$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json) Hash identifier: oBJolxZfpvJ/7G4cKLJSphONqZl0tTxKQyq0bh5oo8I= Subject key identifier: D7:56:E6:A2:F9:04:4E:08:B3:6A:D9:67:B0:F0:1E:D1:72:1E:9E:6E Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft Manifest number: 0140 Signing time: Tue 03 Mar 2026 05:01:25 +0000 Manifest this update: Tue 03 Mar 2026 05:01:25 +0000 Manifest next update: Tue 10 Mar 2026 05:01:25 +0000 Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: gnYx82WqimWFKAohLoKgYrxjey5273PaOPIleft0cSM=) 2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: HtTTgZnkokVoTsTwgIBUK/V2b+CIHpg3pHHzLxRKi1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 05:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Validity Not Before: Mar 3 05:01:25 2026 GMT Not After : Mar 10 05:01:25 2026 GMT Subject: CN=69a66b25-25d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:d3:11:b3:7d:c7:bc:cb:ec:cd:d1:42:a6: bf:99:b4:42:b8:79:18:cf:2a:0a:59:10:ee:07:4b: 4f:bf:18:12:c1:3a:23:eb:80:fe:7d:d4:f7:5f:ec: 29:31:3a:87:c2:9a:68:19:6d:a6:bf:5a:4e:53:89: 0c:b3:db:98:0a:65:79:3c:47:f2:6a:1a:a1:d0:e7: 14:28:20:f6:53:46:2c:60:ed:6c:ca:7e:bb:1a:c5: ed:8f:59:8c:b0:99:67:8f:9d:a9:f5:d1:c3:b9:57: 84:de:ac:05:49:e7:0e:a2:b3:79:30:73:93:03:30: 7c:cd:00:08:9a:d1:bc:06:f2:b1:8a:24:39:b7:dc: 12:6b:23:ae:21:cd:5d:d7:0f:49:c4:4a:31:d7:fa: e3:59:22:57:34:d3:54:b7:6a:cd:6d:df:55:8c:09: b8:dd:3a:50:23:79:35:49:28:26:39:71:f2:36:35: e7:ea:11:b0:84:ad:03:30:c9:2d:50:fd:b1:2e:20: ff:0c:07:5d:d4:62:0a:13:75:db:9a:5c:7f:2c:6a: 23:64:cd:b2:1e:c9:27:2a:2b:60:3f:b8:26:27:b7: e5:09:5c:b3:df:e7:42:5b:5b:be:13:b1:ec:8c:d9: 80:59:b8:8c:e1:69:81:82:ed:de:c8:ec:36:69:88: d9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:56:E6:A2:F9:04:4E:08:B3:6A:D9:67:B0:F0:1E:D1:72:1E:9E:6E X509v3 Authority Key Identifier: keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:a8:4d:c1:44:ac:28:73:5a:3d:d0:dd:9f:9e:41:a9:ac:8c: c4:23:6c:f5:5d:0f:ab:c0:13:b1:e7:a2:33:f3:86:d7:b1:b8: af:88:63:11:1b:7c:d1:7e:df:72:81:eb:e0:63:53:44:dc:17: 10:fe:15:7c:31:93:e7:1f:b6:78:34:ef:18:4d:23:be:18:9e: d8:d1:90:ec:33:18:b8:61:d8:d2:95:4b:ba:bd:31:33:94:7f: df:31:8e:5e:24:a4:a9:24:14:3c:41:86:6e:26:b4:47:e3:db: b2:65:74:fa:3d:47:85:5c:56:5f:32:90:0d:ec:74:7a:fd:1f: 0d:2a:ae:50:70:59:04:ca:0e:9c:9b:e3:85:e6:37:ef:31:3a: d9:03:da:50:74:21:4f:08:5a:41:9b:91:2d:86:17:a3:b5:c0: bf:f3:2b:6a:f4:5e:f7:f0:b2:9c:cd:fa:c7:52:b3:b3:af:da: 6c:a1:84:53:09:06:f6:8f:02:4d:97:c2:09:53:8b:b1:01:56: 68:45:c5:fb:c8:a7:90:da:e2:6c:d8:02:9d:ff:9f:d0:b9:fc: 13:86:fb:81:4a:ae:c7:50:df:ff:1d:47:b4:d5:43:24:10:2d: 11:18:74:b6:04:22:ba:1c:53:db:a2:72:b3:8b:45:91:d5:b2: 6e:27:5c:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDVGMUVFODJCRjcwOUEyNkNDMDAwOTk1QjQ3NDgxRTU0 RjZGMzgwNkUwHhcNMjYwMzAzMDUwMTI1WhcNMjYwMzEwMDUwMTI1WjAYMRYwFAYD VQQDEw02OWE2NmIyNS0yNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRvTEbN9x7zL7M3RQqa/mbRCuHkYzyoKWRDuB0tPvxgSwToj64D+fdT3X+wp MTqHwppoGW2mv1pOU4kMs9uYCmV5PEfyahqh0OcUKCD2U0YsYO1syn67GsXtj1mM sJlnj52p9dHDuVeE3qwFSecOorN5MHOTAzB8zQAImtG8BvKxiiQ5t9wSayOuIc1d 1w9JxEox1/rjWSJXNNNUt2rNbd9VjAm43TpQI3k1SSgmOXHyNjXn6hGwhK0DMMkt UP2xLiD/DAdd1GIKE3Xbmlx/LGojZM2yHsknKitgP7gmJ7flCVyz3+dCW1u+E7Hs jNmAWbiM4WmBgu3eyOw2aYjZPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdW5qL5 BE4Is2rZZ7DwHtFyHp5uMB8GA1UdIwQYMBaAFF8e6Cv3CaJswACZW0dIHlT284Bu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wM0IwNTJENDNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9tekFBSmxiUjBnZVZQYnpn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wM0IwNTJENDNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9t ekFBSmxiUjBnZVZQYnpnRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuKhNwUSsKHNaPdDdn55BqayMxCNs9V0Pq8ATseeiM/OG17G4r4hjERt80X7f coHr4GNTRNwXEP4VfDGT5x+2eDTvGE0jvhie2NGQ7DMYuGHY0pVLur0xM5R/3zGO XiSkqSQUPEGGbia0R+PbsmV0+j1HhVxWXzKQDex0ev0fDSquUHBZBMoOnJvjheY3 7zE62QPaUHQhTwhaQZuRLYYXo7XAv/MravRe9/CynM36x1Kzs6/abKGEUwkG9o8C TZfCCVOLsQFWaEXF+8inkNribNgCnf+f0Ln8E4b7gUqux1Df/x1HtNVDJBAtERh0 tgQiuhxT26Jys4tFkdWybidcLA== -----END CERTIFICATE-----Generated at Wed Mar 4 08:41:20 2026 by rpki-client