$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: dJgjST9I5sqdrfviBBVBROiDiPf8GP5rr8LjvW756zw= Subject key identifier: F0:6B:00:8F:3C:BC:76:9F:E4:83:97:6E:AE:E2:A3:7D:F0:E3:46:EE Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0F14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0F0C Signing time: Sat 04 Apr 2026 17:28:11 +0000 Manifest this update: Sat 04 Apr 2026 17:28:11 +0000 Manifest next update: Sat 11 Apr 2026 17:28:11 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: 1g+nuo+r2phcRd+xcJyU9BjMrpACKaY37ojjSvwwzU0=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: VIZdhiYSpiKQJVRkddgrRD+Jy12svVReopMn7lF4O6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3860 (0xf14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Apr 4 17:28:11 2026 GMT Not After : Apr 11 17:28:11 2026 GMT Subject: CN=69d14a2b-b388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b9:e7:dc:2e:17:d7:ca:f4:4b:2f:82:68:47: 78:9e:83:d9:df:ef:ca:a2:35:92:b6:11:97:0d:01: 6a:42:d9:26:f0:74:74:7e:3f:59:9b:c6:c4:a1:29: 4d:0a:c7:5a:9b:82:22:60:8b:c9:db:0f:fd:a8:b4: 07:0b:82:51:7a:ab:f6:b5:e3:7f:69:35:96:e6:5d: 4b:b1:fb:d8:df:29:43:55:8a:80:d1:68:6f:29:46: 69:d4:88:5b:35:bc:4a:73:8c:d2:05:55:be:da:85: b5:41:be:24:4c:26:98:a5:1a:c9:54:36:31:0d:e5: e2:4e:3f:29:f8:12:1f:e5:34:75:24:ee:71:86:c7: e1:57:d0:4f:aa:36:43:2d:7f:bb:93:5d:e5:af:90: 53:21:ec:fb:69:9a:60:14:c7:a7:e4:69:00:e2:a1: 24:26:76:08:06:d1:85:71:20:20:62:aa:c4:3f:ea: e7:96:ab:85:1a:0c:67:ad:11:70:da:91:03:2d:5c: 62:f5:35:b5:6f:c3:70:f4:63:8b:af:10:db:a9:da: 59:98:bb:8c:25:9d:8f:e3:3b:34:98:88:29:1b:f6: 92:65:06:01:80:19:67:c5:81:8d:87:2c:7f:d6:2f: 9f:7f:66:96:a6:ce:df:b0:82:0b:23:77:d6:81:9a: 45:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6B:00:8F:3C:BC:76:9F:E4:83:97:6E:AE:E2:A3:7D:F0:E3:46:EE X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c9:83:28:62:d4:1f:98:ce:3f:51:39:6a:17:3d:2f:b1:bb: b1:80:80:3d:c2:15:50:db:56:5b:7e:63:2f:66:cd:85:f4:e5: 17:94:90:57:c9:4b:dc:78:d2:a2:e9:ee:53:02:09:cf:86:d5: 1e:99:c4:9e:92:42:7f:04:75:1d:27:27:9f:63:02:11:f7:7e: 7e:d5:ba:29:ec:f6:e6:98:19:c8:bf:be:f5:ae:10:7e:0f:25: c1:06:11:fd:da:0a:1a:16:79:8f:6e:9f:e8:08:5d:9b:b4:bd: b7:fb:2e:2d:08:c2:7e:91:5a:2e:85:de:3b:f0:a1:f6:37:2e: 5f:90:17:f2:fd:7c:ee:6d:9c:3d:79:43:9a:a2:d3:aa:6d:77: 6a:29:e4:e6:6d:ab:7f:2e:d8:97:3c:fd:1e:3c:73:c9:02:56: 6d:d6:cb:4a:23:d6:67:f1:61:ee:14:e0:17:90:9c:b9:2f:bc: c9:a9:bd:dd:27:07:97:3a:cb:62:d4:0c:6b:97:9e:3d:34:db: 77:c9:e8:19:5a:83:95:35:65:a8:37:28:8e:76:40:d2:6c:ed: 6f:a0:ac:c7:fc:21:b0:08:31:e8:5e:9a:b8:b5:c6:fd:8d:a4: 80:b4:88:6b:52:c4:7a:ae:3f:0c:e1:0a:ce:37:c6:ad:0d:7f: be:b5:20:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjYwNDA0MTcyODExWhcNMjYwNDExMTcyODExWjAYMRYwFAYD VQQDEw02OWQxNGEyYi1iMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAirnn3C4X18r0Sy+CaEd4noPZ3+/KojWSthGXDQFqQtkm8HR0fj9Zm8bEoSlN Csdam4IiYIvJ2w/9qLQHC4JReqv2teN/aTWW5l1LsfvY3ylDVYqA0WhvKUZp1Ihb NbxKc4zSBVW+2oW1Qb4kTCaYpRrJVDYxDeXiTj8p+BIf5TR1JO5xhsfhV9BPqjZD LX+7k13lr5BTIez7aZpgFMen5GkA4qEkJnYIBtGFcSAgYqrEP+rnlquFGgxnrRFw 2pEDLVxi9TW1b8Nw9GOLrxDbqdpZmLuMJZ2P4zs0mIgpG/aSZQYBgBlnxYGNhyx/ 1i+ff2aWps7fsIILI3fWgZpFGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBrAI88 vHaf5IOXbq7io33w40buMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeMmDKGLUH5jOP1E5ahc9L7G7sYCAPcIVUNtWW35jL2bNhfTlF5SQV8lL3HjS ounuUwIJz4bVHpnEnpJCfwR1HScnn2MCEfd+ftW6Kez25pgZyL++9a4Qfg8lwQYR /doKGhZ5j26f6Ahdm7S9t/suLQjCfpFaLoXeO/Ch9jcuX5AX8v187m2cPXlDmqLT qm13aink5m2rfy7Ylzz9HjxzyQJWbdbLSiPWZ/Fh7hTgF5CcuS+8yam93ScHlzrL YtQMa5eePTTbd8noGVqDlTVlqDcojnZA0mztb6Csx/whsAgx6F6auLXG/Y2kgLSI a1LEeq4/DOEKzjfGrQ1/vrUgBg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:01:20 2026 by rpki-client