$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: xqF6l5iPdTs142dSQYPHiOoazh0H5tflUXCSIhZ+Xmk= Subject key identifier: F6:94:5C:C3:FC:EE:39:0E:8B:DC:D8:B2:A6:61:AA:F9:50:1B:FD:AB Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: A5 Signing time: Tue 10 Mar 2026 17:26:14 +0000 Manifest this update: Tue 10 Mar 2026 17:26:14 +0000 Manifest next update: Tue 17 Mar 2026 17:26:14 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: kGNFimnpOadcVGXP/8f/VooaUN7XWR72wzV1l9uuzkI=) 2: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZrHF5584bIbw0rUT6cH6d1iQqKS+jq5enJN7gFGvxy4=) 3: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: KM3zcDRIYT9oq/Wkhlh7FP99EJLA5sWO1MorkCKVVvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 17:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Mar 10 17:26:14 2026 GMT Not After : Mar 17 17:26:14 2026 GMT Subject: CN=69b05436-6cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:02:b7:81:65:73:e6:76:3f:aa:9c:48:eb: 0c:39:a4:98:b1:a0:ce:f2:9d:d3:03:ad:a2:b5:f7: f8:30:3d:fc:e7:5d:66:8b:ac:e5:0f:7d:b8:80:29: 83:6f:a4:2e:dd:bc:c7:bb:72:00:97:80:26:b8:92: c4:24:2b:00:ac:b3:94:e3:7e:83:f1:69:a1:0c:3f: 9c:d4:a3:dd:3d:f0:02:21:2e:cd:6a:49:9d:60:42: c5:d3:8a:84:42:ca:2c:c0:53:55:7c:f0:3e:0b:aa: de:bd:c3:62:c4:61:68:03:21:2e:f6:71:3f:2c:1b: 6f:d2:e3:bf:e4:ce:35:8e:06:50:e2:3d:fd:2d:53: e9:a8:09:58:c8:9d:e6:c8:ec:af:28:be:48:a1:d8: 13:cc:a8:d2:17:10:ad:e6:5c:5c:5f:af:3b:eb:93: 5e:7a:0e:17:42:32:71:ee:ee:0b:b0:cc:5b:f2:4f: dc:47:6d:b1:6f:3a:cf:03:33:9c:95:9b:bc:b5:22: 5e:aa:ff:6a:c7:d9:8d:fb:f0:44:d6:c1:16:35:19: da:ee:bf:cc:44:e7:36:8d:9f:d2:9e:47:50:6c:e6: 9a:9e:ab:45:59:a1:37:b7:12:d8:e3:5e:46:39:1a: 69:80:ee:db:0e:c8:ae:1e:d6:8e:4b:ae:af:6e:d3: 33:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:94:5C:C3:FC:EE:39:0E:8B:DC:D8:B2:A6:61:AA:F9:50:1B:FD:AB X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:45:b9:d0:ca:b5:11:f6:74:a7:23:ce:d9:5d:10:c7:3a:81: b0:ac:ce:82:4d:e8:ac:a6:a8:d7:31:76:f9:0f:2d:4e:28:50: 15:ec:1a:e0:c4:a1:45:fe:02:8d:9c:b5:60:d6:a1:d8:5a:8e: a8:80:e3:71:bb:43:4e:94:9a:56:fe:46:06:39:66:f1:ed:02: 58:f0:ae:b3:e0:4e:4e:7f:14:38:08:78:6b:b8:1c:f2:59:ba: 75:17:b0:42:73:fc:05:74:74:50:84:95:8f:05:e4:e2:57:8a: 87:4d:77:b9:d0:bc:bd:77:ac:98:ee:81:48:3c:46:12:26:71: 37:1c:48:28:42:1a:32:19:a4:71:1e:ff:ec:60:06:09:56:ae: 4b:e6:f0:ec:67:e3:da:48:1a:a1:87:75:4e:9c:f5:12:02:e8: 78:8c:63:70:29:1d:94:5d:86:b8:ab:45:32:12:fb:d8:3e:a9: 2a:82:f6:a9:af:9b:5e:8f:c8:06:80:04:5a:be:9d:a3:ff:06: 74:ff:a2:76:9a:55:5d:ca:a4:1a:3e:0f:95:97:df:10:05:4a: f0:22:4d:c3:ea:61:2b:d1:d6:7e:f5:31:8b:80:55:ae:88:3d: 32:db:16:7e:c5:64:da:a1:1a:db:ea:be:ca:8c:9b:59:8e:5c: 4a:24:54:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKDVEQjc1QjJERjk0RDA0NDc0QTZFNUUyRDRCNzhDQzA4 NEJGQzJBNkMwHhcNMjYwMzEwMTcyNjE0WhcNMjYwMzE3MTcyNjE0WjAYMRYwFAYD VQQDEw02OWIwNTQzNi02Y2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5gCt4Flc+Z2P6qcSOsMOaSYsaDO8p3TA62itff4MD38511mi6zlD324gCmD b6Qu3bzHu3IAl4AmuJLEJCsArLOU436D8WmhDD+c1KPdPfACIS7NakmdYELF04qE QsoswFNVfPA+C6revcNixGFoAyEu9nE/LBtv0uO/5M41jgZQ4j39LVPpqAlYyJ3m yOyvKL5IodgTzKjSFxCt5lxcX68765Neeg4XQjJx7u4LsMxb8k/cR22xbzrPAzOc lZu8tSJeqv9qx9mN+/BE1sEWNRna7r/MROc2jZ/SnkdQbOaanqtFWaE3txLY415G ORppgO7bDsiuHtaOS66vbtMzlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaUXMP8 7jkOi9zYsqZhqvlQG/2rMB8GA1UdIwQYMBaAFF23Wy35TQRHSm5eLUt4zAhL/Cps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS8wOTVGNkM4QzI2 N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJFZEtibDR0UzNqTUNFdjhL bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS8wOTVGNkM4QzI2N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJF ZEtibDR0UzNqTUNFdjhLbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFkW50Mq1EfZ0pyPO2V0QxzqBsKzOgk3orKao1zF2+Q8tTihQFewa4MShRf4C jZy1YNah2FqOqIDjcbtDTpSaVv5GBjlm8e0CWPCus+BOTn8UOAh4a7gc8lm6dRew QnP8BXR0UISVjwXk4leKh013udC8vXesmO6BSDxGEiZxNxxIKEIaMhmkcR7/7GAG CVauS+bw7Gfj2kgaoYd1Tpz1EgLoeIxjcCkdlF2GuKtFMhL72D6pKoL2qa+bXo/I BoAEWr6do/8GdP+idppVXcqkGj4PlZffEAVK8CJNw+phK9HWfvUxi4BVrog9MtsW fsVk2qEa2+q+yoybWY5cSiRUKQ== -----END CERTIFICATE-----Generated at Thu Mar 12 16:50:04 2026 by rpki-client