$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: ZYQHHFttgP3fMAHTFOl/w/5GDYweTja8/4TOVpO7H8E= Subject key identifier: 86:75:6E:77:BC:59:BA:03:4A:0F:7F:0F:A5:BC:84:66:B9:63:A3:27 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 19E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 1718 Signing time: Sun 01 Mar 2026 23:45:19 +0000 Manifest this update: Sun 01 Mar 2026 23:45:17 +0000 Manifest next update: Sun 08 Mar 2026 23:45:17 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: 7Tk9EtxJUwhst4sWODampECgbsM1KUH9mJClm3TBqug=) 2: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: d4qLINHxzHC2igs+d7HFx4FkCdNcECuX29TNhu6zNb0=) 3: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: psgGb3ANrPemsGMpfT9JCuPtdmIwAydwkIMUMCBZW4Y=) 4: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: E+w+5MHO8ewDddMwvBrrEc1lgQdxewrUq+QuhkdbY4w=) 5: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: mPbx6GaGGpEZcuE74LbXOCQRX7Jy5PlwX+gtNN/XZgI=) 6: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: ICs1TEIOpnxVUHj987EsWwjf3g4Xq+0ePZB44Mwwr1U=) 7: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: 9k+NHvdwPaL2Te9EGjJfwM53cdhWCBk6SgfyxFOLTzw=) 8: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: aHoZLC2L3b3zGtWoG3wC75zKVeJj+YJNHv+9PZJe2Ss=) 9: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: ddBHtww0w889dxAapR0tDPN4CvQLtyLCegfsQh3khs4=) 10: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: ycOq0IsrhA+YmUYWAhAsrdeYN4eebRnWEnTPZHVK1yQ=) 11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: kDxO50GD5AXFe4GFX5YhHhfReI3EK8WF+6AhrrSnCTE=) 12: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: Q48uJdRRBErvN0MaEglf3VQ+DumuMDNeFKgsuTsot38=) 13: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: IpBvgX/8iJN/8+lDdhFGN5U95vt5chfijPRQMRrbUXk=) 14: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: XnGwGjApnJiNJjn58kdU+fCn2kMRI3F8FSS/7+708cw=) 15: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: qwFwplU43G/hNJT02NNQ4dEUqw5/rgD0dEX0nQo6jl4=) 16: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: S/dafMyGnoaScUVOEOAthiDLiY0z9mFaUx5kMMduICQ=) 17: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: 1HlLCwNQIyozJV4R6Hnm8QJXf/uITnPoAyb7nipvwt4=) 18: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: wKUa5/luq9B8kVj6p/G8xPQ0IZcLYJQWqnLpb5Jwx4c=) 19: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: kxl0Ju03xol22MdSZwz8cEZSAcwOMODv9xQLWw9mcDU=) 20: 777818EE811411EABAD68C17C4F9AE02.roa (hash: yLBCrU/9RvuI/3Ay5n3EAF4Spgkoeqo4m1QHvpK9Jp0=) 21: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: OXnUP/JG3w1yEFtXRtB3EemUPot6EKdNnxfAnstSIjI=) 22: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: J0nwYlEYUE4zSCS6vykAZTwAKoV8/9btL95KquTry64=) 23: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: QEmI8rFO3uFcQUGRkaarXEyZTTwJDnEF3MflJofq8Ho=) 24: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: nT4IqSSGqtky3oV2UAtgSCBzreFM8SwkDqRJ1RnCCsQ=) 25: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: SntS7Vg1oFYriW3szo2h4z7g9R8/MBi6lWybX6Gw4N8=) 26: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: hoLS1gV18m+O3GqsO6stfQ7iSMrUj2IEPQoamxZ9gzQ=) 