$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: LYVXS+tq3Mb+XLTcGZh6c/qWq50CQxUiaFB4nF+7jew= Subject key identifier: 6F:70:AA:44:52:EA:4A:DE:93:95:2C:3B:E1:38:86:8D:C5:49:57:CD Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 04F6 Signing time: Mon 02 Mar 2026 00:03:07 +0000 Manifest this update: Mon 02 Mar 2026 00:03:06 +0000 Manifest next update: Mon 09 Mar 2026 00:03:06 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: eVbQrtvSLOnDNvc6R715v/vMKmLoJuYKj2nj4WpvC0Y=) 2: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: kY65kJ7Z3Mu7QEVILrGdTmAvqTkSFv9BjhpNLh4YUPY=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: SmcwGq0dD9iTZhV8jdPLgAp8Fs3hII4+H1WFKJpXd7c=) 4: 11330A4663F611ECB344F979C4F9AE02.roa (hash: 3M+74bn/sA2p4TiZmfBp8pwqRm0NY6QA2mPOgZx57gA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Mar 2 00:03:06 2026 GMT Not After : Mar 9 00:03:06 2026 GMT Subject: CN=69a4d3bb-a598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bf:81:2c:f7:c5:fe:89:7e:7f:d4:4b:18:1e: d6:4d:8e:2f:2c:83:51:2b:b0:47:a6:49:ff:6e:56: ed:74:20:2c:e4:f3:1c:0f:26:c7:8d:f4:62:04:25: 49:75:aa:d2:ab:f7:19:2e:41:38:7c:0b:e7:4c:49: 7b:9b:97:b5:3d:c1:dd:39:01:63:49:ce:45:14:bc: 97:3b:f2:ba:0c:ef:66:b3:94:74:f4:f8:b8:d5:b9: 59:ec:2d:20:9c:dd:8f:c4:9b:7c:3a:d9:a8:53:87: e0:af:af:82:6d:26:58:ab:f9:3f:90:b6:9c:d1:bf: cb:1e:a9:1b:6f:ae:b0:aa:07:a4:2d:46:e1:91:80: 57:16:f2:66:ba:42:d3:5d:03:06:e8:07:8f:da:06: af:3a:de:4a:67:3b:8b:cd:6d:f0:66:c0:94:c2:3b: df:08:f4:2e:f6:61:99:7b:ef:09:36:15:d4:32:d9: c5:84:0a:74:a5:f6:9c:17:6a:4a:8c:69:29:ee:e4: cd:b5:8e:b2:ae:a4:16:d9:4d:7c:65:8b:49:3a:6b: 3d:4f:b5:e7:eb:08:48:f3:b9:40:bb:e1:0a:7a:cc: 47:7c:64:ca:22:00:fa:83:da:0f:cf:6d:9c:76:95: e1:58:6f:1c:58:db:80:74:e9:88:d9:8c:9f:07:cd: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:70:AA:44:52:EA:4A:DE:93:95:2C:3B:E1:38:86:8D:C5:49:57:CD X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:1a:e7:fc:4e:8b:9f:5c:48:68:d4:07:32:ed:00:ea:b3:7a: 70:af:d0:5c:02:11:9a:4c:10:51:99:7d:15:72:c2:d2:91:06: 17:53:62:c0:ba:d2:5a:68:e4:f7:69:be:e4:95:10:d3:8d:94: 1d:77:0f:fb:14:74:06:5b:4f:32:f0:af:da:97:8c:72:c0:39: 99:ec:5e:56:f0:71:d8:bb:f5:bc:79:a8:6e:c8:ca:e9:2c:5b: ef:9c:da:d7:fe:d4:42:86:ab:70:ed:94:b3:ed:e8:94:0f:eb: c6:45:42:b3:78:5f:75:30:42:91:a0:88:b7:68:40:aa:b8:93: 4d:68:f8:56:cd:73:bc:d3:10:b1:0f:e2:e0:70:14:b2:be:8e: be:09:6d:e2:74:9b:f6:a6:13:fc:30:49:1e:0d:46:eb:0f:51: 59:cf:52:8d:a3:7c:fc:32:6f:68:53:96:d3:6f:15:26:2e:60: c3:c1:65:c3:e8:ab:10:3d:75:aa:00:dc:e9:97:82:3b:90:11: fa:30:df:11:8c:7d:12:77:bb:6d:50:5c:65:7b:e1:8c:cb:03: 0d:0a:1f:52:68:51:3f:d2:8f:0f:e7:f8:e6:c1:19:5e:f5:23: 8c:9e:32:a4:1a:f7:bb:0a:54:8e:b7:55:5e:c1:d3:83:68:dd: 1d:98:1e:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjYwMzAyMDAwMzA2WhcNMjYwMzA5MDAwMzA2WjAYMRYwFAYD VQQDEw02OWE0ZDNiYi1hNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57+BLPfF/ol+f9RLGB7WTY4vLINRK7BHpkn/blbtdCAs5PMcDybHjfRiBCVJ darSq/cZLkE4fAvnTEl7m5e1PcHdOQFjSc5FFLyXO/K6DO9ms5R09Pi41blZ7C0g nN2PxJt8OtmoU4fgr6+CbSZYq/k/kLac0b/LHqkbb66wqgekLUbhkYBXFvJmukLT XQMG6AeP2gavOt5KZzuLzW3wZsCUwjvfCPQu9mGZe+8JNhXUMtnFhAp0pfacF2pK jGkp7uTNtY6yrqQW2U18ZYtJOms9T7Xn6whI87lAu+EKesxHfGTKIgD6g9oPz22c dpXhWG8cWNuAdOmI2YyfB82rsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9wqkRS 6krek5UsO+E4ho3FSVfNMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKBrn/E6Ln1xIaNQHMu0A6rN6cK/QXAIRmkwQUZl9FXLC0pEGF1NiwLrSWmjk 92m+5JUQ042UHXcP+xR0BltPMvCv2peMcsA5mexeVvBx2Lv1vHmobsjK6Sxb75za 1/7UQoarcO2Us+3olA/rxkVCs3hfdTBCkaCIt2hAqriTTWj4Vs1zvNMQsQ/i4HAU sr6Ovglt4nSb9qYT/DBJHg1G6w9RWc9SjaN8/DJvaFOW028VJi5gw8Flw+irED11 qgDc6ZeCO5AR+jDfEYx9Ene7bVBcZXvhjMsDDQofUmhRP9KPD+f45sEZXvUjjJ4y pBr3uwpUjrdVXsHTg2jdHZgeSg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:50 2026 by rpki-client