$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: +AXZzD65ZJULmj3d8YdbRXNacbmdayUQIVsk/hEnuGM= Subject key identifier: D4:F3:2E:F3:B0:B0:5F:93:9D:52:D4:57:3A:CE:1B:51:C7:C5:9E:BB Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: 51 Signing time: Mon 02 Mar 2026 00:12:44 +0000 Manifest this update: Mon 02 Mar 2026 00:12:42 +0000 Manifest next update: Mon 09 Mar 2026 00:12:42 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: 8RP9MmEfTQFiDcgRg9TJVXMIsQBnQNw7yPF6z5fJl3U=) 2: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (hash: dFwsjOhAIReUbf7K2DQx8a4Fhhb7HR1SVPVBMnSDExA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Mar 2 00:12:42 2026 GMT Not After : Mar 9 00:12:42 2026 GMT Subject: CN=69a4d5fc-ba2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a9:f1:03:f7:61:7e:fc:60:28:f6:ee:f6:25: 79:ac:af:43:b3:a0:a7:b0:b1:f2:b4:7e:2b:8e:74: 0f:61:07:96:e3:b4:af:47:e8:60:01:b5:5f:33:ca: 48:50:63:bc:d3:ca:78:05:5d:dc:ab:83:8c:fa:3b: b4:ac:7a:54:5d:b5:6e:6d:28:f1:7a:7a:1b:20:5d: d3:49:96:da:f5:f7:9d:4d:3a:f3:67:0b:d2:47:a7: 44:b7:64:c9:39:2e:5a:b1:07:c7:13:25:10:ce:70: 8d:33:d1:76:bf:2f:68:20:ab:23:66:bd:f3:75:ff: eb:fc:c5:76:14:65:f1:a4:3d:b3:bd:1f:0d:81:6d: dc:76:1a:d8:3b:1d:d3:ee:7d:57:5e:1f:a5:0a:dc: 8e:3d:f9:1f:01:e5:cf:2e:86:a0:c8:3e:bd:ba:ed: 8a:40:e8:56:50:49:86:e2:be:92:a5:d9:ea:7d:55: 2a:af:04:fc:1a:ca:4d:db:e5:ce:a2:32:b2:8c:b5: 3c:1e:86:06:38:87:1b:98:42:66:02:2c:79:d6:79: 2f:df:36:fc:76:9e:11:e6:9c:c1:4e:09:10:81:14: b9:fb:eb:57:8f:5d:d1:b2:db:e7:a9:72:ab:6d:a9: 2b:fa:9d:2d:87:10:a1:94:b8:7b:d1:4d:0b:e0:73: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F3:2E:F3:B0:B0:5F:93:9D:52:D4:57:3A:CE:1B:51:C7:C5:9E:BB X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:4e:aa:16:43:84:42:d3:80:01:ae:2c:5a:e9:5b:e4:33:da: d0:6b:3b:89:03:75:f2:67:ae:f8:27:03:4f:89:04:f0:01:e4: 55:e7:a5:32:4e:3b:57:c1:89:b4:7e:01:89:4b:25:83:28:ed: d8:8d:06:92:4f:5d:c3:ef:46:95:48:3d:b7:b0:a8:76:fd:6e: c6:b2:e6:0b:d6:4b:a2:be:6b:c6:5b:a5:bd:1b:23:77:83:4c: db:10:ce:1d:b9:a1:da:21:44:1b:1c:bb:3a:61:43:d6:4c:8f: 9d:70:37:47:a4:28:51:4b:2f:5b:46:ec:21:e6:09:25:dd:7e: a3:06:e3:ea:bd:20:34:72:5f:35:35:21:92:27:41:01:c0:ed: 49:94:2e:e5:b7:39:b9:40:b7:7f:80:2d:b5:e6:f9:1a:0d:a9: 0e:1f:81:74:07:a8:7b:e7:22:0d:df:47:43:25:b2:6a:07:f6: 71:69:41:ab:8d:ad:c7:13:51:4c:01:c6:fc:21:d2:c1:d5:b8: af:e6:7f:cb:40:1a:d9:45:33:fb:0b:8a:4e:b2:e0:55:92:90: 3f:2d:03:35:ea:5d:7b:ee:19:32:de:9f:e2:d7:b0:08:df:89: 18:c4:5b:d3:5a:f0:c9:00:6f:46:8a:f4:c3:af:ce:82:05:ff: e8:72:d7:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoMDk3MTBCNUI2Njc0OUUzMzlEMTI0Q0RFNkQ2NkNFMzY2 QUNDQUJCMDAeFw0yNjAzMDIwMDEyNDJaFw0yNjAzMDkwMDEyNDJaMBgxFjAUBgNV BAMTDTY5YTRkNWZjLWJhMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUqfED92F+/GAo9u72JXmsr0OzoKewsfK0fiuOdA9hB5bjtK9H6GABtV8zykhQ Y7zTyngFXdyrg4z6O7SselRdtW5tKPF6ehsgXdNJltr1951NOvNnC9JHp0S3ZMk5 LlqxB8cTJRDOcI0z0Xa/L2ggqyNmvfN1/+v8xXYUZfGkPbO9Hw2Bbdx2Gtg7HdPu fVdeH6UK3I49+R8B5c8uhqDIPr267YpA6FZQSYbivpKl2ep9VSqvBPwayk3b5c6i MrKMtTwehgY4hxuYQmYCLHnWeS/fNvx2nhHmnMFOCRCBFLn761ePXdGy2+epcqtt qSv6nS2HEKGUuHvRTQvgc/+VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1PMu87Cw X5OdUtRXOs4bUcfFnrswHwYDVR0jBBgwFoAUCXELW2Z0njOdEkzebWbONmrMq7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDL0EwRDQ5Q0M4OUU5 RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1hFTFcyWjBuak9kRWt6ZWJXYk9ObXJNcTdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RjNDL0EwRDQ5Q0M4OUU5RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpP ZEVremViV2JPTm1yTXE3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCuTqoWQ4RC04ABrixa6VvkM9rQazuJA3XyZ674JwNPiQTwAeRV56UyTjtXwYm0 fgGJSyWDKO3YjQaST13D70aVSD23sKh2/W7GsuYL1kuivmvGW6W9GyN3g0zbEM4d uaHaIUQbHLs6YUPWTI+dcDdHpChRSy9bRuwh5gkl3X6jBuPqvSA0cl81NSGSJ0EB wO1JlC7ltzm5QLd/gC215vkaDakOH4F0B6h75yIN30dDJbJqB/ZxaUGrja3HE1FM Acb8IdLB1biv5n/LQBrZRTP7C4pOsuBVkpA/LQM16l177hky3p/i17AI34kYxFvT WvDJAG9GivTDr86CBf/octcf -----END CERTIFICATE-----Generated at Mon Mar 2 04:16:17 2026 by rpki-client