$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: 8RLZG5Wc1kpmIZCgEIWLyRAlnjGm5MO36pjgE1Lz7nI= Subject key identifier: C7:35:7A:3C:4B:27:8E:87:78:77:08:D3:DD:45:A9:D3:72:BB:F6:7B Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: 8E Signing time: Mon 01 Jun 2026 03:58:59 +0000 Manifest this update: Mon 01 Jun 2026 03:58:58 +0000 Manifest next update: Mon 08 Jun 2026 03:58:58 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: qKftlN7RKaNPzGc3it862ItoQ/bj+gO+wbnJO5FmgL4=) 2: 1BBB25FC49CA11F1A95850E4A4833773.roa (hash: Vek/532qK9nsnWVHXuKx/eDjZdW+7NvUZaOyvOfg5S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 03:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Jun 1 03:58:58 2026 GMT Not After : Jun 8 03:58:58 2026 GMT Subject: CN=6a1d0383-35ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:4f:d5:ca:33:e8:c3:af:54:31:a7:33:84: 6e:cb:6a:e7:61:bf:a2:17:10:92:0b:09:ed:ad:53: 77:c5:3b:55:a7:7a:d4:31:72:1c:93:49:4c:eb:e8: 8d:35:23:be:64:f3:9b:f5:51:6d:28:34:82:15:fa: c6:06:d8:96:82:12:79:a6:b6:9a:11:36:9c:02:ba: 38:6d:ac:59:f8:44:67:42:95:7b:1b:b9:38:7d:28: ea:42:5b:85:29:5f:9a:74:8e:47:6d:0a:cc:46:a2: 41:7d:6b:ea:32:e3:1b:db:0a:36:72:46:d6:ef:d0: c1:33:7c:59:8c:31:13:6f:e2:a7:c1:07:1a:b9:1f: c0:a7:15:fc:c3:45:ab:76:b2:a9:ee:59:cb:a4:0d: e0:2d:9a:d9:5a:0d:90:e6:b6:1a:a9:50:2b:71:bd: 19:78:a5:06:77:05:9a:48:e6:f3:1b:b0:1a:2a:6e: 20:23:57:df:91:f7:a6:c7:13:4b:72:60:50:0b:19: d1:72:30:f7:13:f8:c3:e0:ea:89:d9:9d:70:55:5b: ad:eb:77:67:60:38:66:06:ee:f8:1b:ae:12:df:c7: ea:0e:30:27:39:94:25:cc:3d:06:f0:da:2c:19:6e: f7:38:56:a0:4d:a7:9a:3f:18:b3:0b:f3:b7:bf:39: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:7A:3C:4B:27:8E:87:78:77:08:D3:DD:45:A9:D3:72:BB:F6:7B X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0c:e0:b6:31:23:92:50:99:69:bb:6d:32:87:f3:a4:b2:6b: 3e:3c:ef:fa:c5:c8:c1:fd:fe:ff:b5:f3:64:c8:01:19:b1:e4: 5f:e0:77:03:3f:8d:1d:b9:9c:1a:00:3c:52:49:49:89:09:d3: 2d:8e:74:32:e9:22:57:6d:b9:3f:d2:cb:e6:d5:ab:7b:78:24: 4f:46:1f:af:73:3c:c0:f0:e9:22:0e:91:e3:16:51:86:c5:a0: 2d:41:9b:38:6d:d0:13:8c:c7:72:06:11:1d:bc:90:c3:a9:10: 9b:c8:58:47:81:e4:d5:f7:b7:8e:df:ac:d3:5d:d8:50:26:70: a2:35:58:b5:8e:87:09:67:f2:a8:ba:4e:a0:71:3e:d5:23:06: f6:51:02:66:50:d9:53:50:89:6b:c3:de:ad:92:b9:c5:3d:73: c1:04:e1:b3:42:d8:33:d2:25:08:ff:72:42:cb:0c:d6:de:98: d1:9c:5c:f4:74:23:cb:a0:86:fc:8e:25:e0:0e:c0:d7:16:44: 9f:06:a4:59:16:12:88:49:09:52:dd:0a:70:56:46:e4:b5:43: 7f:12:59:85:a6:48:f1:5b:f3:00:e0:dd:ea:7e:94:6b:b6:78: d0:ba:a1:af:b8:a0:81:d6:65:bf:e6:56:c4:87:44:23:be:ea: 77:7e:fb:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDA5NzEwQjVCNjY3NDlFMzM5RDEyNENERTZENjZDRTM2 NkFDQ0FCQjAwHhcNMjYwNjAxMDM1ODU4WhcNMjYwNjA4MDM1ODU4WjAYMRYwFAYD VQQDEw02YTFkMDM4My0zNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsZP1coz6MOvVDGnM4Ruy2rnYb+iFxCSCwntrVN3xTtVp3rUMXIck0lM6+iN NSO+ZPOb9VFtKDSCFfrGBtiWghJ5praaETacAro4baxZ+ERnQpV7G7k4fSjqQluF KV+adI5HbQrMRqJBfWvqMuMb2wo2ckbW79DBM3xZjDETb+KnwQcauR/ApxX8w0Wr drKp7lnLpA3gLZrZWg2Q5rYaqVArcb0ZeKUGdwWaSObzG7AaKm4gI1ffkfemxxNL cmBQCxnRcjD3E/jD4OqJ2Z1wVVut63dnYDhmBu74G64S38fqDjAnOZQlzD0G8Nos GW73OFagTaeaPxizC/O3vzkzrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMc1ejxL J46HeHcI091FqdNyu/Z7MB8GA1UdIwQYMBaAFAlxC1tmdJ4znRJM3m1mzjZqzKuw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy9BMEQ0OUNDODlF OUUxMUYwOTBGRjBENEZDNEY5QUUwMi9DWEVMVzJaMG5qT2RFa3plYldiT05tck1x N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0YzQy9BMEQ0OUNDODlFOUUxMUYwOTBGRjBENEZDNEY5QUUwMi9DWEVMVzJaMG5q T2RFa3plYldiT05tck1xN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdwzgtjEjklCZabttMofzpLJrPjzv+sXIwf3+/7XzZMgBGbHkX+B3Az+NHbmc GgA8UklJiQnTLY50MukiV225P9LL5tWre3gkT0Yfr3M8wPDpIg6R4xZRhsWgLUGb OG3QE4zHcgYRHbyQw6kQm8hYR4Hk1fe3jt+s013YUCZwojVYtY6HCWfyqLpOoHE+ 1SMG9lECZlDZU1CJa8PerZK5xT1zwQThs0LYM9IlCP9yQssM1t6Y0Zxc9HQjy6CG /I4l4A7A1xZEnwakWRYSiEkJUt0KcFZG5LVDfxJZhaZI8VvzAODd6n6Ua7Z40Lqh r7iggdZlv+ZWxIdEI77qd377Bg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:47 2026 by rpki-client