$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: ZuS7U9Pv2f3E06O86mer1htoLGs+8m1v/oU4/Dii6H8= Subject key identifier: 18:6D:71:83:D8:E2:D8:29:1E:AD:18:62:2D:B2:24:E6:C9:AE:4F:9F Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: 53 Signing time: Tue 03 Mar 2026 03:24:48 +0000 Manifest this update: Tue 03 Mar 2026 03:24:48 +0000 Manifest next update: Tue 10 Mar 2026 03:24:48 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: yWoMyN1cRitD8oF6br9QNInWcOub//PuCc7N69ZByDw=) 2: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (hash: 1qya+xG/bA4oxTX7LKHxwYhVq0xAJJdEgu/OLeybOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 03:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Mar 3 03:24:48 2026 GMT Not After : Mar 10 03:24:48 2026 GMT Subject: CN=69a65480-5c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:50:c2:37:a0:76:3c:b9:5b:fb:65:99:bf:1e: 7b:21:8f:29:55:a9:22:02:09:c7:50:59:0b:9d:b8: 9b:76:31:31:7f:dc:5c:7d:eb:18:88:30:32:44:a1: 52:da:a8:40:02:2d:dc:24:ee:b4:2d:77:6e:1f:a6: 7c:55:2f:c3:f9:ab:56:cf:55:67:6d:28:af:e1:df: 1f:ad:90:52:ef:0a:f4:5b:7e:04:bc:6f:d6:07:2e: 15:7d:e6:e2:d7:b8:fe:eb:b7:13:ca:ba:02:ce:c7: b1:92:42:37:cd:b9:dd:bb:a5:a1:b6:dd:65:d1:98: 82:ae:b4:6b:5c:8d:8c:8c:14:9d:a5:c7:1b:0d:b2: 22:4a:71:be:d5:15:4f:05:78:03:e3:5b:8f:d7:4d: 29:d0:87:bf:36:b6:46:9b:58:90:98:94:3b:3e:96: 7b:91:50:45:3d:cb:10:de:4e:92:c3:39:a9:8c:64: 4d:d1:94:56:03:3f:d1:5b:cd:79:d7:5c:09:b8:e9: f4:15:f0:73:66:ae:3f:6b:82:59:2f:04:45:23:7a: a4:b8:05:2f:a9:15:e5:ae:b8:77:ef:6e:c4:ae:70: f2:f7:3a:c3:73:84:47:22:29:6c:41:ef:9c:83:98: 42:12:0f:70:dc:12:d5:27:9c:f4:5f:35:a8:f5:6f: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6D:71:83:D8:E2:D8:29:1E:AD:18:62:2D:B2:24:E6:C9:AE:4F:9F X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d6:b0:5f:7e:7c:91:57:87:0d:46:92:ea:30:69:9b:44:d1: 6e:3a:da:55:bc:ab:af:5f:61:7b:05:62:4c:88:34:27:b1:04: 03:6d:fd:63:99:b3:20:95:ed:89:ff:24:a6:39:d7:57:f3:8d: a0:27:39:32:83:58:fc:0f:3f:b8:85:39:d0:73:52:23:34:21: c8:dd:79:a8:50:ec:a8:20:7c:0f:0a:b9:d4:d5:8d:97:d6:0c: cc:9f:50:38:9b:68:ce:cc:b4:19:63:e3:be:d6:e2:b2:3c:e1: 11:aa:b3:25:88:77:b4:d0:89:72:1a:1e:f9:f0:3c:31:4a:4c: b2:2b:69:00:44:75:c9:e0:95:8b:5f:60:ee:a4:95:22:25:a9: 06:05:2b:72:03:4c:c0:b2:85:cf:4b:7a:b8:4e:eb:a7:e9:d7: a6:e0:c5:ed:71:69:88:7a:cd:d7:25:88:c3:17:b1:34:c6:04: 5f:b6:7d:5c:e7:e4:57:fc:e8:53:7b:4f:d2:a6:d9:7f:08:62: 7f:10:46:cc:26:6a:31:08:e7:16:e3:a4:86:74:52:c5:35:0c: 6c:88:89:c7:ea:ad:8d:08:4e:f4:37:a6:e2:6e:21:79:6d:4c: ce:ce:0a:68:04:cc:d2:bc:82:18:34:f4:a4:88:bb:8b:25:62: ac:fb:14:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoMDk3MTBCNUI2Njc0OUUzMzlEMTI0Q0RFNkQ2NkNFMzY2 QUNDQUJCMDAeFw0yNjAzMDMwMzI0NDhaFw0yNjAzMTAwMzI0NDhaMBgxFjAUBgNV BAMTDTY5YTY1NDgwLTVjMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsUMI3oHY8uVv7ZZm/HnshjylVqSICCcdQWQuduJt2MTF/3Fx96xiIMDJEoVLa qEACLdwk7rQtd24fpnxVL8P5q1bPVWdtKK/h3x+tkFLvCvRbfgS8b9YHLhV95uLX uP7rtxPKugLOx7GSQjfNud27paG23WXRmIKutGtcjYyMFJ2lxxsNsiJKcb7VFU8F eAPjW4/XTSnQh782tkabWJCYlDs+lnuRUEU9yxDeTpLDOamMZE3RlFYDP9FbzXnX XAm46fQV8HNmrj9rglkvBEUjeqS4BS+pFeWuuHfvbsSucPL3OsNzhEciKWxB75yD mEISD3DcEtUnnPRfNaj1b6SnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGG1xg9ji 2CkerRhiLbIk5smuT58wHwYDVR0jBBgwFoAUCXELW2Z0njOdEkzebWbONmrMq7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDL0EwRDQ5Q0M4OUU5 RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1hFTFcyWjBuak9kRWt6ZWJXYk9ObXJNcTdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RjNDL0EwRDQ5Q0M4OUU5RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpP ZEVremViV2JPTm1yTXE3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJ1rBffnyRV4cNRpLqMGmbRNFuOtpVvKuvX2F7BWJMiDQnsQQDbf1jmbMgle2J /ySmOddX842gJzkyg1j8Dz+4hTnQc1IjNCHI3XmoUOyoIHwPCrnU1Y2X1gzMn1A4 m2jOzLQZY+O+1uKyPOERqrMliHe00IlyGh758DwxSkyyK2kARHXJ4JWLX2DupJUi JakGBStyA0zAsoXPS3q4Tuun6dem4MXtcWmIes3XJYjDF7E0xgRftn1c5+RX/OhT e0/Sptl/CGJ/EEbMJmoxCOcW46SGdFLFNQxsiInH6q2NCE70N6bibiF5bUzOzgpo BMzSvIIYNPSkiLuLJWKs+xQl -----END CERTIFICATE-----Generated at Wed Mar 4 08:21:41 2026 by rpki-client