$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: rOTIYjpSmtMAZSvYJNy5gEi1VnSsf7H2TagPE1cyDkE= Subject key identifier: A2:7A:5B:31:FA:26:4F:65:86:CF:1A:CC:1D:33:6C:54:F0:78:3C:9E Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 025A Signing time: Fri 17 Apr 2026 01:59:52 +0000 Manifest this update: Fri 17 Apr 2026 01:59:51 +0000 Manifest next update: Fri 24 Apr 2026 01:59:51 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: 0i7bNzOl/5z026V5ZoSfGDT/UkxboX12DU75oGghKRQ=) 2: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=) 3: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Apr 17 01:59:51 2026 GMT Not After : Apr 24 01:59:51 2026 GMT Subject: CN=69e19418-0cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:91:b7:4e:8d:7b:52:5b:ff:ec:ee:f1:5a: c6:7d:2f:75:f9:4b:bd:17:a9:db:2c:09:b3:67:de: 9d:e0:15:1f:cf:af:95:7c:a1:43:62:50:de:35:c6: cc:1b:80:77:02:89:99:0b:13:66:e5:88:d2:f3:04: 9f:4c:99:64:79:e6:c5:2d:e4:3a:15:a8:8c:b9:94: 88:7d:f7:ae:32:2c:45:3c:10:59:19:ac:d5:e8:c5: 92:31:a4:1c:74:12:62:85:19:00:94:e3:67:eb:1b: 1e:48:0d:0a:1f:83:1d:0f:3a:0a:2b:3e:98:44:8e: ee:54:67:4e:90:6e:40:8e:a4:66:6d:1e:07:58:22: be:30:98:99:db:eb:91:3a:2b:05:dc:d9:bf:5e:6d: 4e:78:b5:c4:76:3e:c9:51:08:81:22:bf:07:8f:98: 28:63:13:de:50:65:7b:9b:f5:e4:1d:ca:3b:b1:73: d0:2d:b0:4d:27:42:09:dc:82:91:5f:d9:c9:8a:56: 32:4c:c7:f6:f1:41:75:85:ed:e6:74:48:ce:ae:93: 9f:8a:38:4c:8d:f1:7d:f8:7c:3a:dd:6a:e9:77:89: 4c:c1:ce:e4:cf:e4:60:2b:31:b4:ac:c8:fb:d4:08: 8f:17:7c:b3:41:fb:5b:a8:1c:9d:72:1a:69:ad:b0: 96:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7A:5B:31:FA:26:4F:65:86:CF:1A:CC:1D:33:6C:54:F0:78:3C:9E X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:a2:3a:b6:36:50:7d:91:5b:4c:e2:51:f7:2b:27:af:78:9e: 57:57:cc:0f:bf:d6:eb:05:96:fb:9c:2d:1e:e8:b3:6b:82:93: 1e:2b:0d:63:bb:74:dc:22:8c:d2:61:ca:95:5b:52:be:73:e7: 48:38:bc:a5:3f:67:9f:96:ca:e9:36:68:f8:94:5b:d4:9d:ce: b5:57:43:65:31:fe:ac:4f:c5:23:24:5f:3e:e7:7d:77:1d:13: fa:14:c3:48:f6:f2:6b:72:9b:72:c8:9e:bb:8e:c9:53:a4:0a: e1:3b:af:16:50:74:ba:43:df:cb:18:63:d7:7c:52:97:ec:4f: 6b:5c:51:35:81:82:19:57:1d:17:b6:46:0c:d7:2c:ae:3c:14: f1:1c:6d:b9:bc:98:a3:de:a4:86:66:c0:ff:44:39:61:a8:1c: 17:a7:7d:db:3f:2d:77:7b:b8:a5:92:eb:4c:47:1a:2f:ab:a1: 73:1d:55:89:46:8a:bb:fb:23:7c:f7:66:92:1a:b0:f7:06:ae: a7:4e:41:43:9c:1f:1c:76:89:96:da:7d:66:f9:4e:e7:03:b9: b0:25:e4:21:8c:a3:88:fe:4b:60:bc:64:92:97:f0:72:af:6c: f0:b8:8d:d5:bc:7f:da:8e:40:4a:5a:68:05:6d:9c:db:29:08: bc:10:59:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjYwNDE3MDE1OTUxWhcNMjYwNDI0MDE1OTUxWjAYMRYwFAYD VQQDEw02OWUxOTQxOC0wY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdiRt06Ne1Jb/+zu8VrGfS91+Uu9F6nbLAmzZ96d4BUfz6+VfKFDYlDeNcbM G4B3AomZCxNm5YjS8wSfTJlkeebFLeQ6FaiMuZSIffeuMixFPBBZGazV6MWSMaQc dBJihRkAlONn6xseSA0KH4MdDzoKKz6YRI7uVGdOkG5AjqRmbR4HWCK+MJiZ2+uR OisF3Nm/Xm1OeLXEdj7JUQiBIr8Hj5goYxPeUGV7m/XkHco7sXPQLbBNJ0IJ3IKR X9nJilYyTMf28UF1he3mdEjOrpOfijhMjfF9+Hw63Wrpd4lMwc7kz+RgKzG0rMj7 1AiPF3yzQftbqBydchpprbCWPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJ6WzH6 Jk9lhs8azB0zbFTweDyeMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIaI6tjZQfZFbTOJR9ysnr3ieV1fMD7/W6wWW+5wtHuiza4KTHisNY7t03CKM 0mHKlVtSvnPnSDi8pT9nn5bK6TZo+JRb1J3OtVdDZTH+rE/FIyRfPud9dx0T+hTD SPbya3Kbcsieu47JU6QK4TuvFlB0ukPfyxhj13xSl+xPa1xRNYGCGVcdF7ZGDNcs rjwU8RxtubyYo96khmbA/0Q5YagcF6d92z8td3u4pZLrTEcaL6uhcx1ViUaKu/sj fPdmkhqw9waup05BQ5wfHHaJltp9ZvlO5wO5sCXkIYyjiP5LYLxkkpfwcq9s8LiN 1bx/2o5ASlpoBW2c2ykIvBBZYg== -----END CERTIFICATE-----Generated at Fri Apr 17 04:20:21 2026 by rpki-client