$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: rp3+4dO/tGh8T7g+P99y+wnPc7gwmdOckN4ksuizqmI= Subject key identifier: 32:24:BC:8F:AB:3E:A0:E9:B5:24:64:62:F8:1E:18:F5:9D:AB:C4:FC Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 19EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 171F Signing time: Thu 12 Mar 2026 16:43:29 +0000 Manifest this update: Thu 12 Mar 2026 16:43:29 +0000 Manifest next update: Thu 19 Mar 2026 16:43:29 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: gDLpe9G8vpp36wlMqR4eVE63LvriDhKwoffUxxEbED4=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: yLBCrU/9RvuI/3Ay5n3EAF4Spgkoeqo4m1QHvpK9Jp0=) 3: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: SntS7Vg1oFYriW3szo2h4z7g9R8/MBi6lWybX6Gw4N8=) 4: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: nT4IqSSGqtky3oV2UAtgSCBzreFM8SwkDqRJ1RnCCsQ=) 5: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: XnGwGjApnJiNJjn58kdU+fCn2kMRI3F8FSS/7+708cw=) 6: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: wKUa5/luq9B8kVj6p/G8xPQ0IZcLYJQWqnLpb5Jwx4c=) 7: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: d4qLINHxzHC2igs+d7HFx4FkCdNcECuX29TNhu6zNb0=) 8: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: ddBHtww0w889dxAapR0tDPN4CvQLtyLCegfsQh3khs4=) 9: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: hoLS1gV18m+O3GqsO6stfQ7iSMrUj2IEPQoamxZ9gzQ=) 10: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: 1HlLCwNQIyozJV4R6Hnm8QJXf/uITnPoAyb7nipvwt4=) 11: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: BxG0F/WjWpDjPTtb5RRrHO+ss4unVJo7zC1MzAvtUtk=) 12: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: Q48uJdRRBErvN0MaEglf3VQ+DumuMDNeFKgsuTsot38=) 13: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: E+w+5MHO8ewDddMwvBrrEc1lgQdxewrUq+QuhkdbY4w=) 14: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: IpBvgX/8iJN/8+lDdhFGN5U95vt5chfijPRQMRrbUXk=) 15: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: mPbx6GaGGpEZcuE74LbXOCQRX7Jy5PlwX+gtNN/XZgI=) 16: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: S/dafMyGnoaScUVOEOAthiDLiY0z9mFaUx5kMMduICQ=) 17: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: 9k+NHvdwPaL2Te9EGjJfwM53cdhWCBk6SgfyxFOLTzw=) 18: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: psgGb3ANrPemsGMpfT9JCuPtdmIwAydwkIMUMCBZW4Y=) 19: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: qwFwplU43G/hNJT02NNQ4dEUqw5/rgD0dEX0nQo6jl4=) 20: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: kDxO50GD5AXFe4GFX5YhHhfReI3EK8WF+6AhrrSnCTE=) 21: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: aHoZLC2L3b3zGtWoG3wC75zKVeJj+YJNHv+9PZJe2Ss=) 22: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: QEmI8rFO3uFcQUGRkaarXEyZTTwJDnEF3MflJofq8Ho=) 23: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: ycOq0IsrhA+YmUYWAhAsrdeYN4eebRnWEnTPZHVK1yQ=) 24: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: OXnUP/JG3w1yEFtXRtB3EemUPot6EKdNnxfAnstSIjI=) 25: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: ICs1TEIOpnxVUHj987EsWwjf3g4Xq+0ePZB44Mwwr1U=) 26: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: J0nwYlEYUE4zSCS6vykAZTwAKoV8/9btL95KquTry64=) 