$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: px9AIHPABYBoEpcmg1ZK/IB+ish1yb/vLk9iIAf1KvE= Subject key identifier: 59:89:DB:91:D6:82:6C:A4:43:3E:E1:D5:5F:EA:01:D9:3C:0B:0D:52 Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 0235 Signing time: Fri 23 Oct 2026 03:05:21 +0000 Manifest this update: Fri 23 Oct 2026 03:05:21 +0000 Manifest next update: Fri 30 Oct 2026 03:05:21 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: NQaA66F8ckpKCBvcZ3cdHt23PR58rbDDjxnLY526rOU=) 2: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: q+XSi1s238dMGhuwUgaHufUBQNrf/5iPlR0JXsxUO7Y=) 3: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: P99mvWZlY8P1geIzs7ku9n4rnRGbQWllNHbE+mokqck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 03:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Oct 23 03:05:21 2026 GMT Not After : Oct 30 03:05:21 2026 GMT Subject: CN=6adacef1-d005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:be:b9:0b:85:ef:1d:ea:d8:c3:e5:29:c4: dd:79:41:07:96:e2:eb:f6:ca:73:fd:3c:3a:3a:65: 9f:c4:22:9e:aa:ca:12:26:04:c0:5a:2c:af:ea:60: af:35:76:88:1e:55:a3:04:68:63:54:7e:5e:51:27: e1:5f:50:22:5c:e6:c0:ae:6f:d8:b3:7c:26:70:71: f7:13:16:be:01:45:fb:45:7b:43:59:11:32:ed:e7: c4:24:dc:59:18:3a:df:fa:af:4f:16:51:94:72:06: 4a:12:ff:de:ae:10:f2:3a:87:b3:05:e9:ec:5e:e0: 80:f7:ec:ec:5e:42:87:11:7a:94:00:3f:4b:15:85: d7:e7:72:44:fe:99:13:52:49:c1:85:ac:21:c9:0e: 99:98:c3:ba:32:c6:3d:08:4f:58:94:15:1d:92:f3: c6:da:e3:bc:85:79:72:2c:54:53:bc:ac:55:d7:c1: e1:0b:1a:e3:c4:52:e1:cf:a2:e3:98:02:66:56:76: 38:95:c7:63:9d:44:ac:28:16:aa:e0:66:57:d7:19: df:47:0a:da:4b:65:b3:0e:ad:84:6a:dd:6e:ce:1c: a0:cf:f4:44:a3:8e:ec:a7:bb:94:e9:ea:a5:97:f6: 73:4b:6d:98:d7:09:35:51:20:95:2e:c8:4d:c9:86: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:DB:91:D6:82:6C:A4:43:3E:E1:D5:5F:EA:01:D9:3C:0B:0D:52 X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a1:79:e2:37:c5:2c:6c:ae:d3:ae:96:25:1a:83:27:e2:0b: 16:ed:c1:3d:50:96:fc:0e:4d:84:5b:8c:a4:b9:26:7b:85:28: eb:29:c9:81:0c:df:80:b9:b6:ed:71:7e:83:24:c1:84:83:7d: 0f:72:37:60:08:c6:59:a7:eb:32:3e:25:3b:c5:a3:58:2e:f5: 11:28:0f:7b:14:ed:5d:05:b0:59:3e:88:27:d5:6a:51:bf:d2: d0:3f:c4:6d:9c:33:46:90:ac:8b:44:14:a4:f5:88:74:91:63: 42:a2:52:af:13:52:d5:41:27:88:e5:96:87:b4:fc:c8:1b:e7: 7c:2c:9a:54:af:e5:94:a4:03:d0:d3:28:a9:ec:54:7d:3e:7e: d6:0f:33:b6:7e:5d:31:80:e1:f0:fa:0c:b0:26:25:b5:d2:c7: 35:22:f8:86:27:32:c2:c6:12:50:f5:a3:df:6c:60:74:2b:08: 05:22:66:6c:d2:94:f7:64:a6:19:de:fa:f0:31:6d:e3:2c:ba: 92:62:3e:90:c7:75:c2:7e:54:cd:4d:cd:0e:94:e3:9f:73:31: 76:78:81:cb:f4:4b:6c:21:78:08:74:d8:79:68:ee:f3:fe:3c: f6:d8:90:da:2e:08:c4:5b:c3:df:ce:49:36:de:59:e4:72:7c: 02:47:4a:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjYxMDIzMDMwNTIxWhcNMjYxMDMwMDMwNTIxWjAYMRYwFAYD VQQDEw02YWRhY2VmMS1kMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1S+uQuF7x3q2MPlKcTdeUEHluLr9spz/Tw6OmWfxCKeqsoSJgTAWiyv6mCv NXaIHlWjBGhjVH5eUSfhX1AiXObArm/Ys3wmcHH3Exa+AUX7RXtDWREy7efEJNxZ GDrf+q9PFlGUcgZKEv/erhDyOoezBensXuCA9+zsXkKHEXqUAD9LFYXX53JE/pkT UknBhawhyQ6ZmMO6MsY9CE9YlBUdkvPG2uO8hXlyLFRTvKxV18HhCxrjxFLhz6Lj mAJmVnY4lcdjnUSsKBaq4GZX1xnfRwraS2WzDq2Eat1uzhygz/REo47sp7uU6eql l/ZzS22Y1wk1USCVLshNyYYZ6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmJ25HW gmykQz7h1V/qAdk8Cw1SMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfqF54jfFLGyu066WJRqDJ+ILFu3BPVCW/A5NhFuMpLkme4Uo6ynJgQzfgLm2 7XF+gyTBhIN9D3I3YAjGWafrMj4lO8WjWC71ESgPexTtXQWwWT6IJ9VqUb/S0D/E bZwzRpCsi0QUpPWIdJFjQqJSrxNS1UEniOWWh7T8yBvnfCyaVK/llKQD0NMoqexU fT5+1g8ztn5dMYDh8PoMsCYltdLHNSL4hicywsYSUPWj32xgdCsIBSJmbNKU92Sm Gd768DFt4yy6kmI+kMd1wn5UzU3NDpTjn3MxdniBy/RLbCF4CHTYeWju8/489tiQ 2i4IxFvD385JNt5Z5HJ8AkdK1w== -----END CERTIFICATE-----Generated at Sat Oct 24 22:35:51 2026 by rpki-client