$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: Ey02469qUHBwJzwmvi7GRK795ZMOq+/Ac0J/PwGcsJU= Subject key identifier: 87:08:CE:4B:D3:6E:40:18:2A:A7:F4:FE:F4:9C:8B:31:08:DA:29:32 Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 078B Signing time: Tue 24 Mar 2026 22:38:27 +0000 Manifest this update: Tue 24 Mar 2026 22:38:26 +0000 Manifest next update: Tue 31 Mar 2026 22:38:26 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: oiLnkyX5jORtZpkBFqPpVTam08YIm6dEPLUZ+8hak+I=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: KSFUQns+jUtZXbMl5PwqohaAbLzaofo6YcJauiEke4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Mar 24 22:38:26 2026 GMT Not After : Mar 31 22:38:26 2026 GMT Subject: CN=69c31262-7d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:11:2b:1c:8c:05:15:6b:9c:94:21:c5:bd: 57:fa:9b:1b:3b:1d:a9:a9:20:fb:cd:a0:4d:d2:56: 8c:60:37:65:68:80:42:76:c4:cd:8f:2b:e3:96:6a: 74:fe:bb:de:da:59:2b:d1:a7:12:b2:fc:95:ce:05: c0:2b:71:3d:e6:b7:c6:34:cc:80:cd:3b:c2:99:30: e5:22:d4:aa:cb:2e:18:02:f1:e4:85:63:c5:11:b5: 40:c5:ab:13:0c:9d:a1:81:c3:17:df:0a:ab:ee:d3: 85:df:ce:05:b7:3e:5d:93:1b:e1:52:d5:00:f0:27: 6d:77:20:b2:f6:ab:0e:bd:e1:1a:18:e9:c4:62:3f: 89:41:16:57:b9:04:60:1a:31:96:9a:b8:35:1f:13: 41:bf:a1:40:31:5b:5e:e7:4a:48:3f:35:08:a1:bd: 26:3d:82:2c:09:51:25:c3:7a:86:f3:8c:7e:4f:3a: c5:b5:31:3d:93:0f:31:c5:ac:c7:ee:eb:30:4c:1a: df:30:94:e5:d8:1e:28:ad:7b:67:8b:f8:5b:90:32: b9:c1:2e:c1:89:1d:42:ae:e4:1a:a0:61:a0:a2:d8: 50:56:54:69:2e:ec:30:ac:c6:29:3d:ff:e0:a1:60: 4c:ca:52:e2:a2:7a:c1:58:64:6e:30:43:9c:6a:df: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:08:CE:4B:D3:6E:40:18:2A:A7:F4:FE:F4:9C:8B:31:08:DA:29:32 X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2d:88:f7:e5:f2:ac:99:37:65:fb:74:11:c2:ec:4c:58:c5: 94:c0:2f:35:a6:8a:f3:49:39:ab:b1:e1:6d:28:54:2e:f2:4d: 09:1c:1f:a8:69:b3:b3:c4:dd:e3:13:a1:ac:6a:fa:ee:24:54: 5a:88:54:52:d0:77:b7:a8:66:75:a0:b6:e2:48:5d:73:10:95: c9:e9:89:63:75:e6:66:3c:44:1f:32:86:ca:16:38:e0:a4:c5: fe:13:a1:53:33:f3:64:40:89:34:5c:2f:f6:3b:2e:2a:70:da: 76:8e:d0:73:09:91:f5:51:03:ca:51:b2:a1:c4:0c:50:43:c4: d9:7a:10:50:df:77:c6:63:d3:cd:ab:4a:c8:6a:7b:10:94:2b: 8f:ba:07:f8:aa:8d:fc:bb:5f:5b:04:ba:0b:ea:97:32:d3:27: 73:1f:7d:df:78:9f:a0:f0:97:a4:bb:e0:1d:6a:b4:dc:13:50: c6:1f:b7:1c:bf:98:b5:18:3c:1d:ca:c9:e8:e1:26:e8:5b:1f: 54:ca:a8:a4:49:39:52:8f:16:11:81:8d:69:a6:96:4a:ef:52: 98:68:12:22:f0:32:c7:12:42:ea:ff:21:1c:4b:ef:34:84:f6: 53:d1:44:49:d8:11:17:02:20:10:75:92:63:b8:fd:7f:e7:b3: b4:b4:53:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjYwMzI0MjIzODI2WhcNMjYwMzMxMjIzODI2WjAYMRYwFAYD VQQDEw02OWMzMTI2Mi03ZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQwRKxyMBRVrnJQhxb1X+psbOx2pqSD7zaBN0laMYDdlaIBCdsTNjyvjlmp0 /rve2lkr0acSsvyVzgXAK3E95rfGNMyAzTvCmTDlItSqyy4YAvHkhWPFEbVAxasT DJ2hgcMX3wqr7tOF384Ftz5dkxvhUtUA8CdtdyCy9qsOveEaGOnEYj+JQRZXuQRg GjGWmrg1HxNBv6FAMVte50pIPzUIob0mPYIsCVElw3qG84x+TzrFtTE9kw8xxazH 7uswTBrfMJTl2B4orXtni/hbkDK5wS7BiR1CruQaoGGgothQVlRpLuwwrMYpPf/g oWBMylLionrBWGRuMEOcat92DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcIzkvT bkAYKqf0/vScizEI2ikyMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAci2I9+XyrJk3Zft0EcLsTFjFlMAvNaaK80k5q7HhbShULvJNCRwfqGmzs8Td 4xOhrGr67iRUWohUUtB3t6hmdaC24khdcxCVyemJY3XmZjxEHzKGyhY44KTF/hOh UzPzZECJNFwv9jsuKnDado7QcwmR9VEDylGyocQMUEPE2XoQUN93xmPTzatKyGp7 EJQrj7oH+KqN/LtfWwS6C+qXMtMncx9933ifoPCXpLvgHWq03BNQxh+3HL+YtRg8 HcrJ6OEm6FsfVMqopEk5Uo8WEYGNaaaWSu9SmGgSIvAyxxJC6v8hHEvvNIT2U9FE SdgRFwIgEHWSY7j9f+eztLRTYQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:06:30 2026 by rpki-client