$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.mft File: EWNKZhmAGrreJLzmLnzChNHA3IE.mft (raw, json) Hash identifier: I1Evx/IvTO2XuiuWIVE4nVG4Nx9u/SSepPKV1s3J/mU= Subject key identifier: 06:E7:E0:A2:98:A0:57:27:0E:3E:BA:C1:31:34:05:20:30:14:68:11 Authority key identifier: 11:63:4A:66:19:80:1A:BA:DE:24:BC:E6:2E:7C:C2:84:D1:C0:DC:81 Certificate issuer: /CN=A91E1637/serialNumber=11634A6619801ABADE24BCE62E7CC284D1C0DC81 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWNKZhmAGrreJLzmLnzChNHA3IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.mft Manifest number: 12 Signing time: Thu 01 Oct 2026 10:32:10 +0000 Manifest this update: Thu 01 Oct 2026 10:32:10 +0000 Manifest next update: Thu 08 Oct 2026 10:32:10 +0000 Files and hashes: 1: EWNKZhmAGrreJLzmLnzChNHA3IE.crl (hash: gXKHU/YSZ6E5Ba3XO/ABe1ekTodsT86CvrjUwdxnGAQ=) 2: 10CF6CC4A5DD11F1B10D24C13711F970.roa (hash: YOcchpz6KoCPaVGaokvc4kqOrmQ1dBbA8kGZA7CnpW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.crl rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWNKZhmAGrreJLzmLnzChNHA3IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1637, serialNumber=11634A6619801ABADE24BCE62E7CC284D1C0DC81 Validity Not Before: Oct 1 10:32:10 2026 GMT Not After : Oct 8 10:32:10 2026 GMT Subject: CN=6abe36aa-1fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:51:d8:c9:4e:e1:23:2c:5d:6e:30:3a:5d: a7:ed:a6:50:36:15:50:b7:f1:5d:e7:c1:10:57:63: 8c:34:45:80:13:f4:1c:07:fe:6b:b0:4e:a3:3e:e4: d8:a7:6b:78:14:8e:2e:a7:1c:ca:cc:19:47:7c:9d: c1:91:90:bf:f2:57:b8:b5:8e:bd:f9:09:ee:91:64: 6a:01:63:72:0b:08:1f:ad:42:79:55:87:4f:32:52: 9a:ef:05:a2:44:ac:85:32:49:79:4b:91:22:26:a5: d9:b9:08:f2:29:9e:43:35:93:a4:84:0b:90:34:fd: 37:cf:ba:cf:c8:5e:8b:32:9a:9b:d2:1c:b7:75:d9: b4:54:78:5f:61:e6:bc:4d:7a:90:54:f2:82:98:cd: 40:11:e8:c7:c3:25:33:6f:7a:f2:3d:6b:35:b0:74: 5d:a8:88:0b:b4:4c:0e:f1:0b:22:03:c3:97:3b:b3: 4c:36:d5:b7:2f:0b:b6:7f:55:87:bf:e1:a9:de:ce: e2:8b:a0:53:a8:2c:45:58:e2:22:d7:8b:ae:f6:dd: 65:52:fe:ba:da:b7:ce:75:7f:bb:bc:59:f9:14:9f: 12:5e:0f:7e:da:bc:6b:09:92:6a:da:b7:2c:81:85: 0d:36:da:86:c4:cd:da:f3:29:b7:5d:f7:48:76:ca: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E7:E0:A2:98:A0:57:27:0E:3E:BA:C1:31:34:05:20:30:14:68:11 X509v3 Authority Key Identifier: keyid:11:63:4A:66:19:80:1A:BA:DE:24:BC:E6:2E:7C:C2:84:D1:C0:DC:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWNKZhmAGrreJLzmLnzChNHA3IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c7:af:2f:71:6a:c9:12:61:3e:e5:2c:fb:2d:83:69:80:f5: