$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: 27O1ptn9mhS0hxmRmz1zLjdIBx0k50LteL0qhkBQ+Vs= Subject key identifier: 2D:BD:C4:A9:7A:55:E2:6C:A8:2D:45:C2:C6:66:46:A2:78:B0:5D:88 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 022A Signing time: Fri 27 Mar 2026 02:16:27 +0000 Manifest this update: Fri 27 Mar 2026 02:16:26 +0000 Manifest next update: Fri 03 Apr 2026 02:16:26 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: emDEdoSFNruthlV+z/Bci5JPyxwdsRvC+1Dq14uHq+0=) 2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: L89wc7yfxvApawHRBwOAH/lKcyL6r3r7VvXNehOFIZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Mar 27 02:16:26 2026 GMT Not After : Apr 3 02:16:26 2026 GMT Subject: CN=69c5e87b-b7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:9d:99:7c:7f:32:f6:42:b0:ac:22:75:82: 6c:43:de:df:88:37:5a:ef:70:06:47:61:5c:dd:66: bf:bf:c4:e3:60:14:5a:23:6e:84:d5:e3:3e:a1:63: 79:42:cb:e8:24:1b:31:b3:57:fb:f7:3a:96:5e:60: b0:22:c5:06:78:c7:63:3a:05:2d:07:29:f8:48:fa: 95:f8:aa:7e:d0:ba:64:47:01:f9:a1:e2:9c:9d:5a: 0a:ed:72:13:22:08:f2:2e:ce:7f:9d:cf:2d:71:f7: 8b:e8:0c:a8:e3:b7:6a:7d:d7:0a:5c:0f:48:3a:75: 14:52:f0:24:4b:71:c7:61:2f:1e:06:70:af:ce:c1: 5f:3e:9d:a2:f0:fc:e4:25:9e:18:ce:2e:f7:ed:fe: dc:25:5b:ec:37:c1:c0:a2:1d:85:36:bb:ec:5a:3b: 78:2a:fd:54:79:a0:b3:60:6c:24:59:90:e9:3d:8a: b7:4c:b3:9e:d8:59:42:9c:01:b8:f3:88:93:01:82: d7:b3:12:63:15:54:62:95:02:af:41:95:06:86:8e: 57:00:af:6d:b0:95:12:ce:e6:11:94:9d:b2:d1:c0: e3:a7:2f:4a:1b:95:69:c2:88:a8:fc:b8:c4:f9:89: 08:00:ac:97:b1:e5:fc:d9:9a:1d:14:f9:ff:04:47: 85:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:C4:A9:7A:55:E2:6C:A8:2D:45:C2:C6:66:46:A2:78:B0:5D:88 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d1:d6:aa:87:f3:f7:ae:bd:10:5b:bf:a2:fd:41:28:da:98: 26:5a:c6:07:d9:80:03:16:36:87:49:8a:97:44:0c:8f:6a:ab: bb:2f:51:09:5c:39:2c:67:a7:07:22:e1:82:38:35:5e:b2:5f: 85:7a:b8:42:34:b1:ab:8a:be:ea:25:9b:55:15:4c:15:07:0a: f0:9a:49:1b:40:02:5d:6f:61:75:69:1c:ed:1e:06:d2:66:9c: 17:de:87:b0:4d:17:57:72:a0:d0:4b:90:ff:89:a8:4e:77:b9: 7f:0f:7f:6f:8b:dc:ab:dd:a4:97:1c:2f:f7:0a:44:31:4a:27: bf:dd:b7:8c:d6:97:3b:57:18:be:41:a1:11:57:c0:55:ef:b1: 0e:35:90:b0:a9:19:52:eb:1e:d7:dc:46:88:ff:3f:d9:a9:a3: 38:0f:59:9a:6a:10:a7:dc:34:00:5d:55:23:6c:fd:5a:37:df: 75:35:ba:9c:58:00:82:1f:88:7c:d2:1f:df:16:54:a2:cb:0d: 06:86:ee:a1:05:89:b7:98:ec:ce:c2:1c:64:70:f1:51:ff:df: 5f:d7:8f:01:f2:6c:f8:e9:3a:9c:3a:dc:7b:d5:15:0a:cd:53: 91:7c:fc:e9:7e:0b:7e:15:d0:6d:b2:70:1f:55:a7:ba:f3:82: d0:20:e8:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjYwMzI3MDIxNjI2WhcNMjYwNDAzMDIxNjI2WjAYMRYwFAYD VQQDEw02OWM1ZTg3Yi1iN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3OdmXx/MvZCsKwidYJsQ97fiDda73AGR2Fc3Wa/v8TjYBRaI26E1eM+oWN5 QsvoJBsxs1f79zqWXmCwIsUGeMdjOgUtByn4SPqV+Kp+0LpkRwH5oeKcnVoK7XIT IgjyLs5/nc8tcfeL6Ayo47dqfdcKXA9IOnUUUvAkS3HHYS8eBnCvzsFfPp2i8Pzk JZ4Yzi737f7cJVvsN8HAoh2FNrvsWjt4Kv1UeaCzYGwkWZDpPYq3TLOe2FlCnAG4 84iTAYLXsxJjFVRilQKvQZUGho5XAK9tsJUSzuYRlJ2y0cDjpy9KG5Vpwoio/LjE +YkIAKyXseX82ZodFPn/BEeFZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC29xKl6 VeJsqC1FwsZmRqJ4sF2IMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT9HWqofz9669EFu/ov1BKNqYJlrGB9mAAxY2h0mKl0QMj2qruy9RCVw5LGen ByLhgjg1XrJfhXq4QjSxq4q+6iWbVRVMFQcK8JpJG0ACXW9hdWkc7R4G0macF96H sE0XV3Kg0EuQ/4moTne5fw9/b4vcq92klxwv9wpEMUonv923jNaXO1cYvkGhEVfA Ve+xDjWQsKkZUuse19xGiP8/2amjOA9ZmmoQp9w0AF1VI2z9WjffdTW6nFgAgh+I fNIf3xZUossNBobuoQWJt5jszsIcZHDxUf/fX9ePAfJs+Ok6nDrce9UVCs1TkXz8 6X4LfhXQbbJwH1WnuvOC0CDoUQ== -----END CERTIFICATE-----Generated at Sat Mar 28 13:36:24 2026 by rpki-client