$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: rstuxQtCu2Z2sKKmQXFMfrc2B3xRnOcy+e307CpG4xc= Subject key identifier: 77:17:2A:6C:2E:8E:B4:55:45:C3:D6:92:02:15:42:2D:EA:FD:F7:30 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 049A Signing time: Sun 20 Sep 2026 23:46:33 +0000 Manifest this update: Sun 20 Sep 2026 23:46:32 +0000 Manifest next update: Sun 27 Sep 2026 23:46:32 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: qPE6AWGJU7gyvKaOX/hThcQJ8i+cBQvLO9fUW4hHhCY=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: cbgFwuJsaQfvpKjS6OYVwgTJIz46R1Gj8ZHc8UQN4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Sep 20 23:46:32 2026 GMT Not After : Sep 27 23:46:32 2026 GMT Subject: CN=6ab07059-685c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:45:3b:8a:76:bc:3a:cf:93:da:6d:97:44: 21:79:d4:40:05:72:f7:76:df:52:94:17:4a:71:00: 71:c3:39:38:b5:4a:a9:f6:4d:0b:9b:0f:0f:09:b8: 8c:64:2b:15:65:6f:96:27:2b:5c:6a:f3:8f:01:68: 91:2f:c6:ca:a3:e8:b2:3b:14:39:e9:d3:84:5a:4b: eb:40:ad:bd:98:22:8c:d0:0c:89:fe:f4:ba:65:f5: 91:b6:ac:f2:85:88:fc:4d:37:c5:6b:86:f6:99:00: 3a:3d:cb:ea:ab:f3:a5:d0:ee:a3:07:0c:d9:b0:5b: fd:80:06:f5:c9:25:69:96:6f:44:58:57:f8:f1:37: d1:91:08:15:4e:6d:a3:bf:e3:55:f9:49:40:69:e3: 52:2c:a6:4e:0c:7f:eb:26:98:62:09:b2:ac:aa:7e: 2e:21:86:d5:8a:b6:0f:2c:41:4c:86:28:02:14:34: 15:d5:7e:d9:65:8d:3f:22:21:af:b0:d7:4d:65:3d: ef:30:ff:aa:83:64:b0:d8:7f:88:33:71:37:78:57: 76:e6:f6:c2:d2:25:69:93:ae:2f:20:65:90:09:3e: ca:ef:65:19:ad:03:0b:52:60:d3:bf:12:5c:ad:1c: 39:d8:22:30:00:3e:64:39:36:cc:ae:5f:c0:26:61: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:17:2A:6C:2E:8E:B4:55:45:C3:D6:92:02:15:42:2D:EA:FD:F7:30 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:94:05:d8:1a:c2:59:4e:de:fb:f7:1b:70:bc:f4:4c:d0:77: c6:17:a0:80:4e:89:22:ee:f1:fc:48:de:31:9e:de:bf:8a:d0: ac:85:c8:57:1e:17:e1:8d:68:56:d8:39:1f:1e:ab:4d:bf:b6: be:92:73:df:db:05:c3:84:07:f3:c8:32:97:6b:a5:bc:de:5b: 04:ef:5b:14:90:66:b5:19:18:55:56:9d:96:ae:8d:fe:e8:04: 5e:c0:fe:c2:69:54:f1:c6:7d:aa:0e:cb:02:90:c4:fc:1f:39: 90:9c:30:05:54:3a:52:b4:2a:ac:c3:2b:4f:ed:b5:aa:26:28: 64:87:b3:1b:2c:19:d9:fa:93:c4:ec:8d:84:b7:c3:d9:2c:9e: 2b:89:65:af:f0:ec:48:00:7a:a8:b4:61:93:05:63:d9:9b:c1: 8d:2b:0b:0b:9f:a8:31:91:25:d0:7b:60:5d:ab:87:54:dd:fd: c7:a2:b4:8b:78:32:17:d8:14:27:ca:4f:68:32:59:4f:f4:f3: b4:23:7c:29:35:9b:f6:cc:61:18:27:62:d0:cc:50:86:3c:36: 5c:67:17:86:b8:71:61:a3:2d:2a:51:1b:5e:59:80:26:d1:52: e3:37:d0:9d:0e:7b:83:6a:ce:58:cc:fd:d3:8f:e9:03:77:db: d0:5a:8b:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjYwOTIwMjM0NjMyWhcNMjYwOTI3MjM0NjMyWjAYMRYwFAYD VQQDEw02YWIwNzA1OS02ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9lFO4p2vDrPk9ptl0QhedRABXL3dt9SlBdKcQBxwzk4tUqp9k0Lmw8PCbiM ZCsVZW+WJytcavOPAWiRL8bKo+iyOxQ56dOEWkvrQK29mCKM0AyJ/vS6ZfWRtqzy hYj8TTfFa4b2mQA6Pcvqq/Ol0O6jBwzZsFv9gAb1ySVplm9EWFf48TfRkQgVTm2j v+NV+UlAaeNSLKZODH/rJphiCbKsqn4uIYbVirYPLEFMhigCFDQV1X7ZZY0/IiGv sNdNZT3vMP+qg2Sw2H+IM3E3eFd25vbC0iVpk64vIGWQCT7K72UZrQMLUmDTvxJc rRw52CIwAD5kOTbMrl/AJmG99QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcXKmwu jrRVRcPWkgIVQi3q/fcwMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW5QF2BrCWU7e+/cbcLz0TNB3xheggE6JIu7x/EjeMZ7ev4rQrIXIVx4X4Y1o Vtg5Hx6rTb+2vpJz39sFw4QH88gyl2ulvN5bBO9bFJBmtRkYVVadlq6N/ugEXsD+ wmlU8cZ9qg7LApDE/B85kJwwBVQ6UrQqrMMrT+21qiYoZIezGywZ2fqTxOyNhLfD 2SyeK4llr/DsSAB6qLRhkwVj2ZvBjSsLC5+oMZEl0HtgXauHVN39x6K0i3gyF9gU J8pPaDJZT/TztCN8KTWb9sxhGCdi0MxQhjw2XGcXhrhxYaMtKlEbXlmAJtFS4zfQ nQ57g2rOWMz904/pA3fb0FqLfg== -----END CERTIFICATE-----Generated at Tue Sep 22 20:57:12 2026 by rpki-client