$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: L7Hv57ytrzcOLA51tBjMRBgxGxxI6+FpAAEkPNyJCrc= Subject key identifier: AF:F2:79:8A:5B:FD:90:E1:95:76:86:26:63:6E:0D:C2:D7:52:89:CD Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 0291 Signing time: Fri 17 Apr 2026 01:27:51 +0000 Manifest this update: Fri 17 Apr 2026 01:27:50 +0000 Manifest next update: Fri 24 Apr 2026 01:27:50 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: ++p55B/BGV1xssL2hvzjDRGjcCeENnJF8/1oBgCq4U8=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: 7oAXnZAUBtQjX3ZHXMNMC7v8KvbechSNV9axONzAjso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Apr 17 01:27:50 2026 GMT Not After : Apr 24 01:27:50 2026 GMT Subject: CN=69e18c97-821f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:a3:48:21:36:10:8a:0b:f5:04:c4:c3:f9: c3:3f:f0:af:15:68:a8:99:eb:34:c8:06:dd:06:e1: 8b:ea:a6:d8:0b:51:e0:bc:ae:bb:bf:99:9e:7d:0b: 20:8d:86:76:f4:9f:2d:ac:b4:34:3e:8d:c5:1e:ac: 2d:44:c4:dd:b3:df:e3:6e:d1:79:e7:06:17:9f:21: ab:f6:72:66:76:07:bb:87:76:70:74:27:18:25:83: ea:81:67:d8:ed:a3:15:4a:2b:59:fa:0a:37:44:25: 1c:32:8f:0b:6d:50:3c:8e:c6:d2:76:12:c4:3c:28: ff:28:f7:10:df:f3:10:d9:92:f9:0f:e1:39:59:75: 3b:c8:75:e0:1c:0c:35:83:1a:26:8d:ae:5f:7b:4c: f2:f8:c4:eb:eb:f1:95:3a:dc:f3:98:57:e3:5c:de: ae:17:97:a1:71:fa:0c:bb:e2:0a:a4:8c:d5:05:06: fa:63:9c:fd:36:13:1c:f0:c6:9c:a8:67:0a:ac:0b: 0a:9d:b2:be:49:e8:b4:fb:06:c4:53:8c:6e:41:5b: 9b:57:2e:9e:42:62:c3:d2:a8:aa:33:8d:22:24:c0: 9c:89:13:5a:83:15:e6:28:ac:88:7a:f7:06:85:41: be:47:61:63:75:a7:53:f4:13:d9:3c:0f:08:28:c7: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F2:79:8A:5B:FD:90:E1:95:76:86:26:63:6E:0D:C2:D7:52:89:CD X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e3:35:8b:3f:1e:55:b6:3a:9d:bd:34:f6:8e:d7:b0:38:69: 5c:74:af:ec:5a:d0:74:8d:fd:eb:5c:3a:fa:4f:aa:77:19:80: e0:f3:8f:f2:c5:50:49:91:01:0f:f8:3c:ef:fc:33:f5:11:46: 0f:eb:47:e5:3b:35:bf:9b:df:5d:20:e6:19:ba:5a:11:b4:20: 07:a5:40:65:0e:e1:d1:0d:90:6a:a8:d5:57:d9:b8:ff:01:f6: b5:d3:94:b3:de:5e:5a:c9:7a:f7:3c:04:e3:0c:10:6f:f0:25: 1a:00:0c:0c:fd:67:18:15:ab:5b:f0:af:ba:99:28:b2:f7:e2: 01:7f:f6:e4:0c:48:8e:3d:11:83:6c:cf:88:49:c1:ba:42:29: 91:df:b8:5f:e5:2c:f4:3f:6d:4f:d8:a8:74:f6:8d:c7:b8:37: aa:54:77:97:5f:fe:06:ee:11:f2:c1:a7:82:d6:da:48:8d:24: 59:28:25:e0:af:1b:8f:07:f4:49:0a:71:dd:24:a0:28:8e:8e: c8:da:9c:67:86:73:24:ae:62:a0:95:22:72:23:e9:2d:db:7d: 26:66:b6:8a:b6:d4:55:14:86:7d:18:55:81:65:e1:29:92:a7: 2b:f0:19:18:cc:01:7b:df:bd:23:95:61:1f:32:08:53:10:a6: 9f:f4:a0:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjYwNDE3MDEyNzUwWhcNMjYwNDI0MDEyNzUwWjAYMRYwFAYD VQQDEw02OWUxOGM5Ny04MjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhwijSCE2EIoL9QTEw/nDP/CvFWiomes0yAbdBuGL6qbYC1HgvK67v5mefQsg jYZ29J8trLQ0Po3FHqwtRMTds9/jbtF55wYXnyGr9nJmdge7h3ZwdCcYJYPqgWfY 7aMVSitZ+go3RCUcMo8LbVA8jsbSdhLEPCj/KPcQ3/MQ2ZL5D+E5WXU7yHXgHAw1 gxomja5fe0zy+MTr6/GVOtzzmFfjXN6uF5ehcfoMu+IKpIzVBQb6Y5z9NhMc8Mac qGcKrAsKnbK+Sei0+wbEU4xuQVubVy6eQmLD0qiqM40iJMCciRNagxXmKKyIevcG hUG+R2FjdadT9BPZPA8IKMdKGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/yeYpb /ZDhlXaGJmNuDcLXUonNMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoeM1iz8eVbY6nb009o7XsDhpXHSv7FrQdI3961w6+k+qdxmA4POP8sVQSZEB D/g87/wz9RFGD+tH5Ts1v5vfXSDmGbpaEbQgB6VAZQ7h0Q2QaqjVV9m4/wH2tdOU s95eWsl69zwE4wwQb/AlGgAMDP1nGBWrW/CvupkosvfiAX/25AxIjj0Rg2zPiEnB ukIpkd+4X+Us9D9tT9iodPaNx7g3qlR3l1/+Bu4R8sGngtbaSI0kWSgl4K8bjwf0 SQpx3SSgKI6OyNqcZ4ZzJK5ioJUiciPpLdt9Jma2irbUVRSGfRhVgWXhKZKnK/AZ GMwBe9+9I5VhHzIIUxCmn/SgLw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:15:23 2026 by rpki-client