$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: ZGY+WOVuPxocbQXJ7VzDCHR6bVynuUHi53VTiwGg8OU= Subject key identifier: 52:2F:92:50:AE:51:95:99:18:D4:67:08:A8:A7:99:65:AC:F7:CA:3D Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 4C Signing time: Tue 03 Mar 2026 07:58:30 +0000 Manifest this update: Tue 03 Mar 2026 07:58:29 +0000 Manifest next update: Tue 10 Mar 2026 07:58:29 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: HN+4aJDuRxSfFk2ELqWsswhWXA+sq0UFJweRYx9+9Fw=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Mar 3 07:58:29 2026 GMT Not After : Mar 10 07:58:29 2026 GMT Subject: CN=69a694a6-c77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:1e:be:33:e1:5f:a7:cc:26:85:bd:c8:8c: 7f:c9:19:ed:10:db:fa:7f:94:08:da:39:c7:19:a2: a5:5f:1e:a6:5e:70:61:bd:ae:b4:99:e4:0d:17:54: 66:d3:b6:50:c9:de:b0:c1:86:22:81:57:ec:45:1b: 6f:be:57:78:13:8a:71:6f:3f:39:8d:4d:9b:cc:e4: 8f:f2:b1:3f:3c:e5:d9:28:94:67:46:17:15:35:f2: d2:43:78:11:cb:97:6b:4c:06:ad:2d:aa:ea:52:6e: 85:c7:2e:89:cc:ba:de:ff:24:95:d2:d8:59:dd:5d: 8d:65:33:70:06:ac:2c:2c:52:0c:dd:7b:7b:b1:47: 64:97:e7:6e:0a:f9:b6:09:38:60:5b:e3:9f:02:6c: 37:8a:23:33:40:b1:1e:59:b0:7b:44:be:25:2e:2e: a7:b4:c0:b0:db:a2:27:cb:39:3f:0e:21:33:7c:0b: d2:1d:0e:18:6b:c9:f0:c3:b7:58:2f:17:78:a4:cd: 87:e1:ab:ac:92:6e:6f:3b:e5:97:b9:34:12:ef:16: cb:fa:fe:ea:02:1b:73:2a:9f:96:bb:ad:9c:0a:53: 81:ad:e8:af:ac:be:75:e1:22:b2:31:33:f9:1e:78: 1c:e7:a7:af:fe:02:fa:2c:f2:2f:d0:85:8c:55:fc: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2F:92:50:AE:51:95:99:18:D4:67:08:A8:A7:99:65:AC:F7:CA:3D X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:21:41:03:80:ad:ce:d4:dd:92:61:59:cd:05:f5:2f:dd:a5: 25:57:f3:75:66:f3:5b:ca:55:9b:c8:8f:a0:a0:02:38:18:b3: a0:62:21:c6:73:e3:f6:af:3f:5a:0d:e1:1f:48:ff:1e:79:80: 41:50:a9:33:24:39:bf:16:66:a1:7a:21:75:76:46:d3:41:36: 79:d3:cd:23:eb:3b:8f:51:b3:04:09:af:d7:d7:7e:f2:0b:8e: 1e:7d:d9:21:cc:fa:11:11:b6:71:be:1a:ac:af:d8:21:9d:99: d2:ea:b8:24:8b:7f:86:63:a0:86:57:67:09:7d:1a:9e:39:5b: 72:9a:3b:ec:48:8a:f2:dd:1b:e5:c1:0b:e0:1d:78:23:7e:8b: 88:9c:78:a1:9c:6d:34:5b:02:e8:ed:bd:60:63:8f:ec:8f:aa: b3:a0:c5:78:d8:94:3c:ce:38:64:b0:dc:e7:1e:de:3e:17:39: 9d:75:09:60:50:f7:82:0b:d3:33:33:c7:4d:fa:6d:b0:13:a7: 23:c5:23:60:09:89:0d:2a:d1:be:07:6f:7d:03:bc:44:75:af: be:58:2b:0b:33:32:2a:ea:76:d0:be:78:94:38:30:8d:b6:f1: 5d:60:97:de:78:48:06:55:86:10:4e:75:86:bd:4b:01:14:34: a8:4a:5e:6c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoNURERkREMzgzMTU2RkE1QjY1MzQxMTJFOUM4RTE1M0JC MjAwNTdDNjAeFw0yNjAzMDMwNzU4MjlaFw0yNjAzMTAwNzU4MjlaMBgxFjAUBgNV BAMTDTY5YTY5NGE2LWM3N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi4x6+M+Ffp8wmhb3IjH/JGe0Q2/p/lAjaOccZoqVfHqZecGG9rrSZ5A0XVGbT tlDJ3rDBhiKBV+xFG2++V3gTinFvPzmNTZvM5I/ysT885dkolGdGFxU18tJDeBHL l2tMBq0tqupSboXHLonMut7/JJXS2FndXY1lM3AGrCwsUgzde3uxR2SX524K+bYJ OGBb458CbDeKIzNAsR5ZsHtEviUuLqe0wLDboifLOT8OITN8C9IdDhhryfDDt1gv F3ikzYfhq6ySbm875Ze5NBLvFsv6/uoCG3Mqn5a7rZwKU4Gt6K+svnXhIrIxM/ke eBznp6/+Avos8i/QhYxV/FPRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUi+SUK5R lZkY1GcIqKeZZaz3yj0wHwYDVR0jBBgwFoAUXd/dODFW+ltlNBEunI4VO7IAV8Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4L0Y5QjAyODg4QUVG RTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGRfZE9ERlctbHRsTkJFdW5JNFZPN0lBVjhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4L0Y5QjAyODg4QUVGRTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0 bE5CRXVuSTRWTzdJQVY4WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeIUEDgK3O1N2SYVnNBfUv3aUlV/N1ZvNbylWbyI+goAI4GLOgYiHGc+P2rz9a DeEfSP8eeYBBUKkzJDm/FmaheiF1dkbTQTZ5080j6zuPUbMECa/X137yC44efdkh zPoREbZxvhqsr9ghnZnS6rgki3+GY6CGV2cJfRqeOVtymjvsSIry3RvlwQvgHXgj fouInHihnG00WwLo7b1gY4/sj6qzoMV42JQ8zjhksNznHt4+FzmddQlgUPeCC9Mz M8dN+m2wE6cjxSNgCYkNKtG+B299A7xEda++WCsLMzIq6nbQvniUODCNtvFdYJfe eEgGVYYQTnWGvUsBFDSoSl5s -----END CERTIFICATE-----Generated at Wed Mar 4 08:37:25 2026 by rpki-client