$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: iqTQd1sXG9+6rvGJf6FXN4aGjFOPbyX3fsRZZWwoCMk= Subject key identifier: B9:85:60:B3:BD:53:94:90:6F:D4:E4:7C:C1:18:55:B0:D9:3C:D6:40 Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 025F Signing time: Mon 27 Apr 2026 02:01:58 +0000 Manifest this update: Mon 27 Apr 2026 02:01:58 +0000 Manifest next update: Mon 04 May 2026 02:01:58 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: goc21E8ec6CUzFB9MakVeBTy1gQMfWWu3IuenmyFcBE=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=) 3: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 02:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Apr 27 02:01:58 2026 GMT Not After : May 4 02:01:58 2026 GMT Subject: CN=69eec396-c06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:97:59:a0:df:51:a4:43:df:06:95:b6:1a: b8:4d:ec:7c:fc:96:1d:6f:c7:f2:4d:ec:a3:3e:af: 8a:de:03:32:6a:cf:9f:3f:bb:79:6e:63:82:2c:28: 1c:e0:05:48:28:04:e0:1a:b4:f1:eb:d2:5b:87:2a: a7:66:23:9c:56:b0:be:f1:4f:c6:1e:d2:70:b6:e0: ce:dd:39:b8:c3:29:e9:cd:df:cd:79:16:3d:55:c4: 30:a8:08:9e:53:8d:b7:b6:ae:91:7d:f6:8a:ec:5e: 30:d6:ba:91:6b:b8:5a:cd:80:c2:d5:1e:9b:e8:1b: 2d:ce:51:3d:19:0b:49:60:66:01:17:65:3f:63:10: b7:c7:52:26:07:a9:ce:5e:0f:03:4f:10:8c:50:c2: 13:d1:bc:35:f1:b2:9b:38:38:c1:88:f5:e3:c6:d1: a4:d2:60:83:ed:d3:e2:24:1b:ea:48:d2:f0:1b:ad: c6:51:1c:77:7b:ee:6a:3d:60:b3:54:8c:55:a7:4d: 75:b1:b1:ad:31:90:63:cc:aa:c3:8c:13:fa:95:9f: 85:47:42:bc:c6:77:b4:e3:05:0a:9b:92:1b:ab:cf: 18:cf:20:2e:d3:5a:26:ed:f2:f7:e6:7c:f3:b7:fa: ea:e3:07:3f:17:67:74:89:d5:8a:01:5d:22:d3:22: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:85:60:B3:BD:53:94:90:6F:D4:E4:7C:C1:18:55:B0:D9:3C:D6:40 X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:cf:82:f5:6c:6d:10:21:3e:6f:2f:31:cd:3b:87:68:e7:4d: aa:9a:ed:1f:cd:d5:9a:ec:fd:96:3c:c5:8e:ff:86:fe:3b:8a: a5:80:d0:b1:bd:f8:03:2c:64:13:cd:67:e1:3a:bb:55:88:63: 24:6a:2f:05:8c:9b:da:79:1c:34:95:cd:06:24:de:7b:11:6a: 61:88:a7:9b:74:cf:dc:48:ba:09:31:9a:b0:b6:2b:e9:10:00: e5:59:c3:c6:35:75:42:66:9e:54:69:72:25:3d:7d:b6:74:c5: f9:ea:d6:4d:9e:2f:11:6b:cf:21:e7:7d:44:18:74:fb:46:bd: bf:e1:6a:25:d7:57:24:8d:5b:a5:8c:53:52:81:48:7c:3f:0a: b2:9c:a1:bf:c7:54:46:e8:9a:ee:c7:90:9c:38:92:74:b9:e2: 14:17:f7:58:f9:9d:89:c5:e0:c7:65:6d:9b:26:ba:45:07:17: 32:7e:34:e0:7e:dc:56:da:86:91:99:d2:62:6b:45:e1:9f:63: ea:16:d5:61:f7:40:8c:ba:c8:ca:c6:c2:d4:fe:11:98:d0:24: 11:55:25:8d:fd:cb:29:d9:de:b9:ab:3f:dd:93:6f:16:2c:60: 18:6a:d5:fa:cd:a7:07:60:5c:df:3c:6d:2d:fd:f4:96:b4:59: ae:fd:12:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjYwNDI3MDIwMTU4WhcNMjYwNTA0MDIwMTU4WjAYMRYwFAYD VQQDEw02OWVlYzM5Ni1jMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuuXWaDfUaRD3waVthq4Tex8/JYdb8fyTeyjPq+K3gMyas+fP7t5bmOCLCgc 4AVIKATgGrTx69JbhyqnZiOcVrC+8U/GHtJwtuDO3Tm4wynpzd/NeRY9VcQwqAie U423tq6RffaK7F4w1rqRa7hazYDC1R6b6BstzlE9GQtJYGYBF2U/YxC3x1ImB6nO Xg8DTxCMUMIT0bw18bKbODjBiPXjxtGk0mCD7dPiJBvqSNLwG63GURx3e+5qPWCz VIxVp011sbGtMZBjzKrDjBP6lZ+FR0K8xne04wUKm5Ibq88YzyAu01om7fL35nzz t/rq4wc/F2d0idWKAV0i0yIGpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmFYLO9 U5SQb9TkfMEYVbDZPNZAMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApc+C9WxtECE+by8xzTuHaOdNqprtH83Vmuz9ljzFjv+G/juKpYDQsb34Ayxk E81n4Tq7VYhjJGovBYyb2nkcNJXNBiTeexFqYYinm3TP3Ei6CTGasLYr6RAA5VnD xjV1QmaeVGlyJT19tnTF+erWTZ4vEWvPIed9RBh0+0a9v+FqJddXJI1bpYxTUoFI fD8Kspyhv8dURuia7seQnDiSdLniFBf3WPmdicXgx2Vtmya6RQcXMn404H7cVtqG kZnSYmtF4Z9j6hbVYfdAjLrIysbC1P4RmNAkEVUljf3LKdneuas/3ZNvFixgGGrV +s2nB2Bc3zxtLf30lrRZrv0S6A== -----END CERTIFICATE-----Generated at Tue Apr 28 07:22:53 2026 by rpki-client