$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: IYdJoGLWU6/YLbU9Xh9ZP3y5AOBSKZw+30evOEI8i04= Subject key identifier: 81:63:43:E2:A2:DA:0A:01:6B:6C:9A:5E:A2:3F:D6:67:C1:D5:FD:AD Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 0233 Signing time: Thu 21 May 2026 02:42:42 +0000 Manifest this update: Thu 21 May 2026 02:42:41 +0000 Manifest next update: Thu 28 May 2026 02:42:41 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: NSLqNPO/1tEBj2lGBtr2qfg0wln/srpQa0g6kHknz+c=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: QWRcixf8QLc7IkGmviGZNSC4YSR65CJzVUK/LtjPM4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: May 21 02:42:41 2026 GMT Not After : May 28 02:42:41 2026 GMT Subject: CN=6a0e7121-6b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:24:cc:9c:e6:e3:af:d3:02:ea:c9:46:65: ef:dd:fe:33:4b:c9:65:77:77:cf:b7:fa:95:37:e1: b7:63:53:34:49:5c:55:2f:b5:ed:db:e1:f2:28:5b: 17:18:74:e2:ae:3c:ac:a2:6b:50:29:2c:1a:e2:b3: 84:3b:d7:ea:8f:18:d2:36:30:be:7c:69:de:9d:5a: 70:39:62:ca:c8:e2:11:83:19:41:c6:79:ef:84:d9: 78:b6:f0:09:35:86:f0:df:6d:ec:1f:56:ec:fa:21: 0d:89:8e:87:3e:89:85:32:da:d5:34:7d:3c:30:8d: 5d:4c:c7:f9:b2:2f:d0:26:b7:62:d0:eb:20:7c:be: 4c:db:32:b7:96:ae:bf:ae:14:c5:a2:f3:45:29:71: 7a:5b:7c:51:f1:d0:6b:db:06:1a:00:fd:ef:62:9a: 29:54:e9:d8:0c:72:d1:88:d3:7f:93:5b:63:3e:43: 78:2e:85:00:53:e0:9e:6e:61:15:65:91:ca:2f:26: 16:79:a1:cb:ff:78:32:80:8f:f7:04:51:03:6a:04: 7d:db:d3:bb:47:a2:0f:39:ee:d5:2f:7f:f1:ff:de: 12:30:2e:36:61:86:cf:e4:23:bf:4c:7c:de:86:1a: 89:6b:2a:69:5a:a5:ec:16:37:c4:61:2a:40:b9:b3: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:63:43:E2:A2:DA:0A:01:6B:6C:9A:5E:A2:3F:D6:67:C1:D5:FD:AD X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3c:5d:fc:c5:41:24:e8:82:d8:cb:e9:12:a8:bf:41:9b:b9: 58:24:d8:e2:a4:f7:61:b6:62:1c:b2:d3:fc:8c:89:01:5d:89: a5:41:60:f2:d1:b9:7c:2d:e4:18:7f:4e:4b:d0:d5:54:52:17: dd:e1:64:f1:f7:58:5a:1a:ed:37:1b:bd:24:79:b0:1f:b8:d9: 1c:b1:33:73:69:82:34:94:19:e1:18:c8:ee:e6:52:72:65:4c: bd:54:3c:f4:b3:e0:0d:4e:15:dd:d4:b0:fa:82:3d:eb:94:ab: 2e:a6:5a:0c:70:49:19:81:7f:e3:27:44:02:a0:fd:00:c6:d6: d8:85:8d:45:74:bc:4a:99:1a:81:9e:aa:b3:ae:e9:8e:f0:d7: 58:77:a9:b4:8e:23:e8:7e:c0:cc:fe:09:57:d2:d1:a7:90:cc: df:07:49:99:b4:10:54:75:0f:9b:14:be:9a:63:e6:05:7b:74: 59:86:8d:de:6c:d4:a5:27:e0:6a:ed:49:60:c4:c8:1a:0e:c1: b9:fe:b2:61:df:66:bd:3b:3f:2a:94:f8:6a:e5:89:9f:c1:59: 84:ab:21:91:f9:37:ae:9b:4d:58:a1:f4:80:6d:c2:9e:55:10: 99:d2:f1:e4:2a:90:bb:cb:e1:b7:1d:e8:1d:a1:c5:d3:6c:4c: e2:50:b7:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjYwNTIxMDI0MjQxWhcNMjYwNTI4MDI0MjQxWjAYMRYwFAYD VQQDEw02YTBlNzEyMS02Yjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk0kzJzm46/TAurJRmXv3f4zS8lld3fPt/qVN+G3Y1M0SVxVL7Xt2+HyKFsX GHTirjysomtQKSwa4rOEO9fqjxjSNjC+fGnenVpwOWLKyOIRgxlBxnnvhNl4tvAJ NYbw323sH1bs+iENiY6HPomFMtrVNH08MI1dTMf5si/QJrdi0OsgfL5M2zK3lq6/ rhTFovNFKXF6W3xR8dBr2wYaAP3vYpopVOnYDHLRiNN/k1tjPkN4LoUAU+CebmEV ZZHKLyYWeaHL/3gygI/3BFEDagR929O7R6IPOe7VL3/x/94SMC42YYbP5CO/THze hhqJayppWqXsFjfEYSpAubMSjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIFjQ+Ki 2goBa2yaXqI/1mfB1f2tMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFjxd/MVBJOiC2MvpEqi/QZu5WCTY4qT3YbZiHLLT/IyJAV2JpUFg8tG5fC3k GH9OS9DVVFIX3eFk8fdYWhrtNxu9JHmwH7jZHLEzc2mCNJQZ4RjI7uZScmVMvVQ8 9LPgDU4V3dSw+oI965SrLqZaDHBJGYF/4ydEAqD9AMbW2IWNRXS8SpkagZ6qs67p jvDXWHeptI4j6H7AzP4JV9LRp5DM3wdJmbQQVHUPmxS+mmPmBXt0WYaN3mzUpSfg au1JYMTIGg7Buf6yYd9mvTs/KpT4auWJn8FZhKshkfk3rptNWKH0gG3CnlUQmdLx 5CqQu8vhtx3oHaHF02xM4lC36w== -----END CERTIFICATE-----Generated at Thu May 21 09:38:44 2026 by rpki-client