$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: Ibas4/iaQ6Q56Ho0bsYe5Ku1rhS6S6tBSiyIgvvXcZk= Subject key identifier: 49:E6:44:31:B1:FB:ED:82:29:64:88:FE:C1:F8:B9:2E:94:24:C5:70 Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: DA Signing time: Mon 21 Sep 2026 06:37:58 +0000 Manifest this update: Mon 21 Sep 2026 06:37:57 +0000 Manifest next update: Mon 28 Sep 2026 06:37:57 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: UbiodcYfAf4cUYpUsmk6DPiNxXMT+ypJNW1RkiDXb4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Sep 21 06:37:57 2026 GMT Not After : Sep 28 06:37:57 2026 GMT Subject: CN=6ab0d0c6-c261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:71:c0:c0:4a:4e:6b:ae:9f:f8:52:71:3f: 93:16:d8:9c:e8:b0:99:d1:f8:fb:ea:db:67:b8:b6: de:40:3a:0e:e2:fc:76:03:f9:72:82:09:a6:e5:0b: 00:3b:a9:ef:7a:50:ec:a3:ea:00:52:e4:3b:21:01: 43:9e:72:a1:51:e7:e5:a8:c7:6d:71:96:09:23:e5: 00:17:8b:56:12:ff:b6:19:2b:a9:6a:91:eb:d1:6b: ae:97:4d:f8:de:c4:7a:e7:a4:42:24:d3:2f:28:8f: cd:1f:0c:ce:20:8a:ff:6a:52:5f:3b:fd:c9:28:7d: 01:5f:62:cd:51:b6:57:da:42:0b:08:03:06:78:e1: 67:03:db:02:1d:11:a8:6a:12:20:06:9e:d1:1e:1c: c3:c8:b1:b8:9a:d6:92:f9:4e:cc:35:b8:03:42:70: 1f:85:d6:e4:25:84:9d:2e:cb:37:10:9b:27:88:99: e9:a3:43:23:8a:72:85:d6:cd:b6:44:84:56:ad:ef: 6a:fb:c1:19:b1:c4:36:0a:ac:41:55:23:61:04:95: ff:67:13:7b:cc:10:ca:0c:02:8b:36:a5:fd:63:b7: c3:b1:64:85:e2:41:47:3d:3a:82:9b:20:2b:e6:90: 3b:c8:28:c4:ae:7f:8c:a6:da:d8:4a:87:3a:2b:fe: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E6:44:31:B1:FB:ED:82:29:64:88:FE:C1:F8:B9:2E:94:24:C5:70 X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6c:a0:88:19:d3:62:e2:bf:6f:69:3d:de:64:7f:c4:f2:8d: 6e:d6:29:9e:ce:c8:9d:3f:2e:1e:3e:b0:d0:a9:08:69:73:18: 99:1b:96:83:eb:af:25:10:a9:d4:44:60:29:01:9e:a9:40:0e: 39:97:24:ac:4e:e2:23:ff:50:33:e4:2d:18:59:d6:0d:7f:6d: dc:59:70:98:70:ab:62:10:af:d7:af:c0:7b:6b:62:82:e2:bf: d7:4f:a8:18:27:05:9d:c7:a5:f1:dc:a4:03:ce:e5:66:eb:48: ad:29:82:cd:6a:64:0e:96:ae:62:d9:ea:aa:11:19:04:56:97: 77:2a:9f:48:38:a8:52:22:67:05:ab:51:f7:4f:96:20:9f:59: 62:33:17:ae:86:03:79:8a:b3:f0:b4:d3:8c:ea:e8:66:bb:6f: 4d:68:eb:c2:d0:63:ba:b6:7b:96:6b:f5:48:a3:67:b5:b0:84: 46:1f:03:ac:ed:0f:e0:33:fc:e9:77:ff:62:77:f3:dd:03:7f: fc:90:a6:8c:52:bd:97:19:6b:75:87:f1:85:4e:e1:0c:e1:3d: e0:5b:51:01:0a:57:81:b0:63:c3:32:c3:07:c8:e5:ac:b1:03: 93:3c:41:0a:26:51:a4:12:d8:8b:73:71:1e:cf:0d:7b:4e:e1: 64:86:39:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZEQzAxMTAvBgNVBAUTKDExN0MwRDZEMTlCRkJBNDhCNUZBOUU1MTdEMEU2OTI2 NTVDOThDNDQwHhcNMjYwOTIxMDYzNzU3WhcNMjYwOTI4MDYzNzU3WjAYMRYwFAYD VQQDEw02YWIwZDBjNi1jMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzFxwMBKTmuun/hScT+TFtic6LCZ0fj76ttnuLbeQDoO4vx2A/lyggmm5QsA O6nvelDso+oAUuQ7IQFDnnKhUeflqMdtcZYJI+UAF4tWEv+2GSupapHr0Wuul034 3sR656RCJNMvKI/NHwzOIIr/alJfO/3JKH0BX2LNUbZX2kILCAMGeOFnA9sCHRGo ahIgBp7RHhzDyLG4mtaS+U7MNbgDQnAfhdbkJYSdLss3EJsniJnpo0MjinKF1s22 RIRWre9q+8EZscQ2CqxBVSNhBJX/ZxN7zBDKDAKLNqX9Y7fDsWSF4kFHPTqCmyAr 5pA7yCjErn+MptrYSoc6K/7SbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnmRDGx ++2CKWSI/sH4uS6UJMVwMB8GA1UdIwQYMBaAFBF8DW0Zv7pItfqeUX0OaSZVyYxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkRDMC8zMzExRjBFRTY5 RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3VraTEtcDVSZlE1cEpsWEpq RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkRDMC8zMzExRjBFRTY5RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3Vr aTEtcDVSZlE1cEpsWEpqRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjWygiBnTYuK/b2k93mR/xPKNbtYpns7InT8uHj6w0KkIaXMYmRuWg+uvJRCp 1ERgKQGeqUAOOZckrE7iI/9QM+QtGFnWDX9t3FlwmHCrYhCv16/Ae2tiguK/10+o GCcFncel8dykA87lZutIrSmCzWpkDpauYtnqqhEZBFaXdyqfSDioUiJnBatR90+W IJ9ZYjMXroYDeYqz8LTTjOroZrtvTWjrwtBjurZ7lmv1SKNntbCERh8DrO0P4DP8 6Xf/Ynfz3QN//JCmjFK9lxlrdYfxhU7hDOE94FtRAQpXgbBjwzLDB8jlrLEDkzxB CiZRpBLYi3NxHs8Ne07hZIY5kw== -----END CERTIFICATE-----Generated at Mon Sep 21 23:58:29 2026 by rpki-client