$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: 0qN16jBuHBQxhBfpeyoJMnU+roce4+p49uYEEcKJ55o= Subject key identifier: 89:94:6A:DC:CD:41:87:48:0D:E0:F3:50:22:99:1B:EC:F2:D9:22:73 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 043C Signing time: Tue 24 Mar 2026 23:56:13 +0000 Manifest this update: Tue 24 Mar 2026 23:56:13 +0000 Manifest next update: Tue 31 Mar 2026 23:56:13 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: Bzhpg/12B6p/OXdMQsgC3/hnYU8GyGUvfudt6pa2/LA=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 7IlaGTjLJWbx6PnU7BddxHIB93LX+4J3qLIjVMAHpm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Mar 24 23:56:13 2026 GMT Not After : Mar 31 23:56:13 2026 GMT Subject: CN=69c3249d-4483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:04:b1:f6:8d:62:be:ac:57:71:84:f4:46: 2b:55:31:bb:b7:4e:ee:2e:20:f9:58:66:c3:f9:c7: e8:67:d7:2e:0e:d4:2d:43:eb:5c:51:9a:ce:0c:aa: b0:80:c7:d5:b0:7b:4c:e4:35:72:8f:e7:3f:39:9d: 78:4a:48:3b:1a:45:fd:22:d7:4e:3e:53:05:ed:d3: 02:e1:98:44:59:65:50:33:91:71:d3:33:ee:6c:b7: 51:ed:07:c7:c0:05:50:84:57:03:24:d7:cb:64:f1: db:6f:dc:c7:98:c7:7e:5e:94:e0:ea:ce:43:c0:a1: d9:c4:d9:fd:f3:b8:02:86:9c:c8:aa:d6:4c:84:22: 86:61:04:39:f5:52:f0:59:6c:9a:a3:16:e5:9b:e7: 9e:c2:9f:60:90:64:1c:a8:2d:2a:8d:bc:19:07:24: 2f:49:ad:3f:bf:a2:09:06:57:24:1f:d3:e3:79:10: bc:11:47:f5:ec:b3:93:bf:b6:62:70:88:b6:ea:92: 41:84:3e:4e:7a:cc:49:d5:9c:5c:cd:51:64:d7:83: 86:1c:ac:e7:0e:69:c2:b2:5b:1b:bf:5e:7a:72:9b: 5f:ea:63:8d:98:f3:f7:84:58:0a:c8:3d:d8:45:7b: cb:aa:f7:28:01:a3:7f:b5:d5:51:d5:21:a1:0e:b9: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:94:6A:DC:CD:41:87:48:0D:E0:F3:50:22:99:1B:EC:F2:D9:22:73 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:28:61:63:45:f2:e1:20:0e:c9:be:4f:a1:d4:b2:25:32:1a: 88:7f:2e:c0:6f:04:ee:01:46:7c:c6:50:b2:2a:99:0a:cc:bc: 1a:73:11:5b:e7:fb:14:83:67:36:3c:5e:1a:cf:ce:a1:4e:ee: fd:8c:46:cc:82:e9:63:db:74:35:39:a7:69:0f:34:0e:f2:09: 68:fc:db:57:cf:34:42:59:e8:65:bf:3c:06:4d:6d:a9:9a:da: c8:90:3a:5e:79:a6:7d:31:8e:b5:68:39:3f:0e:82:ad:05:e2: 97:22:e3:e2:71:fc:7a:96:cb:5d:5b:81:bd:be:77:5d:16:45: c2:1a:a8:0b:73:3e:52:56:2e:e9:33:d3:b5:0e:fd:14:60:93: fb:bf:f0:a1:26:3f:f4:92:8c:ce:e9:3c:9b:a3:44:b9:86:a1: ac:ff:53:a8:4c:d0:c1:27:82:a7:ba:cc:6a:c0:f5:1b:d0:e9: ba:85:aa:86:b0:f0:a3:0a:3d:c9:e2:22:fc:75:c6:c6:d4:f2: e3:f0:f7:83:c4:a7:21:93:00:27:d3:b6:27:86:28:1d:96:ea: 51:c2:4e:d3:e5:58:e6:76:65:b8:6c:49:d7:67:ef:06:cb:d5: 9e:a3:63:e9:80:67:04:1f:81:16:21:95:f0:22:d2:c8:4c:f4: ec:ad:3e:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjYwMzI0MjM1NjEzWhcNMjYwMzMxMjM1NjEzWjAYMRYwFAYD VQQDEw02OWMzMjQ5ZC00NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJUEsfaNYr6sV3GE9EYrVTG7t07uLiD5WGbD+cfoZ9cuDtQtQ+tcUZrODKqw gMfVsHtM5DVyj+c/OZ14Skg7GkX9ItdOPlMF7dMC4ZhEWWVQM5Fx0zPubLdR7QfH wAVQhFcDJNfLZPHbb9zHmMd+XpTg6s5DwKHZxNn987gChpzIqtZMhCKGYQQ59VLw WWyaoxblm+eewp9gkGQcqC0qjbwZByQvSa0/v6IJBlckH9PjeRC8EUf17LOTv7Zi cIi26pJBhD5OesxJ1ZxczVFk14OGHKznDmnCslsbv156cptf6mONmPP3hFgKyD3Y RXvLqvcoAaN/tdVR1SGhDrmv9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImUatzN QYdIDeDzUCKZG+zy2SJzMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHShhY0Xy4SAOyb5PodSyJTIaiH8uwG8E7gFGfMZQsiqZCsy8GnMRW+f7FINn NjxeGs/OoU7u/YxGzILpY9t0NTmnaQ80DvIJaPzbV880QlnoZb88Bk1tqZrayJA6 XnmmfTGOtWg5Pw6CrQXilyLj4nH8epbLXVuBvb53XRZFwhqoC3M+UlYu6TPTtQ79 FGCT+7/woSY/9JKMzuk8m6NEuYahrP9TqEzQwSeCp7rMasD1G9DpuoWqhrDwowo9 yeIi/HXGxtTy4/D3g8SnIZMAJ9O2J4YoHZbqUcJO0+VY5nZluGxJ12fvBsvVnqNj 6YBnBB+BFiGV8CLSyEz07K0+pQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:24 2026 by rpki-client