$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json) Hash identifier: LgHeiklF2W1IYdtu0PSeT8306cZHeOQdRGiEGY0pNE4= Subject key identifier: 4C:0B:F7:91:AC:B0:94:4B:F1:88:C6:9A:3A:70:B2:E9:16:C4:95:10 Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft Manifest number: 07A2 Signing time: Tue 06 Oct 2026 21:37:36 +0000 Manifest this update: Tue 06 Oct 2026 21:37:35 +0000 Manifest next update: Tue 13 Oct 2026 21:37:35 +0000 Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: sGEHGWIa/Gs4XBxKqNiq4CWLyuk/DiTOjXnhVtaVd4w=) 2: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: +jvdYVRVCKb9nHFb/a4hVukxgRDPU2GYfvLDSqD8lQ4=) 3: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: XPvB+vFL16oisT/9uSlsAmizDeWHyhaJXzNkKeUA27M=) 4: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 21:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A Validity Not Before: Oct 6 21:37:35 2026 GMT Not After : Oct 13 21:37:35 2026 GMT Subject: CN=6ac56a20-37ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:ea:ff:06:f2:52:9c:0c:8e:6e:fe:87:74: 3e:54:db:1c:20:92:a5:24:7d:b6:b0:63:f3:85:30: 4e:47:0d:8f:be:48:fb:a5:a2:55:c4:13:b4:d9:a6: 7f:54:3c:a3:8e:e2:eb:1a:7f:8d:20:a9:99:40:0c: f2:2b:e8:bc:d2:a9:d4:be:9c:f2:dc:23:ac:c4:24: 40:6c:74:94:f5:f5:8d:ef:fe:10:78:13:72:20:96: 1b:57:dc:ba:fe:6d:db:aa:7a:c1:21:9a:22:d9:1e: 67:a1:99:e9:d9:6f:92:b2:93:3e:7d:b2:86:c2:d9: 4c:62:c4:91:d1:5c:64:58:33:4f:b9:69:e5:81:53: a6:d8:44:cf:1d:bc:6b:a4:cf:a6:4c:24:c7:bf:44: 47:ce:86:d4:98:31:cf:82:d5:99:45:00:f0:d6:32: 98:b8:51:70:70:5c:0a:d7:1e:7f:4b:7f:9d:7c:1c: 7e:fd:11:8f:20:9b:c5:77:35:4c:51:e8:c7:d8:e2: 8c:ba:bc:d9:3a:d7:42:e3:d8:5a:b2:b6:29:7e:5d: 4e:43:ca:9a:47:8a:c2:09:2b:f2:82:b8:c3:e4:7c: a4:3d:ca:42:7c:da:4d:6f:2f:e2:7a:7c:6a:d4:5c: ed:3c:0b:2c:c2:4c:02:89:df:47:9b:17:37:dd:99: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0B:F7:91:AC:B0:94:4B:F1:88:C6:9A:3A:70:B2:E9:16:C4:95:10 X509v3 Authority Key Identifier: keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:25:90:30:32:48:69:59:32:40:56:c1:81:42:e8:bc:40:c3: ee:35:90:59:71:ca:e8:c2:10:0a:39:79:63:3c:ae:5d:24:ee: a6:00:8b:22:de:93:8a:e4:c3:55:53:e1:fd:9b:49:6a:1c:dd: d5:4d:e1:05:9a:55:4e:a1:77:70:37:63:23:0d:13:aa:fd:0e: 24:64:89:db:93:e0:66:74:e5:29:6a:52:3e:2a:70:38:81:5f: 41:7e:d3:d0:e1:4e:5a:17:71:3e:d5:9d:93:9e:c7:9d:fe:a0: c0:0b:ec:13:00:64:43:60:01:c4:c3:5a:88:84:02:b4:64:12: 36:4a:4b:4a:e1:15:67:13:3b:52:e3:aa:59:e5:76:ed:69:4c: 04:35:20:be:ce:15:5c:05:c6:12:a7:09:c2:dc:40:a6:bd:b7: be:e6:d6:9d:16:0a:76:7b:a8:ad:56:4b:18:9d:99:ea:77:9a: fc:38:a6:e9:0e:69:b5:c5:a3:c2:00:12:25:60:68:0f:9f:6f: b6:f7:66:a0:b8:d9:40:6d:01:e7:4e:8c:b9:34:25:f8:b7:9d: d6:55:5a:92:f1:70:1d:8c:a5:aa:cc:e2:47:13:25:3c:7f:98: 27:45:35:b3:76:2e:7e:0a:64:15:d9:cd:f3:cc:46:be:fa:93: 74:79:9e:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKDEyMTA5NTgzMDIzRTE4NURFNEEyQjI5NDIzMTU5OUQ2 MzY0MEJDOUEwHhcNMjYxMDA2MjEzNzM1WhcNMjYxMDEzMjEzNzM1WjAYMRYwFAYD VQQDEw02YWM1NmEyMC0zN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9nq/wbyUpwMjm7+h3Q+VNscIJKlJH22sGPzhTBORw2Pvkj7paJVxBO02aZ/ VDyjjuLrGn+NIKmZQAzyK+i80qnUvpzy3COsxCRAbHSU9fWN7/4QeBNyIJYbV9y6 /m3bqnrBIZoi2R5noZnp2W+SspM+fbKGwtlMYsSR0VxkWDNPuWnlgVOm2ETPHbxr pM+mTCTHv0RHzobUmDHPgtWZRQDw1jKYuFFwcFwK1x5/S3+dfBx+/RGPIJvFdzVM UejH2OKMurzZOtdC49hasrYpfl1OQ8qaR4rCCSvygrjD5HykPcpCfNpNby/ienxq 1FztPAsswkwCid9Hmxc33Zl+ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwL95Gs sJRL8YjGmjpwsukWxJUQMB8GA1UdIwQYMBaAFBIQlYMCPhhd5KKylCMVmdY2QLya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zQ0VFREY5MDZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdGM2tvcktVSXhXWjFqWkF2 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VoQ1Znd0ktR0Yza29yS1VJeFdaMWpaQXZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zQ0VFREY5MDZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdG M2tvcktVSXhXWjFqWkF2Sm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhiWQMDJIaVkyQFbBgULovEDD7jWQWXHK6MIQCjl5YzyuXSTupgCLIt6TiuTD VVPh/ZtJahzd1U3hBZpVTqF3cDdjIw0Tqv0OJGSJ25PgZnTlKWpSPipwOIFfQX7T 0OFOWhdxPtWdk57Hnf6gwAvsEwBkQ2ABxMNaiIQCtGQSNkpLSuEVZxM7UuOqWeV2 7WlMBDUgvs4VXAXGEqcJwtxApr23vubWnRYKdnuorVZLGJ2Z6nea/Dim6Q5ptcWj wgASJWBoD59vtvdmoLjZQG0B506MuTQl+Led1lVakvFwHYylqsziRxMlPH+YJ0U1 s3YufgpkFdnN88xGvvqTdHmeIw== -----END CERTIFICATE-----Generated at Thu Oct 8 07:24:13 2026 by rpki-client