f7:86:78:79:96:ed:ff:ce:a2:0c:7a:69:2b:50:e6:d1:f1:fd: b5:4e:86:bd:ca:64:4e:a4:65:2a:38:47:6d:a3:68:0c:d6:f1: cf:32:38:9f:66:df:14:89:3d:e6:cb:cc:41:21:ff:81:e1:a1: 1b:d9:d6:8a:c1:44:56:56:49:74:e5:d9:a2:a5:a5:94:a0:e3: e5:99:56:cc:3c:60:82:3b:97:c8:d1:f0:20:1a:67:15:b7:ad: a6:35:99:7b:c2:7c:47:37:c0:4d:c0:d5:bf:0f:22:07:ed:8e: 59:b9:4e:df:06:b6:a2:6b:79:91:fe:af:b3:86:6a:69:68:53: 45:cc:09:23:f0:ef:bb:db:5e:05:5d:55:76:8e:c1:8f:25:4c: 0a:d2:38:79:4c:c3:b3:e2:54:84:7f:6e:7e:e1:6c:8a:00:ee: b6:91:72:91:05:0b:00:fe:bf:82:99:72:30:d2:80:d4:fa:81: 79:74:24:9f:15:b9:7c:d4:7d:01:ba:9b:37:86:49:82:61:ab: 5b:03:9f:c8:60:34:cf:5a:d3:ef:52:9e:6d:72:2c:10:95:78: dc:52:d8:10:7a:4d:0d:8f:f2:5f:ff:16:fc:7e:d4:bb:94:9e: 49:24:75:13 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTYzNzExMC8GA1UEBRMoMTE2MzRBNjYxOTgwMUFCQURFMjRCQ0U2MkU3Q0MyODRE MUMwREM4MTAeFw0yNjEwMDExMDMyMTBaFw0yNjEwMDgxMDMyMTBaMBgxFjAUBgNV BAMTDTZhYmUzNmFhLTFmY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7NFHYyU7hIyxdbjA6XaftplA2FVC38V3nwRBXY4w0RYAT9BwH/muwTqM+5Nin a3gUji6nHMrMGUd8ncGRkL/yV7i1jr35Ce6RZGoBY3ILCB+tQnlVh08yUprvBaJE rIUySXlLkSImpdm5CPIpnkM1k6SEC5A0/TfPus/IXosympvSHLd12bRUeF9h5rxN epBU8oKYzUAR6MfDJTNvevI9azWwdF2oiAu0TA7xCyIDw5c7s0w21bcvC7Z/VYe/ 4anezuKLoFOoLEVY4iLXi6723WVS/rrat851f7u8WfkUnxJeD37avGsJkmratyyB hQ022obEzdrzKbdd90h2yon3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBufgopig VycOPrrBMTQFIDAUaBEwHwYDVR0jBBgwFoAUEWNKZhmAGrreJLzmLnzChNHA3IEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxNjM3L0Q4Q0RBMTZBQTVE QzExRjE5NTNGRTFCRTM3MTFGOTcwL0VXTktaaG1BR3JyZUpMem1MbnpDaE5IQTNJ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVdOS1pobUFHcnJlSkx6bUxuekNoTkhBM0lFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx NjM3L0Q4Q0RBMTZBQTVEQzExRjE5NTNGRTFCRTM3MTFGOTcwL0VXTktaaG1BR3Jy ZUpMem1MbnpDaE5IQTNJRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2x68vcWrJEmE+5Sz7LYNpgPX3hnh5lu3/zqIMemkrUObR8f21Toa9ymROpGUq OEdto2gM1vHPMjifZt8UiT3my8xBIf+B4aEb2daKwURWVkl05dmipaWUoOPlmVbM PGCCO5fI0fAgGmcVt62mNZl7wnxHN8BNwNW/DyIH7Y5ZuU7fBraia3mR/q+zhmpp aFNFzAkj8O+7214FXVV2jsGPJUwK0jh5TMOz4lSEf25+4WyKAO62kXKRBQsA/r+C mXIw0oDU+oF5dCSfFbl81H0Bups3hkmCYatbA5/IYDTPWtPvUp5tciwQlXjcUtgQ ek0Nj/Jf/xb8ftS7lJ5JJHUT -----END CERTIFICATE-----Generated at Thu Oct 1 19:22:04 2026 by rpki-client