$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: v6iQTdq5TPaCP0zW+AEjhx0ClJB4rN5S3TJEB5axGyU= Subject key identifier: E5:F7:C9:75:3A:AE:71:5E:43:7F:5D:BA:AA:58:4E:D3:C3:7A:9C:47 Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0C2A Signing time: Sat 04 Apr 2026 18:38:10 +0000 Manifest this update: Sat 04 Apr 2026 18:38:10 +0000 Manifest next update: Sat 11 Apr 2026 18:38:10 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: vWxJ0cPDUtiCF+Sa1eFvchlHt0wEzLRZ8dlGGKmrKb8=) 2: CEFDECF850B011F0B9262D4FC4F9AE02.roa (hash: M7Twy19LjGj2zYAkQBPKqFxpHK+7jtbWBpYW+TQys+s=) 3: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: PVNVIsAGF4iLu1l85ogTKaGXUTCHGrR1d4s3DuDaU/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Apr 4 18:38:10 2026 GMT Not After : Apr 11 18:38:10 2026 GMT Subject: CN=69d15a92-7bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:98:67:35:fd:d8:e6:6c:ce:f2:79:e8:54: 5f:ec:a2:60:98:cb:aa:73:52:99:29:f1:ba:a8:36: 52:26:55:d9:27:f0:63:f5:b3:fc:c4:20:24:db:94: 29:1f:84:7f:06:01:b6:71:5e:3e:63:06:ba:7a:ad: 87:d9:f6:7d:4d:68:bc:64:54:2c:6e:56:98:94:20: 9a:55:4a:71:5d:6a:63:10:f6:c6:20:31:9e:83:3c: eb:c7:dd:12:08:c6:39:62:9e:87:7b:b0:27:1b:f6: a3:db:12:30:2e:8a:70:a8:43:32:eb:2f:1e:73:9f: 5f:08:9f:ee:22:91:6f:0b:0d:1d:c9:fd:7f:4e:80: 8f:e6:9b:e3:1f:94:d2:fe:f8:a3:f1:73:19:d8:34: 07:c5:47:9d:29:a4:45:99:45:b9:d8:49:6e:42:42: 8a:f7:b7:43:81:c6:61:95:6d:5d:78:c8:f2:b4:e6: f4:70:dc:4a:c5:c1:ac:b0:dd:57:81:a7:71:52:6e: 49:e7:49:a6:8d:5f:29:e8:57:c3:93:a5:38:da:9a: 01:00:30:a5:e7:22:f9:55:49:c2:b0:b4:94:e0:8f: 81:bc:98:ba:54:c9:92:7c:24:86:d3:5e:ee:b0:96: d1:02:9e:51:15:0e:3d:36:5c:39:36:a9:d8:8a:4c: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F7:C9:75:3A:AE:71:5E:43:7F:5D:BA:AA:58:4E:D3:C3:7A:9C:47 X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:43:2c:d4:7c:5a:a6:41:f0:81:00:c1:0e:60:a5:b2:ce:ce: 5c:8d:65:69:af:f7:5b:8f:47:44:cd:f9:6b:93:ee:fb:34:af: 85:16:b0:41:37:be:5e:ee:ca:f4:ff:de:f1:2d:5d:01:a7:11: 3e:1d:46:04:6c:37:2f:c8:ca:9a:c9:c8:f2:b2:48:93:9f:20: f7:9c:65:d3:a8:44:0f:2b:57:b7:70:18:82:c9:96:e0:03:40: 60:c9:06:d4:10:cf:84:e1:c7:2a:0c:d2:0d:7c:28:74:38:dc: 30:ac:92:85:ed:a2:53:61:fe:a1:9a:c1:2f:88:ee:e5:61:b6: 84:13:a0:b2:e1:7a:11:76:fd:31:09:c1:1d:1b:7b:60:1c:f7: 85:0b:ff:f6:5f:38:74:ee:2c:35:c3:72:5f:bd:b2:d3:ff:b7: 81:ce:9f:2d:58:34:d9:28:71:70:b5:94:9d:80:85:cb:4a:3f: d7:36:73:6b:7f:7f:b5:ed:14:47:6d:b8:8f:04:51:42:76:21: 5e:1b:97:15:9c:d2:8d:29:89:a2:96:88:22:af:13:07:69:2e: 83:eb:90:cc:5a:b0:bd:6c:98:bb:60:00:83:05:c4:c2:ce:8b: cc:25:44:55:a3:bd:2e:b1:45:9d:02:99:b5:35:44:6b:3b:ae: 99:1d:c9:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjYwNDA0MTgzODEwWhcNMjYwNDExMTgzODEwWjAYMRYwFAYD VQQDEw02OWQxNWE5Mi03YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhuYZzX92OZszvJ56FRf7KJgmMuqc1KZKfG6qDZSJlXZJ/Bj9bP8xCAk25Qp H4R/BgG2cV4+Ywa6eq2H2fZ9TWi8ZFQsblaYlCCaVUpxXWpjEPbGIDGegzzrx90S CMY5Yp6He7AnG/aj2xIwLopwqEMy6y8ec59fCJ/uIpFvCw0dyf1/ToCP5pvjH5TS /vij8XMZ2DQHxUedKaRFmUW52EluQkKK97dDgcZhlW1deMjytOb0cNxKxcGssN1X gadxUm5J50mmjV8p6FfDk6U42poBADCl5yL5VUnCsLSU4I+BvJi6VMmSfCSG017u sJbRAp5RFQ49Nlw5NqnYikypNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOX3yXU6 rnFeQ39duqpYTtPDepxHMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAikMs1HxapkHwgQDBDmClss7OXI1laa/3W49HRM35a5Pu+zSvhRawQTe+Xu7K 9P/e8S1dAacRPh1GBGw3L8jKmsnI8rJIk58g95xl06hEDytXt3AYgsmW4ANAYMkG 1BDPhOHHKgzSDXwodDjcMKyShe2iU2H+oZrBL4ju5WG2hBOgsuF6EXb9MQnBHRt7 YBz3hQv/9l84dO4sNcNyX72y0/+3gc6fLVg02ShxcLWUnYCFy0o/1zZza39/te0U R224jwRRQnYhXhuXFZzSjSmJopaIIq8TB2kug+uQzFqwvWyYu2AAgwXEws6LzCVE VaO9LrFFnQKZtTVEazuumR3JoA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:00 2026 by rpki-client