$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: sTVfPIKUQLdlzw+aRtlxtutONt5oadJM2XItYgivtiI= Subject key identifier: 74:AB:3C:89:B2:D8:2C:BC:88:2E:30:99:DD:B0:4D:BB:57:CD:01:B4 Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: 017D Signing time: Wed 25 Mar 2026 03:56:20 +0000 Manifest this update: Wed 25 Mar 2026 03:56:20 +0000 Manifest next update: Wed 01 Apr 2026 03:56:20 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: QQDVhncda7GCV5aHIBbwXYdpb6qMhiAUDgekeQmukDw=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: Mar 25 03:56:20 2026 GMT Not After : Apr 1 03:56:20 2026 GMT Subject: CN=69c35ce4-511b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:f4:f4:86:d5:67:26:18:b5:72:37:7d:c4: a8:2f:37:35:5c:ef:fb:e0:01:19:39:03:6f:c7:5a: 48:5c:1c:58:dd:67:c9:e0:dc:bd:35:cb:09:3f:79: 99:1a:33:54:24:ac:e7:c2:21:d2:8c:2f:ad:a6:c5: 28:41:5a:8d:2e:0a:91:73:a0:e9:99:54:40:89:fe: 65:54:c4:a3:18:52:41:b3:3e:07:6c:3c:2f:04:89: d7:48:d4:f1:65:a3:0e:62:2e:ac:20:f2:c7:1b:4a: 2e:8a:cc:53:cf:57:8f:61:ee:0d:82:44:3a:18:12: 1f:c4:60:8d:d0:c6:46:52:b4:b4:b0:d1:89:94:e7: 02:9c:8a:b1:62:8f:01:46:c5:7d:82:37:f7:73:5e: 33:26:aa:88:86:08:e1:e7:8b:96:d0:7f:25:f5:5c: 25:2e:f2:e6:6d:36:f6:97:6e:2c:3c:12:67:d2:78: 46:1a:7b:df:0d:2a:07:44:06:15:5b:f1:b4:58:d4: 84:3d:ba:86:75:f2:ad:3a:e5:5e:f9:51:3e:18:89: 32:39:3a:44:87:c2:13:41:86:e6:50:81:82:7e:84: c3:d3:19:88:78:52:12:96:2a:11:82:c9:96:96:0f: a7:e0:a5:3c:69:cf:18:0c:be:77:31:0a:58:fa:66: 09:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AB:3C:89:B2:D8:2C:BC:88:2E:30:99:DD:B0:4D:BB:57:CD:01:B4 X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f8:3d:fd:c2:33:a8:05:4e:e2:a6:7e:78:ba:09:8e:16:1f: 37:44:cb:dd:6f:a4:8b:aa:08:d7:f6:eb:1c:d0:2e:0f:a7:83: f3:b9:6a:6d:99:21:79:72:1a:51:07:30:42:ef:95:3e:6c:95: f3:05:2f:fc:c2:55:6a:bf:66:b6:0a:bb:58:f3:0d:60:de:da: 88:a6:58:bf:d1:39:63:c1:87:48:f8:e1:b9:6f:2f:54:df:ef: f9:52:24:66:5e:7e:73:1d:3e:11:06:7d:fd:1d:72:f6:f2:e6: 83:6f:78:16:84:d7:c4:50:7c:92:51:1c:8d:67:dd:a1:27:65: 68:28:20:88:04:02:0d:5d:32:c9:c5:6c:cb:48:50:81:17:98: f8:5f:1b:ec:e9:6b:2f:ca:9b:cb:9b:9d:9a:17:5e:c5:bc:e1: a7:98:d1:c7:df:89:06:08:20:d4:95:ea:08:df:30:26:fe:99: 3f:7e:bb:ae:16:2b:53:e0:d7:52:2a:ea:6b:ec:47:98:d1:a0: 5a:10:66:e7:43:66:31:30:e1:92:bf:8f:cb:80:2c:c2:b5:15: 65:1d:46:5d:03:0b:89:2d:f8:20:34:cd:0b:03:ef:45:53:7c: 20:63:45:df:73:13:c4:59:f1:bc:5f:78:11:eb:1b:39:ae:66: f3:51:e7:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD MjBBRTUzODYwHhcNMjYwMzI1MDM1NjIwWhcNMjYwNDAxMDM1NjIwWjAYMRYwFAYD VQQDEw02OWMzNWNlNC01MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWn09IbVZyYYtXI3fcSoLzc1XO/74AEZOQNvx1pIXBxY3WfJ4Ny9NcsJP3mZ GjNUJKznwiHSjC+tpsUoQVqNLgqRc6DpmVRAif5lVMSjGFJBsz4HbDwvBInXSNTx ZaMOYi6sIPLHG0ouisxTz1ePYe4NgkQ6GBIfxGCN0MZGUrS0sNGJlOcCnIqxYo8B RsV9gjf3c14zJqqIhgjh54uW0H8l9VwlLvLmbTb2l24sPBJn0nhGGnvfDSoHRAYV W/G0WNSEPbqGdfKtOuVe+VE+GIkyOTpEh8ITQYbmUIGCfoTD0xmIeFISlioRgsmW lg+n4KU8ac8YDL53MQpY+mYJ6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSrPImy 2Cy8iC4wmd2wTbtXzQG0MB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4 RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN U1R5S19INkcxbW5DQ3VVNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvPg9/cIzqAVO4qZ+eLoJjhYfN0TL3W+ki6oI1/brHNAuD6eD87lqbZkheXIa UQcwQu+VPmyV8wUv/MJVar9mtgq7WPMNYN7aiKZYv9E5Y8GHSPjhuW8vVN/v+VIk Zl5+cx0+EQZ9/R1y9vLmg294FoTXxFB8klEcjWfdoSdlaCggiAQCDV0yycVsy0hQ gReY+F8b7OlrL8qby5udmhdexbzhp5jRx9+JBggg1JXqCN8wJv6ZP367rhYrU+DX Uirqa+xHmNGgWhBm50NmMTDhkr+Py4AswrUVZR1GXQMLiS34IDTNCwPvRVN8IGNF 33MTxFnxvF94EesbOa5m81Hnqg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:22 2026 by rpki-client