$ rpki-client -vvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft File: EclyfKUpLOXaXXC6iCvC1kP0EIU.mft (raw, json) Hash identifier: M/lq8eNJyR/zKm3OKq/N+H9DkobhHFWAVhzC3zGS+74= Subject key identifier: 12:F5:E2:8C:D4:28:4E:E7:58:16:3F:12:BE:8A:EC:0D:12:D2:DF:E8 Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85 Certificate issuer: /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085 Certificate serial: 0985 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft Manifest number: 0970 Signing time: Tue 12 May 2026 20:08:56 +0000 Manifest this update: Tue 12 May 2026 20:08:56 +0000 Manifest next update: Tue 19 May 2026 20:08:56 +0000 Files and hashes: 1: EclyfKUpLOXaXXC6iCvC1kP0EIU.crl (hash: NiSICDUY8a70/0zX/eii5U3FoTyw+v0HkTwiEZ0AQPY=) 2: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (hash: NUTFunSdqQGhKcXQQFcYDdZdy519YsdeLxbedcwgLIs=) 3: 3AD34AA4B66F11EAAA29FB47C4F9AE02.roa (hash: CYmOlMGoeQXLhgY7vPpgwvztx9vwkWkFwNVuEcQyFhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2437 (0x985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911849D, serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085 Validity Not Before: May 12 20:08:56 2026 GMT Not After : May 19 20:08:56 2026 GMT Subject: CN=6a0388d8-8e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:ac:7a:6e:b5:d4:c8:ca:18:0c:1d:aa:78: 3e:f7:9a:07:c3:c1:24:13:ed:d7:99:9d:6c:e8:30: c1:78:fb:d5:56:76:70:b6:c2:4d:54:40:7c:66:15: 2d:83:e6:3b:ca:87:a5:e4:f9:5b:18:1e:cb:83:67: 0f:e8:60:07:a9:14:81:8a:f0:4c:8a:eb:22:47:6c: 44:1e:6d:5e:2b:d3:2f:4e:32:e2:68:2a:ba:6e:f2: 0a:7c:1c:f0:28:43:f5:9e:cd:a3:54:28:1e:d1:e3: fe:8b:cb:5a:ea:ec:8e:42:a8:65:e1:38:7e:01:5b: b2:0d:28:f7:1b:23:31:56:39:16:65:18:31:ff:a6: 02:c6:da:35:32:13:3f:ef:61:ee:53:ea:07:30:23: 5d:74:fa:69:62:88:ec:af:0b:73:71:60:2f:91:88: 52:e9:cf:d2:ef:d4:51:8c:cc:7d:bb:e5:b3:ae:96: 14:44:8e:28:5f:ee:56:b5:ff:07:7d:83:d8:40:e3: 4e:28:80:95:b9:5a:e5:1d:85:a6:2d:e2:bb:fb:1d: 5e:70:2f:d8:ac:ce:23:86:71:7a:65:31:b5:9c:95: 4c:e1:b6:45:92:9b:03:d7:c4:96:ab:11:25:e2:ee: 07:7c:7e:47:af:84:5b:4f:b8:be:5d:d4:b1:7e:d1: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F5:E2:8C:D4:28:4E:E7:58:16:3F:12:BE:8A:EC:0D:12:D2:DF:E8 X509v3 Authority Key Identifier: keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:46:2d:5a:b9:9a:46:65:5d:49:4b:b3:95:48:0d:f9:e7:c6: 