$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: FDvu0HGuNRs3hXWKoatKpK72xC1KIvv4mj3m0gBJGVY= Subject key identifier: 15:CC:7D:74:D9:ED:61:97:02:32:44:2F:72:44:C8:5F:0A:0C:C9:12 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 0442 Signing time: Sun 05 Apr 2026 00:01:44 +0000 Manifest this update: Sun 05 Apr 2026 00:01:44 +0000 Manifest next update: Sun 12 Apr 2026 00:01:44 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: XV9oelfDynZ/BgUj7q5lNWDcYWfzRd5HSgcGRosux4c=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 7IlaGTjLJWbx6PnU7BddxHIB93LX+4J3qLIjVMAHpm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Apr 5 00:01:44 2026 GMT Not After : Apr 12 00:01:44 2026 GMT Subject: CN=69d1a668-ea79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:ba:d8:25:f7:f9:5b:7b:62:d8:ff:32:f1: 39:eb:28:9f:e6:57:a4:19:cf:55:dd:ee:ab:e0:94: d9:d5:a7:ba:6d:37:6b:6a:19:cb:a0:b6:de:6a:93: 3c:89:8f:dc:8f:b0:97:46:4c:0f:45:aa:1c:a3:8b: e7:65:4c:c6:c8:06:1f:f0:94:61:95:8f:99:15:fd: 6b:85:6e:fb:20:46:ac:98:4b:97:6a:2d:a1:85:53: a1:67:a8:b0:39:33:4c:70:d2:8c:60:84:25:b3:e0: 87:67:2a:f4:01:c2:88:e9:e5:0d:96:af:21:3b:f7: 27:d8:2b:e9:05:58:57:b9:66:f4:d6:01:0e:93:bf: a1:c9:f8:fa:40:48:e3:58:27:3c:4b:57:77:69:37: 10:d0:d6:80:ae:2f:1e:95:05:24:a6:5a:47:f4:ae: b9:e9:41:18:5d:f7:f7:7f:70:40:4e:5f:ad:42:fe: 28:c3:49:e3:04:75:cd:6e:a3:db:a4:f0:03:0d:67: e6:53:9e:5f:a1:06:4a:9e:a6:74:46:c2:82:65:dd: 8b:b8:4f:36:b4:7c:11:50:14:73:95:f3:85:ec:f9: b6:40:a4:99:b9:08:3a:08:5a:aa:1b:5b:2b:dc:06: 4f:68:57:5a:12:06:09:bf:f2:b8:c1:a9:d6:fc:2d: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CC:7D:74:D9:ED:61:97:02:32:44:2F:72:44:C8:5F:0A:0C:C9:12 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:07:61:9f:e6:e3:4c:5e:cb:4c:fe:d4:af:de:c1:fa:43: 73:b8:ed:0d:e8:b7:42:02:59:5e:9c:a6:e7:3f:c4:d5:33:55: 53:7f:cc:fa:58:18:5b:9b:84:1c:55:db:8a:56:d2:4d:5f:99: 26:98:ff:b8:ca:a0:07:59:be:78:6b:c7:29:4c:9e:93:61:43: f6:94:37:fc:10:3b:ba:19:3f:d5:b7:78:12:60:0b:ba:79:95: ab:75:c1:0d:68:bb:a8:1c:31:0f:6c:e4:d2:6b:9a:68:80:00: cc:7c:95:ae:cd:dc:e5:45:47:7a:6e:0a:6b:71:ba:72:cf:88: a4:85:1a:6e:b7:51:d1:59:03:d2:d7:cb:5d:b4:23:e8:2c:e7: 87:d7:c4:0b:be:02:da:46:05:a3:40:8a:ff:6c:d7:fb:24:23: 70:4d:e2:94:64:92:36:e2:a2:11:29:c6:19:0c:44:3e:a0:e8: 55:57:18:cc:8b:4f:16:77:00:0c:d3:57:f4:3b:13:b9:7b:f3: c9:72:4d:15:ab:04:b1:e1:8c:3b:40:30:e2:24:4e:30:a3:da: a5:81:0d:cf:a8:66:68:25:9e:16:39:62:e0:8a:43:ec:a6:bd: 7f:71:ab:d9:f8:50:87:64:71:e0:38:f5:d7:1a:d7:a6:8b:79: fd:b8:ad:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjYwNDA1MDAwMTQ0WhcNMjYwNDEyMDAwMTQ0WjAYMRYwFAYD VQQDEw02OWQxYTY2OC1lYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUG62CX3+Vt7Ytj/MvE56yif5lekGc9V3e6r4JTZ1ae6bTdrahnLoLbeapM8 iY/cj7CXRkwPRaoco4vnZUzGyAYf8JRhlY+ZFf1rhW77IEasmEuXai2hhVOhZ6iw OTNMcNKMYIQls+CHZyr0AcKI6eUNlq8hO/cn2CvpBVhXuWb01gEOk7+hyfj6QEjj WCc8S1d3aTcQ0NaAri8elQUkplpH9K656UEYXff3f3BATl+tQv4ow0njBHXNbqPb pPADDWfmU55foQZKnqZ0RsKCZd2LuE82tHwRUBRzlfOF7Pm2QKSZuQg6CFqqG1sr 3AZPaFdaEgYJv/K4wanW/C2fNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXMfXTZ 7WGXAjJEL3JEyF8KDMkSMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxgHYZ/m40xey0z+1K/ewfpDc7jtDei3QgJZXpym5z/E1TNVU3/M+lgYW5uE HFXbilbSTV+ZJpj/uMqgB1m+eGvHKUyek2FD9pQ3/BA7uhk/1bd4EmALunmVq3XB DWi7qBwxD2zk0muaaIAAzHyVrs3c5UVHem4Ka3G6cs+IpIUabrdR0VkD0tfLXbQj 6Cznh9fEC74C2kYFo0CK/2zX+yQjcE3ilGSSNuKiESnGGQxEPqDoVVcYzItPFncA DNNX9DsTuXvzyXJNFasEseGMO0Aw4iROMKPapYENz6hmaCWeFjli4IpD7Ka9f3Gr 2fhQh2Rx4Dj11xrXpot5/bitjA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:50:49 2026 by rpki-client