$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: caUi2rrD39ZBn/wy4lF7+zCXlTLhnkHeGfdyO27Rq+I= Subject key identifier: 42:43:9B:83:1F:E7:49:A8:57:70:14:9D:2B:B8:D0:E7:DF:D5:B0:CE Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: A1 Signing time: Sun 05 Apr 2026 06:41:28 +0000 Manifest this update: Sun 05 Apr 2026 06:41:27 +0000 Manifest next update: Sun 12 Apr 2026 06:41:27 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: rUQnP6Cpf1Jn+cyyMVM/LkzfeOT72hlOzbKQtJwFa0o=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: /Q9gpxY9Rv8Y6XwClcVbAHo67QEBLFEE8ponSdmbbqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Apr 5 06:41:27 2026 GMT Not After : Apr 12 06:41:27 2026 GMT Subject: CN=69d20418-0b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:bf:33:4b:b0:b6:6e:eb:ae:13:29:9b:aa: c5:ec:82:1b:c4:18:ed:fa:c9:3e:42:2d:77:26:cc: 28:7d:f3:34:94:4d:0e:ab:60:71:68:16:44:55:fd: 76:31:18:5c:f4:8b:5e:19:38:2c:37:13:dc:98:c5: fb:46:61:61:87:60:e6:27:14:7f:29:cf:ab:06:08: 33:74:62:e0:78:27:b8:97:f2:85:1e:92:19:0f:9b: 9c:e0:f7:fe:d2:f8:46:0b:55:0a:44:eb:0e:5c:82: ef:5f:00:f6:e5:02:c8:51:f4:a2:d1:73:01:74:01: 09:7a:cd:23:e8:16:ea:a1:95:08:ac:64:cd:ef:f9: f1:c4:e0:ba:bd:57:bb:83:b4:ba:c6:b8:63:bc:19: c5:0a:5a:93:e0:f2:a0:c4:26:3e:c1:f4:a5:3a:e3: d0:7f:bb:a3:c6:e4:e9:dd:e3:57:49:07:94:3e:5f: cc:b7:d5:c8:ad:ae:0c:fb:f0:cb:32:b9:a1:64:9b: bf:a6:57:fc:de:90:ce:a2:0c:10:01:5b:f3:a6:d2: 7f:dd:2c:aa:ec:40:e9:36:56:85:59:33:df:ed:79: ee:33:5f:08:e4:03:83:a1:e9:80:c3:e0:6f:8b:f4: 7b:a6:63:b4:a2:ef:4c:0c:90:cd:03:8b:a9:60:b8: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:43:9B:83:1F:E7:49:A8:57:70:14:9D:2B:B8:D0:E7:DF:D5:B0:CE X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a1:de:ea:a9:fa:49:e6:09:7d:bc:e4:c5:10:7e:37:4d:33: 65:3b:aa:84:bc:c1:5b:be:2c:ac:c8:2a:d2:05:1d:09:33:ef: 07:ea:b7:9a:df:2e:32:8c:11:77:0f:75:67:b1:8b:2b:75:48: d7:3c:42:24:05:bc:c3:cd:e7:2f:cc:85:1f:04:a8:d9:d6:89: c5:f2:bc:3f:03:57:05:0e:c2:f2:f5:01:d3:3d:78:98:20:92: d3:3b:9d:a7:79:67:07:65:69:a1:94:95:94:84:76:a7:1f:75: bb:8a:36:5f:65:a9:e4:aa:aa:8a:1d:53:e3:d2:2e:66:4f:a3: 21:90:d2:04:e9:f3:f9:68:70:11:2f:82:14:a5:f3:b4:3a:f4: 6c:80:ea:e4:85:87:64:38:ba:1d:cf:5d:03:f4:40:c6:44:35: 49:0e:bd:be:2b:f8:69:10:ec:a6:09:14:b9:f3:93:64:26:48: 96:8a:dc:f1:e4:f8:44:77:33:c8:bc:b9:a1:6b:80:c6:35:be: b1:70:36:4e:5a:93:53:31:a8:12:29:42:1d:4a:63:04:29:1c: e1:52:39:b7:60:8a:b8:27:a8:fd:6f:15:9e:e4:d5:46:29:31: fb:ca:84:6a:81:39:a6:07:98:89:56:5f:ef:06:14:00:6a:e8: b3:0c:ca:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzcxMTAvBgNVBAUTKDEwN0RFMjZEMTdFMzFBMDQ4OTA2RUNBQjU5ODM0RkZF QjE0ODExMEYwHhcNMjYwNDA1MDY0MTI3WhcNMjYwNDEyMDY0MTI3WjAYMRYwFAYD VQQDEw02OWQyMDQxOC0wYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVm/M0uwtm7rrhMpm6rF7IIbxBjt+sk+Qi13JswoffM0lE0Oq2BxaBZEVf12 MRhc9IteGTgsNxPcmMX7RmFhh2DmJxR/Kc+rBggzdGLgeCe4l/KFHpIZD5uc4Pf+ 0vhGC1UKROsOXILvXwD25QLIUfSi0XMBdAEJes0j6BbqoZUIrGTN7/nxxOC6vVe7 g7S6xrhjvBnFClqT4PKgxCY+wfSlOuPQf7ujxuTp3eNXSQeUPl/Mt9XIra4M+/DL MrmhZJu/plf83pDOogwQAVvzptJ/3Syq7EDpNlaFWTPf7XnuM18I5AODoemAw+Bv i/R7pmO0ou9MDJDNA4upYLi+KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJDm4Mf 50moV3AUnSu40Off1bDOMB8GA1UdIwQYMBaAFBB94m0X4xoEiQbsq1mDT/6xSBEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzNy8zNENEMDhDRTND QTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9FSDNpYlJmakdnU0pCdXlyV1lOUF9yRklF UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzNy8zNENEMDhDRTNDQTMxMUYwOEE0OTVDMkZDNEY5QUUwMi9FSDNpYlJmakdn U0pCdXlyV1lOUF9yRklFUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKHe6qn6SeYJfbzkxRB+N00zZTuqhLzBW74srMgq0gUdCTPvB+q3mt8uMowR dw91Z7GLK3VI1zxCJAW8w83nL8yFHwSo2daJxfK8PwNXBQ7C8vUB0z14mCCS0zud p3lnB2VpoZSVlIR2px91u4o2X2Wp5Kqqih1T49IuZk+jIZDSBOnz+WhwES+CFKXz tDr0bIDq5IWHZDi6Hc9dA/RAxkQ1SQ69viv4aRDspgkUufOTZCZIlorc8eT4RHcz yLy5oWuAxjW+sXA2TlqTUzGoEilCHUpjBCkc4VI5t2CKuCeo/W8VnuTVRikx+8qE aoE5pgeYiVZf7wYUAGroswzKKQ== -----END CERTIFICATE-----Generated at Mon Apr 6 16:36:56 2026 by rpki-client