$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: 9tvxecHvii+Ts4uN1AeaR7idTZohpJv5GyUl0SsMfEo= Subject key identifier: CC:C8:1D:DC:35:40:68:65:72:3F:13:5D:0F:DB:97:85:AE:AF:3C:BE Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 027E Signing time: Fri 17 Apr 2026 01:38:47 +0000 Manifest this update: Fri 17 Apr 2026 01:38:46 +0000 Manifest next update: Fri 24 Apr 2026 01:38:46 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: DQ5ob0KwuXFR3mMiGUV8E77idnx4uX5jQNjlz+vuzVw=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: 5Y3Gh8SZNPXmXnI9agUdsXUTOgsdD8G7cfIibLyVAxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Apr 17 01:38:46 2026 GMT Not After : Apr 24 01:38:46 2026 GMT Subject: CN=69e18f27-27ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:2f:a6:1e:b2:0d:1b:38:57:eb:43:c1:42: bf:e7:c3:e2:80:e7:f1:65:5c:73:af:ab:57:fb:19: 12:cc:8b:b1:69:9d:56:5a:8d:d9:59:4f:23:a3:f2: bb:67:9a:3a:0f:9c:67:8e:1d:09:b0:e1:16:af:b1: e1:cf:57:ad:ea:75:7e:68:3b:76:eb:9f:ea:87:1f: 7f:e3:30:3e:ae:e1:df:0a:41:d3:0d:3d:51:e6:9f: f2:1f:cc:8a:94:fd:aa:1c:2a:b2:c4:a4:a4:1a:07: 70:69:a7:9c:26:b8:8b:7e:68:5f:c1:7a:1c:7a:82: 3a:c6:9d:70:f1:79:4e:cd:8c:97:7e:af:ad:0a:e0: 7e:36:ac:a9:db:19:41:01:08:83:fd:ed:42:36:fc: b4:62:97:f6:d6:e8:55:9f:0b:0b:d0:76:ec:9f:ca: 21:c3:92:dd:1c:c1:90:00:33:44:e3:f1:ef:67:c3: d9:a1:28:8d:e1:c2:4d:15:e0:44:7c:5e:4c:7e:eb: be:fd:66:60:22:c4:b7:a3:b0:f3:18:5f:5e:ce:5e: 34:00:3f:5f:05:13:5d:19:46:ac:fc:0e:0d:f5:cb: b3:ad:89:03:8f:3a:7e:0e:6d:bd:55:7d:21:0d:be: 8b:b2:0a:b3:ee:3b:a9:38:b0:8a:14:a6:05:0e:42: 57:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C8:1D:DC:35:40:68:65:72:3F:13:5D:0F:DB:97:85:AE:AF:3C:BE X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:43:aa:3f:7c:94:8e:df:3c:b8:a9:1b:b2:fc:c5:25:19:7f: 4e:65:5a:ba:b4:cd:5b:b4:5b:cc:93:6b:f5:fa:e5:55:d3:4c: e1:6d:47:b5:9d:b0:35:9f:24:1e:41:be:0b:86:4c:1b:11:2c: b4:6e:f3:a8:19:61:49:8b:61:3f:0c:d3:6d:1f:e4:c7:84:7a: ae:4f:ad:4f:66:a8:2e:32:f8:29:9c:46:09:3d:7b:b2:1c:4a: 3f:95:c8:3d:dd:ca:5b:23:45:38:7c:70:bb:51:b8:e1:6b:b9: 05:26:5f:75:a3:16:dd:e8:ae:a2:f7:5f:02:51:9d:92:92:90: 7b:f9:c3:16:dd:e4:68:2c:29:5e:aa:74:ba:b7:24:52:4c:c2: c7:63:ab:98:c5:5a:80:48:00:78:5e:df:25:5e:c8:d7:fa:05: b7:7b:66:7e:f0:9f:6f:d6:be:cc:ce:d5:b2:07:2a:6c:42:ba: 6a:8e:61:a5:8b:36:4d:f2:7e:b5:fe:ce:3a:b9:63:e0:45:1c: 8d:ed:46:98:6f:11:a7:df:27:9a:eb:ea:cd:16:23:e9:b9:d5: 82:2c:d5:16:63:b3:0b:9b:9d:25:4e:fc:d2:f9:9f:4d:7f:89: 0d:18:28:be:29:f0:fb:f4:89:9f:15:3d:b0:b2:5e:a0:8d:f4: 18:13:b4:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjYwNDE3MDEzODQ2WhcNMjYwNDI0MDEzODQ2WjAYMRYwFAYD VQQDEw02OWUxOGYyNy0yN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNIvph6yDRs4V+tDwUK/58PigOfxZVxzr6tX+xkSzIuxaZ1WWo3ZWU8jo/K7 Z5o6D5xnjh0JsOEWr7Hhz1et6nV+aDt265/qhx9/4zA+ruHfCkHTDT1R5p/yH8yK lP2qHCqyxKSkGgdwaaecJriLfmhfwXoceoI6xp1w8XlOzYyXfq+tCuB+Nqyp2xlB AQiD/e1CNvy0Ypf21uhVnwsL0Hbsn8ohw5LdHMGQADNE4/HvZ8PZoSiN4cJNFeBE fF5Mfuu+/WZgIsS3o7DzGF9ezl40AD9fBRNdGUas/A4N9cuzrYkDjzp+Dm29VX0h Db6Lsgqz7jupOLCKFKYFDkJXaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzIHdw1 QGhlcj8TXQ/bl4Wurzy+MB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABkOqP3yUjt88uKkbsvzFJRl/TmVaurTNW7RbzJNr9frlVdNM4W1HtZ2wNZ8k HkG+C4ZMGxEstG7zqBlhSYthPwzTbR/kx4R6rk+tT2aoLjL4KZxGCT17shxKP5XI Pd3KWyNFOHxwu1G44Wu5BSZfdaMW3eiuovdfAlGdkpKQe/nDFt3kaCwpXqp0urck UkzCx2OrmMVagEgAeF7fJV7I1/oFt3tmfvCfb9a+zM7VsgcqbEK6ao5hpYs2TfJ+ tf7OOrlj4EUcje1GmG8Rp98nmuvqzRYj6bnVgizVFmOzC5udJU780vmfTX+JDRgo vinw+/SJnxU9sLJeoI30GBO0Zw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:46:52 2026 by rpki-client