4a:b1:25:af:c0:6a:7b:75:d1:6d:75:a2:50:91:e7:23:0a:f6: eb:c9:15:f4:77:2d:bd:63:ba:4c:fb:1b:3d:2e:6a:d0:43:a1: 5b:44:b3:8b:f8:9b:fc:0c:ab:ea:12:68:cc:f6:d9:6b:d1:28: 9f:04:b9:8e:59:4d:c0:c5:e6:59:51:b9:55:9d:c5:dc:24:4c: 7c:f8:c1:a4:2c:c2:43:13:9f:e3:97:da:b8:41:b0:cc:02:d5: 57:32:4b:4e:25:77:3f:af:5e:8a:f5:1f:36:67:5a:23:0a:fa: 1c:8d:0b:99:1d:6f:82:e7:e2:19:36:1a:3a:78:d9:4a:8f:1a: ee:c6:2f:3d:d5:24:11:22:54:99:19:79:18:2f:3a:2a:9e:39: a2:ed:dc:e7:bc:7c:dc:e9:37:80:af:c2:31:92:13:38:9c:54: 1b:35:be:d7:87:ae:3e:6d:ee:34:c1:10:ad:9e:6a:51:86:73: 5d:1c:b6:b9:51:4f:8d:c2:23:8b:f7:34:69:0a:53:7f:1a:f3: ca:b4:78:57:7d:90:ee:f8:f7:8e:df:f4:6a:a9:7a:f6:23:d3: f2:97:a6:af:e7:f9:57:fe:02:64:83:96:37:a5:6c:04:b9:63: 4c:a8:c0:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg0OUQxMTAvBgNVBAUTKDExQzk3MjdDQTUyOTJDRTVEQTVENzBCQTg4MkJDMkQ2 NDNGNDEwODUwHhcNMjYwNTEyMjAwODU2WhcNMjYwNTE5MjAwODU2WjAYMRYwFAYD VQQDEw02YTAzODhkOC04ZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhyGsem611MjKGAwdqng+95oHw8EkE+3XmZ1s6DDBePvVVnZwtsJNVEB8ZhUt g+Y7yoel5PlbGB7Lg2cP6GAHqRSBivBMiusiR2xEHm1eK9MvTjLiaCq6bvIKfBzw KEP1ns2jVCge0eP+i8ta6uyOQqhl4Th+AVuyDSj3GyMxVjkWZRgx/6YCxto1MhM/ 72HuU+oHMCNddPppYojsrwtzcWAvkYhS6c/S79RRjMx9u+WzrpYURI4oX+5Wtf8H fYPYQONOKICVuVrlHYWmLeK7+x1ecC/YrM4jhnF6ZTG1nJVM4bZFkpsD18SWqxEl 4u4HfH5Hr4RbT7i+XdSxftGVnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBL14ozU KE7nWBY/Er6K7A0S0t/oMB8GA1UdIwQYMBaAFBHJcnylKSzl2l1wuogrwtZD9BCF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQ5RC80NDFBNzI2NEI2 NkUxMUVBOUIwODcyNDdDNEY5QUUwMi9FY2x5ZktVcExPWGFYWEM2aUN2QzFrUDBF SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjbHlmS1VwTE9YYVhYQzZpQ3ZDMWtQMEVJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODQ5RC80NDFBNzI2NEI2NkUxMUVBOUIwODcyNDdDNEY5QUUwMi9FY2x5ZktVcExP WGFYWEM2aUN2QzFrUDBFSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo0YtWrmaRmVdSUuzlUgN+efGSrElr8Bqe3XRbXWiUJHnIwr268kV9HctvWO6 TPsbPS5q0EOhW0Szi/ib/Ayr6hJozPbZa9EonwS5jllNwMXmWVG5VZ3F3CRMfPjB pCzCQxOf45fauEGwzALVVzJLTiV3P69eivUfNmdaIwr6HI0LmR1vgufiGTYaOnjZ So8a7sYvPdUkESJUmRl5GC86Kp45ou3c57x83Ok3gK/CMZITOJxUGzW+14euPm3u NMEQrZ5qUYZzXRy2uVFPjcIji/c0aQpTfxrzyrR4V32Q7vj3jt/0aql69iPT8pem r+f5V/4CZIOWN6VsBLljTKjAvw== -----END CERTIFICATE-----Generated at Wed May 13 07:29:44 2026 by rpki-client