$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft File: X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft (raw, json) Hash identifier: 5XgemQkQajoLKat7H1LSo+MzjEIebgQWBnaBkkPVYXI= Subject key identifier: 91:D1:67:5B:C1:66:04:9D:C0:E1:E4:25:81:A2:30:34:FB:60:39:02 Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft Manifest number: 03 Signing time: Wed 04 Mar 2026 11:07:39 +0000 Manifest this update: Wed 04 Mar 2026 11:07:38 +0000 Manifest next update: Wed 11 Mar 2026 11:07:38 +0000 Files and hashes: 1: X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl (hash: c8cIuZxi1bhF3K5hlNrNjOWz1Rvzy4pUDPQqOKUu27A=) 2: 58EB7FEA17BA11F192FEB12A393D8C67.roa (hash: 2KciHVKCwNQJZwIswrhWW3+d4zx/KcnZcJdVnRiVP80=) 3: B1AC59CA17B911F18117E782383D8C67.roa (hash: BZKhZueNEHTxbu1OjRweJpYo4HVjxfaP3Tx4ectaUy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 11:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE Validity Not Before: Mar 4 11:07:38 2026 GMT Not After : Mar 11 11:07:38 2026 GMT Subject: CN=69a8127b-1f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:c3:27:0c:17:01:9d:b9:12:bb:ad:20:e4: 47:a3:3b:3d:78:c7:cf:23:45:a9:75:6e:d7:e1:d4: d6:d1:0e:a8:69:0b:03:85:88:bd:62:6b:64:7f:ba: b8:92:fa:60:9f:d0:8f:2b:f2:b9:f8:88:95:39:3f: 16:eb:4b:d7:03:c2:89:86:0e:90:89:90:a9:e3:16: 46:84:8b:e8:ae:04:cf:0b:82:26:67:15:4f:4b:5c: 45:f2:52:23:99:bf:3a:45:5c:7d:22:d4:47:2c:e7: f5:cd:fa:ed:1e:62:e5:b5:33:8d:5b:be:fb:25:ee: 8a:5e:c4:29:85:d0:6d:94:13:7d:63:b7:a3:8c:a4: a0:d8:4a:7a:3f:b4:c3:9a:f4:ab:66:d4:3e:2b:c6: 70:a0:1e:15:a4:d5:44:bf:5e:99:d5:74:72:c6:41: 31:3b:02:89:fa:1f:7b:78:e1:49:2e:3f:f2:dc:9e: fd:91:55:81:69:74:3e:a7:62:25:8c:57:04:ec:7d: 5a:b2:e1:b7:98:21:16:6e:9f:4e:da:12:f5:ac:ec: 01:20:1a:c8:f2:d9:36:d8:8e:08:de:57:97:51:71: 51:b8:0b:70:91:3d:73:3d:c1:d9:91:88:f4:3b:73: 56:23:1d:b8:11:e4:65:2c:1e:9f:e9:2b:7a:69:93: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:67:5B:C1:66:04:9D:C0:E1:E4:25:81:A2:30:34:FB:60:39:02 X509v3 Authority Key Identifier: keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6d:75:5b:d7:a3:cf:f6:48:39:ad:39:ca:c3:2f:ee:8f:d9: f4:c9:9d:3a:8d:3c:d7:cb:0f:e8:95:00:03:40:93:38:2a:c1: 77:59:18:d1:0d:87:3d:52:2b:22:48:f8:81:c3:6b:4e:fc:f1: b5:44:a7:9b:03:24:a5:d9:f7:40:51:35:67:7d:17:dd:8d:f8: a2:a9:97:9d:bb:3a:f8:1b:57:41:55:ef:4a:8b:2a:ee:f9:cd: d8:35:3e:5c:aa:89:89:fb:d0:7d:10:e8:72:85:25:2d:0c:5d: bf:6d:bc:b7:9a:66:33:ed:c8:54:d3:4d:19:ae:e7:28:37:02: 44:07:b6:16:fd:53:72:ee:a6:56:f6:3d:9a:37:a4:6e:13:50: 91:43:5e:ad:85:80:da:4a:c6:be:12:7a:70:6b:00:6b:03:1a: d8:95:dc:43:cf:22:10:cf:ba:71:1e:33:c3:42:e1:1b:f7:a4: 46:7d:8a:e0:ea:7a:fa:9b:0a:d1:cc:e3:b1:13:2d:ba:58:12: ee:b7:95:30:fd:ae:17:d4:cb:57:33:1b:8e:df:ae:63:64:cb: 51:99:6c:e1:be:5b:a1:38:f8:b7:9a:e6:08:29:17:47:50:2c: d0:61:44:fb:75:e3:3d:0e:9f:70:c6:74:f4:f2:69:31:14:ec: 3c:0d:e4:2c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhGRjExMC8GA1UEBRMoNUZGQTg2QTg4MzIxMzEzQjJBNkRFMzhCN0YxNjMwNUQx OUI5NThDRTAeFw0yNjAzMDQxMTA3MzhaFw0yNjAzMTExMTA3MzhaMBgxFjAUBgNV BAMTDTY5YTgxMjdiLTFmNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSmcMnDBcBnbkSu60g5EejOz14x88jRal1btfh1NbRDqhpCwOFiL1ia2R/uriS +mCf0I8r8rn4iJU5PxbrS9cDwomGDpCJkKnjFkaEi+iuBM8LgiZnFU9LXEXyUiOZ vzpFXH0i1Ecs5/XN+u0eYuW1M41bvvsl7opexCmF0G2UE31jt6OMpKDYSno/tMOa 9Ktm1D4rxnCgHhWk1US/XpnVdHLGQTE7Aon6H3t44UkuP/Lcnv2RVYFpdD6nYiWM VwTsfVqy4beYIRZun07aEvWs7AEgGsjy2TbYjgjeV5dRcVG4C3CRPXM9wdmRiPQ7 c1YjHbgR5GUsHp/pK3ppk7YDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkdFnW8Fm BJ3A4eQlgaIwNPtgOQIwHwYDVR0jBBgwFoAUX/qGqIMhMTsqbeOLfxYwXRm5WM4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEZGLzVCNkJEMTVBMTdC NzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRzcWJlT0xmeFl3WFJtNVdN NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWF9xR3FJTWhNVHNxYmVPTGZ4WXdYUm01V000LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEZGLzVCNkJEMTVBMTdCNzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRz cWJlT0xmeFl3WFJtNVdNNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB6bXVb16PP9kg5rTnKwy/uj9n0yZ06jTzXyw/olQADQJM4KsF3WRjRDYc9Uisi SPiBw2tO/PG1RKebAySl2fdAUTVnfRfdjfiiqZeduzr4G1dBVe9Kiyru+c3YNT5c qomJ+9B9EOhyhSUtDF2/bby3mmYz7chU000ZrucoNwJEB7YW/VNy7qZW9j2aN6Ru E1CRQ16thYDaSsa+EnpwawBrAxrYldxDzyIQz7pxHjPDQuEb96RGfYrg6nr6mwrR zOOxEy26WBLut5Uw/a4X1MtXMxuO365jZMtRmWzhvluhOPi3muYIKRdHUCzQYUT7 deM9Dp9wxnT08mkxFOw8DeQs -----END CERTIFICATE-----Generated at Wed Mar 4 16:03:41 2026 by rpki-client