$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: gOi1NCySkfD4rPtYwvvAFZrBs6xUUmwTre/Hygpkgfg= Subject key identifier: 68:F6:7C:62:2A:0F:CD:FF:47:B2:6E:54:BA:13:75:6C:F0:74:EB:1C Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: 0196 Signing time: Wed 13 May 2026 04:26:52 +0000 Manifest this update: Wed 13 May 2026 04:26:52 +0000 Manifest next update: Wed 20 May 2026 04:26:52 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: vUQsl8sw9mxzh6prs4roNfIsfptwZhjiPB70wXsjSWQ=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: May 13 04:26:52 2026 GMT Not After : May 20 04:26:52 2026 GMT Subject: CN=6a03fd8c-99bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b9:3f:34:fa:4a:ac:8e:b0:99:1c:5d:8d:5e: 03:3f:8c:ad:39:fa:a4:5a:55:96:b6:ed:af:31:cb: e8:cc:65:2c:09:3d:35:06:12:54:16:d8:bf:58:bd: dc:97:0d:a3:5e:39:2f:e6:4e:ea:51:b2:9b:83:ed: 89:60:1a:bb:d4:b3:e0:7a:fc:89:13:cb:9d:45:ee: f2:e3:b2:44:fa:e0:ac:50:0f:17:01:3d:ab:0b:de: 3c:30:b0:b1:fa:e7:e4:c8:66:5d:f2:f7:a7:07:25: 59:b4:86:33:2a:e3:3c:c1:81:91:ce:5b:37:0f:d2: 21:b7:c4:8a:de:a5:0d:d0:45:5b:94:67:b5:c8:d3: d1:e7:f0:98:be:c5:4d:e2:40:e3:b6:ea:6d:0f:fd: 48:48:fd:ab:97:1d:c1:38:3f:52:9d:0c:0a:4f:39: d6:fc:1a:65:1e:a0:38:1d:ff:90:c8:8d:21:b5:a3: 62:63:04:2a:64:ee:54:a2:7d:79:86:59:47:23:0e: 96:60:06:6d:3b:f0:1c:02:4e:d2:22:f6:a0:92:b2: 91:cf:6b:3e:82:a1:9e:4b:73:03:66:6d:92:aa:49: 3d:a5:a7:15:77:61:5b:80:a6:7e:40:62:dc:52:15: db:76:09:b9:3d:53:02:e5:94:fa:d2:93:4c:ad:91: cd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F6:7C:62:2A:0F:CD:FF:47:B2:6E:54:BA:13:75:6C:F0:74:EB:1C X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:84:b4:45:97:a4:7b:96:a2:f5:74:84:5b:e2:41:37:f5:22: b5:87:fe:ae:f6:02:41:66:97:30:33:a4:10:25:2c:ef:5a:c0: b5:a2:82:28:a1:4a:4b:6d:26:97:d9:3b:79:e9:5b:98:f8:5b: 6e:69:13:8e:73:7f:9c:d7:b6:45:6f:14:4e:4e:0b:28:b5:80: 06:f4:c2:98:69:c7:9d:04:1c:dc:ad:02:f0:e4:b4:fd:e0:c4: 50:f8:82:12:b3:4e:b2:49:80:bc:4f:d4:d2:55:ca:06:e9:10: 86:1e:b0:87:ab:38:ed:35:7e:4c:a8:56:ca:0c:6f:56:23:fb: 8a:3e:c1:41:45:81:f1:74:2b:01:7b:51:2a:1e:e1:d5:be:9a: 69:f1:81:50:c7:fe:7f:bf:0a:e5:d0:c2:85:8d:e3:0e:2d:f9: 95:1e:b8:15:dc:5f:c7:ea:8d:6f:88:0d:c4:9c:21:27:f4:3c: bc:b1:f5:8a:fd:6e:9d:92:39:dd:96:2c:da:d1:1a:eb:bd:ce: c2:d9:b4:3a:90:66:f8:27:ae:e9:02:89:f5:13:d7:a8:4f:cb: d8:79:ef:21:c4:27:04:74:90:d5:25:d2:85:0d:2e:7f:01:4a: dd:a6:3d:ff:3f:38:43:a8:b0:2e:f8:71:84:b2:cd:f5:8e:ab: 1f:ec:f9:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD MjBBRTUzODYwHhcNMjYwNTEzMDQyNjUyWhcNMjYwNTIwMDQyNjUyWjAYMRYwFAYD VQQDEw02YTAzZmQ4Yy05OWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Lk/NPpKrI6wmRxdjV4DP4ytOfqkWlWWtu2vMcvozGUsCT01BhJUFti/WL3c lw2jXjkv5k7qUbKbg+2JYBq71LPgevyJE8udRe7y47JE+uCsUA8XAT2rC948MLCx +ufkyGZd8venByVZtIYzKuM8wYGRzls3D9Iht8SK3qUN0EVblGe1yNPR5/CYvsVN 4kDjtuptD/1ISP2rlx3BOD9SnQwKTznW/BplHqA4Hf+QyI0htaNiYwQqZO5Uon15 hllHIw6WYAZtO/AcAk7SIvagkrKRz2s+gqGeS3MDZm2Sqkk9pacVd2FbgKZ+QGLc UhXbdgm5PVMC5ZT60pNMrZHNSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGj2fGIq D83/R7JuVLoTdWzwdOscMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4 RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN U1R5S19INkcxbW5DQ3VVNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeoS0RZeke5ai9XSEW+JBN/UitYf+rvYCQWaXMDOkECUs71rAtaKCKKFKS20m l9k7eelbmPhbbmkTjnN/nNe2RW8UTk4LKLWABvTCmGnHnQQc3K0C8OS0/eDEUPiC ErNOskmAvE/U0lXKBukQhh6wh6s47TV+TKhWygxvViP7ij7BQUWB8XQrAXtRKh7h 1b6aafGBUMf+f78K5dDChY3jDi35lR64Fdxfx+qNb4gNxJwhJ/Q8vLH1iv1unZI5 3ZYs2tEa673Owtm0OpBm+Ceu6QKJ9RPXqE/L2HnvIcQnBHSQ1SXShQ0ufwFK3aY9 /z84Q6iwLvhxhLLN9Y6rH+z5GQ== -----END CERTIFICATE-----Generated at Wed May 13 12:50:19 2026 by rpki-client