$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: gBbyyjeg3KYsP3rPDXC9WUiBwi0KjKw9QHqkB7gaysc= Subject key identifier: 6B:F3:5B:01:56:EA:2A:B4:95:DE:0B:9D:70:7A:EF:36:DD:4A:E2:6F Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7E29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 48C6 Signing time: Thu 12 Mar 2026 16:49:19 +0000 Manifest this update: Thu 12 Mar 2026 16:49:19 +0000 Manifest next update: Thu 19 Mar 2026 16:49:19 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: fR1FTzz754fB9EulYZ1YIC+Vx3VbUmdvKetl3y9xdos=) 2: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=) 3: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: huYEy1OShMTnG6Dv6GIF3b8s4DVf7PGptyUFZSE3GKg=) 4: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=) 5: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=) 6: 638483FACB0911F0AF79E43DC4F9AE02.roa (hash: 7S6GqTogESgTpBUNMZpPgMS9/jS5HSy2eI/QoMqfxH8=) 7: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: Yx4RUg6/Ps1F9WLGKmkBr2vKf8cXWNrcddyAVaGBT3o=) 8: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=) 9: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA=) 10: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: xl2kGNtF5y2G5owSCgIil5S6mDXwvwxCSh7vN6+5yO0=) 11: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: 7dKmy2mjbAxCYpKx0eIzsPAsDYtYgWcb4xJo9UcXggE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32297 (0x7e29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Mar 12 16:49:19 2026 GMT Not After : Mar 19 16:49:19 2026 GMT Subject: CN=69b2ee8f-bf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:0e:92:48:bd:d5:06:8e:01:32:10:b8:07: c1:12:6c:d6:45:aa:cd:da:74:ae:e1:a0:40:3b:48: fd:88:35:23:c9:a3:15:c2:80:01:14:15:d2:e4:4b: 34:fd:62:7a:4d:53:f9:d8:2f:22:77:0b:44:3b:dc: bc:d8:81:9c:f5:3d:f7:f8:c8:80:a8:dc:4f:22:bb: 8b:c8:2f:85:00:2d:16:d3:46:9c:b0:9a:8d:29:70: 44:8d:12:c7:8c:df:cd:a4:4f:b1:8c:cf:2a:5d:f6: 0b:68:c4:81:f9:05:bf:f7:53:25:db:8e:3c:36:c6: 0c:cb:3a:63:b3:04:73:3c:72:f5:5b:e4:e3:44:69: a4:a6:fc:5d:1e:3f:8f:5f:6b:67:f7:15:1d:79:ff: e7:26:1b:e8:87:25:09:5d:cc:d7:20:7a:91:8d:de: b1:54:f1:ce:5f:16:96:ba:85:dc:97:5a:a0:82:d3: 45:df:a0:a0:67:8a:75:fe:4d:f8:08:83:2f:50:af: 91:35:45:21:97:c2:d0:91:25:37:58:11:d4:aa:01: 5b:70:89:99:29:8d:f3:42:97:2c:d5:b2:51:61:32: a6:bd:d1:ad:b8:48:5c:3b:d2:d2:b1:22:e3:1e:a7: 48:01:e0:68:13:dd:fb:db:88:ed:ca:e9:7b:7c:2a: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F3:5B:01:56:EA:2A:B4:95:DE:0B:9D:70:7A:EF:36:DD:4A:E2:6F X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:53:b3:ee:30:76:6b:be:c6:65:d7:b8:36:76:90:9f:bd:97: f2:a8:2f:5e:8d:4b:0a:ff:47:d3:65:ef:31:3f:bc:de:38:4b: 1b:0f:91:80:95:d2:a2:c6:b7:bd:be:78:66:b8:6f:7f:93:27: 0b:24:27:05:5b:02:0a:4d:e4:2d:26:69:01:25:84:9f:83:14: 37:4f:df:9f:38:ec:74:bb:c1:89:f5:66:f2:e4:5b:1c:f9:c2: 07:93:10:6f:42:ad:76:3d:74:7b:30:6a:99:b3:be:52:75:97: 3b:db:4d:6c:15:e8:3a:a7:dc:bd:f2:55:19:b6:3c:77:0b:f9: 64:6f:51:fe:dd:c0:5a:b0:a4:3e:3d:25:9a:fa:7b:a5:a6:4d: 12:31:d0:68:bf:ad:46:ab:98:a1:39:0f:20:f9:5c:af:8b:9b: 8f:7e:70:ca:c6:53:30:95:b3:d3:db:3b:bc:ba:d8:8d:48:d7: 13:19:5d:1f:f7:1e:5a:dd:c1:70:74:08:e7:dc:a0:60:74:a5: 94:94:81:37:0f:16:23:b5:6b:44:aa:9b:04:25:4e:78:7a:3a: 65:86:1f:01:03:2f:e4:af:89:ba:26:4a:7a:f9:c1:1d:14:0a: e6:4c:a5:45:79:53:a4:bf:de:fe:b7:f1:8f:40:62:aa:ed:70: b9:b9:fd:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICfikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjYwMzEyMTY0OTE5WhcNMjYwMzE5MTY0OTE5WjAYMRYwFAYD VQQDEw02OWIyZWU4Zi1iZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdkOkki91QaOATIQuAfBEmzWRarN2nSu4aBAO0j9iDUjyaMVwoABFBXS5Es0 /WJ6TVP52C8idwtEO9y82IGc9T33+MiAqNxPIruLyC+FAC0W00acsJqNKXBEjRLH jN/NpE+xjM8qXfYLaMSB+QW/91Ml2448NsYMyzpjswRzPHL1W+TjRGmkpvxdHj+P X2tn9xUdef/nJhvohyUJXczXIHqRjd6xVPHOXxaWuoXcl1qggtNF36CgZ4p1/k34 CIMvUK+RNUUhl8LQkSU3WBHUqgFbcImZKY3zQpcs1bJRYTKmvdGtuEhcO9LSsSLj HqdIAeBoE93724jtyul7fCoQuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvzWwFW 6iq0ld4LnXB67zbdSuJvMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHlOz7jB2a77GZde4NnaQn72X8qgvXo1LCv9H02XvMT+83jhLGw+RgJXSosa3 vb54Zrhvf5MnCyQnBVsCCk3kLSZpASWEn4MUN0/fnzjsdLvBifVm8uRbHPnCB5MQ b0Ktdj10ezBqmbO+UnWXO9tNbBXoOqfcvfJVGbY8dwv5ZG9R/t3AWrCkPj0lmvp7 paZNEjHQaL+tRquYoTkPIPlcr4ubj35wysZTMJWz09s7vLrYjUjXExldH/ceWt3B cHQI59ygYHSllJSBNw8WI7VrRKqbBCVOeHo6ZYYfAQMv5K+JuiZKevnBHRQK5kyl RXlTpL/e/rfxj0Biqu1wubn95g== -----END CERTIFICATE-----Generated at Fri Mar 13 09:45:12 2026 by rpki-client