$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: 9thPoxPcE8wc5KgW7PNi2Nq1qK3Qa0eLlUrdIUKfJVc= Subject key identifier: A3:45:21:00:52:9A:1E:8A:04:EA:6F:AD:85:DB:9D:00:7B:E8:A1:0F Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 0565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 055A Signing time: Tue 24 Mar 2026 23:05:48 +0000 Manifest this update: Tue 24 Mar 2026 23:05:48 +0000 Manifest next update: Tue 31 Mar 2026 23:05:48 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: XRzWGDn1wJBXuPoZhCp0q1mM+UOU9gyG1rU+Umkzd8c=) 2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Mar 24 23:05:48 2026 GMT Not After : Mar 31 23:05:48 2026 GMT Subject: CN=69c318cc-30ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:0b:fa:6e:f7:95:ae:9b:e2:fe:c9:5e:5b: b8:12:85:6a:35:40:74:af:f0:a9:bc:0e:1c:f3:31: cf:f7:a4:1b:22:20:7d:3e:f8:1b:bf:a4:68:26:6a: c7:c4:a6:54:ee:e6:00:82:4f:5c:af:c7:f1:a4:5b: c6:b9:15:50:7e:14:5a:50:3e:5c:ad:81:6b:21:09: 68:0e:46:95:35:c6:b2:4f:1a:0e:24:b7:28:1d:98: 1d:a2:fb:19:4a:8c:32:69:fc:95:7e:3d:78:c1:22: db:c4:5f:e5:50:ef:f4:6c:1b:8c:74:b6:a2:91:b6: 03:5f:0c:65:9a:68:92:9b:e6:36:45:da:72:f1:c7: 94:df:9e:7f:1a:7a:41:2b:3b:e8:17:74:93:24:78: ab:e9:cc:bf:a2:ba:0e:1c:ed:61:13:25:ba:93:fb: 81:14:39:77:58:ec:41:4b:f2:11:27:16:63:4d:27: 2d:dc:ce:ea:7b:c2:2c:6f:b4:0a:a4:c7:d7:4a:1d: dc:a7:e0:56:0e:7f:2d:ef:ee:60:2c:fd:eb:b6:0c: c7:84:64:47:77:d9:55:6f:d8:30:7b:c3:57:49:d0: 68:1d:6a:28:8e:90:a2:b5:78:ef:ad:14:dd:31:c3: 99:86:30:83:be:36:a3:5a:3b:8e:b7:4c:ca:a9:b8: 7c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:45:21:00:52:9A:1E:8A:04:EA:6F:AD:85:DB:9D:00:7B:E8:A1:0F X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e4:2e:e2:1b:cf:66:50:b7:33:65:28:4d:36:d7:cf:61:c4: 43:e0:8a:0a:49:be:83:70:dc:ea:11:f8:25:6f:7e:90:9a:d4: 90:15:4e:4d:17:a1:d7:c5:21:a4:b4:6a:6b:c7:39:05:f7:03: 0d:ec:b4:fb:60:51:4c:2e:1b:84:88:44:ed:97:b9:9a:43:78: 4a:96:9c:5f:bc:4c:93:7f:49:59:b5:89:79:ec:87:85:6d:3b: f7:2c:11:ba:f8:22:b4:07:83:99:a9:dc:54:c2:d0:c0:8a:89: 29:ce:cb:3d:bc:d6:a2:f2:86:a3:c6:ce:a9:31:31:2f:d5:eb: 0f:de:15:92:b0:86:45:d9:85:31:80:f4:a3:0d:f8:b9:ea:c3: 2d:54:8c:18:83:3e:53:d6:bc:a5:55:bf:6f:a5:4d:4e:0a:ee: c9:c9:0d:b6:42:68:6e:38:b1:af:60:de:eb:a3:00:4f:58:06: 3a:94:cd:a7:69:f1:4e:63:9e:7f:a6:cc:34:5c:ab:b9:c4:9b: 5f:c3:06:7f:7a:01:89:48:80:65:32:31:b9:13:da:97:f3:d0: 63:a7:9d:83:98:b9:64:9c:eb:4d:1a:e5:6f:57:56:62:b2:92: a2:aa:2b:79:5e:eb:6e:3c:92:00:68:d9:67:b1:ba:83:99:91: 26:54:33:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjYwMzI0MjMwNTQ4WhcNMjYwMzMxMjMwNTQ4WjAYMRYwFAYD VQQDEw02OWMzMThjYy0zMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhoL+m73la6b4v7JXlu4EoVqNUB0r/CpvA4c8zHP96QbIiB9Pvgbv6RoJmrH xKZU7uYAgk9cr8fxpFvGuRVQfhRaUD5crYFrIQloDkaVNcayTxoOJLcoHZgdovsZ SowyafyVfj14wSLbxF/lUO/0bBuMdLaikbYDXwxlmmiSm+Y2Rdpy8ceU355/GnpB KzvoF3STJHir6cy/oroOHO1hEyW6k/uBFDl3WOxBS/IRJxZjTSct3M7qe8Isb7QK pMfXSh3cp+BWDn8t7+5gLP3rtgzHhGRHd9lVb9gwe8NXSdBoHWoojpCitXjvrRTd McOZhjCDvjajWjuOt0zKqbh8QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNFIQBS mh6KBOpvrYXbnQB76KEPMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIuQu4hvPZlC3M2UoTTbXz2HEQ+CKCkm+g3Dc6hH4JW9+kJrUkBVOTReh18Uh pLRqa8c5BfcDDey0+2BRTC4bhIhE7Ze5mkN4SpacX7xMk39JWbWJeeyHhW079ywR uvgitAeDmancVMLQwIqJKc7LPbzWovKGo8bOqTExL9XrD94VkrCGRdmFMYD0ow34 uerDLVSMGIM+U9a8pVW/b6VNTgruyckNtkJobjixr2De66MAT1gGOpTNp2nxTmOe f6bMNFyrucSbX8MGf3oBiUiAZTIxuRPal/PQY6edg5i5ZJzrTRrlb1dWYrKSoqor eV7rbjySAGjZZ7G6g5mRJlQzcg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:48:04 2026 by rpki-client