$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: 8oSAJr9zzSGpyO4J5b6hu14RWDhwmODvDdFViFxxiTU= Subject key identifier: F8:07:9A:58:B9:53:C5:6E:B7:1F:D6:7A:E2:22:27:9E:6A:23:B6:92 Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 358C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 3555 Signing time: Tue 24 Mar 2026 14:31:27 +0000 Manifest this update: Tue 24 Mar 2026 14:31:27 +0000 Manifest next update: Tue 31 Mar 2026 14:31:27 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: BhWSnrQbXy9sGxYoY1sYWr29ACyv/dplTZrUba9cEzE=) 2: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: NHO8KDV0QFvuFED/5Jw/RLRu+225FkgTd21HwEd+FsI=) 3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: l+7Eu+xg0ulQzOgrjZeAHIZGKSy3zhWEJs8xcq7aCFk=) 4: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: j0xY/53uVqFVDJMak2vPu5OYYbqCNOEfNhjOkMcxhA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13708 (0x358c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Validity Not Before: Mar 24 14:31:27 2026 GMT Not After : Mar 31 14:31:27 2026 GMT Subject: CN=69c2a03f-4aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:87:ef:2d:35:e5:31:6d:d4:b3:79:7e:ab: 0d:cc:f9:55:ab:e5:0f:19:56:f5:7c:cc:66:96:7f: e8:41:01:29:6e:a8:12:61:8c:c6:9b:5b:28:dc:8b: ca:22:50:69:94:b7:35:a9:46:e3:c5:9b:ef:7b:53: c3:42:ae:76:45:75:b7:87:9e:2d:fc:65:da:8b:b5: f2:8b:7c:49:e1:1d:35:fc:46:ae:15:0f:13:30:19: 4b:ed:a4:b4:86:64:cf:95:6b:df:26:1f:ac:ec:a5: 14:17:cd:7e:1f:bb:26:a1:55:ae:3c:73:32:1e:da: e5:f3:1a:0e:8a:c7:c4:8b:7b:51:1e:74:b2:c2:fc: 0f:0e:07:d3:77:9a:96:cd:69:9d:46:b2:c8:39:24: a0:6e:fb:28:9f:50:5b:33:2b:de:3f:a2:32:b6:60: d5:00:1e:e6:9d:fc:02:f7:eb:c6:3a:91:02:a8:a3: 3d:4e:d9:49:cc:2e:fe:2a:c0:94:94:ce:b5:56:d7: 21:e0:9e:9d:d5:20:56:82:c4:8d:1b:aa:fe:e8:37: 27:5f:9d:3f:ab:ee:81:bb:fb:82:67:0d:0d:e7:ae: c9:32:76:16:3e:97:5c:39:53:9e:2d:5c:bf:4b:a4: 10:25:5b:3e:a2:62:38:e5:b0:6f:fb:18:cd:1f:87: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:07:9A:58:B9:53:C5:6E:B7:1F:D6:7A:E2:22:27:9E:6A:23:B6:92 X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bc:33:0a:d0:e7:65:c4:cd:cc:aa:51:bd:98:f1:32:c0:5a: 72:6c:f6:46:f4:32:4a:07:73:cb:32:06:83:17:ca:1d:09:ff: 1c:c0:be:a8:89:63:ff:7d:7d:c1:91:f2:0e:7f:44:fc:f6:67: 9d:14:b5:1c:ad:63:d4:57:f4:26:d9:0b:4b:8e:14:bc:27:ed: 68:49:a3:22:38:45:89:1d:66:5b:04:13:e2:99:b8:0d:40:c0: f4:b8:14:90:6b:60:2d:99:a5:8e:d6:a9:65:4b:b8:60:d3:cc: d5:dc:ac:03:36:c1:02:dd:a6:16:3d:23:94:2e:cc:8a:ac:38: 9b:cf:5a:fc:7e:33:47:1c:23:ce:46:20:2d:31:10:f6:26:84: bf:4c:aa:33:ad:96:e8:ed:9d:e9:ff:90:5f:82:1c:64:06:20: 5e:55:27:e8:e1:bc:49:3b:0b:63:52:5d:13:98:aa:a2:69:0a: 8d:79:33:07:fa:6c:de:fa:94:f7:f8:e9:19:3a:4c:e0:93:62: 04:d6:f1:90:92:06:41:da:e0:06:7f:cb:26:94:49:1a:47:7b: e0:c5:5b:0d:c3:c2:df:f1:92:60:ce:68:77:52:76:9d:45:4d: 6e:af:6a:29:67:27:10:02:e1:40:cd:ff:cd:7a:e3:b7:e0:d1: 29:6a:8f:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjYwMzI0MTQzMTI3WhcNMjYwMzMxMTQzMTI3WjAYMRYwFAYD VQQDEw02OWMyYTAzZi00YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhWH7y015TFt1LN5fqsNzPlVq+UPGVb1fMxmln/oQQEpbqgSYYzGm1so3IvK IlBplLc1qUbjxZvve1PDQq52RXW3h54t/GXai7Xyi3xJ4R01/EauFQ8TMBlL7aS0 hmTPlWvfJh+s7KUUF81+H7smoVWuPHMyHtrl8xoOisfEi3tRHnSywvwPDgfTd5qW zWmdRrLIOSSgbvson1BbMyveP6IytmDVAB7mnfwC9+vGOpECqKM9TtlJzC7+KsCU lM61Vtch4J6d1SBWgsSNG6r+6DcnX50/q+6Bu/uCZw0N567JMnYWPpdcOVOeLVy/ S6QQJVs+omI45bBv+xjNH4fGrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgHmli5 U8Vutx/WeuIiJ55qI7aSMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjrwzCtDnZcTNzKpRvZjxMsBacmz2RvQySgdzyzIGgxfKHQn/HMC+qIlj/319 wZHyDn9E/PZnnRS1HK1j1Ff0JtkLS44UvCftaEmjIjhFiR1mWwQT4pm4DUDA9LgU kGtgLZmljtapZUu4YNPM1dysAzbBAt2mFj0jlC7Miqw4m89a/H4zRxwjzkYgLTEQ 9iaEv0yqM62W6O2d6f+QX4IcZAYgXlUn6OG8STsLY1JdE5iqomkKjXkzB/ps3vqU 9/jpGTpM4JNiBNbxkJIGQdrgBn/LJpRJGkd74MVbDcPC3/GSYM5od1J2nUVNbq9q KWcnEALhQM3/zXrjt+DRKWqPNg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:22:49 2026 by rpki-client