$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: 8MJdEdGBCgUHWt73IDL9gWIKVrceN0cnQS5x/SyJ49k= Subject key identifier: DA:41:0A:CE:16:02:F9:E5:2A:B3:B0:07:E2:1C:1E:56:97:ED:0A:85 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 0499 Signing time: Fri 18 Sep 2026 23:51:23 +0000 Manifest this update: Fri 18 Sep 2026 23:51:22 +0000 Manifest next update: Fri 25 Sep 2026 23:51:22 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: q4ckL/1n5q2eZR5bBUE9MLb7aMDuAM86yLkvFkAwFpU=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: cbgFwuJsaQfvpKjS6OYVwgTJIz46R1Gj8ZHc8UQN4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Sep 18 23:51:22 2026 GMT Not After : Sep 25 23:51:22 2026 GMT Subject: CN=6aadce7b-c650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:7f:00:fc:02:61:2e:91:61:03:e8:6d:10: e8:bf:d6:1a:f5:10:1c:84:94:0b:92:96:48:0e:14: 35:a6:f4:6a:74:f9:65:af:f7:b6:f0:ae:97:33:a5: 8f:a7:de:c8:1d:cf:b1:92:6a:43:4a:6b:c6:ed:30: 4d:3e:e0:69:e6:36:eb:33:60:49:49:e1:ff:56:e3: c2:56:32:08:61:ce:f5:f1:b1:27:d8:21:be:ab:cc: f7:80:f6:2d:15:64:bf:28:98:cd:4f:d1:a5:49:51: a8:4a:90:94:bf:ca:cb:fd:1d:62:aa:50:9e:89:73: 3d:c6:cd:ad:41:16:99:1e:8d:96:8a:50:d3:35:d0: a9:af:ad:f6:14:a9:69:60:f4:6a:e3:ed:82:45:3f: 6a:68:d7:3d:31:8a:59:79:a6:62:fd:fa:bf:df:36: 50:a1:66:49:9e:f0:2f:bb:a4:13:b9:e3:6a:fb:e6: dc:40:c1:2d:39:c7:1f:3a:dc:95:ea:87:92:18:69: ef:06:8b:2f:3d:97:b4:eb:3f:3e:c3:1e:45:d7:89: 9d:8b:cd:8c:30:56:2c:69:49:30:e6:c8:ef:aa:4b: 8e:c9:b7:73:c8:6c:4b:96:32:ad:4c:9d:16:21:8f: a4:7b:61:01:79:84:a9:f8:9e:cf:99:fe:e3:cf:bf: f5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:41:0A:CE:16:02:F9:E5:2A:B3:B0:07:E2:1C:1E:56:97:ED:0A:85 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:2e:c1:3e:3c:f5:7a:be:59:0b:6f:eb:77:01:44:37:1c:30: 23:49:51:3b:96:29:43:3d:c2:15:71:a8:1c:ca:54:1a:7e:76: e9:e7:11:da:d2:01:98:c0:ec:c6:ea:fb:51:3f:6b:a0:8b:0c: 7a:98:a2:08:8c:fa:2a:86:aa:89:49:a9:f7:3d:c3:b6:96:7c: 8c:b5:de:2a:59:bc:83:b8:f1:65:fc:71:32:7a:51:bc:bf:a5: cd:c2:d7:aa:9e:8b:ed:13:da:f0:e6:58:b7:69:67:79:f7:f7: c5:cf:3b:3b:85:e4:21:aa:f7:d8:95:db:98:3e:2b:75:a1:5f: 4f:5b:0f:17:fc:92:60:aa:ef:6c:f9:36:e4:7b:50:0a:5a:18: 00:86:c1:9f:56:cc:f5:ae:6a:01:02:46:e8:78:8b:f9:1d:b9: 6a:8d:5a:75:5f:21:00:9d:89:b8:2b:92:24:00:20:e1:65:f0: 8f:21:d7:e0:30:d2:5a:e9:2a:f1:31:96:b0:46:7d:60:e0:c1: 8e:31:ba:1f:fd:43:a5:34:58:31:08:09:a0:24:c1:b7:9a:09: 99:66:9e:6e:0d:d1:12:04:6b:6c:ae:e1:40:f7:d8:40:77:0c: fc:0a:42:32:17:67:c4:48:03:87:f4:1b:c5:c3:a0:ca:34:72: 34:e3:bf:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjYwOTE4MjM1MTIyWhcNMjYwOTI1MjM1MTIyWjAYMRYwFAYD VQQDEw02YWFkY2U3Yi1jNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9B/APwCYS6RYQPobRDov9Ya9RAchJQLkpZIDhQ1pvRqdPllr/e28K6XM6WP p97IHc+xkmpDSmvG7TBNPuBp5jbrM2BJSeH/VuPCVjIIYc718bEn2CG+q8z3gPYt FWS/KJjNT9GlSVGoSpCUv8rL/R1iqlCeiXM9xs2tQRaZHo2WilDTNdCpr632FKlp YPRq4+2CRT9qaNc9MYpZeaZi/fq/3zZQoWZJnvAvu6QTueNq++bcQMEtOccfOtyV 6oeSGGnvBosvPZe06z8+wx5F14mdi82MMFYsaUkw5sjvqkuOybdzyGxLljKtTJ0W IY+ke2EBeYSp+J7Pmf7jz7/12wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpBCs4W AvnlKrOwB+IcHlaX7QqFMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuy7BPjz1er5ZC2/rdwFENxwwI0lRO5YpQz3CFXGoHMpUGn526ecR2tIBmMDs xur7UT9roIsMepiiCIz6KoaqiUmp9z3DtpZ8jLXeKlm8g7jxZfxxMnpRvL+lzcLX qp6L7RPa8OZYt2lneff3xc87O4XkIar32JXbmD4rdaFfT1sPF/ySYKrvbPk25HtQ CloYAIbBn1bM9a5qAQJG6HiL+R25ao1adV8hAJ2JuCuSJAAg4WXwjyHX4DDSWukq 8TGWsEZ9YODBjjG6H/1DpTRYMQgJoCTBt5oJmWaebg3REgRrbK7hQPfYQHcM/ApC MhdnxEgDh/QbxcOgyjRyNOO/jw== -----END CERTIFICATE-----Generated at Sat Sep 19 09:13:42 2026 by rpki-client