$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: QQu89YHXrmCaP557bE+qrqzXeREO82yl2SP8JpGMKNk= Subject key identifier: 43:DB:26:0C:BC:A3:33:FB:DE:B6:70:29:60:B5:B6:B7:EB:65:D1:67 Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 0129 Signing time: Fri 17 Apr 2026 05:29:44 +0000 Manifest this update: Fri 17 Apr 2026 05:29:43 +0000 Manifest next update: Fri 24 Apr 2026 05:29:43 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: pfI+8UCzrqnds/F4Z7nqCshTFw/mTHEVlv/VrEObRow=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: /KryMHMfzm4mv+PmAUUQ97+ZD6cBoGkFzqrA/qBGskk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Apr 17 05:29:43 2026 GMT Not After : Apr 24 05:29:43 2026 GMT Subject: CN=69e1c548-443b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:84:ae:88:b1:63:bb:df:1f:ba:9f:61:99: 54:2e:b4:86:20:04:71:e9:ac:06:ee:9a:b3:3c:45: d0:90:f9:4d:f1:b1:d0:59:1f:d7:4e:b8:5b:ba:eb: 37:73:cb:00:29:9f:ed:21:6c:ef:41:38:51:1d:fc: 58:34:7c:66:e1:3d:36:fc:00:cf:e0:a0:7e:d6:82: 25:5c:c5:11:2c:c4:78:34:49:99:77:56:e8:2c:e6: 7c:52:b6:d6:d6:4e:6e:d6:f7:d8:19:b3:a8:a9:44: c2:c3:34:f6:a5:a2:51:7d:db:de:fe:93:f7:7f:54: 3b:d3:9e:d1:b8:45:c0:84:52:1e:32:08:c2:35:9b: 6f:cf:9d:f4:09:72:4a:e6:cd:0c:b7:b7:ea:fd:97: 0b:14:40:7c:da:76:c4:1d:28:ac:30:1d:da:f0:2b: d8:cf:db:9c:d2:60:c6:f7:28:48:f5:80:6e:5e:a8: f9:9f:67:64:65:5c:64:85:bd:b7:a4:ee:a8:89:a4: d6:10:14:11:ea:23:90:3b:53:55:f3:b5:c6:9d:47: ae:91:76:a3:a4:b0:e2:0b:c4:1f:12:02:f6:fe:02: 39:36:b0:3e:a8:6e:28:a0:e1:58:fc:a4:e6:aa:e5: ff:54:e2:2f:c9:60:01:bd:80:f0:3d:0e:c8:c3:21: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:26:0C:BC:A3:33:FB:DE:B6:70:29:60:B5:B6:B7:EB:65:D1:67 X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e3:0d:1b:21:ac:3e:79:50:61:d7:fd:12:a1:d0:8a:9b:1e: fb:2c:15:f2:56:9a:0c:6e:7a:66:39:e2:88:47:1b:29:55:e7: 99:3e:2c:93:90:27:9d:99:6c:55:36:56:0e:28:57:81:f8:2b: 40:6f:4e:d9:44:9a:e7:6c:c5:88:92:9b:b7:f6:59:1f:1f:37: 94:98:59:1a:d5:39:58:cc:b2:46:23:a6:78:6c:f4:00:e0:ce: 71:c2:9b:4c:d4:bd:f1:7f:43:aa:93:61:66:ae:b5:5b:fc:e8: 8a:9c:41:7b:97:ff:34:cc:64:84:28:ea:25:77:4e:0e:93:f6: 3c:f9:c3:78:07:18:ff:06:ac:0a:2a:7e:87:95:6c:a5:5c:ae: 9a:4c:df:5d:92:3d:21:71:b0:ea:55:f4:89:3f:3d:36:1f:97: 64:9a:88:e5:09:b4:ba:da:4b:7e:36:4f:76:2f:c0:1a:78:65: b4:ab:6d:f0:a4:fe:df:b1:64:07:14:85:80:5d:92:0d:25:12: bb:e3:02:f7:68:7a:39:37:39:15:b1:f9:21:70:f0:9d:69:f8: b9:94:2c:bc:d8:a7:f6:32:1f:d4:4b:7b:38:9e:2a:5d:5a:c3: dd:be:e7:27:58:82:e1:1b:a6:9c:6c:e8:21:32:30:18:13:e9: ec:4e:5e:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjYwNDE3MDUyOTQzWhcNMjYwNDI0MDUyOTQzWjAYMRYwFAYD VQQDEw02OWUxYzU0OC00NDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqmEroixY7vfH7qfYZlULrSGIARx6awG7pqzPEXQkPlN8bHQWR/XTrhbuus3 c8sAKZ/tIWzvQThRHfxYNHxm4T02/ADP4KB+1oIlXMURLMR4NEmZd1boLOZ8UrbW 1k5u1vfYGbOoqUTCwzT2paJRfdve/pP3f1Q7057RuEXAhFIeMgjCNZtvz530CXJK 5s0Mt7fq/ZcLFEB82nbEHSisMB3a8CvYz9uc0mDG9yhI9YBuXqj5n2dkZVxkhb23 pO6oiaTWEBQR6iOQO1NV87XGnUeukXajpLDiC8QfEgL2/gI5NrA+qG4ooOFY/KTm quX/VOIvyWABvYDwPQ7IwyG/twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPbJgy8 ozP73rZwKWC1trfrZdFnMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE+MNGyGsPnlQYdf9EqHQipse+ywV8laaDG56ZjniiEcbKVXnmT4sk5AnnZls VTZWDihXgfgrQG9O2USa52zFiJKbt/ZZHx83lJhZGtU5WMyyRiOmeGz0AODOccKb TNS98X9DqpNhZq61W/zoipxBe5f/NMxkhCjqJXdODpP2PPnDeAcY/wasCip+h5Vs pVyumkzfXZI9IXGw6lX0iT89Nh+XZJqI5Qm0utpLfjZPdi/AGnhltKtt8KT+37Fk BxSFgF2SDSUSu+MC92h6OTc5FbH5IXDwnWn4uZQsvNin9jIf1Et7OJ4qXVrD3b7n J1iC4RumnGzoITIwGBPp7E5eAg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:46:33 2026 by rpki-client