$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: YjpJJI6Ek04VFIvcFCFKuDlMGUa1aJNxQZkcMwA4gx4= Subject key identifier: 74:E6:D7:32:EC:EF:9B:BE:0E:6B:C6:42:2A:8D:AD:3D:6A:D8:12:E1 Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: 5E Signing time: Wed 25 Mar 2026 02:55:02 +0000 Manifest this update: Wed 25 Mar 2026 02:55:02 +0000 Manifest next update: Wed 01 Apr 2026 02:55:02 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: UJ45z9PjUzoKGJuAHASquxo1urgO3FqcXpWSSs/Vmlk=) 2: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (hash: 1qya+xG/bA4oxTX7LKHxwYhVq0xAJJdEgu/OLeybOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Mar 25 02:55:02 2026 GMT Not After : Apr 1 02:55:02 2026 GMT Subject: CN=69c34e86-1baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:35:5d:75:97:40:13:09:39:8b:5c:18:e5: 24:f5:2a:88:b8:55:c8:16:52:5f:41:fd:00:d6:c3: 75:45:af:ce:7d:a1:84:6a:db:00:62:1b:75:39:a7: 31:66:b8:4b:1f:d2:97:e3:a6:4c:71:44:46:a7:21: 35:81:22:db:1d:b5:54:7c:77:e8:10:a1:be:cf:e2: f4:7d:8b:5a:99:a9:02:df:c4:43:2f:77:3e:52:07: 21:7a:fb:2f:b7:b8:50:06:47:4a:99:4b:39:97:74: 79:29:e0:fb:c8:53:98:e0:79:f4:0e:67:87:2a:5b: 4f:ee:49:76:66:58:c8:9b:71:26:40:60:64:92:74: 3f:1d:43:3e:c5:60:30:58:3d:25:3d:d4:09:a9:2a: b4:50:00:a1:05:d2:e0:6a:17:ef:9b:2d:16:2b:70: e6:9f:71:a9:55:2d:0e:a6:f4:16:d2:f9:4c:ea:f3: 8d:ad:7a:75:59:01:84:6a:28:0b:e5:b2:75:e6:df: 21:e1:39:5e:4f:04:e5:24:69:a6:b3:0d:13:61:f3: d2:b9:e6:57:2a:c4:8e:61:da:4f:4b:18:17:43:95: c7:53:d5:ba:1c:79:22:ba:d9:c4:d5:1a:f3:37:ad: 26:48:e6:82:25:a0:20:5d:04:ec:e7:74:27:3e:0e: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E6:D7:32:EC:EF:9B:BE:0E:6B:C6:42:2A:8D:AD:3D:6A:D8:12:E1 X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7f:85:dc:35:79:12:27:69:a9:7b:2a:7c:99:d1:50:b0:06: 7d:36:a2:43:c9:5d:1d:fa:e9:aa:80:a2:f4:b0:c7:c3:42:bf: bf:73:0c:aa:14:18:6a:fd:9c:a5:68:3b:8e:0b:ad:cd:e1:87: 54:9f:60:fd:29:de:16:78:b0:04:30:f5:81:35:16:99:77:e6: a5:a7:ff:78:f2:7b:aa:05:b8:9c:a6:06:5f:2f:42:ed:a3:24: f5:76:da:2b:11:21:71:cb:da:91:cd:a7:68:09:09:e9:01:d6: df:c9:fe:a3:5c:8f:4b:f9:6d:4b:db:8d:12:00:19:25:0c:1b: d1:e8:2c:c2:52:fa:03:b5:77:61:38:d7:0b:1d:22:b1:5b:8e: 5d:54:f9:6e:76:ac:e2:b5:3f:c4:90:f5:4e:14:18:2a:a7:f8: 54:96:c4:6a:ff:63:a2:b0:1c:b6:85:d1:37:14:6a:71:86:d0: 75:ae:9f:9e:bf:a4:f6:10:6d:e0:b1:13:87:d7:66:d6:53:8d: 39:78:bf:a3:f2:8a:a7:b4:36:0d:41:6d:fa:79:c1:4a:66:f7: d5:f9:2e:8c:10:74:9c:0c:d3:5f:08:d3:26:77:eb:5e:27:38: 95:71:56:8c:d7:53:98:d0:5e:9a:6f:1d:ea:e4:c2:7b:a0:bf: 72:36:9d:7b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoMDk3MTBCNUI2Njc0OUUzMzlEMTI0Q0RFNkQ2NkNFMzY2 QUNDQUJCMDAeFw0yNjAzMjUwMjU1MDJaFw0yNjA0MDEwMjU1MDJaMBgxFjAUBgNV BAMTDTY5YzM0ZTg2LTFiYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX/jVddZdAEwk5i1wY5ST1Koi4VcgWUl9B/QDWw3VFr859oYRq2wBiG3U5pzFm uEsf0pfjpkxxREanITWBItsdtVR8d+gQob7P4vR9i1qZqQLfxEMvdz5SByF6+y+3 uFAGR0qZSzmXdHkp4PvIU5jgefQOZ4cqW0/uSXZmWMibcSZAYGSSdD8dQz7FYDBY PSU91AmpKrRQAKEF0uBqF++bLRYrcOafcalVLQ6m9BbS+Uzq842tenVZAYRqKAvl snXm3yHhOV5PBOUkaaazDRNh89K55lcqxI5h2k9LGBdDlcdT1boceSK62cTVGvM3 rSZI5oIloCBdBOzndCc+DgqDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdObXMuzv m74Oa8ZCKo2tPWrYEuEwHwYDVR0jBBgwFoAUCXELW2Z0njOdEkzebWbONmrMq7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDL0EwRDQ5Q0M4OUU5 RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1hFTFcyWjBuak9kRWt6ZWJXYk9ObXJNcTdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RjNDL0EwRDQ5Q0M4OUU5RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpP ZEVremViV2JPTm1yTXE3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVf4XcNXkSJ2mpeyp8mdFQsAZ9NqJDyV0d+umqgKL0sMfDQr+/cwyqFBhq/Zyl aDuOC63N4YdUn2D9Kd4WeLAEMPWBNRaZd+alp/948nuqBbicpgZfL0LtoyT1dtor ESFxy9qRzadoCQnpAdbfyf6jXI9L+W1L240SABklDBvR6CzCUvoDtXdhONcLHSKx W45dVPludqzitT/EkPVOFBgqp/hUlsRq/2OisBy2hdE3FGpxhtB1rp+ev6T2EG3g sROH12bWU405eL+j8oqntDYNQW36ecFKZvfV+S6MEHScDNNfCNMmd+teJziVcVaM 11OY0F6abx3q5MJ7oL9yNp17 -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:24 2026 by rpki-client