$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json) Hash identifier: cGQi+2DU2TDZg0hSG49iu1jffNyAx3tm734ISH1ygS8= Subject key identifier: CA:4D:4D:78:C6:0B:A2:6E:44:BF:1E:F9:AE:A1:5A:CD:6D:E9:E0:6D Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft Manifest number: 08B3 Signing time: Thu 16 Apr 2026 20:23:40 +0000 Manifest this update: Thu 16 Apr 2026 20:23:40 +0000 Manifest next update: Thu 23 Apr 2026 20:23:40 +0000 Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: 5ESm3nl2KAxZMVPSQj3LynrXK+rqdIlz/q1wMo4pbE4=) 2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: UM57hSN5aLzJ1miAi0WEBED5Yq0amggNMnfYd46Qpgk=) 3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: IuNSCN6yrNlc/0wSwd/g4xZGin/ZqKczpvImaghk0B4=) 4: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: FzAXOXMg8ypDm7weH1JrGkQxJTnIfLB9Zd0EsKEe/7c=) 5: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: oW2JhsPjI+GKnJ32ROir3XwQDxUOtlZsdWGXqlOBZI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: Apr 16 20:23:40 2026 GMT Not After : Apr 23 20:23:40 2026 GMT Subject: CN=69e1454c-1120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:47:10:a8:93:a7:b1:ee:31:78:df:06:9c: 70:2f:26:1b:3c:27:e5:88:7f:5e:2e:e8:54:b0:c6: 1e:15:5b:9f:96:54:25:76:1a:a9:e5:32:12:1c:8c: 08:67:fd:a4:74:e0:8e:6d:cb:40:44:d9:ba:67:15: d5:0b:60:f4:7c:f6:79:70:8b:9b:e3:d7:b1:bb:1f: 8b:1c:e0:24:7f:56:46:d6:20:22:31:30:b4:16:9b: 67:62:4c:b4:b3:c5:50:67:43:10:25:3d:12:a2:d7: 95:02:2e:b8:ea:bb:26:0e:2f:67:47:bf:3f:12:64: fd:fc:a4:49:55:52:82:02:4e:48:18:e4:c7:ee:ab: b1:da:bc:91:59:bc:cb:20:f5:c1:64:92:27:4e:a1: f9:9d:51:be:97:41:f6:71:2e:ba:ea:34:33:78:8e: e7:58:9a:50:86:d1:21:b7:64:04:b1:46:f0:fe:9a: 1c:50:76:76:2b:d2:be:14:e1:15:3a:e8:b1:b1:8a: fd:0d:47:f8:be:8c:f0:07:17:c0:14:79:b6:a8:81: dc:d5:df:e1:69:ee:9a:c8:b3:61:2d:01:62:5a:e8: 0b:87:44:d6:6b:e1:2a:9e:0a:48:3e:2a:71:ac:8f: d5:9a:ce:36:a0:4f:61:39:f1:cf:4c:57:82:0f:65: 25:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4D:4D:78:C6:0B:A2:6E:44:BF:1E:F9:AE:A1:5A:CD:6D:E9:E0:6D X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6b:79:42:b7:aa:ec:47:6b:8f:a7:ab:8c:3f:4f:92:61:35: 5b:6a:71:13:34:81:b9:0d:78:c6:78:7e:28:b8:0a:7d:f3:46: 65:c8:1d:39:a1:c4:e3:56:bb:01:cd:f5:49:78:f5:90:e5:1a: 7d:27:ed:13:be:cc:05:9a:92:cd:9d:ba:2a:9e:be:a4:77:a3: 1c:ba:9b:6d:04:ed:4c:93:61:78:84:e4:b9:f3:40:66:34:cf: 70:df:3c:42:05:ad:3f:dd:4e:55:4b:80:d4:15:6b:05:19:d9: c7:76:b5:4c:bd:31:9e:bd:20:7f:e9:ff:9e:c8:be:d6:12:7e: 9a:1c:98:58:bf:65:b8:d2:59:15:0a:7f:97:ec:c5:de:9a:7e: 8c:95:36:ea:b2:1f:50:19:02:80:76:97:d7:42:38:9d:ff:1a: f4:97:bf:71:39:74:5f:ac:d1:95:2a:25:86:b3:ab:c7:a4:55: d5:6a:bf:a4:47:9d:e9:3c:13:5e:17:0e:57:6e:2b:77:d8:7e: bf:09:f6:9b:92:0e:43:27:5f:54:6e:ef:ba:4a:86:51:78:4e: 93:9a:b1:47:5c:be:48:6f:a3:81:b1:b9:9b:b7:6e:77:74:c9: c9:78:f2:1c:75:3a:08:66:8b:74:7d:86:48:01:3e:fc:e9:1b: 27:9b:3c:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjYwNDE2MjAyMzQwWhcNMjYwNDIzMjAyMzQwWjAYMRYwFAYD VQQDEw02OWUxNDU0Yy0xMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq5HEKiTp7HuMXjfBpxwLyYbPCfliH9eLuhUsMYeFVufllQldhqp5TISHIwI Z/2kdOCObctARNm6ZxXVC2D0fPZ5cIub49exux+LHOAkf1ZG1iAiMTC0FptnYky0 s8VQZ0MQJT0SoteVAi646rsmDi9nR78/EmT9/KRJVVKCAk5IGOTH7qux2ryRWbzL IPXBZJInTqH5nVG+l0H2cS666jQzeI7nWJpQhtEht2QEsUbw/pocUHZ2K9K+FOEV OuixsYr9DUf4vozwBxfAFHm2qIHc1d/hae6ayLNhLQFiWugLh0TWa+EqngpIPipx rI/Vms42oE9hOfHPTFeCD2UlyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpNTXjG C6JuRL8e+a6hWs1t6eBtMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6 N0I2VWE4RVBnVGRwU2V2c0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM2t5Qreq7Edrj6erjD9PkmE1W2pxEzSBuQ14xnh+KLgKffNGZcgdOaHE41a7 Ac31SXj1kOUafSftE77MBZqSzZ26Kp6+pHejHLqbbQTtTJNheITkufNAZjTPcN88 QgWtP91OVUuA1BVrBRnZx3a1TL0xnr0gf+n/nsi+1hJ+mhyYWL9luNJZFQp/l+zF 3pp+jJU26rIfUBkCgHaX10I4nf8a9Je/cTl0X6zRlSolhrOrx6RV1Wq/pEed6TwT XhcOV24rd9h+vwn2m5IOQydfVG7vukqGUXhOk5qxR1y+SG+jgbG5m7dud3TJyXjy HHU6CGaLdH2GSAE+/OkbJ5s8kA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:03 2026 by rpki-client