$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: zlIOzltmokwGPKuMLM7b0L0irT4MyW3tl2QhoCHdGwY= Subject key identifier: FE:F9:FB:C0:80:5C:D8:EE:70:C7:64:4B:74:22:60:BB:49:B3:C6:5D Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0EC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0EAB Signing time: Thu 16 Apr 2026 17:38:10 +0000 Manifest this update: Thu 16 Apr 2026 17:38:10 +0000 Manifest next update: Thu 23 Apr 2026 17:38:10 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: 6R8ysgpgJ/yY8fDkgJB77ObO9U5NiuwDvKpBTlwozfc=) 2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: XQHNZu9WrDOHXcrOnwFedWqMNY7Ym61M7N8j6VKuPNo=) 3: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: XHrlt6xoD1A14UELLtFlgRu6lNHev3zfVPKKrggxdO4=) 4: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: aigYc/n/JGvIbVIQwDO9bKK+eMUG5TvhV7PY2a5Qs6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3780 (0xec4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Apr 16 17:38:10 2026 GMT Not After : Apr 23 17:38:10 2026 GMT Subject: CN=69e11e82-c938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:32:7a:53:71:c5:86:35:73:31:f1:e5:75: 03:34:fc:6f:ff:4e:f0:a2:71:dc:01:2b:f6:83:1a: be:b9:80:9c:90:5e:50:97:d6:30:26:7a:e3:a5:74: 58:f7:a4:39:62:3a:ae:1a:59:6e:01:da:b1:fa:c0: ec:97:8f:0b:39:fc:9e:69:ef:d5:4f:34:f5:cd:80: 62:d5:6b:27:7b:76:64:1b:f8:76:16:2d:19:71:e6: f6:78:90:49:23:8e:ca:39:2d:f6:9a:94:ec:b3:cc: 8d:d2:06:ff:48:59:33:ab:87:60:00:f3:25:56:71: 77:37:26:8e:fb:40:9d:26:66:61:53:5f:99:a9:1b: e4:6d:2a:d9:d2:f4:b2:0f:65:82:ae:10:d0:8b:82: ff:ab:81:d8:6e:4f:3d:b2:6b:01:d4:06:ee:8e:a9: 9a:e4:cf:1e:32:9e:7b:63:82:83:3f:28:95:49:a6: 70:dd:a0:dd:88:f9:a7:0d:1f:2a:e1:60:19:3a:e6: 5a:b0:e3:a0:53:34:9b:a0:a8:f1:2b:c2:ab:6f:8f: b3:68:e3:f1:5c:10:6d:db:26:6b:55:1f:c5:98:ae: 41:ff:46:da:f9:ff:04:de:89:d3:bd:ae:66:dd:70: a6:07:82:d3:eb:93:c9:9a:3a:92:e8:fc:35:79:35: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F9:FB:C0:80:5C:D8:EE:70:C7:64:4B:74:22:60:BB:49:B3:C6:5D X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:20:59:c2:a3:bc:7b:3d:7c:bc:41:7d:bb:ff:c0:a5:cb:33: f2:8e:ab:f6:14:ea:ea:39:87:41:67:de:7a:a5:ae:34:fb:23: 79:87:17:9b:c8:b9:49:29:04:a3:9d:e2:4c:25:1e:1b:3f:9f: cd:ab:da:9d:53:f7:be:98:1d:44:16:7c:a0:ed:d6:00:29:01: 13:ee:45:d9:dc:c8:0a:a7:6f:4f:00:3f:6e:e3:87:f3:77:a5: ec:8f:56:86:13:13:54:f6:3c:d6:18:86:f3:22:3c:67:e3:68: d3:71:a4:ca:37:27:e1:29:9d:84:d6:f0:26:e2:dc:bd:ea:81: 3d:6a:41:8f:48:32:37:34:05:c5:e9:fa:89:14:45:b1:05:06: 24:c1:53:17:79:b3:c7:2d:a8:d0:e2:a8:db:80:f1:f1:37:65: 2f:46:46:13:6c:7f:a8:fc:55:7e:2d:7d:e4:bf:95:46:29:47: a0:0e:29:ae:f5:f0:5c:a5:c1:96:8b:98:ef:56:c2:57:84:4d: fc:16:39:ec:0d:3a:38:e5:71:c8:57:6e:ba:a9:a2:12:b9:9b: 5e:c3:80:e7:cd:22:be:19:ea:87:16:8e:b1:36:8b:22:8d:a5: 9a:00:2f:aa:18:0c:dc:34:56:88:e5:e0:71:42:f8:9d:dd:96: 3e:e5:a3:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjYwNDE2MTczODEwWhcNMjYwNDIzMTczODEwWjAYMRYwFAYD VQQDEw02OWUxMWU4Mi1jOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/IyelNxxYY1czHx5XUDNPxv/07wonHcASv2gxq+uYCckF5Ql9YwJnrjpXRY 96Q5YjquGlluAdqx+sDsl48LOfyeae/VTzT1zYBi1Wsne3ZkG/h2Fi0Zceb2eJBJ I47KOS32mpTss8yN0gb/SFkzq4dgAPMlVnF3NyaO+0CdJmZhU1+ZqRvkbSrZ0vSy D2WCrhDQi4L/q4HYbk89smsB1Abujqma5M8eMp57Y4KDPyiVSaZw3aDdiPmnDR8q 4WAZOuZasOOgUzSboKjxK8Krb4+zaOPxXBBt2yZrVR/FmK5B/0ba+f8E3onTva5m 3XCmB4LT65PJmjqS6Pw1eTUnLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP75+8CA XNjucMdkS3QiYLtJs8ZdMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMiBZwqO8ez18vEF9u//Apcsz8o6r9hTq6jmHQWfeeqWuNPsjeYcXm8i5SSkE o53iTCUeGz+fzavanVP3vpgdRBZ8oO3WACkBE+5F2dzICqdvTwA/buOH83el7I9W hhMTVPY81hiG8yI8Z+No03Gkyjcn4SmdhNbwJuLcveqBPWpBj0gyNzQFxen6iRRF sQUGJMFTF3mzxy2o0OKo24Dx8TdlL0ZGE2x/qPxVfi195L+VRilHoA4prvXwXKXB louY71bCV4RN/BY57A06OOVxyFduuqmiErmbXsOA580ivhnqhxaOsTaLIo2lmgAv qhgM3DRWiOXgcUL4nd2WPuWjGQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:35:44 2026 by rpki-client