$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: Hs3YKH8+Ik3aGu7SEi3hLiv3QnwMUCyiXabWv0Fez8E= Subject key identifier: BF:4C:AC:5C:C9:C4:0C:C4:C8:D3:86:E6:52:59:62:CF:5B:BA:D7:6B Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 0656 Signing time: Thu 16 Apr 2026 22:35:52 +0000 Manifest this update: Thu 16 Apr 2026 22:35:52 +0000 Manifest next update: Thu 23 Apr 2026 22:35:52 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: wVPmGrYRVov15/UYvOZYP378XFNBoinLc3eX+iiTDoA=) 2: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=) 3: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=) 4: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Apr 16 22:35:52 2026 GMT Not After : Apr 23 22:35:52 2026 GMT Subject: CN=69e16448-a5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:97:5d:32:c5:ba:d3:23:e7:5c:8b:3f:13:8d: 88:ad:d4:b4:b5:3e:fe:ad:c8:08:a9:13:07:e3:98: 02:2a:78:e3:71:19:9d:99:92:8f:83:13:d6:35:9b: 08:5a:d3:c1:07:ed:3b:80:08:a1:07:5d:da:6d:06: 66:e6:9a:5e:d3:62:e2:14:11:b2:cf:f0:c8:82:d7: a3:ff:36:e8:c1:0b:9f:f3:d8:48:5e:5d:c6:ff:df: c6:de:9b:94:a9:d7:7b:9c:79:a2:db:8d:93:33:08: c1:c2:81:b1:db:2a:5c:76:97:d8:89:f0:34:f2:09: fb:e0:d9:13:00:5a:dc:0d:e5:0a:5e:41:ec:e9:05: 2f:d4:b7:24:54:fb:5a:2a:c0:51:b0:f9:e2:88:47: b2:76:5e:5a:ae:cc:80:56:2d:98:8c:7d:56:84:74: c9:46:96:16:90:4d:cf:29:a4:8c:b1:92:a8:de:b7: c6:b5:12:20:fb:d7:c2:c5:15:d6:03:6d:98:4d:c5: b6:a2:e2:cc:46:2e:d1:05:5c:2c:e3:70:53:08:3a: a5:a2:62:4c:85:b8:29:a5:22:bd:fe:c4:a1:6d:32: 80:01:1d:04:28:7b:af:8c:98:c0:58:38:23:94:0a: a9:be:01:dd:bc:f5:88:0f:8a:5c:5c:cd:f6:e8:c1: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4C:AC:5C:C9:C4:0C:C4:C8:D3:86:E6:52:59:62:CF:5B:BA:D7:6B X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0c:43:86:ae:ea:a1:48:b8:c5:1f:73:93:ae:30:31:f9:96: 5a:97:f7:0d:91:55:cc:70:99:6a:95:29:ac:1c:94:40:f9:d5: 07:0f:6c:ea:34:8a:cd:be:e8:20:ea:6f:19:34:f5:77:a8:99: ee:e2:03:11:30:f8:f9:5f:e9:52:83:c9:e1:98:c0:d6:f2:13: fc:ef:f3:1f:33:17:66:36:b6:58:4e:e7:23:34:e3:a4:f9:25: 0d:9a:4b:27:7c:90:33:09:3a:75:8d:41:12:7e:24:b6:0a:44: db:b4:f2:45:68:4f:ab:6c:a2:0b:c5:d7:13:f2:cc:b5:fc:64: 28:09:9a:b0:87:a3:13:7b:73:fa:be:b0:47:b0:21:b2:63:fa: 36:67:57:c9:ca:b9:71:89:43:c1:a3:24:e7:9a:dc:6e:e5:e1: 5d:a8:8d:70:f7:18:87:3b:1b:27:0c:4c:36:f0:e6:b8:da:d5: 68:33:32:bd:97:85:b2:80:38:fe:34:c4:af:66:d5:18:a1:df: 55:24:c4:ef:c2:68:d3:93:9d:da:83:ab:0b:89:87:40:aa:f8: 3a:10:9b:86:ff:bc:d9:5f:a6:5f:b1:75:5f:0f:5c:59:b6:ff: 2a:00:68:1c:74:67:40:dc:c4:d7:77:a3:44:63:d9:78:cc:91: a2:00:1e:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYwNDE2MjIzNTUyWhcNMjYwNDIzMjIzNTUyWjAYMRYwFAYD VQQDEw02OWUxNjQ0OC1hNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh5ddMsW60yPnXIs/E42IrdS0tT7+rcgIqRMH45gCKnjjcRmdmZKPgxPWNZsI WtPBB+07gAihB13abQZm5ppe02LiFBGyz/DIgtej/zbowQuf89hIXl3G/9/G3puU qdd7nHmi242TMwjBwoGx2ypcdpfYifA08gn74NkTAFrcDeUKXkHs6QUv1LckVPta KsBRsPniiEeydl5arsyAVi2YjH1WhHTJRpYWkE3PKaSMsZKo3rfGtRIg+9fCxRXW A22YTcW2ouLMRi7RBVws43BTCDqlomJMhbgppSK9/sShbTKAAR0EKHuvjJjAWDgj lAqpvgHdvPWID4pcXM326MG2+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9MrFzJ xAzEyNOG5lJZYs9butdrMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIwxDhq7qoUi4xR9zk64wMfmWWpf3DZFVzHCZapUprByUQPnVBw9s6jSKzb7o IOpvGTT1d6iZ7uIDETD4+V/pUoPJ4ZjA1vIT/O/zHzMXZja2WE7nIzTjpPklDZpL J3yQMwk6dY1BEn4ktgpE27TyRWhPq2yiC8XXE/LMtfxkKAmasIejE3tz+r6wR7Ah smP6NmdXycq5cYlDwaMk55rcbuXhXaiNcPcYhzsbJwxMNvDmuNrVaDMyvZeFsoA4 /jTEr2bVGKHfVSTE78Jo05Od2oOrC4mHQKr4OhCbhv+82V+mX7F1Xw9cWbb/KgBo HHRnQNzE13ejRGPZeMyRogAeZg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:11 2026 by rpki-client