$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json) Hash identifier: Xj44YHuwgJZYsCH5ELvCgqxoK7tZc9qWtYLlHQGNn0k= Subject key identifier: 65:DF:D1:A8:5D:64:7E:BF:EB:CE:FB:1B:EF:CF:C7:ED:CE:AE:A2:A4 Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Certificate serial: 06F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft Manifest number: 06EB Signing time: Mon 02 Mar 2026 02:34:48 +0000 Manifest this update: Mon 02 Mar 2026 02:34:47 +0000 Manifest next update: Mon 09 Mar 2026 02:34:47 +0000 Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: c++27GHsLJtj1eX7iiN/Xqr3Rt+bJdFiAShIF5MSdL4=) 2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: Pg8G/Pvu/vL6s07U9VvSZMPJr+p68tGkbJJnBYeyeQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Validity Not Before: Mar 2 02:34:47 2026 GMT Not After : Mar 9 02:34:47 2026 GMT Subject: CN=69a4f748-68fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:1c:ad:af:48:3c:66:71:4a:77:04:a9:27: c3:fa:1b:31:26:f1:0d:65:2b:3f:9e:03:a9:f7:31: 6e:d3:b3:88:4c:48:78:87:b9:7a:0a:3a:c4:ca:68: 56:7e:a6:e5:d7:d6:52:16:e9:38:a9:cc:3c:cf:b0: 60:4f:ff:62:10:32:2b:13:1d:89:80:a8:25:18:5b: cb:8b:17:0d:0d:72:e8:bf:7c:e5:52:f7:55:01:e4: 7b:64:88:ff:1d:13:d1:22:7c:71:d5:7a:fa:3a:68: 7a:c6:ee:d5:51:df:c8:b8:e6:ec:2e:e8:fc:ac:41: 40:34:45:e1:0d:8c:ea:fc:e4:87:e5:06:80:ef:7e: 2a:5e:ad:31:76:49:14:09:d4:1d:f0:09:7c:d8:44: cf:53:5b:f2:96:8c:cb:80:de:f4:62:fa:ac:2b:9a: 7c:bf:d9:9c:84:51:aa:f4:f9:c0:fe:c3:3f:2a:49: da:6f:d2:f4:3a:72:93:1f:98:21:3e:f1:6e:7c:45: 96:4c:31:ab:a9:a9:2b:4a:9f:ca:c4:4b:02:86:af: 5a:7e:02:34:5b:ea:cb:76:33:d9:14:7d:a3:ac:f5: ce:3d:9f:8f:1b:a1:8a:91:f1:6b:f5:29:54:cb:d5: 54:59:26:be:ed:49:67:c7:ed:de:63:bb:d4:40:38: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:D1:A8:5D:64:7E:BF:EB:CE:FB:1B:EF:CF:C7:ED:CE:AE:A2:A4 X509v3 Authority Key Identifier: keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5d:6f:d4:a7:ee:57:00:61:d2:47:78:25:7b:5b:4c:9b:b0: 9c:dd:21:3a:40:16:eb:67:bc:9b:47:2f:80:79:a9:a4:47:be: bc:7d:e9:f2:ce:92:9e:04:db:5b:b7:52:4c:7d:b3:c8:e8:f8: 8d:9f:76:ee:95:c8:9b:21:73:d0:95:89:bc:3d:c0:f2:2f:c5: a7:22:fe:8d:92:ae:df:34:21:22:0e:0f:b3:ea:48:10:89:0d: 6c:0f:7e:f2:fd:7c:6f:a3:3d:f2:0a:dd:37:38:fc:45:f8:07: d7:dc:7d:ef:ff:d2:26:a3:3e:35:7b:a2:55:df:fb:b8:7b:87: 93:35:54:5a:fc:ab:6a:e5:85:51:cb:e9:f2:30:82:38:ed:ff: 51:aa:03:fd:f0:37:45:e3:0b:23:16:4a:e7:a7:e3:3b:16:7f: 17:8d:ff:8e:d0:15:f3:c6:10:ec:53:35:ef:2a:99:ab:3b:50: b1:58:1c:55:82:58:ec:b5:bc:da:c2:8f:c6:51:bd:1c:12:3d: 87:89:71:c5:0d:c1:e6:4c:9f:b8:20:c7:5c:7e:cb:c2:eb:2e: a3:45:64:39:f4:2c:04:27:91:26:53:8a:9f:aa:ac:64:05:2e: e6:71:9e:94:d0:a5:60:5a:8b:b8:33:fb:44:a3:78:a9:ec:6d: 0f:79:4c:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5 Mzc2QkVGRTEwHhcNMjYwMzAyMDIzNDQ3WhcNMjYwMzA5MDIzNDQ3WjAYMRYwFAYD VQQDEw02OWE0Zjc0OC02OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPgcra9IPGZxSncEqSfD+hsxJvENZSs/ngOp9zFu07OITEh4h7l6CjrEymhW fqbl19ZSFuk4qcw8z7BgT/9iEDIrEx2JgKglGFvLixcNDXLov3zlUvdVAeR7ZIj/ HRPRInxx1Xr6Omh6xu7VUd/IuObsLuj8rEFANEXhDYzq/OSH5QaA734qXq0xdkkU CdQd8Al82ETPU1vylozLgN70YvqsK5p8v9mchFGq9PnA/sM/Kknab9L0OnKTH5gh PvFufEWWTDGrqakrSp/KxEsChq9afgI0W+rLdjPZFH2jrPXOPZ+PG6GKkfFr9SlU y9VUWSa+7Ulnx+3eY7vUQDiNtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXf0ahd ZH6/6877G+/Px+3OrqKkMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2 QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3 LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JENC80RTg3QTQ2QTg2QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1 X2JoZVRaRkFCcmlUZHI3LUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbV1v1KfuVwBh0kd4JXtbTJuwnN0hOkAW62e8m0cvgHmppEe+vH3p8s6SngTb W7dSTH2zyOj4jZ927pXImyFz0JWJvD3A8i/FpyL+jZKu3zQhIg4Ps+pIEIkNbA9+ 8v18b6M98grdNzj8RfgH19x97//SJqM+NXuiVd/7uHuHkzVUWvyrauWFUcvp8jCC OO3/UaoD/fA3ReMLIxZK56fjOxZ/F43/jtAV88YQ7FM17yqZqztQsVgcVYJY7LW8 2sKPxlG9HBI9h4lxxQ3B5kyfuCDHXH7Lwusuo0VkOfQsBCeRJlOKn6qsZAUu5nGe lNClYFqLuDP7RKN4qextD3lMXg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:04:22 2026 by rpki-client