:12:67: dd:4c:1b:b2:74:17:2c:2a:5a:92:b4:c8:2f:fd:67: c0:4a:14:b5:99:8e:69:6d:62:5a:91:86:db:95:4c: da:52:5d:48:0b:5b:46:10:fa:51:3e:0d:5e:46:4c: 78:98:ce:d1:7f:bd:23:1a:ee:99:00:77:2e:2d:cc: 69:58:bc:bc:c2:a4:01:a0:f8:3a:b9:69:2e:72:a8: cd:3a:ed:6a:3c:07:91:cb:b2:c8:bf:55:18:6a:1f: 68:ad:8d:f5:4b:69:7b:e6:4d:af:f3:5c:19:0f:1e: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9B:0E:90:03:E4:F5:18:ED:8D:70:66:8B:4F:F2:4E:E7:FD:95:3E X509v3 Authority Key Identifier: keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:02:5a:4f:3f:67:dd:4b:ec:96:33:53:65:b1:6e:87:95:e8: 72:48:fb:d5:44:a9:98:09:b7:2e:21:4d:a7:fb:9e:72:ea:b1: 4e:85:05:40:2f:02:dc:9b:cd:32:bd:30:e9:9d:d6:84:87:4c: 98:ad:ff:da:31:66:cb:e2:28:7d:ee:88:8d:42:c1:38:8e:be: cd:30:60:c7:c3:bf:83:10:ba:32:16:15:aa:b0:ec:d4:fa:ce: 77:b7:9b:f8:e5:0c:e4:17:db:de:73:d3:6a:61:d4:93:00:3e: 50:e0:f6:d6:34:1e:60:f7:b5:28:0b:c0:aa:1d:ba:ef:d9:df: fa:64:24:2e:ce:fd:03:a3:21:4c:91:2d:d2:17:a8:d5:1e:9d: 81:c0:83:20:29:47:ef:07:88:57:7d:f7:16:29:27:e6:4e:3d: fc:4d:50:bc:20:5e:b1:de:8e:8e:bf:60:b5:5b:ba:f3:37:15: b1:6e:9f:d9:7d:97:e9:71:b0:07:19:1e:fe:42:13:6f:7a:95: 6f:49:83:f0:ec:4c:d4:d6:34:3a:72:c1:42:2f:64:0e:e6:57: 67:0f:96:48:7e:5c:61:de:11:37:d7:f2:01:6c:40:a3:a1:da: 0f:01:87:18:58:82:8a:cb:4f:35:10:3d:40:e6:7f:00:33:40: 57:74:8c:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFOTYxMTAvBgNVBAUTKEM1NUNFNzhDNDVGNDg1NjA4QjgyNDM2MDYwMDNEODBB OEExNkNDRDYwHhcNMjYwMzAyMDE0NDA2WhcNMjYwMzA5MDE0NDA2WjAYMRYwFAYD VQQDEw02OWE0ZWI2OC0xZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtguJF2wR7WYFLhT1vYuJ29qonnhOujSdU8JL40N/QkeJxgADF0BaF5HRGvQ+ Rqb4eUaheshk1VC2cx8AjdRPPZSz3ODgtne3ia/mDJmIaEo6DQO4BieZgjTT38J1 homGfNBWHxfv/3Hv6wrDG+Nm4nfUE7roW3oVHY9eXOYicClHYaWkp9UnuNM8h+jk eq9fX3ikEmfdTBuydBcsKlqStMgv/WfAShS1mY5pbWJakYbblUzaUl1IC1tGEPpR Pg1eRkx4mM7Rf70jGu6ZAHcuLcxpWLy8wqQBoPg6uWkucqjNOu1qPAeRy7LIv1UY ah9orY31S2l75k2v81wZDx4dDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6bDpAD 5PUY7Y1wZotP8k7n/ZU+MB8GA1UdIwQYMBaAFMVc54xF9IVgi4JDYGAD2AqKFszW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkU5Ni83QjlEM0RFQTM4 NUMxMUVDOUMyNTg3NzhDNEY5QUUwMi94VnpuakVYMGhXQ0xna05nWUFQWUNvb1d6 TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWem5qRVgwaFdDTGdrTmdZQVBZQ29vV3pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkU5Ni83QjlEM0RFQTM4NUMxMUVDOUMyNTg3NzhDNEY5QUUwMi94VnpuakVYMGhX Q0xna05nWUFQWUNvb1d6TlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYwJaTz9n3UvsljNTZbFuh5Xockj71USpmAm3LiFNp/uecuqxToUFQC8C3JvN Mr0w6Z3WhIdMmK3/2jFmy+Iofe6IjULBOI6+zTBgx8O/gxC6MhYVqrDs1PrOd7eb +OUM5Bfb3nPTamHUkwA+UOD21jQeYPe1KAvAqh2679nf+mQkLs79A6MhTJEt0heo 1R6dgcCDIClH7weIV333Fikn5k49/E1QvCBesd6Ojr9gtVu68zcVsW6f2X2X6XGw Bxke/kITb3qVb0mD8OxM1NY0OnLBQi9kDuZXZw+WSH5cYd4RN9fyAWxAo6HaDwGH GFiCistPNRA9QOZ/ADNAV3SMbA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:29 2026 by rpki-client