$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: wMjdUak5fzR0sTxV/X7qHyU1cIC+fpbYnwqbehyr4bo= Subject key identifier: 93:09:B9:7E:6E:11:8F:F3:DC:F0:76:7D:22:22:3E:AD:A1:C1:8F:79 Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0EBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0EA5 Signing time: Sat 04 Apr 2026 17:35:23 +0000 Manifest this update: Sat 04 Apr 2026 17:35:22 +0000 Manifest next update: Sat 11 Apr 2026 17:35:22 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: xcIQrHKAN/cPqAMPw+Uwa8AZIxOBptuBSxL/+FIiEJo=) 2: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: aigYc/n/JGvIbVIQwDO9bKK+eMUG5TvhV7PY2a5Qs6I=) 3: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: XHrlt6xoD1A14UELLtFlgRu6lNHev3zfVPKKrggxdO4=) 4: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: XQHNZu9WrDOHXcrOnwFedWqMNY7Ym61M7N8j6VKuPNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3774 (0xebe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Apr 4 17:35:22 2026 GMT Not After : Apr 11 17:35:22 2026 GMT Subject: CN=69d14bdb-e5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:78:52:65:18:6c:46:2c:9f:59:46:0b:eb:ce: f1:fa:1f:20:10:36:9f:8c:b9:53:d0:d0:2c:4a:74: 1a:13:e9:a6:36:89:04:4d:e5:4f:ef:b4:f0:f0:f7: 0a:e5:55:ad:19:a9:83:87:87:d1:92:65:dd:de:2a: 55:64:0b:c1:b6:de:87:0c:f2:93:e9:1a:e7:cc:7f: ee:7f:26:57:ff:02:83:f5:c3:2e:c2:52:e1:71:06: 99:5d:e8:f6:64:79:fd:30:d6:88:b0:d5:ce:e3:3f: a9:a5:00:60:94:f4:5b:c5:07:0c:f7:d3:cc:de:5b: 3e:23:d0:97:d9:77:da:17:6f:2a:18:0f:19:81:67: c7:fb:27:1b:e6:c9:2a:8c:5e:c2:7c:87:1a:43:a8: 17:42:bf:2d:40:3e:2f:39:f7:56:6a:3a:ca:65:26: 8e:37:4a:89:48:7e:63:6f:b4:f3:c2:f4:bf:64:6f: ca:da:6b:35:a1:1d:44:5e:c4:93:77:69:a6:5b:6b: fe:d5:38:ea:57:e9:34:c1:36:07:0f:47:d6:89:5c: ce:d8:19:eb:6e:05:7d:e3:66:cc:0f:ef:da:5f:20: 87:e8:99:2b:50:71:18:78:99:43:d1:6a:77:2a:d1: ca:ac:74:8e:e4:3e:95:b0:c9:63:3f:fc:f1:10:de: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:09:B9:7E:6E:11:8F:F3:DC:F0:76:7D:22:22:3E:AD:A1:C1:8F:79 X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:bb:59:de:47:28:3c:7d:94:c0:7e:55:9d:a0:a4:3a:dd:11: 6d:d9:41:4c:f0:ad:a2:9d:52:00:e7:89:3c:17:64:f9:72:2c: e6:83:f2:34:25:67:c1:b8:25:72:2c:8e:f3:17:0d:5a:56:a8: 6f:02:66:48:d5:12:9f:7f:0f:cb:68:55:4e:cb:8c:17:01:3d: 49:41:67:c2:0e:8f:ba:2b:81:59:7e:e5:49:91:fa:92:37:a4: 98:32:e3:bd:23:7b:0e:db:28:66:7f:da:ae:04:be:44:85:ce: 83:f7:dc:3e:75:c2:11:0f:2c:46:f9:a5:32:d5:77:65:8b:1e: fb:79:c0:45:91:e6:a2:f1:de:79:15:19:a9:65:e3:9a:10:9a: 7d:ce:83:c9:27:0a:3c:83:5b:0e:da:90:e1:0c:8e:93:8c:ba: cd:ec:77:66:a1:f5:46:5a:7e:ae:c9:88:01:b3:90:be:66:a8: 1d:10:0d:95:30:8a:0f:34:cb:36:b5:eb:e2:cc:57:59:65:3b: 82:3b:97:40:f9:0e:e8:8c:b2:f8:65:65:f3:f5:f5:19:4d:b4: 13:28:7f:fc:f8:64:39:3d:36:e5:82:52:64:57:03:45:16:d2: 89:c0:39:6c:4a:c7:f6:44:6d:94:98:c1:84:c0:8b:1f:d3:ed: 00:20:b0:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjYwNDA0MTczNTIyWhcNMjYwNDExMTczNTIyWjAYMRYwFAYD VQQDEw02OWQxNGJkYi1lNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nhSZRhsRiyfWUYL687x+h8gEDafjLlT0NAsSnQaE+mmNokETeVP77Tw8PcK 5VWtGamDh4fRkmXd3ipVZAvBtt6HDPKT6RrnzH/ufyZX/wKD9cMuwlLhcQaZXej2 ZHn9MNaIsNXO4z+ppQBglPRbxQcM99PM3ls+I9CX2XfaF28qGA8ZgWfH+ycb5skq jF7CfIcaQ6gXQr8tQD4vOfdWajrKZSaON0qJSH5jb7TzwvS/ZG/K2ms1oR1EXsST d2mmW2v+1TjqV+k0wTYHD0fWiVzO2BnrbgV942bMD+/aXyCH6JkrUHEYeJlD0Wp3 KtHKrHSO5D6VsMljP/zxEN46TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMJuX5u EY/z3PB2fSIiPq2hwY95MB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd7tZ3kcoPH2UwH5VnaCkOt0RbdlBTPCtop1SAOeJPBdk+XIs5oPyNCVnwbgl ciyO8xcNWlaobwJmSNUSn38Py2hVTsuMFwE9SUFnwg6PuiuBWX7lSZH6kjekmDLj vSN7DtsoZn/argS+RIXOg/fcPnXCEQ8sRvmlMtV3ZYse+3nARZHmovHeeRUZqWXj mhCafc6DyScKPINbDtqQ4QyOk4y6zex3ZqH1Rlp+rsmIAbOQvmaoHRANlTCKDzTL NrXr4sxXWWU7gjuXQPkO6Iyy+GVl8/X1GU20Eyh//PhkOT025YJSZFcDRRbSicA5 bErH9kRtlJjBhMCLH9PtACCwjA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:45 2026 by rpki-client