$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft File: EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json) Hash identifier: 8mShtUrfvzL3L8BMNePo5BdwQLiOmv6w/CmByR081FI= Subject key identifier: 7A:B1:D7:46:9F:E5:D5:AC:0E:89:90:90:1A:3D:8B:B5:13:BC:55:93 Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1 Certificate issuer: /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft Manifest number: 27 Signing time: Tue 19 May 2026 08:40:27 +0000 Manifest this update: Tue 19 May 2026 08:40:27 +0000 Manifest next update: Tue 26 May 2026 08:40:27 +0000 Files and hashes: 1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: SMpKt2jdLG7fVyAux6WhyABfHXVdwMqiKkDe/xnDCKQ=) 2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: p3H/WotmZtJh2VCUVKyKjndLevGeDwif8IcNwZKNTmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1 Validity Not Before: May 19 08:40:27 2026 GMT Not After : May 26 08:40:27 2026 GMT Subject: CN=6a0c21fb-a25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7e:95:66:08:fa:24:78:a1:b8:22:eb:5c:16: 97:a0:a1:fc:ff:89:0b:f1:9f:94:fc:7e:df:0e:6d: 86:99:54:ab:5f:06:f6:fa:2a:c2:d0:1b:5f:f1:c7: 8b:b4:e4:50:35:2a:28:49:b5:1f:bc:12:2a:c2:b9: 25:a8:bc:f9:ee:47:7a:4a:61:b2:ec:a8:f3:1e:b6: 56:e8:b5:d4:3c:2d:7d:14:a9:59:23:df:f3:7f:54: 37:7a:6c:98:56:86:c0:e3:6a:8a:a0:85:00:08:db: cc:ae:5d:64:29:c6:69:bf:e7:9d:c1:c5:a5:f0:53: f2:9c:98:c4:77:bf:7e:f1:73:1c:7e:3d:07:1e:ef: 58:bb:1c:35:d0:71:a3:72:3e:53:99:da:1d:2e:a0: fc:98:e9:8b:a3:c5:d0:6f:8a:76:c6:f8:a9:9b:91: 46:c5:5d:ea:fc:61:84:a9:05:ee:11:84:97:5c:74: 75:51:29:13:e4:4f:ca:87:de:df:32:6b:ed:08:62: b5:2e:2d:3e:53:05:fa:a1:3c:d0:06:b3:0e:7e:bf: f9:92:97:51:11:94:94:bb:4b:ff:55:ad:ab:2e:6c: ad:06:32:19:58:1b:d8:ed:00:90:bc:0a:cc:f9:72: f6:74:dd:85:f2:78:9d:5c:c3:c4:8a:8c:9b:58:d9: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B1:D7:46:9F:E5:D5:AC:0E:89:90:90:1A:3D:8B:B5:13:BC:55:93 X509v3 Authority Key Identifier: keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a7:77:7a:85:6c:cd:d8:49:16:fe:ed:e2:3b:18:cb:99:93: 30:ed:bc:11:c8:11:b8:cb:ce:51:3e:cb:bd:0e:25:7a:68:17: f9:31:e6:21:2b:5c:6a:70:d8:6f:e8:e8:49:af:a3:fc:44:a1: 43:e1:91:93:77:b3:05:f7:e2:8e:b8:95:c6:40:ac:ec:61:2b: 38:ce:94:c6:da:47:e7:95:ca:36:47:23:bb:8a:1f:fd:3a:40: 7e:c8:60:46:19:1b:1b:c6:99:22:69:c9:a8:79:a4:bf:d2:86: 3a:c4:82:8b:0e:cf:5b:07:58:d8:bc:14:37:30:26:aa:c6:61: 9f:36:e6:ef:31:46:78:23:7b:be:0a:dd:2a:66:c7:5a:08:bd: d8:24:e2:aa:21:c8:49:3d:83:52:f6:5c:c6:43:e2:bf:25:35: 64:3b:3f:d5:29:23:b0:b5:32:be:6f:81:ec:bf:ae:15:be:4e: 68:36:51:29:09:05:0e:26:3f:16:db:ea:c2:78:3b:11:76:7b: 60:77:c6:fa:c1:ac:f4:0b:3e:f6:06:10:a7:a0:c6:87:70:3c: d3:62:90:93:a3:e1:31:32:de:62:8b:55:36:b5:5f:bf:d7:d7: 49:d1:c1:3c:d3:4f:b2:9c:e8:5d:b1:e7:2f:06:21:7c:7f:8f: b5:15:ed:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoMTJGMDg5NkUxQTNDQkYyNTAxOTEwMDA5RDk4NzkwNkJB NTNDNkNDMTAeFw0yNjA1MTkwODQwMjdaFw0yNjA1MjYwODQwMjdaMBgxFjAUBgNV BAMTDTZhMGMyMWZiLWEyNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpfpVmCPokeKG4IutcFpegofz/iQvxn5T8ft8ObYaZVKtfBvb6KsLQG1/xx4u0 5FA1KihJtR+8EirCuSWovPnuR3pKYbLsqPMetlbotdQ8LX0UqVkj3/N/VDd6bJhW hsDjaoqghQAI28yuXWQpxmm/553BxaXwU/KcmMR3v37xcxx+PQce71i7HDXQcaNy PlOZ2h0uoPyY6YujxdBvinbG+KmbkUbFXer8YYSpBe4RhJdcdHVRKRPkT8qH3t8y a+0IYrUuLT5TBfqhPNAGsw5+v/mSl1ERlJS7S/9VrasubK0GMhlYG9jtAJC8Csz5 cvZ03YXyeJ1cw8SKjJtY2ccZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUerHXRp/l 1awOiZCQGj2LtRO8VZMwHwYDVR0jBBgwFoAUEvCJbho8vyUBkQAJ2YeQa6U8bMEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwLzAxRkEwMDcyMUMz NzExRjE4ODQ3QUIyQjM4M0Q4QzY3L0V2Q0piaG84dnlVQmtRQUoyWWVRYTZVOGJN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXZDSmJobzh2eVVCa1FBSjJZZVFhNlU4Yk1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RjkwLzAxRkEwMDcyMUMzNzExRjE4ODQ3QUIyQjM4M0Q4QzY3L0V2Q0piaG84dnlV QmtRQUoyWWVRYTZVOGJNRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMp3d6hWzN2EkW/u3iOxjLmZMw7bwRyBG4y85RPsu9DiV6aBf5MeYhK1xqcNhv 6OhJr6P8RKFD4ZGTd7MF9+KOuJXGQKzsYSs4zpTG2kfnlco2RyO7ih/9OkB+yGBG GRsbxpkiacmoeaS/0oY6xIKLDs9bB1jYvBQ3MCaqxmGfNubvMUZ4I3u+Ct0qZsda CL3YJOKqIchJPYNS9lzGQ+K/JTVkOz/VKSOwtTK+b4Hsv64Vvk5oNlEpCQUOJj8W 2+rCeDsRdntgd8b6waz0Cz72BhCnoMaHcDzTYpCTo+ExMt5ii1U2tV+/19dJ0cE8 00+ynOhdsecvBiF8f4+1Fe2X -----END CERTIFICATE-----Generated at Thu May 21 09:38:54 2026 by rpki-client