$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: TdgWM9df6GbvTeiac+IATj6NICy75/XfLLUYDQ1ynkA= Subject key identifier: 1E:F4:E8:FB:25:DE:E4:E1:33:16:13:0A:82:D4:A0:75:58:9B:6E:D7 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 0698 Signing time: Sat 04 Apr 2026 22:13:37 +0000 Manifest this update: Sat 04 Apr 2026 22:13:37 +0000 Manifest next update: Sat 11 Apr 2026 22:13:37 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: nj4SnmxRxpUgaCWiXSwFBC8JDd2w1RZodaRGVrE/OSQ=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: TqrO1YIuqGOZfHc1Ju3tsrCSx7qYr00Z9p4jjo73kAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Apr 4 22:13:37 2026 GMT Not After : Apr 11 22:13:37 2026 GMT Subject: CN=69d18d11-3163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:63:da:fa:e0:89:02:e9:82:6c:f9:49:56: 4f:3d:ba:18:45:98:ed:6a:32:c2:0b:b5:a8:3d:b6: a8:96:4c:a6:ce:37:d4:c8:07:4e:49:54:66:9b:2a: b1:d1:58:82:ff:73:d3:22:f0:6f:05:ac:18:fa:df: 2d:09:eb:02:48:88:a9:35:01:df:c7:ba:79:47:c1: e5:5c:70:37:1a:b5:5e:0c:5b:3e:ce:be:24:da:b4: 1c:48:f2:90:8e:d7:7c:08:b0:ac:c2:fc:51:d9:d8: fc:ef:8b:75:0d:58:27:23:e6:d4:a6:e5:e5:cd:4d: e2:68:8a:29:bc:49:9b:42:89:6a:1e:67:d2:e4:be: fd:ca:6f:a5:0f:2b:11:5e:91:de:f0:76:56:0f:fa: 23:82:c5:23:d0:f0:56:8c:08:c3:0d:8e:49:ae:d7: 41:14:5f:44:63:da:c9:93:5f:c7:26:e6:bc:73:28: 52:b1:96:3c:2e:b7:51:b1:51:0c:87:aa:28:ae:c2: c2:1b:29:bf:e1:ed:95:f9:43:94:3b:36:9f:16:2e: cd:98:af:39:8e:3b:84:1b:98:a4:c2:62:0d:aa:e6: 41:88:bc:fa:ca:19:61:6c:1a:d2:bf:8e:c9:27:a3: 8b:b6:27:f5:ae:d1:05:ed:a5:23:fa:c6:2c:3c:c1: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:E8:FB:25:DE:E4:E1:33:16:13:0A:82:D4:A0:75:58:9B:6E:D7 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c8:c1:81:4b:b2:d1:0c:fc:24:5e:7f:9e:f8:99:3b:e9:33: 79:11:66:42:7b:05:97:69:32:ec:7a:48:94:84:09:aa:72:cf: ab:9e:8a:9e:0c:bf:76:ec:39:7f:ec:ab:aa:9f:c0:f1:a8:c2: 48:15:ad:d4:0b:ce:98:db:5d:3a:a3:7a:8d:89:cf:47:4f:ed: c7:4e:fb:bf:ec:e2:6a:02:b3:24:5e:1c:bd:b7:8a:2c:08:20: 54:9a:10:8d:58:41:f1:d0:0e:21:96:3e:70:50:fe:04:3e:fa: 9c:f5:a5:c2:da:79:d7:08:03:19:d9:c0:f3:55:07:3d:6d:7f: 43:83:43:94:cf:ee:e3:37:b0:20:0f:c3:2c:86:c2:54:e7:34: 9e:d5:ed:9d:05:fe:4f:46:d1:74:a4:99:fe:c9:b9:9c:6b:a2: 76:c1:96:e5:8f:a4:21:b1:ed:0b:74:b9:70:fc:e1:1b:fc:45: 32:f4:40:10:56:17:61:ce:d8:e1:c3:10:25:23:60:d5:8e:92: 0c:6f:b5:5e:ca:b4:c5:ef:67:06:77:15:81:de:c4:c9:72:fe: c4:eb:fa:ca:33:9e:e6:29:3b:33:31:14:ea:f4:81:86:54:31: e9:f3:a2:83:b4:f8:c5:18:83:b1:cd:8c:a8:cc:e8:a7:60:e4: d3:28:4c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjYwNDA0MjIxMzM3WhcNMjYwNDExMjIxMzM3WjAYMRYwFAYD VQQDEw02OWQxOGQxMS0zMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPBj2vrgiQLpgmz5SVZPPboYRZjtajLCC7WoPbaolkymzjfUyAdOSVRmmyqx 0ViC/3PTIvBvBawY+t8tCesCSIipNQHfx7p5R8HlXHA3GrVeDFs+zr4k2rQcSPKQ jtd8CLCswvxR2dj874t1DVgnI+bUpuXlzU3iaIopvEmbQolqHmfS5L79ym+lDysR XpHe8HZWD/ojgsUj0PBWjAjDDY5JrtdBFF9EY9rJk1/HJua8cyhSsZY8LrdRsVEM h6oorsLCGym/4e2V+UOUOzafFi7NmK85jjuEG5ikwmINquZBiLz6yhlhbBrSv47J J6OLtif1rtEF7aUj+sYsPMHw1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB706Psl 3uThMxYTCoLUoHVYm27XMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPMjBgUuy0Qz8JF5/nviZO+kzeRFmQnsFl2ky7HpIlIQJqnLPq56Kngy/duw5 f+yrqp/A8ajCSBWt1AvOmNtdOqN6jYnPR0/tx077v+ziagKzJF4cvbeKLAggVJoQ jVhB8dAOIZY+cFD+BD76nPWlwtp51wgDGdnA81UHPW1/Q4NDlM/u4zewIA/DLIbC VOc0ntXtnQX+T0bRdKSZ/sm5nGuidsGW5Y+kIbHtC3S5cPzhG/xFMvRAEFYXYc7Y 4cMQJSNg1Y6SDG+1Xsq0xe9nBncVgd7EyXL+xOv6yjOe5ik7MzEU6vSBhlQx6fOi g7T4xRiDsc2MqMzop2Dk0yhMIg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:52 2026 by rpki-client