$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: K+0+pyYhGTtFZYX4JJnQiy7zg2K9RTtg3bURPUdii+Q= Subject key identifier: 30:47:BF:43:58:95:12:5D:3C:C7:22:DB:12:43:32:66:F7:9D:00:A7 Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 04F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 04F0 Signing time: Tue 24 Mar 2026 23:24:32 +0000 Manifest this update: Tue 24 Mar 2026 23:24:31 +0000 Manifest next update: Tue 31 Mar 2026 23:24:31 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: CMTXCG3Dh8xQdbdK2FCX5FA90RErfO5fec1t4trkgaw=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: tzCOvyqYt7MFJ8SNbSmhb4aGjE+HioiUqoKryi7LaSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Mar 24 23:24:31 2026 GMT Not After : Mar 31 23:24:31 2026 GMT Subject: CN=69c31d2f-5fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:8d:b9:ef:26:84:4f:ea:94:2b:83:ae:02: ea:1c:c2:a7:7e:d5:67:5e:0f:3e:b6:62:de:47:b6: 3d:96:34:49:c6:23:7a:6f:0c:87:2f:21:06:e1:30: 95:72:1e:7b:06:74:f5:b0:34:7a:5b:0d:8a:d3:b2: a6:33:37:62:49:a6:fe:b7:82:57:5f:09:2a:ba:57: 68:dc:ed:21:78:f7:60:82:27:02:07:43:2f:97:a3: 41:4f:68:7d:55:5b:ef:78:f3:7a:07:ed:a3:29:e8: a0:5e:6d:61:46:19:08:00:70:92:e9:80:51:01:03: 29:07:07:68:cb:8c:8e:36:14:75:87:66:1b:cd:88: c5:7b:44:cc:ab:0d:7a:dc:50:b3:21:36:43:a9:7a: 9a:e5:e9:e1:46:20:a6:ef:22:b5:f4:44:42:a6:c8: ee:3c:74:03:4f:a0:c8:7d:5b:0d:2c:30:5a:bc:93: b9:bf:84:70:68:c7:1e:a2:9d:c5:12:68:af:fd:f4: cc:75:60:81:44:23:3d:be:ae:ee:a2:05:af:59:b0: 7a:93:f7:4b:16:90:ea:d6:79:97:55:eb:ab:b3:bd: 60:6f:5b:6e:bf:67:84:0d:47:06:af:47:4d:38:c0: f4:cf:66:d7:ae:cd:09:a0:df:ee:2a:ce:4d:0d:4c: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:47:BF:43:58:95:12:5D:3C:C7:22:DB:12:43:32:66:F7:9D:00:A7 X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3a:82:b7:81:9d:e8:07:0e:41:02:02:c3:55:f1:67:cc:74: 9b:25:40:13:05:01:33:9a:5f:3d:fc:2e:c7:0b:33:04:e4:42: d3:2f:d8:25:45:bc:d0:ee:e5:d8:77:1b:74:12:91:72:45:df: 00:f5:a7:ea:46:fb:73:54:37:94:31:20:3b:6f:66:53:9b:3a: ab:98:14:ff:a8:29:97:14:8c:9a:64:93:10:3d:9e:19:f6:d2: a1:39:58:4a:f7:97:cf:02:91:06:ab:da:98:d2:54:25:63:55: b6:24:e5:8b:55:e7:68:0e:c1:84:10:1f:d0:5f:9a:66:b8:68: bf:1c:80:c3:d5:a9:f3:16:8a:ab:7a:52:7f:d6:ab:89:89:7e: e1:12:a6:aa:4a:1d:b8:89:70:ca:83:13:47:52:d4:fb:2b:d1: 38:96:40:28:23:ef:3c:a8:6a:be:e9:ee:bf:65:54:b2:d7:52: e2:45:b2:90:2a:c0:4b:32:a9:12:f4:37:63:b6:59:b4:86:91: 39:2e:f2:ca:df:ea:f9:5a:80:14:77:9d:9e:6a:05:17:80:41: bd:53:4f:61:66:29:fd:31:07:ea:8e:77:8f:db:97:7c:e9:a2: 18:41:06:fa:dc:10:14:98:20:48:ac:b9:f1:ae:2f:56:f3:56: 2c:ff:96:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjYwMzI0MjMyNDMxWhcNMjYwMzMxMjMyNDMxWjAYMRYwFAYD VQQDEw02OWMzMWQyZi01ZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5CNue8mhE/qlCuDrgLqHMKnftVnXg8+tmLeR7Y9ljRJxiN6bwyHLyEG4TCV ch57BnT1sDR6Ww2K07KmMzdiSab+t4JXXwkquldo3O0hePdggicCB0Mvl6NBT2h9 VVvvePN6B+2jKeigXm1hRhkIAHCS6YBRAQMpBwdoy4yONhR1h2YbzYjFe0TMqw16 3FCzITZDqXqa5enhRiCm7yK19ERCpsjuPHQDT6DIfVsNLDBavJO5v4RwaMceop3F Emiv/fTMdWCBRCM9vq7uogWvWbB6k/dLFpDq1nmXVeurs71gb1tuv2eEDUcGr0dN OMD0z2bXrs0JoN/uKs5NDUyEzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBHv0NY lRJdPMci2xJDMmb3nQCnMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXjqCt4Gd6AcOQQICw1XxZ8x0myVAEwUBM5pfPfwuxwszBORC0y/YJUW80O7l 2HcbdBKRckXfAPWn6kb7c1Q3lDEgO29mU5s6q5gU/6gplxSMmmSTED2eGfbSoTlY SveXzwKRBqvamNJUJWNVtiTli1XnaA7BhBAf0F+aZrhovxyAw9Wp8xaKq3pSf9ar iYl+4RKmqkoduIlwyoMTR1LU+yvROJZAKCPvPKhqvunuv2VUstdS4kWykCrASzKp EvQ3Y7ZZtIaROS7yyt/q+VqAFHednmoFF4BBvVNPYWYp/TEH6o53j9uXfOmiGEEG +twQFJggSKy58a4vVvNWLP+WyQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:02 2026 by rpki-client