$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json) Hash identifier: GAadDUvuPNl6BvP9ZfupTFo7o2wR/OmuHBB3NEgN3lY= Subject key identifier: CD:23:A5:2B:52:DB:E7:C5:54:36:9E:C9:B4:F0:F0:D4:EB:61:57:AB Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft Manifest number: 08A8 Signing time: Thu 26 Mar 2026 20:23:41 +0000 Manifest this update: Thu 26 Mar 2026 20:23:40 +0000 Manifest next update: Thu 02 Apr 2026 20:23:40 +0000 Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: E+z0FKvB5TnhQ5Wvk0qF85P/XRq3jyp2VmH70mbpsN8=) 2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: UM57hSN5aLzJ1miAi0WEBED5Yq0amggNMnfYd46Qpgk=) 3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: IuNSCN6yrNlc/0wSwd/g4xZGin/ZqKczpvImaghk0B4=) 4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: oW2JhsPjI+GKnJ32ROir3XwQDxUOtlZsdWGXqlOBZI0=) 5: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: FzAXOXMg8ypDm7weH1JrGkQxJTnIfLB9Zd0EsKEe/7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: Mar 26 20:23:40 2026 GMT Not After : Apr 2 20:23:40 2026 GMT Subject: CN=69c595cd-1f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:65:76:b0:8d:a9:8d:56:75:1f:3e:57:6d: 7b:e8:ad:ce:2c:9e:d7:a8:e2:50:a8:57:6c:96:00: b8:61:4a:08:0b:c9:20:89:c7:0c:a6:72:ba:a0:cc: 75:51:d2:88:5c:fa:e6:67:85:a6:44:3b:84:07:29: 1c:d1:f7:c5:9c:f2:da:e5:4f:bd:9f:68:e8:d5:43: ee:49:53:5f:9d:5f:eb:68:8c:0d:55:76:f5:d8:86: 81:b3:2f:04:22:4a:a3:e2:74:7b:18:f1:29:a4:4d: 66:57:8d:1b:28:28:f3:3a:dd:a3:c0:8c:91:56:84: 02:5f:b8:cc:d4:7c:4e:82:bd:af:ca:b0:9b:74:92: 1f:ef:90:35:07:01:5a:f9:3e:d2:4f:42:59:dc:64: 52:2d:90:52:83:4e:92:26:33:c1:c7:c1:ee:d3:6c: 23:b2:86:62:ca:3c:67:c0:c9:d4:ef:e1:8c:a6:19: be:0b:b0:f1:5c:3b:b9:0e:c6:62:fe:84:99:7c:b5: 1d:8f:3f:39:d1:d5:8f:dc:c4:03:ff:49:03:3e:d2: 34:b9:74:07:2a:dd:4e:be:32:c7:5d:3d:a1:19:a5: f5:95:65:e3:cf:01:48:27:41:fd:12:2a:33:3c:3a: 9e:58:e8:e2:a6:19:a6:62:69:4d:b5:67:d5:61:9a: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:23:A5:2B:52:DB:E7:C5:54:36:9E:C9:B4:F0:F0:D4:EB:61:57:AB X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:64:f3:81:db:35:61:79:84:eb:82:cc:50:1d:62:a2:6e:84: 5e:e9:0c:98:f6:37:1e:3e:3f:95:9c:28:de:97:96:84:61:15: 1a:b0:4a:13:d9:c4:46:75:dd:52:a8:ff:5c:fd:12:da:c7:be: 31:fe:98:4f:0a:fb:a2:eb:95:09:93:19:83:32:43:9f:75:5d: 73:45:d2:71:ed:97:5b:59:5e:e4:69:fd:98:31:9f:32:50:08: ef:15:bd:ac:00:32:51:7d:ea:fe:2e:5b:8e:b6:9c:61:f2:ad: 99:13:c2:89:37:f6:68:ac:a4:6b:ee:ad:c1:97:3f:33:a4:3c: 5a:fc:1b:66:58:d3:51:fb:a7:33:cd:f8:15:89:cc:55:be:7e: c4:10:03:df:20:d9:a5:c7:bc:e7:a3:18:a9:29:22:60:72:fa: c4:e0:a6:60:b7:93:e1:c2:94:1a:76:0e:a8:2d:2c:b1:72:06: fb:d3:89:a2:f5:09:86:06:c5:4f:e2:91:e7:af:9d:49:8c:67: 4e:91:1b:7e:46:f1:05:e1:4e:7e:77:1c:a6:ca:a8:09:9a:c3: a1:e1:de:aa:5f:0a:a7:5c:15:57:17:9c:29:9d:04:17:bb:25: 7a:d0:d4:81:2c:2a:6c:cb:1f:9a:e1:06:f1:6b:82:b7:48:72: 67:5d:7d:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjYwMzI2MjAyMzQwWhcNMjYwNDAyMjAyMzQwWjAYMRYwFAYD VQQDEw02OWM1OTVjZC0xZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrZldrCNqY1WdR8+V2176K3OLJ7XqOJQqFdslgC4YUoIC8kgiccMpnK6oMx1 UdKIXPrmZ4WmRDuEBykc0ffFnPLa5U+9n2jo1UPuSVNfnV/raIwNVXb12IaBsy8E Ikqj4nR7GPEppE1mV40bKCjzOt2jwIyRVoQCX7jM1HxOgr2vyrCbdJIf75A1BwFa +T7ST0JZ3GRSLZBSg06SJjPBx8Hu02wjsoZiyjxnwMnU7+GMphm+C7DxXDu5DsZi /oSZfLUdjz850dWP3MQD/0kDPtI0uXQHKt1OvjLHXT2hGaX1lWXjzwFIJ0H9Eioz PDqeWOjiphmmYmlNtWfVYZpTdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0jpStS 2+fFVDaeybTw8NTrYVerMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6 N0I2VWE4RVBnVGRwU2V2c0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOmTzgds1YXmE64LMUB1iom6EXukMmPY3Hj4/lZwo3peWhGEVGrBKE9nERnXd Uqj/XP0S2se+Mf6YTwr7ouuVCZMZgzJDn3Vdc0XSce2XW1le5Gn9mDGfMlAI7xW9 rAAyUX3q/i5bjracYfKtmRPCiTf2aKyka+6twZc/M6Q8WvwbZljTUfunM834FYnM Vb5+xBAD3yDZpce856MYqSkiYHL6xOCmYLeT4cKUGnYOqC0ssXIG+9OJovUJhgbF T+KR56+dSYxnTpEbfkbxBeFOfnccpsqoCZrDoeHeql8Kp1wVVxecKZ0EF7sletDU gSwqbMsfmuEG8WuCt0hyZ119/A== -----END CERTIFICATE-----Generated at Fri Mar 27 01:50:18 2026 by rpki-client