27: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: kxl0Ju03xol22MdSZwz8cEZSAcwOMODv9xQLWw9mcDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6634 (0x19ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Mar 12 16:43:29 2026 GMT Not After : Mar 19 16:43:29 2026 GMT Subject: CN=69b2ed31-9f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:9b:64:50:a0:a1:d8:c5:53:9e:f4:3f:20: 95:ba:fa:97:98:a8:89:82:a1:86:96:ea:00:d6:a1: 8a:ef:1b:90:99:36:c6:8d:0d:86:af:a9:38:69:89: 90:e9:55:9b:92:32:db:ef:40:27:5c:36:15:2b:5b: af:3f:27:8c:15:3f:43:4b:1a:06:40:e1:21:48:20: 61:4f:ba:a4:59:ba:92:bc:f1:21:d4:d2:db:6e:13: 39:9c:cb:b1:b7:bd:64:b3:d6:49:6d:84:ec:a4:71: 17:4b:8d:c5:c0:eb:a2:80:b6:11:88:f1:f1:ef:5e: 21:97:8a:29:fa:14:f5:7d:02:e0:28:98:9e:93:a1: 68:7f:43:54:53:9e:5d:d3:0d:c1:0e:9d:fd:c5:f8: 9b:ab:8d:b4:e9:d8:c9:25:52:a4:29:96:eb:e4:44: 2e:f3:d8:10:3d:c2:42:c3:6c:8c:49:d4:8f:ed:49: 2f:a7:ec:29:03:92:60:e1:e4:90:89:5c:b1:97:19: d0:df:3e:9c:d0:fa:76:01:8a:0e:88:5c:c8:3a:e7: cf:7f:58:a7:af:1c:6c:44:46:7c:16:8a:36:06:f8: c9:5e:4f:ac:8b:8d:92:af:cc:c9:86:10:cf:47:07: fd:81:28:59:47:f1:01:3c:c6:88:53:1c:eb:3b:f3: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:24:BC:8F:AB:3E:A0:E9:B5:24:64:62:F8:1E:18:F5:9D:AB:C4:FC X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cc:90:06:69:86:eb:58:dc:f9:36:27:c1:43:b6:6d:10:10: fe:da:fc:45:23:be:fa:be:9a:3e:b1:af:e0:d4:d3:2f:37:5d: 8c:fb:37:da:fa:34:db:52:07:88:73:34:9c:9a:9b:62:b2:b2: cf:ae:dc:c0:2b:83:6a:71:42:1e:84:67:93:50:f8:7f:f6:e9: 9e:8c:ee:db:e8:01:38:bd:a0:66:d9:f7:ff:4a:f7:89:df:06: ee:f7:67:29:86:c2:13:64:bf:fb:46:69:d3:ba:6f:d3:20:f3: d3:f9:df:6c:d4:8f:67:91:b2:f7:e3:b5:c2:1a:f9:61:76:cd: 5f:b6:21:86:1a:0e:cd:01:1b:d8:e1:0d:59:dc:4f:1d:6a:ba: 10:06:cd:5c:42:14:c6:b6:b4:ad:ae:26:c2:9f:75:ca:48:6c: 25:55:76:79:a0:85:df:41:e3:aa:1d:f3:7d:1e:96:f4:e1:3a: 93:6f:a9:7a:c7:2f:77:92:c5:a2:05:80:03:f2:20:68:10:06: 52:69:9c:63:d1:89:15:28:4f:f1:c8:79:06:29:ef:ca:48:0e: d6:6b:0d:b6:2c:6c:48:22:b3:86:52:b0:1e:cb:64:c3:8e:81: e0:b4:4c:65:8e:b1:ad:6b:f2:77:63:4e:45:47:04:1f:87:89: ad:b7:b6:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjYwMzEyMTY0MzI5WhcNMjYwMzE5MTY0MzI5WjAYMRYwFAYD VQQDEw02OWIyZWQzMS05ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbSbZFCgodjFU570PyCVuvqXmKiJgqGGluoA1qGK7xuQmTbGjQ2Gr6k4aYmQ 6VWbkjLb70AnXDYVK1uvPyeMFT9DSxoGQOEhSCBhT7qkWbqSvPEh1NLbbhM5nMux t71ks9ZJbYTspHEXS43FwOuigLYRiPHx714hl4op+hT1fQLgKJiek6Fof0NUU55d 0w3BDp39xfibq4206djJJVKkKZbr5EQu89gQPcJCw2yMSdSP7Ukvp+wpA5Jg4eSQ iVyxlxnQ3z6c0Pp2AYoOiFzIOufPf1inrxxsREZ8Foo2BvjJXk+si42Sr8zJhhDP Rwf9gShZR/EBPMaIUxzrO/N5XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIkvI+r PqDptSRkYvgeGPWdq8T8MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd8yQBmmG61jc+TYnwUO2bRAQ/tr8RSO++r6aPrGv4NTTLzddjPs32vo021IH iHM0nJqbYrKyz67cwCuDanFCHoRnk1D4f/bpnozu2+gBOL2gZtn3/0r3id8G7vdn KYbCE2S/+0Zp07pv0yDz0/nfbNSPZ5Gy9+O1whr5YXbNX7YhhhoOzQEb2OENWdxP HWq6EAbNXEIUxra0ra4mwp91ykhsJVV2eaCF30Hjqh3zfR6W9OE6k2+pescvd5LF ogWAA/IgaBAGUmmcY9GJFShP8ch5BinvykgO1msNtixsSCKzhlKwHstkw46B4LRM ZY6xrWvyd2NORUcEH4eJrbe2Gw== -----END CERTIFICATE-----Generated at Thu Mar 12 18:42:09 2026 by rpki-client