$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: 8MkkU0Z6RNwXbM7wM7wpGe6hZ4f6PGrtnUC3RdsJBdI= Subject key identifier: 30:62:D3:E3:B8:EE:A5:C8:99:E5:2C:B8:AF:C8:D9:74:F8:4A:A1:70 Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 010E Signing time: Wed 25 Mar 2026 05:12:58 +0000 Manifest this update: Wed 25 Mar 2026 05:12:58 +0000 Manifest next update: Wed 01 Apr 2026 05:12:58 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: jkWP0psI8FjEsPsNcpp6mhrWecosApCQ0yqAXN074GY=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: rVa/wWPzr3OwQnrIVB/RLkiVW7fhkqdwgET1KnDvQTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Mar 25 05:12:58 2026 GMT Not After : Apr 1 05:12:58 2026 GMT Subject: CN=69c36eda-58f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:ac:ea:f5:1b:c2:98:cb:94:17:19:f3:d6: f4:fd:72:0d:e2:d6:1c:c6:08:13:cc:34:42:cc:0b: fe:7f:3a:00:19:d7:e9:81:f3:d5:4d:b5:40:f7:e3: 98:9e:4b:9c:93:69:02:d8:ed:8b:fb:da:04:25:13: f0:67:c5:01:4c:5e:6f:20:03:2a:d7:f5:e6:20:dd: 76:22:6f:9b:bb:a5:c2:a0:17:f0:19:32:d2:91:ae: e1:a1:f9:e9:1d:f8:3d:69:0d:1e:0f:5e:39:12:03: ab:9e:88:79:08:6a:9f:81:36:7a:43:d5:19:47:16: a1:5e:6b:b3:71:1d:a3:5f:3e:3a:29:4f:13:ac:0f: 12:6a:48:83:56:fe:52:a1:10:83:d9:cf:84:db:b8: ac:6d:33:96:68:97:20:94:3a:35:33:45:10:bf:0b: 03:52:59:0d:ed:7d:92:6c:96:48:e7:5d:4d:fa:4f: 34:19:b8:81:77:9e:9a:f8:b5:f6:77:0d:e8:01:81: df:62:14:93:f1:17:57:c6:e5:5f:f6:12:d2:1d:82: e8:0a:82:08:b8:0a:98:d9:0b:a6:cd:86:78:e4:14: 8f:cc:14:14:1c:55:44:91:4b:35:be:3d:b9:62:e8: 26:4c:14:8b:81:9e:5f:28:03:e2:aa:f8:f3:c3:50: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:62:D3:E3:B8:EE:A5:C8:99:E5:2C:B8:AF:C8:D9:74:F8:4A:A1:70 X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a5:a6:66:f2:2d:f0:db:3d:16:62:ed:3d:3f:8d:ed:a5:a9: 7d:89:b6:12:98:61:06:20:f2:49:bf:30:c7:f2:38:64:8e:a6: 2b:69:fd:55:8f:0b:59:8b:73:23:56:f5:c6:7c:98:90:ec:5a: f4:48:bb:65:d0:2b:7e:07:a0:2c:47:66:5d:d8:44:9b:80:6c: b5:57:a6:d6:de:d7:60:0f:a6:05:0d:e8:de:f9:69:38:94:b0: 04:15:e7:41:5a:e6:c5:49:81:a0:f3:89:24:e2:22:12:88:b1: 56:fe:cb:3c:ee:6b:a5:39:0e:52:b3:b6:0f:7b:b0:1c:b8:a1: d5:43:3f:7c:14:8e:06:d7:04:54:75:ff:6f:bb:fc:f2:ce:36: 12:e6:46:d1:51:aa:25:cf:8a:de:a3:8d:43:e9:62:bd:ba:c0: 84:63:d6:cb:c2:79:71:68:c7:22:86:18:03:52:3f:e8:8e:97: 71:12:7a:be:7b:40:7e:f3:63:3c:8b:73:db:ac:ca:7c:ea:43: 58:81:17:1b:7b:d9:87:c9:a0:14:fa:d9:aa:35:fc:96:82:6d: e2:c9:86:23:b7:17:8f:09:1f:72:db:0f:82:2e:9b:95:cd:da: 55:f8:5e:02:1b:ae:e8:f9:1a:4c:8f:fd:7d:54:8d:17:eb:c6: d6:2b:e3:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjYwMzI1MDUxMjU4WhcNMjYwNDAxMDUxMjU4WjAYMRYwFAYD VQQDEw02OWMzNmVkYS01OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7h6s6vUbwpjLlBcZ89b0/XIN4tYcxggTzDRCzAv+fzoAGdfpgfPVTbVA9+OY nkuck2kC2O2L+9oEJRPwZ8UBTF5vIAMq1/XmIN12Im+bu6XCoBfwGTLSka7hofnp Hfg9aQ0eD145EgOrnoh5CGqfgTZ6Q9UZRxahXmuzcR2jXz46KU8TrA8SakiDVv5S oRCD2c+E27isbTOWaJcglDo1M0UQvwsDUlkN7X2SbJZI511N+k80GbiBd56a+LX2 dw3oAYHfYhST8RdXxuVf9hLSHYLoCoIIuAqY2QumzYZ45BSPzBQUHFVEkUs1vj25 YugmTBSLgZ5fKAPiqvjzw1ArKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBi0+O4 7qXImeUsuK/I2XT4SqFwMB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvKWmZvIt8Ns9FmLtPT+N7aWpfYm2EphhBiDySb8wx/I4ZI6mK2n9VY8LWYtz I1b1xnyYkOxa9Ei7ZdArfgegLEdmXdhEm4BstVem1t7XYA+mBQ3o3vlpOJSwBBXn QVrmxUmBoPOJJOIiEoixVv7LPO5rpTkOUrO2D3uwHLih1UM/fBSOBtcEVHX/b7v8 8s42EuZG0VGqJc+K3qONQ+livbrAhGPWy8J5cWjHIoYYA1I/6I6XcRJ6vntAfvNj PItz26zKfOpDWIEXG3vZh8mgFPrZqjX8loJt4smGI7cXjwkfctsPgi6blc3aVfhe Ahuu6PkaTI/9fVSNF+vG1ivjlQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:44 2026 by rpki-client