$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft File: EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft (raw, json) Hash identifier: XxdRMq/efgS4fiZUO9hdgRd+1lp0EJB8SwE3kg284Vc= Subject key identifier: 10:2C:C7:AE:63:4C:B0:B7:19:3B:11:4A:83:81:43:48:CF:EB:0B:03 Authority key identifier: 11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0 Certificate issuer: /CN=A91DDB11/serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft Manifest number: 2D Signing time: Mon 21 Sep 2026 08:26:31 +0000 Manifest this update: Mon 21 Sep 2026 08:26:31 +0000 Manifest next update: Mon 28 Sep 2026 08:26:31 +0000 Files and hashes: 1: EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl (hash: MRMB5hMnsq8ON1RaMTHAzGe6q5zrUuc8RY8erNXzysM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0 Validity Not Before: Sep 21 08:26:31 2026 GMT Not After : Sep 28 08:26:31 2026 GMT Subject: CN=6ab0ea37-ee07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:26:83:2c:32:b0:48:8b:73:09:79:99:4a:b6: 24:6a:ee:55:32:1d:4e:df:79:2e:82:11:77:0b:f3: 93:09:32:c5:63:5a:55:05:d4:bc:f1:6b:88:df:53: d8:50:95:f9:53:8b:d1:20:1f:c3:be:9a:aa:86:ab: fd:d1:7e:25:34:23:e2:f3:80:18:98:a8:38:c1:43: 5f:c0:06:93:b1:83:ed:f1:b7:70:f8:b2:19:dd:da: 8d:7f:f0:2c:3c:dc:22:df:ba:6a:11:de:02:81:07: ea:69:cf:d0:1c:fe:be:98:ff:48:37:08:e9:60:90: 2d:95:bd:4f:3d:82:49:e8:e0:27:72:76:c0:de:67: 23:92:93:aa:e8:0b:b8:d6:d8:b8:62:f5:1b:e1:21: 1d:5e:50:5e:a1:e1:09:0b:59:a5:ab:63:f5:c8:74: 2b:d1:aa:35:40:7b:c9:d1:04:62:a2:21:ab:fc:28: 84:9e:1b:39:d8:46:91:41:f9:41:4e:96:a2:19:16: c0:fd:75:f4:ea:70:70:99:01:d8:76:ba:d5:66:5b: 4f:c3:9e:74:4a:69:30:07:df:bc:1e:d0:4b:b4:7e: 59:f3:14:c6:02:22:73:9c:ba:7c:1c:a3:02:5a:60: 18:1f:e5:d5:89:c9:c4:82:54:23:4d:bb:00:0e:10: 3e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:C7:AE:63:4C:B0:B7:19:3B:11:4A:83:81:43:48:CF:EB:0B:03 X509v3 Authority Key Identifier: keyid:11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:62:56:51:fc:47:bd:66:4d:94:a9:a8:50:12:3c:6f:43: ad:6a:58:83:87:4b:e4:ad:3f:59:08:03:da:bf:cf:ab:1b:62: 02:bd:60:2d:d9:6d:a2:12:2c:9c:ed:10:e9:a3:54:b2:75:fd: 16:96:30:7b:cd:1d:4c:ca:ec:a8:86:7f:8c:80:85:4b:9f:32: c1:23:71:46:38:4a:d3:02:51:e5:11:ca:8b:33:c2:b5:db:c6: 46:e6:6d:d5:56:12:b5:c5:5e:1a:c5:44:13:ba:3d:fe:17:67: 0d:74:94:b5:c3:82:15:3b:63:98:d6:b1:dc:61:fe:a3:f4:d2: 6a:7d:58:06:5e:65:cb:f6:ae:d7:64:69:32:ff:c4:c4:ef:1d: 19:ed:30:b7:09:e4:4a:4c:60:06:e1:e7:b4:ae:7d:2f:57:1d: 12:33:bf:cb:d3:3e:d9:83:80:b3:a7:c7:98:2c:b7:3e:86:78: 99:26:01:df:7c:d5:9f:cc:17:c4:99:b6:69:b7:5f:f5:82:52: cb:64:ac:a2:e3:db:c6:c9:e3:48:7a:bc:3c:21:25:71:7a:69: 0c:7f:8b:ba:92:49:93:f0:bf:ac:4a:c9:08:bb:ce:d2:9e:27: 7c:cc:1e:f2:67:61:96:67:0d:38:ae:80:21:45:3e:73:87:67: 40:64:32:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoMTFCMEU0QURGRkI4MUNBMUFBODRFQzA4NTY4MjlDRDgz QTA2NTVFMDAeFw0yNjA5MjEwODI2MzFaFw0yNjA5MjgwODI2MzFaMBgxFjAUBgNV BAMTDTZhYjBlYTM3LWVlMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSJoMsMrBIi3MJeZlKtiRq7lUyHU7feS6CEXcL85MJMsVjWlUF1Lzxa4jfU9hQ lflTi9EgH8O+mqqGq/3RfiU0I+LzgBiYqDjBQ1/ABpOxg+3xt3D4shnd2o1/8Cw8 3CLfumoR3gKBB+ppz9Ac/r6Y/0g3COlgkC2VvU89gkno4CdydsDeZyOSk6roC7jW 2Lhi9RvhIR1eUF6h4QkLWaWrY/XIdCvRqjVAe8nRBGKiIav8KISeGznYRpFB+UFO lqIZFsD9dfTqcHCZAdh2utVmW0/DnnRKaTAH37we0Eu0flnzFMYCInOcunwcowJa YBgf5dWJycSCVCNNuwAOED5bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUECzHrmNM sLcZOxFKg4FDSM/rCwMwHwYDVR0jBBgwFoAUEbDkrf+4HKGqhOwIVoKc2DoGVeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExLzZEQjEwRUI4NzQz NTExRjFCMkRGQTI5ODY1QTMwRkJDL0ViRGtyZi00SEtHcWhPd0lWb0tjMkRvR1Zl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWJEa3JmLTRIS0dxaE93SVZvS2MyRG9HVmVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExLzZEQjEwRUI4NzQzNTExRjFCMkRGQTI5ODY1QTMwRkJDL0ViRGtyZi00SEtH cWhPd0lWb0tjMkRvR1ZlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBO02JWUfxHvWZNlKmoUBI8b0OtaliDh0vkrT9ZCAPav8+rG2ICvWAt2W2iEiyc 7RDpo1Sydf0WljB7zR1Myuyohn+MgIVLnzLBI3FGOErTAlHlEcqLM8K128ZG5m3V VhK1xV4axUQTuj3+F2cNdJS1w4IVO2OY1rHcYf6j9NJqfVgGXmXL9q7XZGky/8TE 7x0Z7TC3CeRKTGAG4ee0rn0vVx0SM7/L0z7Zg4Czp8eYLLc+hniZJgHffNWfzBfE mbZpt1/1glLLZKyi49vGyeNIerw8ISVxemkMf4u6kkmT8L+sSskIu87Snid8zB7y Z2GWZw04roAhRT5zh2dAZDLX -----END CERTIFICATE-----Generated at Tue Sep 22 08:59:22 2026 by rpki-client