$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: 3qn6XtDnssVSSyi6OkpboXjmiZuLCDu1/25Ct/N273Q= Subject key identifier: 25:CE:2E:0C:91:D9:8B:1E:E8:63:0E:A3:6C:38:7B:CE:9B:BE:4B:A7 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 049B Signing time: Tue 22 Sep 2026 23:36:12 +0000 Manifest this update: Tue 22 Sep 2026 23:36:11 +0000 Manifest next update: Tue 29 Sep 2026 23:36:11 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: mg4WtPAJs9Pd6m+3qhMIsMC180GkphlxdRKyTnGDElA=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: cbgFwuJsaQfvpKjS6OYVwgTJIz46R1Gj8ZHc8UQN4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Sep 22 23:36:11 2026 GMT Not After : Sep 29 23:36:11 2026 GMT Subject: CN=6ab310eb-8baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:f6:a5:4d:3a:fa:16:ea:e1:11:9e:fb:4f: c3:a5:e4:b9:3d:94:2c:a5:bd:48:24:aa:16:1f:91: 1e:f6:b0:6f:82:ec:b7:d3:52:97:7a:97:6d:ef:93: fd:80:10:f0:f1:52:bf:86:f7:17:77:29:92:b7:20: 27:98:6a:43:34:9e:04:8b:ff:5f:00:9d:06:36:65: fc:6f:1e:6c:33:b5:d0:8b:d2:23:08:55:5c:bd:05: ba:11:47:d4:2a:c0:30:71:37:04:eb:4a:ac:75:a5: b0:4e:e4:5d:e9:90:c4:95:5f:92:fc:e1:4e:41:55: 10:f7:41:4a:eb:f7:32:24:2d:51:eb:31:a7:35:65: 4d:9b:33:bd:0d:1c:1c:87:15:0a:e1:c3:a0:1d:6e: fb:8c:cd:fe:9a:11:8c:76:cb:e6:47:8a:39:46:78: 7d:b9:f4:3e:d9:d0:8e:25:03:06:47:e1:b6:e1:ac: b3:fe:32:8e:31:6f:da:e4:a3:08:d2:2a:82:ff:37: 64:0a:3e:f4:75:3c:c2:66:68:cc:c5:72:1e:e7:b5: 4f:bc:19:91:7a:68:1e:7c:08:f2:92:70:ef:e1:e9: d4:03:25:15:a7:a2:85:23:d8:1a:58:81:99:41:90: b2:93:3a:2e:2f:05:ef:7f:78:a5:0f:a5:3b:fe:87: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:2E:0C:91:D9:8B:1E:E8:63:0E:A3:6C:38:7B:CE:9B:BE:4B:A7 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fd:7d:4c:17:9e:75:27:bd:8f:18:37:f9:4b:21:c0:3e:de: f0:8f:fa:f8:88:db:59:6f:01:2b:ea:66:6b:1f:b7:b0:4e:38: f2:1c:3d:66:e9:58:39:89:c6:b6:a5:8f:1e:b4:d0:d3:7e:3b: 35:3c:57:24:95:d5:12:b6:fd:a8:5e:a9:6b:ce:5b:3f:03:11: f1:96:4c:bc:60:cf:d5:d9:89:26:50:bc:d7:7d:4e:96:28:40: 4d:d2:60:92:1f:63:ee:23:1b:c4:4f:d6:64:af:0b:a0:20:49: f5:0f:e2:22:6c:d8:ac:93:c0:e7:5b:c1:1b:68:31:28:48:cf: aa:08:28:ea:ae:8f:1c:af:3b:27:8a:ed:a2:1c:7c:63:c5:eb: f6:7d:85:e9:ed:35:c8:21:49:69:82:ae:36:35:6d:ce:e3:4b: 06:a6:3e:83:ea:6a:95:c3:90:e8:2b:c7:ce:c1:e9:6e:3a:29: 7e:26:35:fe:69:67:53:15:fc:5c:fe:94:38:81:cd:bb:d1:10: d0:d6:fd:c6:e6:68:19:ff:0c:2a:00:df:ac:1c:45:81:7e:91: 47:18:5a:24:2b:64:ac:bf:26:07:61:46:95:ef:a2:23:6e:c0: 73:ee:9e:d0:cb:c5:fa:79:84:7a:0b:36:f0:1d:dc:96:97:36: 7e:83:13:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjYwOTIyMjMzNjExWhcNMjYwOTI5MjMzNjExWjAYMRYwFAYD VQQDEw02YWIzMTBlYi04YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugH2pU06+hbq4RGe+0/DpeS5PZQspb1IJKoWH5Ee9rBvguy301KXepdt75P9 gBDw8VK/hvcXdymStyAnmGpDNJ4Ei/9fAJ0GNmX8bx5sM7XQi9IjCFVcvQW6EUfU KsAwcTcE60qsdaWwTuRd6ZDElV+S/OFOQVUQ90FK6/cyJC1R6zGnNWVNmzO9DRwc hxUK4cOgHW77jM3+mhGMdsvmR4o5Rnh9ufQ+2dCOJQMGR+G24ayz/jKOMW/a5KMI 0iqC/zdkCj70dTzCZmjMxXIe57VPvBmRemgefAjyknDv4enUAyUVp6KFI9gaWIGZ QZCykzouLwXvf3ilD6U7/odLkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXOLgyR 2Yse6GMOo2w4e86bvkunMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACv19TBeedSe9jxg3+UshwD7e8I/6+IjbWW8BK+pmax+3sE448hw9ZulYOYnG tqWPHrTQ0347NTxXJJXVErb9qF6pa85bPwMR8ZZMvGDP1dmJJlC8131OlihATdJg kh9j7iMbxE/WZK8LoCBJ9Q/iImzYrJPA51vBG2gxKEjPqggo6q6PHK87J4rtohx8 Y8Xr9n2F6e01yCFJaYKuNjVtzuNLBqY+g+pqlcOQ6CvHzsHpbjopfiY1/mlnUxX8 XP6UOIHNu9EQ0Nb9xuZoGf8MKgDfrBxFgX6RRxhaJCtkrL8mB2FGle+iI27Ac+6e 0MvF+nmEegs28B3clpc2foMTNw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:41:23 2026 by rpki-client