$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: JRE/hb1Ic8XpUFU8O51MOogKkfldRSOieK8kdH16hE0= Subject key identifier: DB:87:C7:23:FE:9D:B0:9A:64:2D:79:7B:EA:E7:03:01:D1:FF:F2:73 Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 04E3 Signing time: Tue 24 Mar 2026 23:27:27 +0000 Manifest this update: Tue 24 Mar 2026 23:27:26 +0000 Manifest next update: Tue 31 Mar 2026 23:27:26 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: xj6j9L3O0DorCsh44EdI64sbKMsW3u5JTnEIeZVs5E8=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: cud5ZYppqVgYBIjkpiC3yJU+yvRz4SnHLnsmET8Y4GA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: Mar 24 23:27:26 2026 GMT Not After : Mar 31 23:27:26 2026 GMT Subject: CN=69c31ddf-53ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:d8:61:10:fa:24:92:68:24:29:60:c7:25: be:5c:e4:67:9a:0f:f4:9d:ff:a3:bc:f8:26:72:bd: ac:f1:72:58:74:87:a0:5f:6f:8e:1c:58:93:e0:c6: 72:6f:84:6e:da:b0:46:c5:3d:96:16:16:ca:bd:2f: 87:78:f2:b6:1c:b0:ef:4d:60:cf:d0:96:15:bb:30: 9a:48:33:a6:58:e5:92:15:5a:e8:b4:9c:a7:b3:61: e6:e1:68:17:4e:9a:80:5c:33:b5:fe:75:ef:67:f1: b8:30:25:30:0c:4d:bf:45:2c:48:a2:59:d3:c5:6b: 2c:11:e9:5c:9e:6d:c2:a5:d7:f1:c6:9b:e5:e4:61: 31:1f:7c:4a:f5:29:d7:af:7d:75:da:77:f3:b6:29: c3:1d:55:3d:47:6d:52:25:55:88:d9:4f:06:55:df: ba:b6:3d:ce:e7:ba:ba:4c:0e:93:11:be:dd:3e:fa: 59:bf:dc:67:42:77:27:f2:4d:fc:72:14:c2:71:6a: b3:52:66:c1:9c:e8:79:cc:8a:1d:bc:aa:8b:82:ca: b8:e5:69:8f:f4:f3:28:8d:ee:5b:1a:f9:64:a8:4c: 85:b8:59:19:21:df:04:d4:eb:c2:9f:5d:d5:e3:fb: 5d:35:44:0a:e4:9a:1f:bb:22:92:12:e7:1e:c2:3f: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:87:C7:23:FE:9D:B0:9A:64:2D:79:7B:EA:E7:03:01:D1:FF:F2:73 X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f0:cf:04:4c:9c:2c:ba:96:9c:00:e2:f8:2c:40:5a:e1:6f: 6e:68:a8:64:05:15:0c:08:2c:3e:15:b5:ee:43:54:83:26:27: 15:89:82:02:24:c6:05:0e:77:65:ee:c9:3a:a9:7b:a4:c8:21: 32:93:d0:aa:0d:75:49:20:92:26:17:15:c4:7d:3e:03:36:d7: 41:8b:22:75:a1:b5:63:81:da:ee:cb:22:bd:47:4a:40:02:b7: bc:eb:e7:b5:da:5b:17:68:cb:55:ad:d9:72:76:ef:51:27:9e: 25:9f:cc:ac:62:a5:0c:df:a7:9b:ef:e7:d8:71:db:ce:2e:13: 2a:c4:7e:bb:ed:be:de:52:f9:6c:0e:63:9b:f4:ce:15:ad:49: 8f:03:2c:f7:b5:ea:56:7f:e6:2b:93:92:6b:60:b3:62:f8:52: 1a:c2:52:14:4e:96:c7:c6:56:f2:19:56:fd:a1:da:51:4a:6d: 21:8d:46:43:31:66:88:56:5c:33:23:6c:e3:1c:fb:8f:39:92: f8:dc:e1:8d:f7:24:1a:98:f8:cb:6c:8f:f0:dc:9a:74:2c:9a: 56:93:3c:eb:8b:05:0d:88:26:73:99:c6:c6:45:dd:b4:c7:b4: 00:35:69:02:c0:a1:9f:ed:1c:5c:dc:ac:3e:24:ae:be:c2:43: d3:a6:a4:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjYwMzI0MjMyNzI2WhcNMjYwMzMxMjMyNzI2WjAYMRYwFAYD VQQDEw02OWMzMWRkZi01M2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7/YYRD6JJJoJClgxyW+XORnmg/0nf+jvPgmcr2s8XJYdIegX2+OHFiT4MZy b4Ru2rBGxT2WFhbKvS+HePK2HLDvTWDP0JYVuzCaSDOmWOWSFVrotJyns2Hm4WgX TpqAXDO1/nXvZ/G4MCUwDE2/RSxIolnTxWssEelcnm3Cpdfxxpvl5GExH3xK9SnX r3112nfztinDHVU9R21SJVWI2U8GVd+6tj3O57q6TA6TEb7dPvpZv9xnQncn8k38 chTCcWqzUmbBnOh5zIodvKqLgsq45WmP9PMoje5bGvlkqEyFuFkZId8E1OvCn13V 4/tdNUQK5JofuyKSEucewj8DsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuHxyP+ nbCaZC15e+rnAwHR//JzMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT/DPBEycLLqWnADi+CxAWuFvbmioZAUVDAgsPhW17kNUgyYnFYmCAiTGBQ53 Ze7JOql7pMghMpPQqg11SSCSJhcVxH0+AzbXQYsidaG1Y4Ha7ssivUdKQAK3vOvn tdpbF2jLVa3ZcnbvUSeeJZ/MrGKlDN+nm+/n2HHbzi4TKsR+u+2+3lL5bA5jm/TO Fa1JjwMs97XqVn/mK5OSa2CzYvhSGsJSFE6Wx8ZW8hlW/aHaUUptIY1GQzFmiFZc MyNs4xz7jzmS+NzhjfckGpj4y2yP8NyadCyaVpM864sFDYgmc5nGxkXdtMe0ADVp AsChn+0cXNysPiSuvsJD06akLg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:48 2026 by rpki-client