$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: pKmsLxnf1RSLuDEeZAQgtriCkV0imIy9zJkeriOOWAQ= Subject key identifier: B3:2F:00:0B:4D:6D:80:BB:4A:00:79:39:61:49:95:32:78:E8:AE:E7 Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 7E Signing time: Wed 25 Mar 2026 06:57:15 +0000 Manifest this update: Wed 25 Mar 2026 06:57:15 +0000 Manifest next update: Wed 01 Apr 2026 06:57:15 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: mGTeF8sj/c/O6+VVjMr4XKfAsHBALS+6EpbHtsPXBzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Mar 25 06:57:15 2026 GMT Not After : Apr 1 06:57:15 2026 GMT Subject: CN=69c3874b-ce81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:b9:ee:33:37:9d:2f:f2:3e:14:86:86:d5: ca:34:14:9e:7c:b6:f6:55:98:bc:95:76:87:fb:c0: 4a:4d:ad:89:2d:99:b0:7c:e9:af:ee:7d:0e:1e:77: 68:64:0d:c9:b8:0c:c6:29:06:c0:95:87:16:73:4a: 0a:1f:78:22:44:0f:e8:e1:5a:f1:0b:84:5b:f3:de: a6:08:04:02:d3:2f:ab:2e:ed:b0:a6:bf:96:34:1f: 37:44:33:1f:6f:43:d0:c6:cd:e3:60:3a:e7:3e:e9: c3:90:5c:d9:46:83:72:5a:44:8c:3b:95:3e:e4:a0: 84:59:47:0b:9b:2a:37:71:97:75:34:d2:74:72:d6: 30:18:64:84:e4:ad:3d:97:1d:c1:bf:e5:98:46:24: aa:a4:1c:38:56:71:51:1b:a6:9c:1a:d6:6d:af:06: ff:bc:5b:52:df:50:fb:32:cb:bc:45:59:96:59:76: b6:cb:96:56:17:32:ad:5c:cf:6b:ec:83:eb:f2:4e: c8:5a:db:29:2b:57:8f:b2:23:df:b9:d4:06:44:a3: 39:e8:08:e0:c9:a0:48:11:d2:50:60:48:ce:c1:d1: 6f:6b:1d:36:3c:7b:2f:5c:0b:bf:f0:b6:9b:b7:30: 35:e4:b2:76:20:6a:a7:25:cf:d6:ec:6d:9c:df:7b: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2F:00:0B:4D:6D:80:BB:4A:00:79:39:61:49:95:32:78:E8:AE:E7 X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:94:c0:ac:68:46:20:bd:04:36:41:da:9d:d2:16:5c:b3:87: b4:41:0b:85:7a:2e:e8:32:fa:56:c0:40:cf:6d:65:f6:1b:f6: df:69:e7:54:8f:ec:4d:a7:fd:65:b1:ed:b0:3b:8e:4f:89:f1: 0e:94:82:ee:fd:c6:77:4a:cb:ee:93:8b:aa:c1:06:a8:11:db: b0:7c:15:f4:a8:12:04:1e:b7:6d:7c:15:93:29:db:2f:bf:06: c6:23:cb:67:db:c2:1a:06:07:54:1e:10:1d:35:bc:ab:49:b9: 4e:61:a0:9f:b8:ad:f0:50:68:e2:9f:d1:f7:44:05:4b:1b:30: e2:f3:a7:e4:c1:3d:95:bd:c3:81:fc:b2:9d:a2:42:fd:65:63: 61:5b:06:9d:8e:f9:d3:5c:89:54:0d:85:db:6d:61:fc:c6:5a: 09:c3:f3:d6:f8:3c:e0:79:0a:37:3d:d3:fa:9c:bf:88:be:f0: f0:c3:09:52:e7:54:2d:bd:b1:4d:15:6f:74:69:8c:9c:6c:74: f1:14:17:95:32:ef:11:c1:00:47:59:45:13:25:47:12:09:d5: 11:df:f5:c2:7c:6a:a4:35:bc:1f:12:40:b9:3b:c4:0a:8c:f3: ce:09:a4:e6:a3:16:ab:67:ff:8e:01:1f:f0:83:04:67:90:5b: 65:5e:68:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1 NUM5OEM0NDAeFw0yNjAzMjUwNjU3MTVaFw0yNjA0MDEwNjU3MTVaMBgxFjAUBgNV BAMTDTY5YzM4NzRiLWNlODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41rnuMzedL/I+FIaG1co0FJ58tvZVmLyVdof7wEpNrYktmbB86a/ufQ4ed2hk Dcm4DMYpBsCVhxZzSgofeCJED+jhWvELhFvz3qYIBALTL6su7bCmv5Y0HzdEMx9v Q9DGzeNgOuc+6cOQXNlGg3JaRIw7lT7koIRZRwubKjdxl3U00nRy1jAYZITkrT2X HcG/5ZhGJKqkHDhWcVEbppwa1m2vBv+8W1LfUPsyy7xFWZZZdrbLllYXMq1cz2vs g+vyTsha2ykrV4+yI9+51AZEoznoCODJoEgR0lBgSM7B0W9rHTY8ey9cC7/wtpu3 MDXksnYgaqclz9bsbZzfe9u9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsy8AC01t gLtKAHk5YUmVMnjorucwHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp MS1wNVJmUTVwSmxYSmpFUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZlMCsaEYgvQQ2Qdqd0hZcs4e0QQuFei7oMvpWwEDPbWX2G/bfaedUj+xNp/1l se2wO45PifEOlILu/cZ3Ssvuk4uqwQaoEduwfBX0qBIEHrdtfBWTKdsvvwbGI8tn 28IaBgdUHhAdNbyrSblOYaCfuK3wUGjin9H3RAVLGzDi86fkwT2VvcOB/LKdokL9 ZWNhWwadjvnTXIlUDYXbbWH8xloJw/PW+DzgeQo3PdP6nL+IvvDwwwlS51QtvbFN FW90aYycbHTxFBeVMu8RwQBHWUUTJUcSCdUR3/XCfGqkNbwfEkC5O8QKjPPOCaTm oxarZ/+OAR/wgwRnkFtlXmhC -----END CERTIFICATE-----Generated at Thu Mar 26 05:42:03 2026 by rpki-client