$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: 2Q3lPKTAaXXcWtY1+UX36xmY2lGU35RXF2t/NRqYJOw= Subject key identifier: AB:92:D7:4B:DF:77:2A:5C:03:47:70:3D:B1:01:1B:90:CD:09:E4:92 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 0186 Signing time: Mon 02 Mar 2026 00:47:56 +0000 Manifest this update: Mon 02 Mar 2026 00:47:55 +0000 Manifest next update: Mon 09 Mar 2026 00:47:55 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: Djzhx9fLmr+K0x2p0rFQIez8KJWudzHYPGC58OVRtfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Mar 2 00:47:55 2026 GMT Not After : Mar 9 00:47:55 2026 GMT Subject: CN=69a4de3c-69a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:da:42:fb:95:ed:eb:ca:2a:eb:d1:c7:f0: 8b:e6:3a:94:07:49:fe:d3:d4:54:70:3a:c5:ba:54: ae:05:13:9e:4a:35:85:79:d0:f4:06:4a:66:0f:bc: c8:cc:05:26:c5:99:63:db:7a:dc:0f:18:a7:11:d9: 2f:19:65:f9:8d:2f:55:3d:97:45:80:3f:c4:ea:a7: 95:ea:31:e3:2e:6c:40:9a:42:a2:d7:6f:85:f8:1a: d6:bf:95:44:d8:d5:f5:d8:1d:97:3a:80:78:a7:36: 38:a5:df:f3:ea:e0:63:e3:bb:0c:29:03:26:5b:d8: 18:f5:b3:48:13:10:6f:03:83:d8:94:b1:59:f7:80: e7:58:a0:44:7f:ac:87:1a:b6:8d:63:fa:17:be:99: 42:b4:be:25:b1:2f:e9:fc:f3:35:3a:a1:1e:16:07: 0f:7b:cd:b6:c2:b8:f0:55:9a:7e:30:7e:1d:2a:ba: 7e:9e:09:ef:dc:92:90:26:4d:2c:33:93:36:df:a5: f4:df:52:72:fa:30:8a:2e:25:d3:bb:53:c1:68:1c: 58:6b:d2:a3:11:7a:23:8b:35:7d:15:e6:c0:89:bd: 1c:3d:3e:75:9a:e2:b1:38:92:d6:e3:48:7c:f3:55: 60:e4:af:cf:e9:96:b1:14:b3:2a:5c:29:50:8f:aa: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:92:D7:4B:DF:77:2A:5C:03:47:70:3D:B1:01:1B:90:CD:09:E4:92 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:88:bb:86:82:8f:33:db:e6:11:09:6a:b0:b6:06:ed:4a:17: f8:ab:b4:67:11:25:8c:c7:ec:e3:22:b5:91:c9:8c:7b:8b:db: e0:c2:40:5e:d7:c5:d2:9c:92:b3:fc:01:73:7e:18:0e:17:05: cb:50:b1:a8:de:b8:21:95:fa:28:6b:bf:84:59:b2:02:a7:ee: ac:25:01:58:72:f2:3b:6c:ac:66:e7:2f:0c:4e:fb:5e:6e:c2: 73:6d:6c:0b:f3:cb:f8:f5:91:56:6c:c0:b0:01:86:3b:59:95: f3:06:14:c4:82:0c:9c:94:57:17:04:2c:5c:15:f0:d2:54:49: d9:ad:23:db:5d:1c:e2:a5:5f:90:b2:7b:21:0c:5d:86:62:85: 8f:84:ae:ce:93:4c:c3:3c:9b:ae:4d:71:1e:ff:18:1b:a6:43: 33:e3:55:6c:e4:4e:84:4b:d9:88:fa:69:21:57:8b:4c:2a:53: 32:39:41:16:54:6f:c7:18:b1:75:0f:2a:9b:66:4b:e4:b6:9c: 2d:fc:ae:0b:bb:64:7a:27:78:03:10:63:e3:b8:b4:d2:b4:f0: e2:de:a4:47:71:39:73:05:e3:37:19:2b:12:d6:38:ab:3c:24: 05:d9:be:f9:8d:c9:c3:82:d6:ef:a6:01:82:aa:51:ce:3b:9e: 21:fc:22:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjYwMzAyMDA0NzU1WhcNMjYwMzA5MDA0NzU1WjAYMRYwFAYD VQQDEw02OWE0ZGUzYy02OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9jaQvuV7evKKuvRx/CL5jqUB0n+09RUcDrFulSuBROeSjWFedD0BkpmD7zI zAUmxZlj23rcDxinEdkvGWX5jS9VPZdFgD/E6qeV6jHjLmxAmkKi12+F+BrWv5VE 2NX12B2XOoB4pzY4pd/z6uBj47sMKQMmW9gY9bNIExBvA4PYlLFZ94DnWKBEf6yH GraNY/oXvplCtL4lsS/p/PM1OqEeFgcPe822wrjwVZp+MH4dKrp+ngnv3JKQJk0s M5M236X031Jy+jCKLiXTu1PBaBxYa9KjEXojizV9FebAib0cPT51muKxOJLW40h8 81Vg5K/P6ZaxFLMqXClQj6pk1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuS10vf dypcA0dwPbEBG5DNCeSSMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkYi7hoKPM9vmEQlqsLYG7UoX+Ku0ZxEljMfs4yK1kcmMe4vb4MJAXtfF0pyS s/wBc34YDhcFy1CxqN64IZX6KGu/hFmyAqfurCUBWHLyO2ysZucvDE77Xm7Cc21s C/PL+PWRVmzAsAGGO1mV8wYUxIIMnJRXFwQsXBXw0lRJ2a0j210c4qVfkLJ7IQxd hmKFj4SuzpNMwzybrk1xHv8YG6ZDM+NVbOROhEvZiPppIVeLTCpTMjlBFlRvxxix dQ8qm2ZL5LacLfyuC7tkeid4AxBj47i00rTw4t6kR3E5cwXjNxkrEtY4qzwkBdm+ +Y3Jw4LW76YBgqpRzjueIfwi2A== -----END CERTIFICATE-----Generated at Mon Mar 2 15:01:57 2026 by rpki-client