$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: kLlX5sORkd2YLdGz6kk1VJ/0/GtKTIi0U6/l55pKyCA= Subject key identifier: 37:7A:EA:05:1D:05:4C:67:FE:F9:BD:DC:35:A2:69:66:67:70:C7:AE Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 0123 Signing time: Sun 05 Apr 2026 05:16:59 +0000 Manifest this update: Sun 05 Apr 2026 05:16:59 +0000 Manifest next update: Sun 12 Apr 2026 05:16:59 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 530w+bYaKC8uhbpKLiI34gS0ZkFVkyGhtl/jLZvBvk4=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: /KryMHMfzm4mv+PmAUUQ97+ZD6cBoGkFzqrA/qBGskk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Apr 5 05:16:59 2026 GMT Not After : Apr 12 05:16:59 2026 GMT Subject: CN=69d1f04b-cd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dc:27:1a:46:12:f2:0b:29:27:07:16:89:29: 76:94:89:24:c6:3e:8e:61:47:1a:5d:58:66:2c:2f: c1:04:ff:b0:71:64:3b:3e:e5:74:03:3c:b9:3b:22: 1d:be:0d:4f:47:9e:22:34:cf:f6:5b:10:52:02:7c: 82:09:4e:e6:c5:1c:1e:30:8a:ef:8c:68:b8:ba:10: d3:4a:e3:54:50:fa:85:84:88:36:bf:8b:75:f6:6b: f0:bb:95:25:71:55:43:95:a8:03:5f:eb:28:b8:ef: 0b:a0:6d:37:52:0b:20:35:32:c0:95:ba:b1:07:74: 16:d1:39:05:ee:3a:ee:cd:2d:c3:af:f4:df:fb:3e: 5f:3e:7b:71:ac:51:e5:26:a5:8a:ad:07:ce:d7:96: 1f:3f:28:a8:28:bb:51:84:4a:de:2d:41:30:3d:ba: a9:5c:16:da:53:31:f4:74:16:6f:28:a1:59:16:12: 83:a4:f8:86:96:d2:6f:86:16:82:b1:6b:97:67:1a: c8:42:19:b5:34:09:b0:84:6b:57:5e:d1:a3:79:bc: f7:00:5d:09:97:27:0d:a9:59:ef:f7:25:79:0f:b2: c6:56:81:b2:52:63:e7:79:a1:07:22:5f:88:de:4b: 28:23:f9:02:5d:b1:f2:0e:32:2e:51:8c:9a:0a:25: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7A:EA:05:1D:05:4C:67:FE:F9:BD:DC:35:A2:69:66:67:70:C7:AE X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:80:3b:86:0c:e8:90:46:b6:99:ca:9f:be:14:8d:54:36:3d: 26:99:e4:d2:33:b2:16:d4:be:2d:13:5c:80:d6:f9:fd:49:c8: a6:d4:c0:0e:31:d1:a9:7a:2a:71:18:54:c0:7d:86:09:92:69: 47:ea:94:4b:75:8c:84:f0:95:56:05:6b:84:cd:9c:21:2a:84: a4:ec:75:a8:d7:73:e9:e8:5b:56:cf:4d:60:07:61:c5:63:92: f5:c2:88:d3:55:3f:c3:fd:a3:8b:10:fb:57:ca:04:27:8c:6c: 07:a3:bf:11:6a:61:22:c8:ff:16:0d:06:b4:f0:f4:7e:66:b4: 8a:5a:42:b9:be:46:a3:61:28:b2:ed:e8:4d:05:22:a3:e3:71: 46:04:32:97:ba:2a:0d:57:54:73:d3:06:31:2f:b1:74:2e:72: 00:93:18:7c:d0:f5:fc:c5:ee:45:76:94:79:e3:5b:10:c3:90: e6:87:73:64:98:31:db:a6:90:8e:5c:ea:0a:1b:0b:4c:16:ee: db:8b:bf:33:81:a3:83:ee:e0:bc:48:df:24:7f:b4:a1:af:a0: 82:23:35:76:5a:fc:3b:fe:84:2d:ad:75:f5:42:32:5e:82:56: c4:ff:95:b5:ff:00:ef:bb:7d:20:47:71:45:d5:6c:3a:07:1f: f5:a7:7d:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjYwNDA1MDUxNjU5WhcNMjYwNDEyMDUxNjU5WjAYMRYwFAYD VQQDEw02OWQxZjA0Yi1jZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltwnGkYS8gspJwcWiSl2lIkkxj6OYUcaXVhmLC/BBP+wcWQ7PuV0Azy5OyId vg1PR54iNM/2WxBSAnyCCU7mxRweMIrvjGi4uhDTSuNUUPqFhIg2v4t19mvwu5Ul cVVDlagDX+souO8LoG03UgsgNTLAlbqxB3QW0TkF7jruzS3Dr/Tf+z5fPntxrFHl JqWKrQfO15YfPyioKLtRhEreLUEwPbqpXBbaUzH0dBZvKKFZFhKDpPiGltJvhhaC sWuXZxrIQhm1NAmwhGtXXtGjebz3AF0JlycNqVnv9yV5D7LGVoGyUmPneaEHIl+I 3ksoI/kCXbHyDjIuUYyaCiUUcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDd66gUd BUxn/vm93DWiaWZncMeuMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALoA7hgzokEa2mcqfvhSNVDY9Jpnk0jOyFtS+LRNcgNb5/UnIptTADjHRqXoq cRhUwH2GCZJpR+qUS3WMhPCVVgVrhM2cISqEpOx1qNdz6ehbVs9NYAdhxWOS9cKI 01U/w/2jixD7V8oEJ4xsB6O/EWphIsj/Fg0GtPD0fma0ilpCub5Go2Eosu3oTQUi o+NxRgQyl7oqDVdUc9MGMS+xdC5yAJMYfND1/MXuRXaUeeNbEMOQ5odzZJgx26aQ jlzqChsLTBbu24u/M4Gjg+7gvEjfJH+0oa+ggiM1dlr8O/6ELa119UIyXoJWxP+V tf8A77t9IEdxRdVsOgcf9ad9bQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:47 2026 by rpki-client