27: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: BxG0F/WjWpDjPTtb5RRrHO+ss4unVJo7zC1MzAvtUtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6627 (0x19e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Mar 1 23:45:17 2026 GMT Not After : Mar 8 23:45:17 2026 GMT Subject: CN=69a4cf8e-97fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:89:e7:f0:ea:ea:f2:1d:7c:cc:80:44:b1: 97:f1:cc:7d:a7:4a:27:08:99:a0:6a:5c:7d:7d:82: 91:25:1a:9a:f1:e3:d3:bd:fd:03:31:19:07:41:84: 1c:f5:6e:1c:82:70:46:f7:1e:1f:78:89:2a:e1:db: 88:78:12:d1:60:74:13:48:77:71:5c:5a:3e:e7:d1: 66:da:57:ef:0d:74:77:be:32:8c:59:40:bb:2c:e9: 2f:b5:36:54:93:a8:42:fc:70:f9:07:2a:c8:10:5f: 60:6b:71:4d:78:21:ba:5d:f9:df:f8:2c:17:63:14: 40:08:cf:5d:f3:9d:56:19:c0:67:67:d1:d1:f8:fb: 10:95:1d:f7:0f:36:e2:c2:a2:7d:76:88:56:50:a8: 8f:80:5c:7f:2c:a7:ee:34:2a:23:6c:73:b1:a7:c8: b7:d1:84:7c:47:6c:71:f2:0f:9f:7b:ab:76:b1:0a: 4e:06:a9:88:73:b5:27:bf:0e:8d:53:d0:0c:e1:97: 64:a3:cb:e9:86:5a:b2:d0:3d:ca:15:7f:8c:1d:f9: bc:b3:74:2b:b6:a6:39:70:b0:c9:41:33:c9:46:0f: 39:6e:12:86:4d:b0:e7:e8:0b:8e:28:07:2b:e8:e0: 8a:ef:5c:23:82:0a:f5:81:cf:4d:13:21:6d:9a:22: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:75:6E:77:BC:59:BA:03:4A:0F:7F:0F:A5:BC:84:66:B9:63:A3:27 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:54:61:d0:0b:bb:ae:63:5e:ba:41:63:7e:30:8a:27:17:8a: 39:e1:fc:ab:ac:1e:a4:e9:d5:31:89:52:cb:2f:61:7c:41:7f: 36:2d:a9:39:34:f3:cb:29:c5:e7:fc:17:77:36:93:c1:94:f1: a8:a8:45:8f:d9:75:18:6e:c1:c7:8c:55:9b:be:4c:ca:92:ec: 86:ad:39:b7:71:5d:36:85:17:86:c2:0a:df:2b:7f:c1:7a:3d: d7:c3:4e:da:7e:c9:57:fe:de:64:f7:71:9f:9b:78:9d:86:d2: 49:20:36:dd:31:3c:a9:1a:c2:83:dc:bf:2d:65:84:de:58:ff: 63:72:05:ce:31:03:5a:ef:53:cd:a2:01:0b:42:a3:16:d9:91: bd:96:13:48:b9:71:70:ed:e4:f4:de:06:40:ce:fa:78:d6:74: b7:a5:65:08:e5:19:48:87:3d:94:84:7a:8e:f4:9b:ab:d1:89: 9b:d9:91:f9:a9:c7:7e:07:8a:63:fd:14:c9:3b:60:36:b7:5e: 21:57:1c:89:21:05:cc:4f:df:c1:18:e1:7b:fd:6e:e8:1f:ab: 47:df:12:42:72:df:3e:6e:d4:57:01:f1:ff:ea:f1:d1:00:c3: 71:7e:7f:18:2a:7d:c4:1d:fc:7f:45:f3:98:83:28:b8:14:4e: 25:79:2a:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjYwMzAxMjM0NTE3WhcNMjYwMzA4MjM0NTE3WjAYMRYwFAYD VQQDEw02OWE0Y2Y4ZS05N2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9uJ5/Dq6vIdfMyARLGX8cx9p0onCJmgalx9fYKRJRqa8ePTvf0DMRkHQYQc 9W4cgnBG9x4feIkq4duIeBLRYHQTSHdxXFo+59Fm2lfvDXR3vjKMWUC7LOkvtTZU k6hC/HD5ByrIEF9ga3FNeCG6Xfnf+CwXYxRACM9d851WGcBnZ9HR+PsQlR33Dzbi wqJ9dohWUKiPgFx/LKfuNCojbHOxp8i30YR8R2xx8g+fe6t2sQpOBqmIc7Unvw6N U9AM4Zdko8vphlqy0D3KFX+MHfm8s3QrtqY5cLDJQTPJRg85bhKGTbDn6AuOKAcr 6OCK71wjggr1gc9NEyFtmiJq+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZ1bne8 WboDSg9/D6W8hGa5Y6MnMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG1Rh0Au7rmNeukFjfjCKJxeKOeH8q6wepOnVMYlSyy9hfEF/Ni2pOTTzyynF 5/wXdzaTwZTxqKhFj9l1GG7Bx4xVm75MypLshq05t3FdNoUXhsIK3yt/wXo918NO 2n7JV/7eZPdxn5t4nYbSSSA23TE8qRrCg9y/LWWE3lj/Y3IFzjEDWu9TzaIBC0Kj FtmRvZYTSLlxcO3k9N4GQM76eNZ0t6VlCOUZSIc9lIR6jvSbq9GJm9mR+anHfgeK Y/0UyTtgNrdeIVcciSEFzE/fwRjhe/1u6B+rR98SQnLfPm7UVwHx/+rx0QDDcX5/ GCp9xB38f0XzmIMouBROJXkq7g== -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:26 2026 by rpki-client