$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json) Hash identifier: Gh3QO242xc9pEZcqpHEvZz4Zv7PD68Z4TcLhnatWSM0= Subject key identifier: B7:72:AC:87:D4:3C:CC:42:06:14:D4:EB:CC:84:8F:06:52:5E:68:95 Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft Manifest number: 0353 Signing time: Mon 02 Mar 2026 00:00:53 +0000 Manifest this update: Mon 02 Mar 2026 00:00:50 +0000 Manifest next update: Mon 09 Mar 2026 00:00:50 +0000 Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: oscBNvVqZosCKrEPD49PWBE0kO/JSz9sTkvXUygomzc=) 2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 2U6xmhzv0fOgJj7RZr6nEhhX0Za/2a3PlEUXvRGOzUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Validity Not Before: Mar 2 00:00:50 2026 GMT Not After : Mar 9 00:00:50 2026 GMT Subject: CN=69a4d335-89e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:bb:8c:4a:53:d3:c7:ef:26:85:bf:4d:81: 60:ee:2d:30:6b:7e:da:6a:c4:3c:bf:96:cd:49:9a: 38:77:21:e1:82:b6:24:91:f4:c5:0d:e6:0e:98:52: eb:d8:86:f6:eb:42:f5:cb:84:a3:69:52:3c:bd:e0: 08:fd:2b:7f:e4:8c:a1:2e:41:03:19:91:f8:35:9f: f2:44:f4:a5:30:4f:21:13:aa:71:c7:8c:db:c0:39: d6:2d:d0:39:0a:4c:2f:5d:77:23:09:58:51:13:5c: 93:be:59:47:f8:a7:08:8d:e6:e0:26:90:e7:32:c6: 4c:fd:29:2c:5b:eb:1d:a1:9e:1d:87:ef:90:24:6a: 2f:94:1e:66:36:4f:39:c1:92:01:ae:99:0a:d9:a8: e8:8e:76:fa:e6:2a:c8:d3:2e:15:dd:b8:d2:94:bd: f7:70:fd:fb:23:54:9f:45:a2:87:36:f6:ad:b1:3b: 7e:e7:4c:53:57:7c:32:22:be:e6:9f:9c:a7:e7:ce: 49:3a:41:56:06:01:30:00:0a:6b:55:79:3a:8c:36: 74:81:f5:6f:56:11:49:c4:bc:f9:2e:68:ec:0b:17: 72:c5:c7:87:af:ed:8b:cb:28:d7:14:3d:7b:5e:1d: 9f:68:98:22:28:78:a0:62:f9:24:f7:9e:e5:a6:7a: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:72:AC:87:D4:3C:CC:42:06:14:D4:EB:CC:84:8F:06:52:5E:68:95 X509v3 Authority Key Identifier: keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ab:7b:57:a0:ce:89:4b:5b:37:f4:27:da:8d:23:3d:9c:67: 8d:fd:87:d9:09:80:02:9f:58:82:af:60:4e:df:ad:cb:88:43: 22:28:13:c9:0f:56:90:51:6a:a0:2e:c9:a3:d7:79:b8:f9:9a: 9b:32:b4:4d:2c:0a:65:f6:54:81:d8:c5:f0:aa:63:c8:cf:fd: 8f:a8:4d:34:5c:e2:12:c4:1c:32:0f:af:0f:74:25:15:33:61: d7:54:16:da:03:cc:48:07:18:96:ee:9e:f0:71:d3:a9:87:e9: d1:83:f3:11:b5:c9:30:86:64:39:77:1f:94:5e:51:27:db:6e: d2:48:4e:c1:a9:cf:f1:35:8f:e9:0d:f7:ba:8d:c7:76:e3:97: f6:73:cc:37:c3:09:a1:d4:c2:65:07:29:73:8b:6e:41:a5:83: 16:43:c7:5c:c0:05:0e:07:94:4e:c1:c1:07:d0:d9:17:da:8c: a2:e5:02:3a:d5:40:fe:7d:74:09:34:f0:c0:f8:48:f3:f0:29: bb:14:87:35:b1:f7:e0:7b:f7:12:f0:b8:be:de:1c:dd:79:b0: e7:fe:1e:ac:e1:7e:f5:98:b5:52:7b:08:b0:7b:0f:ed:28:43: c4:d0:96:7e:78:4f:1a:69:b8:68:d6:44:18:7e:b7:2b:a6:37: 3d:5d:37:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNzMxMTAvBgNVBAUTKDVFNzA5OTQ5QkFBNDBBN0Q0N0Q0NEQyMTE2OTBCMzc3 RTA1MUM0NUYwHhcNMjYwMzAyMDAwMDUwWhcNMjYwMzA5MDAwMDUwWjAYMRYwFAYD VQQDEw02OWE0ZDMzNS04OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ka7jEpT08fvJoW/TYFg7i0wa37aasQ8v5bNSZo4dyHhgrYkkfTFDeYOmFLr 2Ib260L1y4SjaVI8veAI/St/5IyhLkEDGZH4NZ/yRPSlME8hE6pxx4zbwDnWLdA5 CkwvXXcjCVhRE1yTvllH+KcIjebgJpDnMsZM/SksW+sdoZ4dh++QJGovlB5mNk85 wZIBrpkK2ajojnb65irI0y4V3bjSlL33cP37I1SfRaKHNvatsTt+50xTV3wyIr7m n5yn585JOkFWBgEwAAprVXk6jDZ0gfVvVhFJxLz5LmjsCxdyxceHr+2LyyjXFD17 Xh2faJgiKHigYvkk957lpnoVTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdyrIfU PMxCBhTU68yEjwZSXmiVMB8GA1UdIwQYMBaAFF5wmUm6pAp9R9RNIRaQs3fgUcRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM3My84MjE0NTdEMkYx MzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0NuMUgxRTBoRnBDemQtQlJ4 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huQ1pTYnFrQ24xSDFFMGhGcEN6ZC1CUnhGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM3My84MjE0NTdEMkYxMzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0Nu MUgxRTBoRnBDemQtQlJ4RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOat7V6DOiUtbN/Qn2o0jPZxnjf2H2QmAAp9Ygq9gTt+ty4hDIigTyQ9WkFFq oC7Jo9d5uPmamzK0TSwKZfZUgdjF8KpjyM/9j6hNNFziEsQcMg+vD3QlFTNh11QW 2gPMSAcYlu6e8HHTqYfp0YPzEbXJMIZkOXcflF5RJ9tu0khOwanP8TWP6Q33uo3H duOX9nPMN8MJodTCZQcpc4tuQaWDFkPHXMAFDgeUTsHBB9DZF9qMouUCOtVA/n10 CTTwwPhI8/ApuxSHNbH34Hv3EvC4vt4c3Xmw5/4erOF+9Zi1UnsIsHsP7ShDxNCW fnhPGmm4aNZEGH63K6Y3PV03zg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:09 2026 by rpki-client