$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: +b1NF4+eWZ0fbq3dHYi+/W4B+t15scWCLVL5+R0Hdz0= Subject key identifier: 4C:91:C3:1C:FB:BA:C9:EB:CA:F8:37:7B:1A:27:32:8F:DB:82:AD:BE Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0F23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0F07 Signing time: Sat 10 Oct 2026 17:40:20 +0000 Manifest this update: Sat 10 Oct 2026 17:40:19 +0000 Manifest next update: Sat 17 Oct 2026 17:40:19 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: lJPb0PhY+wC4lS5Iy7F+XhiiYyRKxi4G3ziF3Gt6nqU=) 2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: 8IEOcn859bdj07hvdLHHiu5te9v+Mf6Y9BRqk4uy5v8=) 3: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: rUpaSwZKGK2SflEl5oRSUOsZ6h9lQccT+3OZkbf79PI=) 4: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: IXDMktuW1eMer2Jfj/UCXO4EyeiZ3TkOZOE5RKCxpb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3875 (0xf23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Oct 10 17:40:19 2026 GMT Not After : Oct 17 17:40:19 2026 GMT Subject: CN=6aca7884-7082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:01:a6:17:b9:be:e4:b0:1e:d7:6c:a9:48: 81:94:80:27:7b:96:3d:0d:96:00:38:af:37:a0:d1: e1:d6:13:a5:ff:c9:e8:4d:02:91:50:94:15:f2:e6: aa:a3:fd:3f:21:6a:00:26:53:f0:54:94:db:65:86: eb:a9:20:dd:e4:b5:c2:89:e4:4d:81:ff:58:f9:e5: 20:e7:99:51:92:c4:d2:a0:c2:df:ce:7a:58:7f:7f: 4c:ad:ea:b5:49:b6:5e:3b:b4:4d:c5:20:96:1b:83: 7a:ff:65:18:3e:06:d4:03:d0:0d:33:1e:a9:ce:a7: df:fa:14:ce:66:73:2a:27:58:e9:4a:9e:6f:b3:97: de:5d:dd:aa:75:b9:00:66:7b:7f:66:09:f8:87:b7: a1:71:e1:99:e1:58:ad:83:a7:e0:ac:7f:f0:0e:97: fd:5c:f9:4a:32:d0:f0:21:64:d6:3c:ec:88:9e:ac: 08:ee:e1:17:79:26:f6:45:96:93:2f:57:ab:dc:45: 60:50:74:2e:e9:0b:6a:c9:5e:0b:0e:40:f9:97:c2: 56:5b:d5:e6:7f:ec:39:56:c1:f9:ef:9f:60:9d:65: 06:0c:9c:ed:b9:6a:9d:95:c7:f9:54:98:d5:39:a5: 65:23:ac:0a:dc:ed:ba:a2:7a:3b:e2:5d:5a:7d:a2: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:91:C3:1C:FB:BA:C9:EB:CA:F8:37:7B:1A:27:32:8F:DB:82:AD:BE X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ad:da:95:2e:63:f4:49:e5:ee:59:6a:8b:15:2c:17:a8:a6: 0f:0c:74:80:e7:6a:35:c1:01:42:56:e4:b8:20:c1:b9:c5:58: e1:25:d9:4d:63:7d:d5:62:a8:a9:dd:f7:0e:b8:7a:7d:5c:12: 12:28:7d:0b:4a:fe:f8:0a:2d:d8:93:01:a8:6c:26:95:c4:a1: de:88:51:e3:98:d0:e9:7d:f4:4f:2c:07:ca:a1:5d:e1:71:75: b7:e6:90:d8:5c:5e:86:73:7f:6f:2f:ec:2b:56:6a:14:b3:12: df:64:7d:73:a5:2a:e0:4c:f4:4e:70:80:a4:2e:20:42:f1:b3: 4b:55:b9:e7:a8:6a:b6:96:19:ac:e7:05:a0:c0:ee:99:ca:5a: b7:38:f4:a5:bf:af:7a:54:11:89:2b:9a:b7:08:65:fd:a7:cc: e1:89:c2:3f:d8:2d:31:75:94:ef:73:a5:a5:4c:41:41:55:9b: 1f:bd:10:d8:50:35:fb:ad:2f:d6:da:9a:e9:01:eb:30:91:be: 65:d8:ac:de:60:dc:68:c0:02:46:96:7d:b1:5c:13:7c:00:c2: 28:21:b8:b3:da:37:87:ce:b8:34:4e:e2:6e:02:5a:e5:ca:94: 55:df:ad:fe:68:fd:7a:fe:68:60:fb:49:a4:76:df:96:64:e1: ed:38:1c:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjYxMDEwMTc0MDE5WhcNMjYxMDE3MTc0MDE5WjAYMRYwFAYD VQQDEw02YWNhNzg4NC03MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLABphe5vuSwHtdsqUiBlIAne5Y9DZYAOK83oNHh1hOl/8noTQKRUJQV8uaq o/0/IWoAJlPwVJTbZYbrqSDd5LXCieRNgf9Y+eUg55lRksTSoMLfznpYf39Mreq1 SbZeO7RNxSCWG4N6/2UYPgbUA9ANMx6pzqff+hTOZnMqJ1jpSp5vs5feXd2qdbkA Znt/Zgn4h7ehceGZ4Vitg6fgrH/wDpf9XPlKMtDwIWTWPOyInqwI7uEXeSb2RZaT L1er3EVgUHQu6QtqyV4LDkD5l8JWW9Xmf+w5VsH5759gnWUGDJztuWqdlcf5VJjV OaVlI6wK3O26ono74l1afaIgCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyRwxz7 usnryvg3exonMo/bgq2+MB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG63alS5j9Enl7llqixUsF6imDwx0gOdqNcEBQlbkuCDBucVY4SXZTWN91WKo qd33Drh6fVwSEih9C0r++Aot2JMBqGwmlcSh3ohR45jQ6X30TywHyqFd4XF1t+aQ 2FxehnN/by/sK1ZqFLMS32R9c6Uq4Ez0TnCApC4gQvGzS1W556hqtpYZrOcFoMDu mcpatzj0pb+velQRiSuatwhl/afM4YnCP9gtMXWU73OlpUxBQVWbH70Q2FA1+60v 1tqa6QHrMJG+Zdis3mDcaMACRpZ9sVwTfADCKCG4s9o3h864NE7ibgJa5cqUVd+t /mj9ev5oYPtJpHbflmTh7Tgcig== -----END CERTIFICATE-----Generated at Sun Oct 11 08:22:19 2026 by rpki-client