$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json) Hash identifier: qBMFvdASI+6DHEaUVWsh10hfW1AKbRtJa3zIrDFtz4I= Subject key identifier: 41:CF:1A:01:B0:FB:DD:5B:A5:7C:8C:35:89:68:19:4D:1E:16:02:80 Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37 Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37 Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft Manifest number: 02EB Signing time: Sun 01 Mar 2026 02:09:52 +0000 Manifest this update: Sun 01 Mar 2026 02:09:51 +0000 Manifest next update: Sun 08 Mar 2026 02:09:51 +0000 Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: A22/ohUINt3/I0rutceu5KmRU5aOpsSKHXR4Ti5JOE8=) 2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: JJX6OI5aam7BC0uvlTdjVV9SQAAwhFakRzY5oiIX9Uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37 Validity Not Before: Mar 1 02:09:51 2026 GMT Not After : Mar 8 02:09:51 2026 GMT Subject: CN=69a39ff0-b44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:5f:7f:22:ee:f3:91:31:9b:4d:5e:2d:f9: 2c:81:00:3b:d9:21:d0:92:53:19:26:cc:d4:01:ce: 1d:76:fb:70:c8:10:d1:c7:c3:fa:8d:34:01:ff:ed: bf:f9:93:91:44:10:9e:34:01:ae:b4:3d:bf:c9:c4: 57:95:0e:0b:2e:28:99:06:0c:ca:44:fb:53:ad:3b: 97:83:fd:48:d7:e9:42:89:c1:02:ff:1d:ae:35:16: ad:a0:85:1a:f5:dd:8f:a9:b1:41:86:10:e4:f0:73: b6:f7:54:be:1f:16:b4:ed:33:02:90:f7:c4:fc:b7: 96:47:69:f1:a2:e0:3c:91:eb:a5:9c:75:7c:3d:4a: 53:0e:19:64:fd:6c:4f:34:3a:10:74:87:c4:f0:bd: f4:09:95:a4:d6:46:9f:a6:4a:05:09:4a:a6:bd:2d: 3e:ff:89:e7:44:84:f7:49:86:3f:5a:3c:c5:a7:b0: 95:c5:1d:ec:f4:67:a7:6f:cd:97:c1:5c:22:d4:10: 56:c8:4b:9e:f8:23:90:46:e1:46:2b:01:37:96:ef: c8:0c:b1:76:8c:ec:11:6f:4d:57:1c:36:68:df:e2: 23:5e:b6:32:92:d6:06:94:c0:e4:48:ee:80:12:4c: cf:b0:1d:ec:26:5f:d0:70:63:65:b5:fd:a1:9c:1c: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CF:1A:01:B0:FB:DD:5B:A5:7C:8C:35:89:68:19:4D:1E:16:02:80 X509v3 Authority Key Identifier: keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5e:d6:6d:c4:79:a4:fa:2a:43:86:9c:82:2a:05:5f:89:6a: 5b:cb:3c:a9:e7:5f:bd:5c:74:17:ff:1b:d5:89:9b:84:67:e1: 46:71:ce:b4:f5:0c:c8:f6:d9:3c:d2:f9:27:ee:90:53:64:a6: 13:dc:01:00:c8:ea:2c:b1:84:23:bf:f0:b2:5e:31:d1:bb:12: ee:ab:72:e0:35:b6:8d:82:4e:b0:2f:03:d6:7f:e9:7a:63:47: 90:ea:75:d5:8a:c3:34:d4:8b:62:af:be:d6:f7:49:89:bf:f7: 5f:c3:5b:71:62:ef:72:4c:39:bc:8f:9f:ce:df:f3:6a:c7:66: 03:78:1c:53:12:7d:94:1b:22:3d:da:1e:e5:57:91:86:3e:94: e1:27:40:79:02:a5:24:ee:ac:98:00:99:91:51:c4:42:10:4a: cf:2f:d5:2c:fd:84:3b:2a:e0:4e:1e:e7:04:d0:7b:f8:f8:72: 16:37:6e:2b:b0:a7:a9:55:19:61:11:b4:ff:7b:84:ad:6a:c3: 04:61:30:28:d7:1d:00:83:4a:37:17:4d:a7:ee:1c:08:15:8b: 50:2a:7b:1a:8e:9c:24:48:c0:3d:9d:60:00:eb:e9:23:c3:4b: ae:8c:3b:00:1c:0d:3d:cc:0c:77:ca:eb:9d:8c:87:f1:3f:8a: 17:cf:21:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQUYxMTAvBgNVBAUTKDdBMTMwNDRBMTExODU4NkMwRkRBMTM4QkIzRUJERDQ4 NDg5MTRFMzcwHhcNMjYwMzAxMDIwOTUxWhcNMjYwMzA4MDIwOTUxWjAYMRYwFAYD VQQDDA02OWEzOWZmMC1iNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqNffyLu85Exm01eLfksgQA72SHQklMZJszUAc4ddvtwyBDRx8P6jTQB/+2/ +ZORRBCeNAGutD2/ycRXlQ4LLiiZBgzKRPtTrTuXg/1I1+lCicEC/x2uNRatoIUa 9d2PqbFBhhDk8HO291S+Hxa07TMCkPfE/LeWR2nxouA8keulnHV8PUpTDhlk/WxP NDoQdIfE8L30CZWk1kafpkoFCUqmvS0+/4nnRIT3SYY/WjzFp7CVxR3s9Genb82X wVwi1BBWyEue+COQRuFGKwE3lu/IDLF2jOwRb01XHDZo3+IjXrYyktYGlMDkSO6A EkzPsB3sJl/QcGNltf2hnBy0yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHPGgGw +91bpXyMNYloGU0eFgKAMB8GA1UdIwQYMBaAFHoTBEoRGFhsD9oTi7Pr3UhIkU43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVBRi80N0Q1QTdFMDE2 QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdHd1AyaE9Mcy12ZFNFaVJU amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VoTUVTaEVZV0d3UDJoT0xzLXZkU0VpUlRqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVBRi80N0Q1QTdFMDE2QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdH d1AyaE9Mcy12ZFNFaVJUamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG17WbcR5pPoqQ4acgioFX4lqW8s8qedfvVx0F/8b1YmbhGfhRnHOtPUMyPbZ PNL5J+6QU2SmE9wBAMjqLLGEI7/wsl4x0bsS7qty4DW2jYJOsC8D1n/pemNHkOp1 1YrDNNSLYq++1vdJib/3X8NbcWLvckw5vI+fzt/zasdmA3gcUxJ9lBsiPdoe5VeR hj6U4SdAeQKlJO6smACZkVHEQhBKzy/VLP2EOyrgTh7nBNB7+PhyFjduK7CnqVUZ YRG0/3uErWrDBGEwKNcdAINKNxdNp+4cCBWLUCp7Go6cJEjAPZ1gAOvpI8NLrow7 ABwNPcwMd8rrnYyH8T+KF88hPg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:25:51 2026 by rpki-client