$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json) Hash identifier: a424XH9NeB68ZN/YEHcRBuf3pphtFSPZu3zUNoN5HUw= Subject key identifier: 1E:BC:98:49:64:66:B4:21:3F:12:6C:88:78:6E:4E:14:F3:8E:BF:2E Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft Manifest number: 080B Signing time: Mon 02 Mar 2026 01:21:06 +0000 Manifest this update: Mon 02 Mar 2026 01:21:05 +0000 Manifest next update: Mon 09 Mar 2026 01:21:05 +0000 Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: wVv5dHDR8+j5i0AEXCsoqCYUzqGkdN2d212zk5YK8yw=) 2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: 6xwmJlbl5R7pahb4ie5zQu29OXgagY1TGzpA5chMv/s=) 3: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: lZyF/R0McwFHmab4BMeqcfU4ondgRb50VNMndNfEtsE=) 4: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: wZxfcnKBY6ws0g5Xj8YXKxzQCzDk14hq7Z5XlyYaNyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Validity Not Before: Mar 2 01:21:05 2026 GMT Not After : Mar 9 01:21:05 2026 GMT Subject: CN=69a4e602-20e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:b5:03:aa:98:be:f8:50:7c:59:19:02:ab: 68:a2:ad:1b:9a:c1:70:ed:14:bb:86:15:ee:75:54: 04:4f:35:c1:02:72:9e:1c:5d:40:b5:0e:9a:23:f3: d6:ed:21:7e:86:a2:36:f4:f8:b4:b0:b8:fc:af:af: 5e:c9:9d:28:83:e5:c2:f3:3c:ca:15:46:07:0c:4e: 6c:f9:e3:10:27:3b:89:6b:a6:c8:19:05:3e:b6:2d: 14:33:14:b7:5f:8e:72:00:09:04:d3:d1:0a:07:7a: 79:37:24:a9:f0:31:c1:c5:fc:3c:7f:79:23:de:3d: 4d:8c:e9:5e:55:a1:2c:83:6b:48:e1:01:d9:5c:04: 93:3e:66:e8:27:40:bd:63:d0:00:a2:cd:a9:2f:73: 54:df:45:bf:1e:97:80:ae:ad:ea:b5:66:b6:a0:41: 22:13:c2:a0:72:d0:7a:21:e5:c1:3f:51:9a:5e:24: 4f:73:6f:1c:22:34:4c:80:67:c0:07:94:c2:60:a4: dd:52:e5:01:d8:4a:8b:9f:cb:c7:16:2e:14:a7:c5: 93:12:69:58:0d:5f:2a:33:1b:69:26:fe:0f:91:ab: df:cb:cf:57:f9:e7:63:28:16:d1:60:77:a2:0b:2f: 4d:88:6e:ec:20:ad:2b:b1:c9:d7:fe:a6:af:ad:b1: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BC:98:49:64:66:B4:21:3F:12:6C:88:78:6E:4E:14:F3:8E:BF:2E X509v3 Authority Key Identifier: keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:1c:73:98:66:97:bb:57:69:08:5a:95:13:73:f3:e6:6c:98: 3b:2f:38:03:0e:00:f5:b7:91:83:e6:01:66:ce:84:d3:7d:36: b6:7f:89:53:1f:d9:e9:ba:70:98:43:05:5d:52:c6:17:61:13: 66:95:bf:58:e2:07:e6:8b:a1:48:58:07:a4:58:0f:f9:20:9b: d2:97:76:67:b4:6d:1c:2d:3b:6b:d2:18:14:43:e0:3e:07:85: d5:8d:ee:ae:84:5c:20:68:d1:b1:2c:9f:5d:3c:7b:79:e8:aa: 84:53:d7:d3:22:00:73:5e:6c:ad:47:e2:a2:c9:dd:ad:d7:73: ca:d4:ff:5f:c0:27:12:9e:da:c2:94:fc:1a:56:1c:ee:5c:b9: 5e:5f:1e:0f:70:41:5f:3f:89:a0:f3:bb:b3:48:9b:a0:8e:7f: 50:b1:7e:08:65:1c:93:dc:df:99:80:51:b4:bf:d4:15:77:3f: 9c:e8:2d:49:0b:69:7d:a8:68:58:3c:24:ae:6b:3b:49:a2:cb: 39:6e:ba:4c:33:b0:22:7d:f8:63:c3:c9:e8:78:54:0e:78:73: 5b:e4:b4:22:87:09:91:27:2a:16:da:f1:d3:b9:c0:ca:a2:24: 7e:a1:a9:a0:8f:c9:fd:68:8e:ce:ba:b4:6e:92:85:a0:f9:cc: f0:39:c7:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NUExMTAvBgNVBAUTKDc4NUUwQkZGMDdCOTAzN0M2MDMzNEIyREYzMzY5Mjgx QTREQzNGNUEwHhcNMjYwMzAyMDEyMTA1WhcNMjYwMzA5MDEyMTA1WjAYMRYwFAYD VQQDEw02OWE0ZTYwMi0yMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10K1A6qYvvhQfFkZAqtooq0bmsFw7RS7hhXudVQETzXBAnKeHF1AtQ6aI/PW 7SF+hqI29Pi0sLj8r69eyZ0og+XC8zzKFUYHDE5s+eMQJzuJa6bIGQU+ti0UMxS3 X45yAAkE09EKB3p5NySp8DHBxfw8f3kj3j1NjOleVaEsg2tI4QHZXASTPmboJ0C9 Y9AAos2pL3NU30W/HpeArq3qtWa2oEEiE8KgctB6IeXBP1GaXiRPc28cIjRMgGfA B5TCYKTdUuUB2EqLn8vHFi4Up8WTEmlYDV8qMxtpJv4Pkavfy89X+edjKBbRYHei Cy9NiG7sIK0rscnX/qavrbFhdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB68mElk ZrQhPxJsiHhuThTzjr8uMB8GA1UdIwQYMBaAFHheC/8HuQN8YDNLLfM2koGk3D9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1QS84ODk0QTcwQTFD NTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEzeGdNMHN0OHphU2dhVGNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGNExfd2U1QTN4Z00wc3Q4emFTZ2FUY1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1QS84ODk0QTcwQTFDNTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEz eGdNMHN0OHphU2dhVGNQMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxBxzmGaXu1dpCFqVE3Pz5myYOy84Aw4A9beRg+YBZs6E0302tn+JUx/Z6bpw mEMFXVLGF2ETZpW/WOIH5ouhSFgHpFgP+SCb0pd2Z7RtHC07a9IYFEPgPgeF1Y3u roRcIGjRsSyfXTx7eeiqhFPX0yIAc15srUfiosndrddzytT/X8AnEp7awpT8GlYc 7ly5Xl8eD3BBXz+JoPO7s0iboI5/ULF+CGUck9zfmYBRtL/UFXc/nOgtSQtpfaho WDwkrms7SaLLOW66TDOwIn34Y8PJ6HhUDnhzW+S0IocJkScqFtrx07nAyqIkfqGp oI/J/WiOzrq0bpKFoPnM8DnHrA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:47 2026 by rpki-client