$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: DgbMAKZM1Tc53JjOTPrOOjrOO97s0k/GDTtLJV9Wu5s= Subject key identifier: 36:1B:F7:87:99:59:09:C8:76:E3:49:72:B1:E0:63:DC:74:9F:38:F5 Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 021C Signing time: Sun 05 Apr 2026 02:26:10 +0000 Manifest this update: Sun 05 Apr 2026 02:26:09 +0000 Manifest next update: Sun 12 Apr 2026 02:26:09 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: MhUHWt/2kKS+kv8Kj/cBxlsPOOs8pukX1WS8Ac0syb0=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: QWRcixf8QLc7IkGmviGZNSC4YSR65CJzVUK/LtjPM4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: Apr 5 02:26:09 2026 GMT Not After : Apr 12 02:26:09 2026 GMT Subject: CN=69d1c841-8a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:ed:1b:76:d2:17:99:d6:b6:53:e0:6b:3b: 8d:0f:9d:36:85:fe:d7:d1:f9:24:d4:52:f7:3b:ce: 3b:6e:72:c0:fb:9a:93:e4:de:52:77:4e:5e:ec:37: e1:e1:79:c2:47:5b:cc:21:7f:22:29:83:30:78:43: ba:61:d1:83:c3:4d:02:83:ae:3c:80:30:2c:1e:96: 6d:ff:7d:ef:d3:a3:ca:0a:8b:da:92:3c:4c:72:2e: 28:fe:4e:87:d4:7b:7d:f9:82:78:65:4c:1c:e9:cd: cb:16:cf:91:a9:af:33:f7:fb:d0:b3:2a:66:1d:e4: cb:09:71:b0:31:b4:85:ee:26:f9:3c:76:e3:3e:ce: b6:e4:82:72:3d:a1:1d:5f:1a:0b:69:92:30:ad:dd: 45:51:3f:46:1d:46:50:bb:8d:c2:22:e3:9f:85:34: 02:48:a0:1c:2a:53:ef:d4:ec:b4:60:a6:25:26:ba: 78:2b:84:33:3e:32:c2:c1:b5:bf:14:e6:fe:b5:ff: 4e:d0:37:9a:6d:6f:03:d1:34:a3:8f:d2:18:7c:e1: af:20:85:16:6e:57:62:bd:b2:e4:d2:a0:74:0f:06: 08:35:38:10:9a:14:db:01:e7:00:2f:91:43:1a:0a: ae:51:37:12:35:3b:60:bf:8a:7f:05:b0:d6:13:b4: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1B:F7:87:99:59:09:C8:76:E3:49:72:B1:E0:63:DC:74:9F:38:F5 X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:81:fb:a7:f2:35:a7:de:00:2f:6e:cb:7f:aa:c6:6d:33:7d: 3e:56:07:e1:e8:2c:4c:6a:c4:1f:bd:d1:25:fa:fb:82:51:b9: f3:1d:fb:ea:4b:26:3c:a3:eb:71:22:7a:08:57:ad:8e:9a:94: 5e:7b:44:ab:d3:04:9d:85:29:39:65:1b:5f:d5:78:5c:ea:fa: 1f:81:40:96:d8:59:53:98:5b:07:9d:46:76:02:d3:db:b7:33: 97:92:7f:3b:71:8f:6d:35:c2:15:55:76:1c:c0:c5:79:f9:80: 83:ad:38:d6:21:27:e9:99:b6:4d:b5:84:63:c6:32:8a:65:65: 1a:28:4c:27:fa:b3:8f:be:f4:13:7f:91:bf:d8:f6:32:de:2e: 45:4b:a0:e9:29:77:90:8b:80:c6:58:7a:bf:e3:ef:d3:92:c7: 16:6d:f6:bd:c7:5e:6c:7e:ac:74:90:43:52:aa:b9:9f:cf:a7: ca:2d:3c:64:a7:3f:47:3e:80:43:37:e0:23:25:73:e3:40:27: 11:f5:08:3c:cc:8a:88:53:1d:58:ea:05:bd:ae:12:55:cd:1d: c4:45:fa:7a:ac:38:bf:b2:c6:ab:de:2d:5d:7f:d6:bd:c6:fa: e5:55:d1:0c:ae:e6:88:e5:82:c1:ed:82:e6:a3:89:f6:4b:22: 08:eb:d6:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjYwNDA1MDIyNjA5WhcNMjYwNDEyMDIyNjA5WjAYMRYwFAYD VQQDEw02OWQxYzg0MS04YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutrtG3bSF5nWtlPgazuND502hf7X0fkk1FL3O847bnLA+5qT5N5Sd05e7Dfh 4XnCR1vMIX8iKYMweEO6YdGDw00Cg648gDAsHpZt/33v06PKCovakjxMci4o/k6H 1Ht9+YJ4ZUwc6c3LFs+Rqa8z9/vQsypmHeTLCXGwMbSF7ib5PHbjPs625IJyPaEd XxoLaZIwrd1FUT9GHUZQu43CIuOfhTQCSKAcKlPv1Oy0YKYlJrp4K4QzPjLCwbW/ FOb+tf9O0DeabW8D0TSjj9IYfOGvIIUWbldivbLk0qB0DwYINTgQmhTbAecAL5FD GgquUTcSNTtgv4p/BbDWE7QndwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYb94eZ WQnIduNJcrHgY9x0nzj1MB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwIH7p/I1p94AL27Lf6rGbTN9PlYH4egsTGrEH73RJfr7glG58x376ksmPKPr cSJ6CFetjpqUXntEq9MEnYUpOWUbX9V4XOr6H4FAlthZU5hbB51GdgLT27czl5J/ O3GPbTXCFVV2HMDFefmAg6041iEn6Zm2TbWEY8YyimVlGihMJ/qzj770E3+Rv9j2 Mt4uRUug6Sl3kIuAxlh6v+Pv05LHFm32vcdebH6sdJBDUqq5n8+nyi08ZKc/Rz6A QzfgIyVz40AnEfUIPMyKiFMdWOoFva4SVc0dxEX6eqw4v7LGq94tXX/Wvcb65VXR DK7miOWCwe2C5qOJ9ksiCOvWUg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:05 2026 by rpki-client