$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft File: EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft (raw, json) Hash identifier: gtVvQkO9RyXqR+Ec+oadq02rvK8vii96wEDsEdQpPQM= Subject key identifier: 23:3E:3D:25:EA:F8:C8:AA:20:93:2A:4B:C1:12:B2:E3:17:A3:7F:72 Authority key identifier: 11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0 Certificate issuer: /CN=A91DDB11/serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft Manifest number: 3B Signing time: Mon 19 Oct 2026 09:00:30 +0000 Manifest this update: Mon 19 Oct 2026 09:00:29 +0000 Manifest next update: Mon 26 Oct 2026 09:00:29 +0000 Files and hashes: 1: EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl (hash: 1tG1P29pulEm7kJM7WJYr3xo5jOj86Va213fB3Hi0os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0 Validity Not Before: Oct 19 09:00:29 2026 GMT Not After : Oct 26 09:00:29 2026 GMT Subject: CN=6ad5dc2e-6f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:7f:67:cb:43:55:2c:03:b4:4e:97:67:e2: 2c:e7:ae:64:05:20:98:3e:3e:b3:e6:3b:26:e9:ae: d2:ac:20:6e:c2:c5:3c:a5:7a:8f:07:52:f4:08:3f: bc:d0:c7:d8:4a:fd:9c:bf:d4:0e:e0:c5:ff:bc:b3: 82:00:f0:73:c7:62:4e:7d:d9:30:e3:13:e1:04:66: dd:46:dc:71:6f:83:1f:1e:a0:66:95:3f:d2:7b:39: fa:14:df:8a:06:16:39:0a:63:f1:90:54:af:40:2e: ae:ac:4c:02:45:f0:6d:17:cd:99:4d:c6:06:e2:a9: 15:b5:fc:45:b5:4d:85:78:1e:00:3f:38:2a:83:77: dc:0e:51:b4:a6:41:1e:44:60:8c:eb:a5:e3:76:16: 6c:8b:ae:f0:60:94:44:58:5a:26:08:ae:ba:5c:a9: 4b:38:74:c5:e0:35:11:38:ca:35:98:91:8d:df:c2: a6:74:16:80:4a:e3:72:52:2e:eb:a4:ef:67:26:0a: 6e:e2:47:12:f4:c5:e7:cf:33:d3:a5:89:b2:58:d4: 99:2e:c7:59:09:c1:3e:2b:5a:bd:61:60:86:30:3b: 09:bb:6d:e4:08:48:ef:20:aa:a3:45:98:1f:b0:4d: 6c:72:b8:48:0f:ff:c0:ae:5d:a4:c1:81:30:a9:92: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3E:3D:25:EA:F8:C8:AA:20:93:2A:4B:C1:12:B2:E3:17:A3:7F:72 X509v3 Authority Key Identifier: keyid:11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:df:9a:f1:33:4f:73:16:cb:01:c8:e2:f2:25:fc:99:24:c6: 97:a8:18:f4:0f:4f:51:89:ff:35:76:f9:1a:b6:7b:59:11:16: b8:e6:f1:55:56:79:ff:86:9b:19:d2:96:d9:50:31:7d:52:ae: 04:6b:88:f6:ce:0e:36:c3:d4:c0:6b:b3:a2:73:0f:8d:c5:76: 38:e8:36:4c:6e:3c:92:82:78:b3:2e:27:29:b1:57:fa:6d:5b: 26:3e:13:29:f3:9e:e7:f0:80:cb:90:02:b0:ff:d5:26:3a:7b: 04:ec:c6:3c:37:b0:7a:36:89:f7:57:dd:b0:25:19:5c:2b:28: de:b3:47:8a:35:bc:15:16:37:e7:a0:d9:d6:34:c1:ab:ca:14: 26:bc:bb:71:56:6c:46:3f:27:55:02:30:8d:a9:47:cc:46:b1: cb:f5:d1:83:57:20:ec:f7:54:22:af:f8:f6:73:34:bd:fc:24: 3b:46:69:82:d9:75:d9:a8:0d:0f:81:96:fb:c1:45:36:bc:ad: 1e:78:55:4a:71:b3:ad:3e:46:3c:51:8c:4f:18:10:3b:1c:e7: 7d:f1:d5:49:cf:f8:51:8b:82:04:6d:9a:c7:45:ec:3c:7b:22: c9:d9:8f:5b:fb:1e:86:36:bd:2d:62:5a:f4:86:af:58:13:39: ea:c5:a1:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoMTFCMEU0QURGRkI4MUNBMUFBODRFQzA4NTY4MjlDRDgz QTA2NTVFMDAeFw0yNjEwMTkwOTAwMjlaFw0yNjEwMjYwOTAwMjlaMBgxFjAUBgNV BAMTDTZhZDVkYzJlLTZmMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsyH9ny0NVLAO0Tpdn4iznrmQFIJg+PrPmOybprtKsIG7CxTyleo8HUvQIP7zQ x9hK/Zy/1A7gxf+8s4IA8HPHYk592TDjE+EEZt1G3HFvgx8eoGaVP9J7OfoU34oG FjkKY/GQVK9ALq6sTAJF8G0XzZlNxgbiqRW1/EW1TYV4HgA/OCqDd9wOUbSmQR5E YIzrpeN2FmyLrvBglERYWiYIrrpcqUs4dMXgNRE4yjWYkY3fwqZ0FoBK43JSLuuk 72cmCm7iRxL0xefPM9OlibJY1Jkux1kJwT4rWr1hYIYwOwm7beQISO8gqqNFmB+w TWxyuEgP/8CuXaTBgTCpkgnXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIz49Jer4 yKogkypLwRKy4xejf3IwHwYDVR0jBBgwFoAUEbDkrf+4HKGqhOwIVoKc2DoGVeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExLzZEQjEwRUI4NzQz NTExRjFCMkRGQTI5ODY1QTMwRkJDL0ViRGtyZi00SEtHcWhPd0lWb0tjMkRvR1Zl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWJEa3JmLTRIS0dxaE93SVZvS2MyRG9HVmVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExLzZEQjEwRUI4NzQzNTExRjFCMkRGQTI5ODY1QTMwRkJDL0ViRGtyZi00SEtH cWhPd0lWb0tjMkRvR1ZlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAq35rxM09zFssByOLyJfyZJMaXqBj0D09Rif81dvkatntZERa45vFVVnn/hpsZ 0pbZUDF9Uq4Ea4j2zg42w9TAa7Oicw+NxXY46DZMbjySgnizLicpsVf6bVsmPhMp 857n8IDLkAKw/9UmOnsE7MY8N7B6Non3V92wJRlcKyjes0eKNbwVFjfnoNnWNMGr yhQmvLtxVmxGPydVAjCNqUfMRrHL9dGDVyDs91Qir/j2czS9/CQ7RmmC2XXZqA0P gZb7wUU2vK0eeFVKcbOtPkY8UYxPGBA7HOd98dVJz/hRi4IEbZrHRew8eyLJ2Y9b +x6GNr0tYlr0hq9YEznqxaEQ -----END CERTIFICATE-----Generated at Wed Oct 21 04:39:25 2026 by rpki-client