$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: J1mPjii+sZOBwqoBP1WeAnaQ12DDEqsRGl2HmwEZ9qM= Subject key identifier: 5D:65:3E:6F:B2:D3:5F:62:D1:C5:32:0D:73:F9:E1:86:44:31:56:C7 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 03A7 Signing time: Sun 01 Mar 2026 01:36:41 +0000 Manifest this update: Sun 01 Mar 2026 01:36:40 +0000 Manifest next update: Sun 08 Mar 2026 01:36:40 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: VbTiVDWF6e5hGxpCKFVeiCgl3Sj+an0Lio1d4nFxqMI=) 2: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 0K1MrQSQm8pKMHQMtu2VIbqhJP366PQFOjPnnF6bEO4=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 0wTMHozntDRRL6WlF/g074Q+r6/Lm6ac7roKHdDstY4=) 4: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: 4/rySl/r5Eo+RCE6z8XYayPr6ezbIDIspCcJrRM4VBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Mar 1 01:36:40 2026 GMT Not After : Mar 8 01:36:40 2026 GMT Subject: CN=69a39829-881e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:cb:c6:1e:c9:d8:e0:5a:e4:25:0e:87:d9: c9:7b:3c:ad:d6:cd:a1:76:00:96:8d:c2:f3:16:1c: ac:9c:53:0e:30:74:80:16:02:13:9c:78:4c:a1:cd: e7:c8:ba:6e:d8:82:c0:fb:17:0f:24:dd:ba:92:86: ff:29:b4:70:f6:88:cd:f2:7c:14:94:3d:8a:b7:48: 2c:c0:d6:79:97:85:ca:53:2c:bd:59:0d:88:44:3d: 5e:0a:d2:09:7b:b5:c1:4a:7f:fa:c1:22:0e:45:39: 70:e4:a0:f2:3c:35:c8:be:51:80:c2:16:80:8a:bb: 62:93:78:0a:20:06:b7:7b:9f:5d:27:26:a9:f7:e5: b3:c7:5c:9c:da:e7:72:39:c3:4f:b0:17:82:7a:5d: b8:ed:20:87:f7:5e:92:48:08:5b:5a:9d:6e:e4:4a: 7f:3b:47:aa:30:65:c8:d4:3c:d2:fc:9a:fa:6a:b8: f0:a4:27:89:be:fc:65:72:ea:73:a6:db:8b:0e:34: 59:38:ec:2c:42:e1:6c:6f:21:78:87:56:93:64:ba: 08:b6:0b:6b:08:4f:04:4a:2f:1a:bd:4c:a5:99:0d: f8:a7:f6:ba:21:5a:5e:08:55:a5:c2:61:69:8c:a8: 6c:23:71:2c:41:b7:2e:7c:80:2b:cf:58:eb:92:92: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:3E:6F:B2:D3:5F:62:D1:C5:32:0D:73:F9:E1:86:44:31:56:C7 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:72:ad:99:3e:f3:72:af:02:a2:a8:b6:cb:58:31:55:16:1f: 18:a0:77:74:53:ea:20:e0:e6:42:2b:46:c9:47:00:16:8e:3b: dc:f9:18:f2:ab:4d:43:8f:15:13:f1:de:b9:74:69:9d:55:7d: d0:92:8d:5a:b0:e3:f4:8a:6d:b9:5c:93:69:b0:ad:cc:7a:da: df:50:e8:a0:8a:96:ca:41:97:e5:0c:19:83:15:1d:50:ba:46: 15:74:62:7f:81:d2:dd:1d:93:40:45:99:0a:69:66:30:82:2a: 53:41:20:62:a0:75:02:d1:1c:a8:fd:76:18:fe:de:fb:63:38: 02:80:4f:79:68:7a:da:6d:50:3c:2c:73:d2:41:ba:f1:7a:56: 68:db:b7:fd:b7:48:7d:db:90:ee:e0:76:88:0e:6c:8d:69:4c: 09:e1:cc:06:ac:6b:bf:e1:f8:15:91:11:69:6b:aa:b5:26:af: b1:7a:f2:f9:34:2b:5d:20:ac:1f:73:de:fe:d9:5d:5a:68:c1: de:f0:07:43:35:31:7c:74:ce:3e:c2:03:a8:89:fe:b5:71:a2: 9d:50:da:ae:01:99:c6:64:79:a6:97:98:dc:1b:be:68:8e:5e: a8:a4:e6:19:6e:8a:1d:56:b2:46:d6:3e:45:c8:2a:04:51:2e: 9f:62:6e:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwMzAxMDEzNjQwWhcNMjYwMzA4MDEzNjQwWjAYMRYwFAYD VQQDDA02OWEzOTgyOS04ODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OfLxh7J2OBa5CUOh9nJezyt1s2hdgCWjcLzFhysnFMOMHSAFgITnHhMoc3n yLpu2ILA+xcPJN26kob/KbRw9ojN8nwUlD2Kt0gswNZ5l4XKUyy9WQ2IRD1eCtIJ e7XBSn/6wSIORTlw5KDyPDXIvlGAwhaAirtik3gKIAa3e59dJyap9+Wzx1yc2udy OcNPsBeCel247SCH916SSAhbWp1u5Ep/O0eqMGXI1DzS/Jr6arjwpCeJvvxlcupz ptuLDjRZOOwsQuFsbyF4h1aTZLoItgtrCE8ESi8avUylmQ34p/a6IVpeCFWlwmFp jKhsI3EsQbcufIArz1jrkpLK9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1lPm+y 019i0cUyDXP54YZEMVbHMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOHKtmT7zcq8Coqi2y1gxVRYfGKB3dFPqIODmQitGyUcAFo473PkY8qtNQ48V E/HeuXRpnVV90JKNWrDj9IptuVyTabCtzHra31DooIqWykGX5QwZgxUdULpGFXRi f4HS3R2TQEWZCmlmMIIqU0EgYqB1AtEcqP12GP7e+2M4AoBPeWh62m1QPCxz0kG6 8XpWaNu3/bdIfduQ7uB2iA5sjWlMCeHMBqxrv+H4FZERaWuqtSavsXry+TQrXSCs H3Pe/tldWmjB3vAHQzUxfHTOPsIDqIn+tXGinVDargGZxmR5ppeY3Bu+aI5eqKTm GW6KHVayRtY+RcgqBFEun2JubA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:58 2026 by rpki-client