$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: dXA1YJFQX1bc9EpkKY/hC9MQofwKBdA1zzpxPczZzz4= Subject key identifier: FD:9F:90:01:18:42:5B:34:89:66:90:BF:E8:39:91:F2:3F:D7:C8:C5 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0D76 Signing time: Thu 12 Mar 2026 17:49:35 +0000 Manifest this update: Thu 12 Mar 2026 17:49:35 +0000 Manifest next update: Thu 19 Mar 2026 17:49:35 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: o45gXk5jv490n5swSEK+8eVOOxjC/g3uKamDXmBQ0NA=) 2: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) 3: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) 4: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) 5: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) 6: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 17:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3506 (0xdb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Mar 12 17:49:35 2026 GMT Not After : Mar 19 17:49:35 2026 GMT Subject: CN=69b2fcaf-185e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:2c:fb:59:84:37:66:0d:6e:0c:60:03:6f: 03:87:8b:a8:6a:0f:4b:7d:66:6f:95:c7:87:fc:3a: 78:02:20:f8:f1:db:10:2c:4a:8c:af:50:26:83:9b: 79:31:1d:85:51:2d:c2:71:bf:fe:a2:91:73:c7:b9: a0:da:1e:b3:e2:76:b4:f9:c6:7f:b2:78:34:14:a3: ee:18:20:d3:a5:30:72:69:69:20:2e:01:16:55:6c: 0c:89:de:1f:6f:12:80:b2:c5:86:c6:f8:86:97:64: f2:09:34:a7:94:ac:d0:90:fe:12:c3:8b:55:5b:28: 89:f6:a2:3e:75:b3:ef:d1:d8:85:15:8d:1e:c8:76: 47:e9:28:51:35:65:da:6f:20:ce:29:7b:5a:f0:21: 8d:e7:89:7d:71:69:a2:35:ee:ff:f0:6d:b5:4d:df: cd:21:b6:c3:2c:34:b5:91:b0:54:eb:d7:ce:99:1f: 5a:64:c8:a6:7d:b2:d6:83:9e:c8:10:9c:03:1c:58: 86:0c:b9:b2:3e:ef:e6:0d:6c:bd:be:7e:5f:50:9b: c0:43:c2:f7:3e:53:f5:a4:ea:0e:0e:28:fa:46:9f: 8d:76:24:c9:57:22:ac:23:da:92:f3:e6:aa:39:e0: c7:80:71:78:c0:12:5c:1c:d8:4b:9e:6e:01:20:ea: cd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9F:90:01:18:42:5B:34:89:66:90:BF:E8:39:91:F2:3F:D7:C8:C5 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e1:e8:91:f8:bb:75:63:62:b8:39:c0:19:16:8c:20:53:44: 42:10:0d:45:e5:1f:41:07:6a:b0:a7:c5:7c:b0:cd:a2:1d:34: c4:c2:be:1b:2c:b0:aa:47:36:38:6b:b8:85:d6:80:2c:82:5e: b4:95:28:5d:d9:08:61:43:ae:49:28:4d:a4:4d:bd:ff:f4:47: 75:a0:26:7b:82:ef:8b:94:00:5c:cc:6e:0d:45:82:49:81:27: de:7a:f5:eb:51:aa:7b:e2:19:41:d5:1d:90:3b:4d:90:49:c6: 67:d6:84:b6:10:a1:77:bb:c4:56:d0:4e:e6:49:94:e5:4f:1a: bc:01:2b:4c:5b:f0:1d:6c:9c:9d:f4:0c:73:bd:33:85:ca:44: 7c:50:85:ae:e1:b6:30:7c:28:37:ef:65:a1:65:86:5d:7e:2f: 09:8e:e2:fc:c7:d1:21:1a:5d:ca:81:15:e2:26:cb:b3:8b:02: 01:54:08:13:a2:a4:8e:00:f6:70:b5:5b:ec:14:50:84:62:e0: f9:3d:e2:96:52:c0:52:ca:a3:e0:f0:ad:59:9e:24:f8:f2:a5: b4:9b:d5:ee:a4:12:f5:95:f6:e1:91:d3:fe:fe:88:8b:58:b1: c2:2f:48:9f:1a:05:1d:7a:6a:64:8d:ab:79:f6:0b:e2:ef:df: ed:9d:bc:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwMzEyMTc0OTM1WhcNMjYwMzE5MTc0OTM1WjAYMRYwFAYD VQQDEw02OWIyZmNhZi0xODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIUs+1mEN2YNbgxgA28Dh4uoag9LfWZvlceH/Dp4AiD48dsQLEqMr1Amg5t5 MR2FUS3Ccb/+opFzx7mg2h6z4na0+cZ/sng0FKPuGCDTpTByaWkgLgEWVWwMid4f bxKAssWGxviGl2TyCTSnlKzQkP4Sw4tVWyiJ9qI+dbPv0diFFY0eyHZH6ShRNWXa byDOKXta8CGN54l9cWmiNe7/8G21Td/NIbbDLDS1kbBU69fOmR9aZMimfbLWg57I EJwDHFiGDLmyPu/mDWy9vn5fUJvAQ8L3PlP1pOoODij6Rp+NdiTJVyKsI9qS8+aq OeDHgHF4wBJcHNhLnm4BIOrN7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2fkAEY Qls0iWaQv+g5kfI/18jFMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUOHokfi7dWNiuDnAGRaMIFNEQhANReUfQQdqsKfFfLDNoh00xMK+Gyywqkc2 OGu4hdaALIJetJUoXdkIYUOuSShNpE29//RHdaAme4Lvi5QAXMxuDUWCSYEn3nr1 61Gqe+IZQdUdkDtNkEnGZ9aEthChd7vEVtBO5kmU5U8avAErTFvwHWycnfQMc70z hcpEfFCFruG2MHwoN+9loWWGXX4vCY7i/MfRIRpdyoEV4ibLs4sCAVQIE6KkjgD2 cLVb7BRQhGLg+T3illLAUsqj4PCtWZ4k+PKltJvV7qQS9ZX24ZHT/v6Ii1ixwi9I nxoFHXpqZI2refYL4u/f7Z281g== -----END CERTIFICATE-----Generated at Sat Mar 14 07:37:44 2026 by rpki-client