$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: GlzjKWemk2NNR5ntOB42BOOXrgW5teQYYILD+wEpUZA= Subject key identifier: 5E:21:30:86:30:92:58:FE:73:A0:E4:EF:1A:E0:A6:64:42:97:77:04 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 023C Signing time: Mon 02 Mar 2026 23:16:29 +0000 Manifest this update: Mon 02 Mar 2026 23:16:29 +0000 Manifest next update: Mon 09 Mar 2026 23:16:29 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: 1zzOoLXc3u9ZhmSlyK643Luhn95V8kya2FVxiY6YNhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 23:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Mar 2 23:16:29 2026 GMT Not After : Mar 9 23:16:29 2026 GMT Subject: CN=69a61a4d-2858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:24:36:1e:b7:25:8b:ee:52:9e:c4:e5:e5: 72:06:e1:bb:af:83:df:56:1f:47:64:2f:8f:cb:82: ff:e0:f1:2f:15:ed:57:54:71:da:fd:4c:e3:c4:6d: 76:21:19:dc:51:bb:e2:74:b9:31:af:08:5b:12:7f: 6a:d5:7f:d0:d2:00:ee:f0:c5:2a:06:39:b7:a7:7a: 6f:06:32:0b:97:70:23:59:41:37:e5:33:3e:0a:ad: 2d:70:57:2f:d1:63:83:79:9b:f1:2a:18:5e:ed:9f: ef:d4:35:e7:e6:68:ec:98:2a:9c:c8:1c:f0:ec:57: d3:3f:44:f6:51:16:79:c6:51:58:fc:05:77:d2:75: a9:00:37:db:83:5f:f2:7f:42:55:b6:99:6e:c6:cd: d6:17:8b:0e:6e:47:7e:86:8f:6a:fe:f4:16:c6:ff: 2b:7b:46:66:60:61:9f:0d:1c:8a:65:17:6c:38:c6: 4f:a5:7e:29:3b:30:3d:72:9e:ba:0d:43:5a:77:98: f8:6a:06:03:38:80:e6:c3:82:34:b2:d9:94:c5:10: b4:d3:95:bf:76:c9:00:96:ab:84:bb:8e:4f:7b:06: c4:58:8f:b5:e3:12:49:54:a1:b4:d7:9b:85:3d:ab: 67:07:92:f2:aa:0d:0f:53:94:14:fb:ac:ec:f5:b9: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:21:30:86:30:92:58:FE:73:A0:E4:EF:1A:E0:A6:64:42:97:77:04 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1c:44:24:91:d0:a5:d2:80:5a:bd:89:2e:27:eb:76:01:1b: ed:02:a2:f4:9f:cf:be:27:df:25:21:51:00:ca:cf:21:f7:06: 97:e3:98:92:c7:2f:89:c6:e2:b9:3f:96:89:2b:63:a8:8a:13: 3f:97:d3:31:47:39:bd:de:24:3c:ae:12:09:a7:b0:53:a4:09: 88:83:3d:22:9b:dc:e9:62:b9:85:d9:44:e3:c5:bb:3d:71:38: 31:84:4e:77:84:50:de:b9:5e:04:50:0a:55:0c:48:f0:a5:ff: 8c:b7:82:e9:e8:8f:0f:b2:be:e9:b1:cb:0b:e4:e4:26:e0:85: d7:7d:39:8e:0c:eb:f5:fb:81:57:03:53:c0:c7:47:82:d3:13: 78:b4:65:bb:be:f9:69:32:54:d6:bc:99:2d:d0:27:13:01:ed: 18:d6:ec:5c:a5:a8:0e:96:a6:75:5d:66:88:54:7f:84:85:f1: c0:bc:26:98:94:47:1d:4d:f0:bc:97:1e:33:74:e1:0a:b1:aa: 2d:42:59:e4:04:fa:65:2d:30:12:2b:8a:7d:fa:d8:2a:ea:96: 9c:ac:5c:ef:b8:ff:56:33:e0:f8:c9:82:56:1f:c0:1e:b2:3e: bb:fa:ab:69:3f:94:a0:42:4b:ff:e6:55:e0:5d:38:42:da:54: 2a:a6:06:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjYwMzAyMjMxNjI5WhcNMjYwMzA5MjMxNjI5WjAYMRYwFAYD VQQDEw02OWE2MWE0ZC0yODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVUkNh63JYvuUp7E5eVyBuG7r4PfVh9HZC+Py4L/4PEvFe1XVHHa/UzjxG12 IRncUbvidLkxrwhbEn9q1X/Q0gDu8MUqBjm3p3pvBjILl3AjWUE35TM+Cq0tcFcv 0WODeZvxKhhe7Z/v1DXn5mjsmCqcyBzw7FfTP0T2URZ5xlFY/AV30nWpADfbg1/y f0JVtpluxs3WF4sObkd+ho9q/vQWxv8re0ZmYGGfDRyKZRdsOMZPpX4pOzA9cp66 DUNad5j4agYDOIDmw4I0stmUxRC005W/dskAlquEu45PewbEWI+14xJJVKG015uF PatnB5Lyqg0PU5QU+6zs9bnoaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4hMIYw klj+c6Dk7xrgpmRCl3cEMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxxEJJHQpdKAWr2JLifrdgEb7QKi9J/PviffJSFRAMrPIfcGl+OYkscvicbi uT+WiStjqIoTP5fTMUc5vd4kPK4SCaewU6QJiIM9Ipvc6WK5hdlE48W7PXE4MYRO d4RQ3rleBFAKVQxI8KX/jLeC6eiPD7K+6bHLC+TkJuCF1305jgzr9fuBVwNTwMdH gtMTeLRlu775aTJU1ryZLdAnEwHtGNbsXKWoDpamdV1miFR/hIXxwLwmmJRHHU3w vJceM3ThCrGqLUJZ5AT6ZS0wEiuKffrYKuqWnKxc77j/VjPg+MmCVh/AHrI+u/qr aT+UoEJL/+ZV4F04QtpUKqYGSg== -----END CERTIFICATE-----Generated at Wed Mar 4 08:39:58 2026 by rpki-client