$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: mNT6PiJvOHS/lQe62zqOD+QFYsw20gJc5Fdr82+GIeg= Subject key identifier: BB:0E:24:C3:A7:5C:70:F3:4F:CF:CE:BB:69:36:F0:55:18:E9:85:22 Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0C30 Signing time: Thu 16 Apr 2026 18:42:44 +0000 Manifest this update: Thu 16 Apr 2026 18:42:44 +0000 Manifest next update: Thu 23 Apr 2026 18:42:44 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: Wb0NPdJah1VHv3JIWGPUlnC2egfeqEGlXkQkEDbfsoc=) 2: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: PVNVIsAGF4iLu1l85ogTKaGXUTCHGrR1d4s3DuDaU/s=) 3: CEFDECF850B011F0B9262D4FC4F9AE02.roa (hash: M7Twy19LjGj2zYAkQBPKqFxpHK+7jtbWBpYW+TQys+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Apr 16 18:42:44 2026 GMT Not After : Apr 23 18:42:44 2026 GMT Subject: CN=69e12da4-383c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:f1:32:af:ab:90:00:72:10:d9:c7:d4:f2: 80:c8:0f:4c:2c:a3:39:db:5f:a6:94:d4:08:a3:4b: b4:00:be:69:92:fc:7e:3b:f2:58:5a:9b:47:bf:2b: 14:28:78:62:26:fe:ec:5e:cf:f9:76:20:dc:bb:62: b5:f7:58:04:e2:3b:7a:c5:56:5f:f9:78:24:97:ad: ff:9e:b2:6a:eb:68:2c:c2:86:19:2a:d3:07:b3:ec: 11:cb:72:6f:34:b1:d7:ac:48:a2:e4:d0:12:74:3f: e0:05:eb:64:32:25:57:f7:e3:51:22:ca:ec:09:12: 06:e3:c8:db:cc:c4:08:2e:35:bf:0b:38:bb:92:11: fb:aa:e2:5a:71:e7:48:07:11:1b:1e:e2:0b:66:e3: 70:61:f1:43:6c:6d:58:83:48:d2:b4:a3:76:fb:c4: 7c:e0:7d:07:24:ef:2a:b1:d3:8f:ce:e2:61:cc:70: 43:0a:c0:56:a4:57:b6:8c:57:0b:55:9f:43:f8:7f: 21:dd:61:fe:ce:fe:21:a6:ce:22:93:e0:95:e1:22: 18:2b:e9:8a:e9:84:84:75:ff:d5:b7:d1:a9:4c:fd: 71:a2:62:64:c2:30:78:d9:76:9e:a7:63:f3:9a:61: 8c:50:c9:40:a9:bb:b1:4c:97:ad:75:ae:c6:8d:80: 0d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:24:C3:A7:5C:70:F3:4F:CF:CE:BB:69:36:F0:55:18:E9:85:22 X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:87:e3:a5:4c:2c:4a:56:53:52:ea:a2:bb:83:78:ed:16:d7: aa:d8:4f:92:49:87:34:ca:2b:26:bc:a7:e2:0c:8e:7b:87:01: 0a:f3:15:4f:b1:ce:10:21:86:d5:84:90:d4:9d:ad:6d:22:e6: 0c:0c:ce:b3:41:ca:c9:2c:a3:2f:35:f8:6d:6f:bf:07:d9:c0: 7c:e3:02:b7:1f:23:14:27:b7:e9:27:d2:55:c0:57:6d:8a:48: 99:45:55:9a:9c:7f:b7:5f:db:ce:b3:e2:f0:99:f1:57:98:3c: 6a:25:b6:1b:47:41:2b:c4:ad:06:68:7d:f4:d9:bd:90:6f:a2: a6:48:0a:b0:46:9f:fc:a5:4e:73:6c:3c:4e:f0:14:da:7c:6d: 33:d2:9a:18:37:54:91:50:5f:3e:ca:8f:1f:0f:98:a8:b9:94: 24:5f:d9:7a:3c:15:3e:5e:88:ad:11:70:6a:e7:f2:ae:5c:0c: a9:21:07:cb:53:f6:b0:be:a9:da:42:58:09:4f:16:54:f0:e3: b9:b3:d8:ea:eb:3e:62:97:dd:61:9d:63:24:c2:18:9f:bc:02: ad:b7:e5:bb:3a:7b:c6:0e:9d:2f:bf:c9:63:0e:a9:3b:cd:7a: aa:4b:6e:4a:2b:eb:26:48:7c:e1:38:98:6c:13:10:89:84:54: 94:6b:31:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjYwNDE2MTg0MjQ0WhcNMjYwNDIzMTg0MjQ0WjAYMRYwFAYD VQQDEw02OWUxMmRhNC0zODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8LxMq+rkAByENnH1PKAyA9MLKM521+mlNQIo0u0AL5pkvx+O/JYWptHvysU KHhiJv7sXs/5diDcu2K191gE4jt6xVZf+Xgkl63/nrJq62gswoYZKtMHs+wRy3Jv NLHXrEii5NASdD/gBetkMiVX9+NRIsrsCRIG48jbzMQILjW/Czi7khH7quJacedI BxEbHuILZuNwYfFDbG1Yg0jStKN2+8R84H0HJO8qsdOPzuJhzHBDCsBWpFe2jFcL VZ9D+H8h3WH+zv4hps4ik+CV4SIYK+mK6YSEdf/Vt9GpTP1xomJkwjB42Xaep2Pz mmGMUMlAqbuxTJetda7GjYANUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsOJMOn XHDzT8/Ou2k28FUY6YUiMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqYfjpUwsSlZTUuqiu4N47RbXqthPkkmHNMorJryn4gyOe4cBCvMVT7HOECGG 1YSQ1J2tbSLmDAzOs0HKySyjLzX4bW+/B9nAfOMCtx8jFCe36SfSVcBXbYpImUVV mpx/t1/bzrPi8JnxV5g8aiW2G0dBK8StBmh99Nm9kG+ipkgKsEaf/KVOc2w8TvAU 2nxtM9KaGDdUkVBfPsqPHw+YqLmUJF/ZejwVPl6IrRFwaufyrlwMqSEHy1P2sL6p 2kJYCU8WVPDjubPY6us+YpfdYZ1jJMIYn7wCrbfluzp7xg6dL7/JYw6pO816qktu SivrJkh84TiYbBMQiYRUlGsxKw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:05:44 2026 by rpki-client