$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: MvkxvROkDkTI5v11BvAC3/QH/bAEq3k4C2qCAQzlDPo= Subject key identifier: 0E:F7:2D:78:83:F4:FA:A7:73:91:A5:19:A1:8C:CF:30:91:A5:80:9D Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 0294 Signing time: Fri 17 Apr 2026 01:28:19 +0000 Manifest this update: Fri 17 Apr 2026 01:28:19 +0000 Manifest next update: Fri 24 Apr 2026 01:28:19 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: CujZNpfs6pDv8eNWKdPXRnYvcV4hAFEiomkw7lUHaFM=) 2: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: pWzkuCt8a+9azhiGDPeDWp5ecjb9VtC3wFHM3M7CwD0=) 3: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: IFkaWh9fbeVGFx4gBGqLo0JFk5b3JVnnCbAa8CPV/kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: Apr 17 01:28:19 2026 GMT Not After : Apr 24 01:28:19 2026 GMT Subject: CN=69e18cb3-f01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:0e:af:73:f2:24:45:03:93:17:96:de:6a: 59:2a:59:2c:71:08:8a:6d:c5:db:a2:26:82:0e:d8: b9:70:0a:66:de:95:65:61:07:5e:88:fe:57:2c:15: f5:66:7d:b7:41:8b:ce:27:5c:cd:b5:8f:cb:20:de: 11:20:a2:e9:4a:4f:64:0d:b4:04:7d:b5:fd:f5:62: 74:5d:98:f7:8b:5b:e6:3e:01:93:d3:5c:16:2e:a8: bd:5d:34:b4:23:76:dc:16:5f:a8:ea:3e:42:f3:78: d0:1d:b9:b8:67:ed:dd:36:19:9d:e5:d8:c5:c2:72: fe:46:21:3f:36:41:f1:91:ea:bd:af:77:5e:7c:b4: 88:ad:aa:e6:b9:46:83:5c:d7:84:ee:c8:76:32:f9: cb:55:0d:21:ab:d0:c5:f8:dd:a4:4b:02:b1:21:d6: d2:a6:6b:45:a8:d5:eb:7a:64:60:43:72:01:7b:a3: eb:47:cf:48:6f:97:fd:7c:49:17:9b:bd:4d:44:1b: d8:da:84:b3:48:86:d8:22:d6:a6:e9:20:9d:f4:32: 68:57:8e:cf:3c:d9:a5:cb:b2:9f:53:1f:d9:4e:58: b0:8f:0d:19:ff:92:bb:d5:a5:7f:95:d0:db:6d:15: 9c:32:2d:75:10:8c:5b:43:7c:9d:51:df:36:4f:92: ac:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F7:2D:78:83:F4:FA:A7:73:91:A5:19:A1:8C:CF:30:91:A5:80:9D X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e6:f4:d8:df:26:bb:1e:89:93:b1:05:e2:dd:3a:a9:cd:9b: bf:ce:e8:6f:78:ef:6a:d6:32:f8:11:96:84:3c:20:12:8a:7d: 77:44:83:6d:7d:ec:dd:fb:f8:6f:9a:ce:89:9a:b3:b8:a4:f9: 20:48:71:90:d6:bb:5b:09:b1:88:8d:48:ae:92:70:30:77:08: 23:fc:91:1d:c5:9d:21:e7:b1:af:76:66:dd:b9:cf:a1:6d:8b: c2:4f:39:35:0c:2c:9e:ca:c2:65:68:63:85:e1:bb:30:68:68: 1d:82:e4:38:65:88:79:85:a0:29:45:dd:e7:c0:df:a6:ea:b5: 71:96:b1:79:dd:91:54:ca:a4:3a:96:b0:95:b6:60:27:9f:b4: 8b:9e:63:f8:a5:04:2f:f3:6a:b7:44:65:f4:ef:c1:ec:35:75: 16:03:19:46:cc:3d:dc:8d:31:52:b3:a7:3e:bf:8e:a8:e0:ca: dd:e2:3d:8f:35:01:60:50:f0:b9:03:3d:a6:d4:39:e1:68:4e: e3:b1:5c:70:c8:62:0c:08:13:a9:49:48:1a:d7:6c:ab:a2:2b: e7:c1:15:e4:02:a6:f1:0f:e2:7f:ab:b4:1e:fd:42:2a:29:29: 5a:d7:52:3a:f7:d9:bf:02:99:80:8f:75:8a:22:e4:51:9e:41: 06:14:b6:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjYwNDE3MDEyODE5WhcNMjYwNDI0MDEyODE5WjAYMRYwFAYD VQQDEw02OWUxOGNiMy1mMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycIOr3PyJEUDkxeW3mpZKlkscQiKbcXboiaCDti5cApm3pVlYQdeiP5XLBX1 Zn23QYvOJ1zNtY/LIN4RIKLpSk9kDbQEfbX99WJ0XZj3i1vmPgGT01wWLqi9XTS0 I3bcFl+o6j5C83jQHbm4Z+3dNhmd5djFwnL+RiE/NkHxkeq9r3defLSIrarmuUaD XNeE7sh2MvnLVQ0hq9DF+N2kSwKxIdbSpmtFqNXremRgQ3IBe6PrR89Ib5f9fEkX m71NRBvY2oSzSIbYItam6SCd9DJoV47PPNmly7KfUx/ZTliwjw0Z/5K71aV/ldDb bRWcMi11EIxbQ3ydUd82T5Ks9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA73LXiD 9Pqnc5GlGaGMzzCRpYCdMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY+b02N8mux6Jk7EF4t06qc2bv87ob3jvatYy+BGWhDwgEop9d0SDbX3s3fv4 b5rOiZqzuKT5IEhxkNa7WwmxiI1IrpJwMHcII/yRHcWdIeexr3Zm3bnPoW2Lwk85 NQwsnsrCZWhjheG7MGhoHYLkOGWIeYWgKUXd58Dfpuq1cZaxed2RVMqkOpawlbZg J5+0i55j+KUEL/Nqt0Rl9O/B7DV1FgMZRsw93I0xUrOnPr+OqODK3eI9jzUBYFDw uQM9ptQ54WhO47FccMhiDAgTqUlIGtdsq6Ir58EV5AKm8Q/if6u0Hv1CKikpWtdS OvfZvwKZgI91iiLkUZ5BBhS2Ug== -----END CERTIFICATE-----Generated at Fri Apr 17 11:49:56 2026 by rpki-client