$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: KdMzzCD9uN6SlYqPGS/EbkN6b6Rapea5MPKThSPNFYI= Subject key identifier: C0:AC:AA:AF:C6:B0:F0:8B:61:98:40:44:6B:CE:26:C6:B3:3E:32:07 Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: C5 Signing time: Sun 01 Mar 2026 08:13:46 +0000 Manifest this update: Sun 01 Mar 2026 08:13:46 +0000 Manifest next update: Sun 08 Mar 2026 08:13:46 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: VDC+NeaolZuqsr+1jBWSIv17SnOG9ZxcizPysBwH0y0=) 2: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: IYpTiwoDdKk+DKwv65zZ7BTxOeFfDIMdePJWFd5JpGE=) 3: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: 0dFbZ0ducL2EHPg1wlqAHlDGhzD129B1kp1qJTYRuTU=) 4: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: MFMadZ9hIQ4pKDfnggH43mNknioivrdN+SzVsH0zBtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Mar 1 08:13:46 2026 GMT Not After : Mar 8 08:13:46 2026 GMT Subject: CN=69a3f53a-a29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:44:f6:77:13:b0:d9:5b:1a:c2:b8:21:87: 1f:9d:f2:0d:85:89:3e:82:c0:ac:39:cb:21:19:f5: 55:d3:84:f6:5e:28:b2:95:38:10:de:a8:00:3c:c8: 85:b8:2c:0e:1d:c0:5c:4d:3a:d6:e8:41:64:73:18: 33:91:80:c4:74:8c:73:3b:24:67:8b:54:75:46:7f: bc:33:2d:a5:fd:b4:4f:de:7c:56:59:a0:0f:8c:c4: 07:45:65:0f:d5:e3:a1:1e:fe:75:6d:f5:d1:a0:cb: 72:48:a6:1f:6f:2b:c9:c7:f2:68:7c:24:1b:ba:14: d2:a5:c3:81:b4:19:b5:d0:c2:c3:d3:08:a9:f7:37: a1:6a:b5:b7:8c:09:89:54:7a:dd:e9:16:8d:e1:87: c3:17:30:97:ea:3f:5a:1d:73:9e:ac:43:04:df:88: 9d:6a:5d:40:2c:a8:f8:52:3c:70:b6:09:5e:53:27: 94:2c:1b:bc:c3:c4:4e:61:26:e3:04:5f:0f:69:6a: 3e:53:36:17:ac:97:a2:8e:9d:32:d4:10:2e:89:07: 1a:05:be:88:31:90:f7:7a:1b:0a:18:30:26:fc:a0: 85:47:d1:9b:df:35:2a:af:42:25:44:f0:40:56:59: f6:c3:a4:93:6a:c1:3f:a0:b2:2b:fb:4e:b2:f4:6f: 08:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AC:AA:AF:C6:B0:F0:8B:61:98:40:44:6B:CE:26:C6:B3:3E:32:07 X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a2:a6:21:8c:63:87:27:9e:6f:7a:5b:35:29:ad:26:89:49: 46:bb:53:59:3a:68:73:56:09:50:0a:4e:62:c5:18:a7:6d:3e: 15:ae:35:62:11:ef:9b:8c:1a:bb:8c:74:07:7d:ef:1e:4c:bc: 88:99:42:d2:4b:bd:32:a0:74:bc:4d:12:cc:fe:84:cc:75:67: c4:a0:e0:11:8b:84:d4:85:de:fe:c3:ab:4c:2d:56:00:42:eb: 14:1b:98:a0:d0:2e:25:89:ed:12:9f:1f:40:bb:1b:78:46:34: b1:a7:62:c6:e0:44:e1:ba:5b:fc:98:b1:aa:86:32:6d:c4:df: 9d:c9:2e:02:77:74:f2:08:f3:d1:e0:d2:e9:20:78:55:de:50: 33:57:59:08:62:c3:fd:ce:8d:05:0c:71:97:a3:1a:91:db:96: 00:a1:7a:8d:b8:4f:e8:28:fb:83:05:d7:61:09:6f:cf:38:4d: 52:45:79:2f:95:05:e6:fe:8e:e0:b5:14:40:0a:94:5a:92:c1: 68:08:21:a7:66:dc:60:3b:6f:e4:1a:5b:da:3d:cc:14:1e:c8: 2d:f0:3b:80:af:53:cd:30:32:94:f1:0e:1d:55:7c:ee:c9:77: a6:88:c0:47:5f:19:95:3e:e6:a4:89:a2:f7:24:5d:08:65:1e: ad:17:34:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThERjUxMTAvBgNVBAUTKEM2Rjc1OEVDRERDNEM5QjBGNzJGMDY1QzM1QUQ1NDY5 NzQzMjcxMUIwHhcNMjYwMzAxMDgxMzQ2WhcNMjYwMzA4MDgxMzQ2WjAYMRYwFAYD VQQDEw02OWEzZjUzYS1hMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1xE9ncTsNlbGsK4IYcfnfINhYk+gsCsOcshGfVV04T2XiiylTgQ3qgAPMiF uCwOHcBcTTrW6EFkcxgzkYDEdIxzOyRni1R1Rn+8My2l/bRP3nxWWaAPjMQHRWUP 1eOhHv51bfXRoMtySKYfbyvJx/JofCQbuhTSpcOBtBm10MLD0wip9zeharW3jAmJ VHrd6RaN4YfDFzCX6j9aHXOerEME34idal1ALKj4UjxwtgleUyeULBu8w8ROYSbj BF8PaWo+UzYXrJeijp0y1BAuiQcaBb6IMZD3ehsKGDAm/KCFR9Gb3zUqr0IlRPBA Vln2w6STasE/oLIr+06y9G8I9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCsqq/G sPCLYZhARGvOJsazPjIHMB8GA1UdIwQYMBaAFMb3WOzdxMmw9y8GXDWtVGl0MnEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOERGNS8zMUUwRjE2QUY5 NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXliRDNMd1pjTmExVWFYUXlj UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OERGNS8zMUUwRjE2QUY5NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXli RDNMd1pjTmExVWFYUXljUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdaKmIYxjhyeeb3pbNSmtJolJRrtTWTpoc1YJUApOYsUYp20+Fa41YhHvm4wa u4x0B33vHky8iJlC0ku9MqB0vE0SzP6EzHVnxKDgEYuE1IXe/sOrTC1WAELrFBuY oNAuJYntEp8fQLsbeEY0sadixuBE4bpb/JixqoYybcTfnckuAnd08gjz0eDS6SB4 Vd5QM1dZCGLD/c6NBQxxl6MakduWAKF6jbhP6Cj7gwXXYQlvzzhNUkV5L5UF5v6O 4LUUQAqUWpLBaAghp2bcYDtv5Bpb2j3MFB7ILfA7gK9TzTAylPEOHVV87sl3pojA R18ZlT7mpImi9yRdCGUerRc0Zg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:38:20 2026 by rpki-client