$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: xUz/qg+eA9b9i9CPJMHk7SJ+kd1crFwgTrE+ZxffNIE= Subject key identifier: 69:F1:7F:6E:C4:28:ED:A3:EF:49:52:8A:7B:A2:F0:9E:9E:07:64:31 Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: 0158 Signing time: Mon 11 May 2026 05:06:31 +0000 Manifest this update: Mon 11 May 2026 05:06:31 +0000 Manifest next update: Mon 18 May 2026 05:06:31 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: dygVzxxZSkiHy+/duvsv8tdUjLUWvuVt+RV/z/wonVw=) 2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: dlecxqbZAMbSA14zl4WPnusRoWo06VnO1BHgu9deOAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: May 11 05:06:31 2026 GMT Not After : May 18 05:06:31 2026 GMT Subject: CN=6a0163d7-7605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:54:e6:f2:5d:8a:d4:ef:c7:f9:bb:41:3e: 59:60:9a:bc:f6:6b:0e:58:d7:a9:00:a2:af:4f:d9: 16:18:ac:10:8c:eb:46:cc:2b:60:81:b1:f1:d7:0b: 88:9f:5b:2a:6c:c1:70:07:10:52:8e:d8:38:15:ca: 83:36:88:24:7c:a8:8b:48:f1:2a:b9:52:6f:38:7b: 4a:c3:27:9e:8d:54:ee:56:49:57:b0:da:b6:36:95: 39:1d:76:b7:d0:77:67:47:83:27:71:ef:7f:40:d3: e4:98:86:85:e3:51:02:f1:c4:bb:ed:e1:4e:f4:93: 8f:dd:07:28:b5:b2:ed:a7:ad:0d:19:df:6a:45:30: 77:2a:87:2d:a3:81:63:ff:54:b5:0b:54:a0:af:3e: c0:60:26:b8:5d:bd:87:79:29:b3:e2:d4:e0:39:a3: 86:d5:d9:63:32:32:ba:5e:57:3d:14:9c:d5:39:47: 11:a5:e1:8a:72:a5:91:0d:c9:c3:30:98:79:87:71: f8:a4:f8:63:92:68:9d:02:ee:21:1b:13:72:49:d5: 84:fc:de:c8:35:a3:b2:54:1f:40:d0:b4:87:56:53: 36:26:bd:46:cf:f8:e3:60:0b:31:e4:5f:20:52:e2: 9f:17:72:f4:5c:45:47:5e:5e:8c:ed:4f:40:ec:c9: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F1:7F:6E:C4:28:ED:A3:EF:49:52:8A:7B:A2:F0:9E:9E:07:64:31 X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d1:b4:1d:b8:71:de:09:2a:fb:ac:50:b2:c2:65:17:09:60: 92:c8:55:66:03:a5:89:4b:fa:7f:76:19:8e:8a:6d:f3:61:b9: c2:9a:da:6b:3b:1f:20:3e:dd:e7:9a:2f:b6:19:3a:b0:0e:e5: 7e:cc:0a:c6:f1:93:95:1b:c8:63:32:05:c7:1b:eb:26:71:82: cc:83:bd:f6:3e:4c:d2:c3:b7:03:8a:d8:80:26:f4:f9:b5:3e: 2c:7f:d7:96:6c:b2:e5:99:5f:62:a6:1e:23:96:50:c7:16:9e: d0:72:90:e3:06:2a:d3:f8:f8:3b:54:fa:be:c2:c9:65:08:be: bd:eb:e6:a4:e0:83:ad:a6:9c:4e:e1:1c:ba:56:19:5a:e3:c4: 48:1e:9e:6a:a2:23:64:f8:17:cb:fe:dd:0b:60:54:c0:12:21: 0e:fe:8c:02:92:65:c9:6b:ac:8d:29:e9:fa:8e:69:ea:25:b9: 75:44:ec:f9:d7:70:61:8b:7f:4f:05:fa:68:67:29:f5:e3:96: d1:df:f6:a7:c7:d3:de:a1:83:e4:36:65:38:81:8e:92:9c:c9: 46:c5:7a:d4:64:b7:ea:af:7b:9c:7e:a3:c4:74:57:14:fb:89: e3:28:eb:24:61:98:7b:6b:01:73:3d:82:51:5d:39:bf:90:b3: cb:e8:f9:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5 M0RFQTIzNzUwHhcNMjYwNTExMDUwNjMxWhcNMjYwNTE4MDUwNjMxWjAYMRYwFAYD VQQDEw02YTAxNjNkNy03NjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmidU5vJditTvx/m7QT5ZYJq89msOWNepAKKvT9kWGKwQjOtGzCtggbHx1wuI n1sqbMFwBxBSjtg4FcqDNogkfKiLSPEquVJvOHtKwyeejVTuVklXsNq2NpU5HXa3 0HdnR4Mnce9/QNPkmIaF41EC8cS77eFO9JOP3QcotbLtp60NGd9qRTB3Kocto4Fj /1S1C1Sgrz7AYCa4Xb2HeSmz4tTgOaOG1dljMjK6Xlc9FJzVOUcRpeGKcqWRDcnD MJh5h3H4pPhjkmidAu4hGxNySdWE/N7INaOyVB9A0LSHVlM2Jr1Gz/jjYAsx5F8g UuKfF3L0XEVHXl6M7U9A7MmXRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnxf27E KO2j70lSinui8J6eB2QxMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG amZ4S01vVkE4Yk9UM3FJM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK9G0Hbhx3gkq+6xQssJlFwlgkshVZgOliUv6f3YZjopt82G5wpraazsfID7d 55ovthk6sA7lfswKxvGTlRvIYzIFxxvrJnGCzIO99j5M0sO3A4rYgCb0+bU+LH/X lmyy5ZlfYqYeI5ZQxxae0HKQ4wYq0/j4O1T6vsLJZQi+vevmpOCDraacTuEculYZ WuPESB6eaqIjZPgXy/7dC2BUwBIhDv6MApJlyWusjSnp+o5p6iW5dUTs+ddwYYt/ TwX6aGcp9eOW0d/2p8fT3qGD5DZlOIGOkpzJRsV61GS36q97nH6jxHRXFPuJ4yjr JGGYe2sBcz2CUV05v5Czy+j56A== -----END CERTIFICATE-----Generated at Wed May 13 01:12:42 2026 by rpki-client