$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: K1W5E00iqSKZS6fDjWB5N3G/cOWzraNzB98wlmUeBuo= Subject key identifier: 47:15:F7:0C:D6:FB:25:93:F0:2A:95:20:76:C4:D2:C1:10:65:0E:DB Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 042D Signing time: Sun 05 Apr 2026 00:06:35 +0000 Manifest this update: Sun 05 Apr 2026 00:06:35 +0000 Manifest next update: Sun 12 Apr 2026 00:06:35 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: n8mIaboAmhqZxYnvYwEDTanFI9yk6QB+Uqs0b9ZBxEk=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: jD+RZZ+awTn3b0dsK5nF4kAR3h29O9n6oxGPNxy3s7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Apr 5 00:06:35 2026 GMT Not After : Apr 12 00:06:35 2026 GMT Subject: CN=69d1a78b-9f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c4:ea:20:bb:4b:b7:21:26:61:4b:1c:77:7e: 42:f2:99:1b:38:a2:59:26:b2:38:9c:df:ab:3d:4d: 65:a0:f3:a5:bd:a2:79:f0:c1:54:d3:db:ce:8e:47: 56:93:a7:b2:95:ad:a6:8c:31:3a:4e:b8:16:3b:2b: 7c:49:f5:bd:62:40:3a:8b:17:30:79:e7:ef:1d:58: 99:f4:15:e2:81:5b:76:52:3e:0f:94:64:b5:60:da: cc:64:89:7d:cd:4b:f5:01:99:c3:d1:9a:3c:12:90: 37:dd:b0:d5:c1:11:8e:8e:ec:d6:1a:bd:9b:c0:63: 53:64:cb:be:c9:6d:71:97:1b:97:b9:5b:f7:20:18: f3:4f:d1:1f:64:35:36:df:c3:61:9f:3f:70:c2:e4: 6f:a1:4e:5e:36:f3:1d:00:df:86:93:e6:46:a0:6d: dc:fb:5e:44:d6:5f:d7:80:2c:b7:fb:c1:73:13:05: c1:a7:8d:18:51:54:ce:9a:e1:1e:a1:72:2d:3c:df: 24:7e:85:53:e6:78:05:3f:70:e2:6b:79:82:36:21: 7c:c2:7a:fc:72:b5:ad:ea:4d:93:f8:a9:d5:ac:2e: 2f:79:31:a2:43:bd:d5:36:18:be:9c:44:2b:e9:cf: 5b:d5:51:98:4e:fc:30:cf:89:6c:9d:c1:ab:0b:a5: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:15:F7:0C:D6:FB:25:93:F0:2A:95:20:76:C4:D2:C1:10:65:0E:DB X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e7:b3:b3:e8:a4:3d:ba:e3:8b:85:9f:6e:86:c5:29:da:a1: 5e:78:e8:56:86:2f:42:aa:e3:e1:25:34:f1:f9:c6:7d:ab:b7: dd:53:05:49:2f:1c:92:d4:48:dd:51:ed:b8:65:d7:28:ff:b0: 6b:99:bd:fe:bd:57:ba:10:cf:6e:bc:ca:4e:f2:10:46:a6:07: 61:3a:02:90:4a:07:19:8c:22:30:a7:b1:92:b5:89:51:fb:df: 03:6b:82:47:3c:9d:bd:3c:64:5d:93:71:dd:25:c8:93:e8:9e: fa:41:fe:ae:24:2c:99:f6:20:bd:02:4b:99:7f:27:c7:e1:43: 64:cf:f0:a1:06:60:8a:52:1b:4c:22:e0:17:2f:1b:ae:05:dc: 1a:e3:7f:fb:0e:56:f6:96:53:9b:3c:4d:71:8c:74:23:75:d0: 34:e9:05:8f:a1:8b:d4:e6:ba:e3:e2:c4:43:43:4d:27:7b:48: f4:66:ad:22:e7:4c:29:34:75:47:b2:b9:fa:9a:11:32:e0:ba: 98:0a:7d:a0:5e:73:45:27:bd:c4:90:51:f7:ab:7e:aa:99:f0: 44:ae:6c:b9:ed:18:dc:1b:13:e4:94:21:96:ed:58:9a:6a:70: a3:af:06:d4:2d:1a:dd:21:a8:26:40:19:dc:cc:78:1a:36:c8: f4:a5:c5:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjYwNDA1MDAwNjM1WhcNMjYwNDEyMDAwNjM1WjAYMRYwFAYD VQQDEw02OWQxYTc4Yi05ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cTqILtLtyEmYUscd35C8pkbOKJZJrI4nN+rPU1loPOlvaJ58MFU09vOjkdW k6eyla2mjDE6TrgWOyt8SfW9YkA6ixcweefvHViZ9BXigVt2Uj4PlGS1YNrMZIl9 zUv1AZnD0Zo8EpA33bDVwRGOjuzWGr2bwGNTZMu+yW1xlxuXuVv3IBjzT9EfZDU2 38Nhnz9wwuRvoU5eNvMdAN+Gk+ZGoG3c+15E1l/XgCy3+8FzEwXBp40YUVTOmuEe oXItPN8kfoVT5ngFP3Dia3mCNiF8wnr8crWt6k2T+KnVrC4veTGiQ73VNhi+nEQr 6c9b1VGYTvwwz4lsncGrC6UM6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcV9wzW +yWT8CqVIHbE0sEQZQ7bMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhOezs+ikPbrji4WfbobFKdqhXnjoVoYvQqrj4SU08fnGfau33VMFSS8cktRI 3VHtuGXXKP+wa5m9/r1XuhDPbrzKTvIQRqYHYToCkEoHGYwiMKexkrWJUfvfA2uC RzydvTxkXZNx3SXIk+ie+kH+riQsmfYgvQJLmX8nx+FDZM/woQZgilIbTCLgFy8b rgXcGuN/+w5W9pZTmzxNcYx0I3XQNOkFj6GL1Oa64+LEQ0NNJ3tI9GatIudMKTR1 R7K5+poRMuC6mAp9oF5zRSe9xJBR96t+qpnwRK5sue0Y3BsT5JQhlu1Ymmpwo68G 1C0a3SGoJkAZ3Mx4GjbI9KXFLA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:23 2026 by rpki-client