$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: hLbRL69vi7JpPcmK5TY41EdDTuSk/IJ5LBZobvmZit4= Subject key identifier: AF:8C:42:8F:51:62:86:74:BB:03:BA:AA:08:52:13:34:9C:DA:BE:6A Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 08F2 Signing time: Mon 02 Mar 2026 02:06:25 +0000 Manifest this update: Mon 02 Mar 2026 02:06:24 +0000 Manifest next update: Mon 09 Mar 2026 02:06:24 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: yvoBKBHBYZRXBnHTtvCTCC1X1guVtAqE5WObASa7CX8=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: cUXww9pLUmzXMLoFEIgXrShzexTLcuKYoU1Hg9CwYj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Mar 2 02:06:24 2026 GMT Not After : Mar 9 02:06:24 2026 GMT Subject: CN=69a4f0a1-35e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:f1:87:5d:44:31:74:d3:c6:13:58:a4:2f: d4:1a:8e:7f:fc:07:83:98:ac:ea:84:33:1c:cb:64: 4d:fe:2d:0f:38:f9:17:45:4f:d2:36:75:77:07:bb: 28:81:04:2a:da:d6:be:ff:6f:6b:8a:15:a4:7b:83: 93:7a:d2:42:e2:5d:04:76:f1:4b:01:be:30:f8:c9: b1:74:a1:f5:eb:60:18:b5:98:91:67:20:16:cd:fd: 56:4f:41:7b:4d:ad:60:11:33:3e:cc:f5:b7:3b:7f: 4b:5d:ca:13:30:05:9a:95:a2:64:c1:62:1a:dd:bd: 0e:00:4a:1a:8a:b9:01:02:7d:2c:db:f4:9e:d1:3b: 50:dd:c0:39:ca:d0:2a:cd:ce:72:f1:90:1e:cb:44: f5:96:2e:d3:35:23:16:7c:f9:2b:07:42:9b:31:c5: f5:59:d5:17:45:e4:73:c5:1a:5d:8d:2c:27:fa:62: 3d:08:b6:c8:cb:e2:29:1e:6b:e6:17:3f:f6:29:d1: 01:6e:f1:1f:b1:75:a5:13:2c:c2:76:6f:f4:b7:ee: cc:3e:65:e1:8e:67:ad:06:87:59:c6:e3:b1:19:eb: c7:d4:d7:f9:89:93:37:00:dc:94:4c:c1:77:08:d9: 15:e0:52:40:eb:ed:95:0b:e7:98:62:53:fe:8e:d4: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8C:42:8F:51:62:86:74:BB:03:BA:AA:08:52:13:34:9C:DA:BE:6A X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7d:0e:d2:ae:0f:56:e8:35:87:1f:22:f7:92:ce:29:51:5f: e2:d1:e5:ed:53:0c:c0:1b:41:f2:1c:b8:d7:7a:32:1c:c4:0b: d3:88:87:44:0e:53:af:4d:a8:d2:26:3a:e3:ee:be:29:0c:ae: 8a:0b:70:5a:c7:30:97:ff:fd:1e:f2:f2:9e:20:db:d4:c2:24: 0b:de:9e:46:eb:d1:f1:67:7a:48:3b:8c:f5:ae:51:cf:ab:a9: cb:e7:9c:88:c3:38:7a:03:f4:a8:1e:42:0a:f8:f5:9b:0a:7d: e9:28:69:45:5a:21:3c:1d:f6:7c:7c:39:0d:d3:84:93:4d:27: 1f:1a:cf:99:f1:87:91:46:8b:2d:92:06:2f:01:88:fc:fc:63: 7d:6b:02:39:22:a4:f5:d6:1a:af:09:86:db:8d:91:98:1f:82: 0d:da:72:55:26:44:1d:8d:59:0c:1a:ec:65:fa:13:82:43:fb: 73:68:1c:92:2f:88:df:28:03:30:62:3b:08:4c:c1:d5:c6:38: 86:bc:b3:1e:45:99:ae:f4:ac:81:17:47:7f:58:30:8d:74:95: db:47:07:b9:4b:8f:dc:69:7e:d4:a8:3d:57:5a:82:d4:68:e3: d3:3c:b3:08:7a:4a:9b:67:9d:6f:0b:78:71:0e:92:69:03:f6: 65:e0:20:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjYwMzAyMDIwNjI0WhcNMjYwMzA5MDIwNjI0WjAYMRYwFAYD VQQDEw02OWE0ZjBhMS0zNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQ7xh11EMXTTxhNYpC/UGo5//AeDmKzqhDMcy2RN/i0POPkXRU/SNnV3B7so gQQq2ta+/29rihWke4OTetJC4l0EdvFLAb4w+MmxdKH162AYtZiRZyAWzf1WT0F7 Ta1gETM+zPW3O39LXcoTMAWalaJkwWIa3b0OAEoairkBAn0s2/Se0TtQ3cA5ytAq zc5y8ZAey0T1li7TNSMWfPkrB0KbMcX1WdUXReRzxRpdjSwn+mI9CLbIy+IpHmvm Fz/2KdEBbvEfsXWlEyzCdm/0t+7MPmXhjmetBodZxuOxGevH1Nf5iZM3ANyUTMF3 CNkV4FJA6+2VC+eYYlP+jtSP5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+MQo9R YoZ0uwO6qghSEzSc2r5qMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXH0O0q4PVug1hx8i95LOKVFf4tHl7VMMwBtB8hy413oyHMQL04iHRA5Tr02o 0iY64+6+KQyuigtwWscwl//9HvLyniDb1MIkC96eRuvR8Wd6SDuM9a5Rz6upy+ec iMM4egP0qB5CCvj1mwp96ShpRVohPB32fHw5DdOEk00nHxrPmfGHkUaLLZIGLwGI /PxjfWsCOSKk9dYarwmG242RmB+CDdpyVSZEHY1ZDBrsZfoTgkP7c2gcki+I3ygD MGI7CEzB1cY4hryzHkWZrvSsgRdHf1gwjXSV20cHuUuP3Gl+1Kg9V1qC1Gjj0zyz CHpKm2edbwt4cQ6SaQP2ZeAg6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:18 2026 by rpki-client