$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: x0lGz6EtQa3oQYn9Z2of8xsLQs+x6D22NgHl1Mm/rUc= Subject key identifier: DC:28:F5:F8:59:02:4E:EA:71:14:AF:0E:3D:BF:B3:44:8A:1D:A7:A7 Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0C3D Signing time: Tue 12 May 2026 18:49:26 +0000 Manifest this update: Tue 12 May 2026 18:49:25 +0000 Manifest next update: Tue 19 May 2026 18:49:25 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: oi6xla54zTNnNemZxVoutPOvbJ6Xs++QBJM0PxkqFgA=) 2: CEFDECF850B011F0B9262D4FC4F9AE02.roa (hash: M7Twy19LjGj2zYAkQBPKqFxpHK+7jtbWBpYW+TQys+s=) 3: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: PVNVIsAGF4iLu1l85ogTKaGXUTCHGrR1d4s3DuDaU/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: May 12 18:49:25 2026 GMT Not After : May 19 18:49:25 2026 GMT Subject: CN=6a037636-f181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:50:63:a1:14:88:c9:57:ad:9a:54:58:c2: 9f:6a:5a:9d:cf:29:05:08:a4:e4:ae:15:bf:8c:c3: 3b:b9:2d:8d:56:48:cd:47:0c:69:35:bc:00:1e:7f: 80:b7:05:f9:4a:51:54:a7:be:2b:e1:04:bf:bf:71: 83:ca:0c:b4:f3:89:e3:9f:b5:4b:40:4b:fb:db:ad: eb:37:4d:2c:b5:74:ca:a0:70:28:5a:53:54:4a:8a: 1a:36:db:d7:54:13:68:c7:a1:01:a0:c6:52:f4:e2: 02:d9:f0:0a:e8:3c:1f:0f:da:66:a2:f9:a1:57:3a: 1e:b9:f0:7b:cd:66:22:b1:03:e3:55:a1:9f:ab:19: f4:08:00:e9:24:29:51:00:e4:2e:41:a9:e4:a3:b2: f1:80:00:c5:97:6f:58:24:ab:81:6a:ac:a6:b3:a9: 0f:6c:34:f3:d7:f0:cd:2b:b6:dd:07:46:f3:af:78: 1d:70:27:8c:96:be:27:1f:7d:73:fa:a8:70:24:7b: 7f:1e:a5:03:54:4d:4e:26:ef:d4:ed:3c:ac:8b:3a: 90:9a:4b:bd:63:60:3a:53:71:82:58:5b:6e:bf:0a: 5c:c8:9a:2b:11:c0:95:b4:f7:27:4d:f6:19:82:32: 93:b1:63:94:0b:92:b5:a3:17:cf:3e:f3:4a:e2:99: 5f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:28:F5:F8:59:02:4E:EA:71:14:AF:0E:3D:BF:B3:44:8A:1D:A7:A7 X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:01:ac:2d:ab:6d:d0:0a:77:90:c6:a2:89:30:f1:03:28:bc: 8f:ce:0d:89:08:d2:14:7c:b3:10:57:3d:1a:4e:74:f8:70:2e: 3f:5f:e4:c9:2c:24:82:5a:37:70:d2:a1:6c:32:8d:4e:16:8b: ca:a4:f5:1f:7e:bf:43:db:34:ec:cf:62:0b:36:07:a6:c4:17: ab:74:e9:28:2b:c7:05:21:64:45:9c:2e:91:49:c3:6c:34:71: 2e:5a:02:2e:79:10:0b:a3:92:1d:1b:db:98:c2:91:ed:2b:e7: 75:04:e6:79:69:72:92:17:ff:16:ea:e4:78:25:9f:a2:75:3a: 6c:95:1e:8b:59:c1:c0:40:c6:fc:ae:f7:56:15:e3:92:7e:a8: 66:89:f1:65:42:ca:a4:86:93:06:83:f1:97:e7:96:46:66:37: e5:f8:21:77:03:97:94:f4:a7:d0:e0:22:df:28:f0:93:ba:b3: 26:44:08:18:c5:3f:a6:8d:e8:bb:5d:3b:6a:f4:3f:92:4c:eb: 20:31:0e:09:81:60:81:e7:bc:56:db:cc:81:73:56:f8:0b:69: f2:b3:a3:cb:43:64:a9:da:f1:d6:72:4a:8e:df:43:6f:20:17: e9:a6:e9:0f:b0:06:8e:de:4a:58:3a:b1:65:94:c2:23:61:1d: 68:df:7f:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjYwNTEyMTg0OTI1WhcNMjYwNTE5MTg0OTI1WjAYMRYwFAYD VQQDEw02YTAzNzYzNi1mMTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTBQY6EUiMlXrZpUWMKfalqdzykFCKTkrhW/jMM7uS2NVkjNRwxpNbwAHn+A twX5SlFUp74r4QS/v3GDygy084njn7VLQEv7263rN00stXTKoHAoWlNUSooaNtvX VBNox6EBoMZS9OIC2fAK6DwfD9pmovmhVzoeufB7zWYisQPjVaGfqxn0CADpJClR AOQuQanko7LxgADFl29YJKuBaqyms6kPbDTz1/DNK7bdB0bzr3gdcCeMlr4nH31z +qhwJHt/HqUDVE1OJu/U7TysizqQmku9Y2A6U3GCWFtuvwpcyJorEcCVtPcnTfYZ gjKTsWOUC5K1oxfPPvNK4plf4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwo9fhZ Ak7qcRSvDj2/s0SKHaenMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtwGsLatt0Ap3kMaiiTDxAyi8j84NiQjSFHyzEFc9Gk50+HAuP1/kySwkglo3 cNKhbDKNThaLyqT1H36/Q9s07M9iCzYHpsQXq3TpKCvHBSFkRZwukUnDbDRxLloC LnkQC6OSHRvbmMKR7SvndQTmeWlykhf/FurkeCWfonU6bJUei1nBwEDG/K73VhXj kn6oZonxZULKpIaTBoPxl+eWRmY35fghdwOXlPSn0OAi3yjwk7qzJkQIGMU/po3o u107avQ/kkzrIDEOCYFggee8VtvMgXNW+Atp8rOjy0Nkqdrx1nJKjt9DbyAX6abp D7AGjt5KWDqxZZTCI2EdaN9/GA== -----END CERTIFICATE-----Generated at Wed May 13 03:01:39 2026 by rpki-client