$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json) Hash identifier: Qp2Y9bQYVeLh91ON/Vx8TcbKTo137ipyS4YxXBmx7pc= Subject key identifier: 92:E5:3E:E5:84:21:2B:E4:84:72:63:FE:77:61:5F:EA:A4:83:84:7F Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft Manifest number: 013C Signing time: Fri 17 Apr 2026 05:03:19 +0000 Manifest this update: Fri 17 Apr 2026 05:03:19 +0000 Manifest next update: Fri 24 Apr 2026 05:03:19 +0000 Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: m8HR9Q8MXwI+VQbhvzr0mS/CX01+cxzH1mEsb9r5j0s=) 2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: sWmhw22xeirzBkTQzvvE9hJncBsWONWyuiN7pZYxdxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Validity Not Before: Apr 17 05:03:19 2026 GMT Not After : Apr 24 05:03:19 2026 GMT Subject: CN=69e1bf17-1045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:db:5f:88:1b:ea:e9:4c:96:9b:ae:76:5c: ea:48:10:6e:8f:96:ff:95:d7:58:49:85:2f:69:b5: 42:32:c0:4d:50:94:ca:f0:4d:cf:6f:1d:da:71:a3: b2:d7:83:a6:fd:1f:20:08:04:7c:8a:f8:f1:33:91: 47:18:b9:08:3a:93:a6:ea:76:5a:9c:ed:17:96:83: 86:14:bd:c8:04:ad:17:06:48:0f:6a:ad:92:b5:ff: 79:02:ed:0c:f0:54:8e:b6:d4:21:ea:01:16:2e:50: 92:7b:a0:68:ee:e3:bf:a2:03:05:1c:a4:8f:aa:92: 33:10:12:a7:66:f0:b0:2a:61:65:03:bd:d4:b8:15: c1:04:cb:4c:58:b0:1c:70:2e:23:c6:8c:e1:d9:58: 62:f1:b7:ce:fa:62:f5:a6:1b:b1:0f:36:7a:1c:ed: be:84:36:30:e3:34:9b:b4:a2:e3:c1:a2:19:bf:db: 8d:70:c1:72:6b:ed:57:99:8f:f6:0f:77:70:3a:72: c1:30:54:6e:61:53:60:27:f8:2c:f2:fc:56:0b:0e: ec:5c:04:8b:83:0c:bd:ab:9f:bc:61:06:a4:1a:40: 4a:62:57:96:51:60:42:ed:51:c1:31:0a:f4:d4:f1: b3:be:a8:bc:2b:df:b1:f9:57:8c:38:c1:77:fc:2b: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E5:3E:E5:84:21:2B:E4:84:72:63:FE:77:61:5F:EA:A4:83:84:7F X509v3 Authority Key Identifier: keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:18:a6:ed:86:8f:ce:7a:37:23:75:9a:6f:9a:86:b9:2e:d9: c1:1f:b3:fa:cf:4b:37:15:da:60:e5:e0:71:86:ca:fb:00:c8: 52:c2:0b:c9:2e:f6:f3:7c:67:58:2b:e0:44:0a:ee:9b:69:58: 19:f0:bc:a5:66:ae:87:e9:ab:1b:fc:41:32:b7:fd:1e:d9:3f: 9a:37:d2:01:4f:de:a8:4f:28:8e:2a:cb:61:75:34:98:c9:b4: 62:31:dc:98:19:61:d4:41:70:9b:b7:98:b9:16:be:3d:ed:b8: 27:ef:15:57:4b:95:17:fd:7f:3a:12:b9:00:5b:58:cb:9a:06: da:f0:32:5f:19:66:b2:10:12:24:d7:8e:c4:d4:f1:a3:aa:97: 6c:93:6b:68:2f:8f:5d:49:02:38:cb:fd:fc:3a:ca:35:2f:d6: 6e:33:fb:2c:c6:9c:93:fc:a4:30:0d:5c:88:14:20:7f:b9:90: d6:d8:51:e7:07:4c:6e:93:5e:ba:f9:ce:ac:61:94:a3:d3:d5: b4:ad:db:e0:1e:dd:23:5b:46:22:8d:8c:99:86:9a:02:7d:df: 49:6e:f1:26:c6:a8:4c:95:f0:17:93:fe:d8:65:19:1f:5b:d3: 49:7e:ba:69:c8:bf:0c:df:b5:57:71:bc:53:9a:23:86:d7:bc: ab:18:59:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDExNkYwQTJBNkE0QjkyNDJENzdBMjUwQjcxNzAwODE1 RDI5OEREQjkwHhcNMjYwNDE3MDUwMzE5WhcNMjYwNDI0MDUwMzE5WjAYMRYwFAYD VQQDEw02OWUxYmYxNy0xMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKfbX4gb6ulMlpuudlzqSBBuj5b/lddYSYUvabVCMsBNUJTK8E3Pbx3acaOy 14Om/R8gCAR8ivjxM5FHGLkIOpOm6nZanO0XloOGFL3IBK0XBkgPaq2Stf95Au0M 8FSOttQh6gEWLlCSe6Bo7uO/ogMFHKSPqpIzEBKnZvCwKmFlA73UuBXBBMtMWLAc cC4jxozh2Vhi8bfO+mL1phuxDzZ6HO2+hDYw4zSbtKLjwaIZv9uNcMFya+1XmY/2 D3dwOnLBMFRuYVNgJ/gs8vxWCw7sXASLgwy9q5+8YQakGkBKYleWUWBC7VHBMQr0 1PGzvqi8K9+x+VeMOMF3/Cu+awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLlPuWE ISvkhHJj/ndhX+qkg4R/MB8GA1UdIwQYMBaAFBFvCipqS5JC13olC3FwCBXSmN25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GNTMxRURFNDVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtrTFhlaVVMY1hBSUZkS1kz YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtr TFhlaVVMY1hBSUZkS1kzYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfhim7YaPzno3I3Wab5qGuS7ZwR+z+s9LNxXaYOXgcYbK+wDIUsILyS7283xn WCvgRArum2lYGfC8pWauh+mrG/xBMrf9Htk/mjfSAU/eqE8ojirLYXU0mMm0YjHc mBlh1EFwm7eYuRa+Pe24J+8VV0uVF/1/OhK5AFtYy5oG2vAyXxlmshASJNeOxNTx o6qXbJNraC+PXUkCOMv9/DrKNS/WbjP7LMack/ykMA1ciBQgf7mQ1thR5wdMbpNe uvnOrGGUo9PVtK3b4B7dI1tGIo2MmYaaAn3fSW7xJsaoTJXwF5P+2GUZH1vTSX66 aci/DN+1V3G8U5ojhte8qxhZQA== -----END CERTIFICATE-----Generated at Sat Apr 18 00:00:36 2026 by rpki-client