$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: RertNqjJCunKSHZVg4Dzq+KH8eeVRM4WBkJXjEZUV7U= Subject key identifier: 3F:08:42:85:A9:2F:B9:97:CA:0E:FD:2D:AE:B7:EA:8E:12:36:59:0A Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 0288 Signing time: Wed 25 Mar 2026 01:13:55 +0000 Manifest this update: Wed 25 Mar 2026 01:13:54 +0000 Manifest next update: Wed 01 Apr 2026 01:13:54 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: Id1mqt8RJ+4SzRUUqPJSr6cdzKD+8D1ylvl/P+7jBmI=) 2: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: pWzkuCt8a+9azhiGDPeDWp5ecjb9VtC3wFHM3M7CwD0=) 3: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: IFkaWh9fbeVGFx4gBGqLo0JFk5b3JVnnCbAa8CPV/kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: Mar 25 01:13:54 2026 GMT Not After : Apr 1 01:13:54 2026 GMT Subject: CN=69c336d2-35fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:58:d7:b2:57:1b:05:eb:34:27:cc:86:c0: 17:03:6c:9c:e3:36:c9:e2:f2:20:ea:b7:a3:b8:8f: c8:2d:86:a4:fa:2c:ea:8d:66:ab:bd:d4:68:22:92: 45:7b:3c:74:99:2b:0f:71:14:23:d2:af:24:f0:3f: e5:07:4b:a2:f3:5b:88:08:ca:8e:3f:b6:c4:a6:ba: 28:38:cc:ee:89:2d:a7:65:e1:c7:7f:22:66:08:ab: 88:bc:fd:20:c6:37:d7:c9:a2:39:d5:1a:f9:56:1f: 04:af:ab:c0:6b:8f:f5:9c:84:f1:f5:28:65:1b:41: 39:9e:0d:49:a8:45:60:cf:4e:a4:92:d7:d1:81:dd: c1:7a:e7:48:71:7d:23:92:f1:e6:a0:3a:78:f4:50: f7:de:28:5c:87:70:5f:61:4e:0f:df:3b:d5:2d:ee: 1b:88:58:e2:6c:fe:fc:a7:b3:fc:d9:7d:86:c1:8a: ad:66:30:eb:c3:1e:48:f3:f3:4b:1a:fc:11:a1:52: ee:7a:6d:a3:b4:57:6f:01:b3:7b:84:dc:7e:16:4e: 1b:2f:e7:3a:1c:b7:ae:3b:b7:c8:04:74:be:ae:ed: 6a:7e:72:c9:bf:ea:fa:c4:27:86:f6:9b:f8:1c:1e: a1:a5:2f:35:ec:5d:1d:4a:7a:49:04:1e:f2:a8:d0: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:08:42:85:A9:2F:B9:97:CA:0E:FD:2D:AE:B7:EA:8E:12:36:59:0A X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a4:f2:30:da:15:54:1e:02:66:82:42:32:fa:83:b2:44:26: 8b:c2:49:68:06:28:0e:b0:df:fe:f7:c1:b5:f0:7a:66:28:bb: 34:11:4d:22:01:7e:44:07:02:aa:ec:7a:c2:2d:62:a3:c7:23: e8:f2:01:d6:fe:8d:9d:7b:e8:7c:26:7a:9f:6e:8e:03:2c:9b: fe:96:b2:3a:c9:ca:ed:94:de:b6:bc:6c:25:1e:29:a0:44:26: df:01:f7:6f:93:c5:b7:ed:a9:cb:c4:2f:83:69:a3:85:c2:aa: a7:65:c4:84:4b:63:95:10:77:42:0b:2d:ff:e0:89:c7:3b:09: 79:b6:8e:33:dd:f9:0d:1c:f8:0e:14:72:07:ed:2d:2e:76:4e: fd:83:28:43:58:f8:34:62:52:52:0c:6d:04:dd:b0:98:58:2a: 93:6e:d6:da:72:be:45:b2:e2:0e:2c:8c:ce:06:db:df:68:40: 06:05:90:52:36:3e:81:f7:53:c9:8d:ac:d9:55:c8:92:6b:f6: ec:98:42:5b:10:d9:7a:8a:ca:db:59:f0:31:2d:61:f6:7a:9d: 02:d6:ee:ee:74:f7:31:80:7e:37:86:86:0c:04:13:57:9e:c2: b4:5e:b6:71:d1:46:56:1d:f9:64:ed:75:91:43:ad:03:9d:47: 78:1a:5b:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjYwMzI1MDExMzU0WhcNMjYwNDAxMDExMzU0WjAYMRYwFAYD VQQDEw02OWMzMzZkMi0zNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5RY17JXGwXrNCfMhsAXA2yc4zbJ4vIg6rejuI/ILYak+izqjWarvdRoIpJF ezx0mSsPcRQj0q8k8D/lB0ui81uICMqOP7bEprooOMzuiS2nZeHHfyJmCKuIvP0g xjfXyaI51Rr5Vh8Er6vAa4/1nITx9ShlG0E5ng1JqEVgz06kktfRgd3BeudIcX0j kvHmoDp49FD33ihch3BfYU4P3zvVLe4biFjibP78p7P82X2GwYqtZjDrwx5I8/NL GvwRoVLuem2jtFdvAbN7hNx+Fk4bL+c6HLeuO7fIBHS+ru1qfnLJv+r6xCeG9pv4 HB6hpS817F0dSnpJBB7yqNA2YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8IQoWp L7mXyg79La636o4SNlkKMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXKTyMNoVVB4CZoJCMvqDskQmi8JJaAYoDrDf/vfBtfB6Zii7NBFNIgF+RAcC qux6wi1io8cj6PIB1v6NnXvofCZ6n26OAyyb/payOsnK7ZTetrxsJR4poEQm3wH3 b5PFt+2py8Qvg2mjhcKqp2XEhEtjlRB3Qgst/+CJxzsJebaOM935DRz4DhRyB+0t LnZO/YMoQ1j4NGJSUgxtBN2wmFgqk27W2nK+RbLiDiyMzgbb32hABgWQUjY+gfdT yY2s2VXIkmv27JhCWxDZeorK21nwMS1h9nqdAtbu7nT3MYB+N4aGDAQTV57CtF62 cdFGVh35ZO11kUOtA51HeBpb0g== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:40 2026 by rpki-client