$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft File: EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft (raw, json) Hash identifier: Pp8rm7yxJv5cWS9veFMEBD6eCiAedWk+00d+2QKwCyI= Subject key identifier: 3B:20:8D:40:DA:4A:FA:FF:34:62:F1:B4:0C:85:27:36:EF:59:C1:6D Authority key identifier: 11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0 Certificate issuer: /CN=A91DDB11/serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft Manifest number: 10 Signing time: Mon 27 Jul 2026 11:10:56 +0000 Manifest this update: Mon 27 Jul 2026 11:10:55 +0000 Manifest next update: Mon 03 Aug 2026 11:10:55 +0000 Files and hashes: 1: EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl (hash: WgOjxKLmC9kFBUPT+mmnIfSMZMGhxZOi5thEY8sHW/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0 Validity Not Before: Jul 27 11:10:55 2026 GMT Not After : Aug 3 11:10:55 2026 GMT Subject: CN=6a673cc0-6f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c7:56:e2:cf:ec:96:46:39:e6:cb:e9:02:35: f9:5c:01:ad:1d:0f:53:1b:4e:82:07:ad:cb:9f:54: 46:ab:ab:71:b8:44:28:09:93:06:2c:74:c8:3c:f5: c9:44:21:26:bb:9b:4c:c7:bb:84:c8:e3:54:21:53: 49:68:b2:4c:25:49:f1:c2:64:c3:43:44:27:a3:f6: 7c:f2:1c:26:04:84:cb:ac:a6:73:d9:f3:c2:81:50: b3:30:84:cd:19:e2:d5:9f:da:c7:a5:39:54:f7:2d: 26:83:ec:85:43:db:96:a4:5e:7a:a9:08:49:16:c6: 70:1f:38:f5:83:43:39:63:70:3a:23:76:54:28:f2: 17:73:bd:b9:b7:37:fa:a7:50:9c:dd:19:69:84:f7: 43:85:c1:fc:5a:84:88:df:37:0b:48:8e:63:00:86: 7d:e0:4c:0a:af:6d:54:ca:ae:20:5a:41:a1:54:48: 86:cc:5b:93:14:3f:c0:2b:1c:64:32:30:9f:ff:9b: dd:02:35:16:87:9c:0b:b4:8c:a2:35:a6:98:30:c9: 4b:ab:40:54:25:d2:d0:81:09:79:a2:ee:34:f9:57: 91:69:64:7c:b1:a8:85:bc:6a:b2:45:f8:07:1e:4c: 19:66:7b:d6:a5:ce:50:ec:e3:76:80:0f:72:64:2c: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:8D:40:DA:4A:FA:FF:34:62:F1:B4:0C:85:27:36:EF:59:C1:6D X509v3 Authority Key Identifier: keyid:11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c4:d9:28:c7:c9:cf:84:dc:0b:f1:28:e0:b0:fc:09:bd:1f: 57:f9:d0:a3:16:f6:85:b5:60:3b:81:41:c3:f5:06:37:ee:8b: 14:86:ee:0d:f7:a8:d1:72:f1:33:bd:91:5c:0a:35:f7:59:85: dc:a1:ae:80:3c:b7:cc:23:31:0d:27:a0:ce:98:15:d5:21:c4: 2b:b5:b3:14:1d:a8:40:cc:f0:66:f6:8f:e4:37:5e:4e:80:90: b0:a0:f7:2e:07:df:90:b4:5a:74:da:e5:be:30:a9:13:48:a8: 97:34:4f:b5:8b:1b:c4:1d:4c:e6:77:c7:57:14:c8:0d:78:9a: b4:b8:b8:73:51:38:1c:32:ac:5a:fe:b5:9c:55:ad:44:da:2f: c7:15:fb:90:95:ed:93:db:51:62:ab:89:c3:84:c7:86:66:96: 93:2b:10:4a:77:f1:c9:32:20:f6:84:5d:33:a1:42:56:df:96: 79:be:23:82:46:4d:bb:33:ba:4c:0f:b9:3c:74:bf:f9:10:e5: 39:f6:b9:e0:b3:11:da:27:62:aa:3a:a1:49:fe:21:3d:fa:0c: 50:1f:57:6f:fb:63:08:77:f6:b8:27:2c:c5:83:75:48:50:95: 41:86:9c:29:b2:33:8b:a5:a8:d2:90:97:49:b7:0a:18:9b:5e: 21:5a:2d:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoMTFCMEU0QURGRkI4MUNBMUFBODRFQzA4NTY4MjlDRDgz QTA2NTVFMDAeFw0yNjA3MjcxMTEwNTVaFw0yNjA4MDMxMTEwNTVaMBgxFjAUBgNV BAMTDTZhNjczY2MwLTZmMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfx1biz+yWRjnmy+kCNflcAa0dD1MbToIHrcufVEarq3G4RCgJkwYsdMg89clE ISa7m0zHu4TI41QhU0loskwlSfHCZMNDRCej9nzyHCYEhMuspnPZ88KBULMwhM0Z 4tWf2selOVT3LSaD7IVD25akXnqpCEkWxnAfOPWDQzljcDojdlQo8hdzvbm3N/qn UJzdGWmE90OFwfxahIjfNwtIjmMAhn3gTAqvbVTKriBaQaFUSIbMW5MUP8ArHGQy MJ//m90CNRaHnAu0jKI1ppgwyUurQFQl0tCBCXmi7jT5V5FpZHyxqIW8arJF+Ace TBlme9alzlDs43aAD3JkLFVDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOyCNQNpK +v80YvG0DIUnNu9ZwW0wHwYDVR0jBBgwFoAUEbDkrf+4HKGqhOwIVoKc2DoGVeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExLzZEQjEwRUI4NzQz NTExRjFCMkRGQTI5ODY1QTMwRkJDL0ViRGtyZi00SEtHcWhPd0lWb0tjMkRvR1Zl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWJEa3JmLTRIS0dxaE93SVZvS2MyRG9HVmVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExLzZEQjEwRUI4NzQzNTExRjFCMkRGQTI5ODY1QTMwRkJDL0ViRGtyZi00SEtH cWhPd0lWb0tjMkRvR1ZlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6xNkox8nPhNwL8SjgsPwJvR9X+dCjFvaFtWA7gUHD9QY37osUhu4N96jRcvEz vZFcCjX3WYXcoa6APLfMIzENJ6DOmBXVIcQrtbMUHahAzPBm9o/kN15OgJCwoPcu B9+QtFp02uW+MKkTSKiXNE+1ixvEHUzmd8dXFMgNeJq0uLhzUTgcMqxa/rWcVa1E 2i/HFfuQle2T21Fiq4nDhMeGZpaTKxBKd/HJMiD2hF0zoUJW35Z5viOCRk27M7pM D7k8dL/5EOU59rngsxHaJ2KqOqFJ/iE9+gxQH1dv+2MId/a4JyzFg3VIUJVBhpwp sjOLpajSkJdJtwoYm14hWi1m -----END CERTIFICATE-----Generated at Tue Jul 28 16:41:16 2026 by rpki-client