$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft File: E7pcaYHZl-kImp3nvIorcpwiE2g.mft (raw, json) Hash identifier: rhLXGmtiG9W/yWBQ3roxklVFNHFjk3hi0PG5U/ut/T4= Subject key identifier: 89:90:A9:D0:3B:34:A1:CA:DD:EE:83:BE:BD:EA:EA:2F:9E:16:41:F4 Authority key identifier: 13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68 Certificate issuer: /CN=A91AE7C5/serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft Manifest number: 17 Signing time: Sun 19 Apr 2026 08:33:45 +0000 Manifest this update: Sun 19 Apr 2026 08:33:45 +0000 Manifest next update: Sun 26 Apr 2026 08:33:45 +0000 Files and hashes: 1: E7pcaYHZl-kImp3nvIorcpwiE2g.crl (hash: Se7T/D6TPMV216CvdasUYjeH59jRuwOQtICdjUhD/I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE7C5, serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368 Validity Not Before: Apr 19 08:33:45 2026 GMT Not After : Apr 26 08:33:45 2026 GMT Subject: CN=69e49369-f77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:db:36:85:9e:0c:b9:ac:79:d0:0c:48:85: b9:6d:24:98:e2:46:f6:bd:a9:d1:cb:b0:ca:24:a7: 34:2a:b8:45:01:6e:a1:90:c2:4c:53:4e:cd:fc:be: fe:1d:e8:be:35:da:b2:86:a9:26:45:ca:5f:82:31: e1:26:e5:99:92:72:86:94:d8:88:39:b8:71:61:a7: 5d:0c:89:8a:ec:ed:ee:37:6d:ec:ab:82:59:c8:7f: e0:57:64:c6:30:d9:4e:b8:31:a1:f3:78:5f:7a:e5: 55:87:34:d4:ee:c7:5f:61:ea:a6:11:fb:a8:bd:53: 1c:0d:19:cf:01:91:e0:ef:2e:ef:59:86:bf:82:bb: f2:d6:49:a1:ce:e5:13:0c:e1:62:02:03:1b:0e:13: 01:2a:2c:cf:ee:b6:1a:5a:dd:a0:3e:f9:d5:21:9b: 76:ee:62:f8:ac:81:97:9c:78:bb:cb:81:98:fc:9f: a1:43:f7:ce:cf:ef:b9:84:3b:91:30:a4:da:27:42: 9c:3f:09:e4:49:4f:83:3e:ca:99:40:84:fe:92:40: db:66:e2:ae:be:d1:b0:8d:79:d6:bc:3c:bc:11:29: f4:69:2b:b7:3e:ed:e0:44:eb:63:fb:58:a9:6d:60: a2:1a:2f:8e:cb:d7:bc:d7:9d:f9:c2:72:d7:69:4a: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:90:A9:D0:3B:34:A1:CA:DD:EE:83:BE:BD:EA:EA:2F:9E:16:41:F4 X509v3 Authority Key Identifier: keyid:13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:dd:46:34:fc:49:73:88:73:19:2c:44:ff:89:85:9c:62:cd: 4c:7c:d0:06:53:f5:13:5e:0d:1b:db:b9:97:f8:38:de:ac:a6: 83:20:63:55:2d:91:51:d6:bc:a0:73:90:4b:85:a4:a3:9b:9c: 96:0b:02:66:0d:9c:e4:96:19:ba:24:0c:2f:0e:b0:8a:20:e2: 11:b6:93:47:f8:28:bd:75:80:74:42:12:90:c8:d1:fb:cd:46: f3:b1:80:f5:bc:58:bd:54:31:f4:74:4f:4c:a1:9e:8b:c0:52: 36:b8:f4:a6:ae:28:53:e3:5b:02:0e:51:15:f7:75:c3:9c:01: 78:70:7d:bd:15:00:8c:7b:50:4e:64:fc:b2:a9:09:34:ef:7c: 9c:13:0a:97:41:ca:37:76:c0:b8:c0:7d:39:28:c9:31:94:10: b9:05:c0:64:29:72:94:8c:de:ed:55:5d:85:d0:dc:e8:ba:ad: 9a:ef:ae:5e:14:2a:e5:83:73:22:d5:c7:aa:f6:88:2f:b3:a8: 7e:fd:70:d8:73:f5:e7:42:a9:81:1b:46:37:b3:22:60:79:aa: b7:c4:56:0e:cf:a5:8e:ef:7e:f6:b4:6f:9c:29:dc:e7:e4:30: 04:d8:20:a6:41:d3:aa:e6:1e:d8:8b:a5:ea:03:14:29:9f:be: fd:54:6f:05 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTdDNTExMC8GA1UEBRMoMTNCQTVDNjk4MUQ5OTdFOTA4OUE5REU3QkM4QTJCNzI5 QzIyMTM2ODAeFw0yNjA0MTkwODMzNDVaFw0yNjA0MjYwODMzNDVaMBgxFjAUBgNV BAMTDTY5ZTQ5MzY5LWY3N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Ats2hZ4Muax50AxIhbltJJjiRva9qdHLsMokpzQquEUBbqGQwkxTTs38vv4d 6L412rKGqSZFyl+CMeEm5ZmScoaU2Ig5uHFhp10MiYrs7e43beyrglnIf+BXZMYw 2U64MaHzeF965VWHNNTux19h6qYR+6i9UxwNGc8BkeDvLu9Zhr+Cu/LWSaHO5RMM 4WICAxsOEwEqLM/uthpa3aA++dUhm3buYvisgZeceLvLgZj8n6FD987P77mEO5Ew pNonQpw/CeRJT4M+yplAhP6SQNtm4q6+0bCNeda8PLwRKfRpK7c+7eBE62P7WKlt YKIaL47L17zXnfnCctdpSoyXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiZCp0Ds0 ocrd7oO+verqL54WQfQwHwYDVR0jBBgwFoAUE7pcaYHZl+kImp3nvIorcpwiE2gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzE3QjFGRDQ0MUI1 MDExRjFCRDVBRDBFODI0M0Q4QzY3L0U3cGNhWUhabC1rSW1wM252SW9yY3B3aUUy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRTdwY2FZSFpsLWtJbXAzbnZJb3JjcHdpRTJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF N0M1LzE3QjFGRDQ0MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3L0U3cGNhWUhabC1r SW1wM252SW9yY3B3aUUyZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAs3UY0/ElziHMZLET/iYWcYs1MfNAGU/UTXg0b27mX+DjerKaDIGNVLZFR1ryg c5BLhaSjm5yWCwJmDZzklhm6JAwvDrCKIOIRtpNH+Ci9dYB0QhKQyNH7zUbzsYD1 vFi9VDH0dE9MoZ6LwFI2uPSmrihT41sCDlEV93XDnAF4cH29FQCMe1BOZPyyqQk0 73ycEwqXQco3dsC4wH05KMkxlBC5BcBkKXKUjN7tVV2F0Nzouq2a765eFCrlg3Mi 1ceq9ogvs6h+/XDYc/XnQqmBG0Y3syJgeaq3xFYOz6WO7372tG+cKdzn5DAE2CCm QdOq5h7Yi6XqAxQpn779VG8F -----END CERTIFICATE-----Generated at Sun Apr 19 11:25:15 2026 by rpki-client