$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: MdSOeCZFoLBqx48MrNr/zpGiv9jGK6b+dqo3O8RMEII= Subject key identifier: 84:BA:6F:2A:3A:0D:E1:AA:F0:89:96:AE:56:E6:18:C9:9B:73:BB:21 Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: 0140 Signing time: Wed 25 Mar 2026 04:33:54 +0000 Manifest this update: Wed 25 Mar 2026 04:33:54 +0000 Manifest next update: Wed 01 Apr 2026 04:33:54 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: ikmWRrylizwECjA4WnzSMZjy7P0CNFcDRi3TBRuKuA0=) 2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: dlecxqbZAMbSA14zl4WPnusRoWo06VnO1BHgu9deOAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: Mar 25 04:33:54 2026 GMT Not After : Apr 1 04:33:54 2026 GMT Subject: CN=69c365b2-86af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:cc:c6:6b:4a:96:0b:c4:35:77:54:4e:9c: 96:92:9e:44:45:10:ad:3e:0b:fe:69:ce:65:aa:2f: a2:76:fe:8a:2f:6f:e7:0d:5d:d3:2c:83:1b:4e:2d: cc:f0:44:bc:af:28:92:3c:24:62:e3:d5:7c:f6:90: 9c:c7:c8:47:29:30:6e:a7:25:f1:01:3b:a6:f3:e4: e0:97:cb:73:bb:c0:ef:e3:12:a8:23:ff:3b:7f:a5: 9b:eb:98:bd:f9:cb:92:d7:ea:0c:84:8c:20:de:df: e1:5d:2c:a1:f9:e0:63:b3:bf:14:45:16:ee:60:c9: fd:2d:64:4a:a3:5a:c5:ee:eb:80:47:1b:f1:82:01: 35:37:25:f5:63:d5:27:f2:d5:2d:88:7e:4f:63:03: ea:23:5c:ca:8f:17:f1:58:f0:89:76:ec:5a:c4:a2: d5:b1:40:eb:15:a0:07:d4:98:45:f2:26:da:fc:e8: ab:ed:57:ad:49:94:9d:3c:f1:02:94:7f:d8:86:a8: 43:6a:b8:ce:6a:75:bc:b2:49:47:16:92:8a:3c:89: 9b:7c:d3:d6:26:7f:ac:ff:22:32:0e:01:54:fd:f4: 97:31:fd:e1:88:8c:de:15:70:b9:2e:3d:21:90:71: 76:f8:4a:be:60:42:b6:e8:ab:c3:03:2a:e7:78:1d: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:6F:2A:3A:0D:E1:AA:F0:89:96:AE:56:E6:18:C9:9B:73:BB:21 X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f1:df:46:70:12:ce:76:bf:fa:46:c7:c6:59:d7:13:68:12: e3:ae:8d:ea:74:4a:59:37:0a:70:74:60:c0:ae:3c:60:0b:0c: e6:b4:10:4f:9f:dc:32:3c:ce:bc:a3:96:d6:d0:03:5d:ab:7d: 46:10:c4:6c:fd:28:16:54:a3:62:c1:c8:8d:6c:f3:1d:da:b5: 76:b7:b8:73:b7:ab:f6:29:c3:e5:d2:23:c9:3f:d7:b0:ef:73: c2:d4:c9:18:14:a7:e6:a1:01:e7:ba:a2:0a:7d:b3:70:24:bb: 1a:a8:ee:d2:59:ba:8b:1b:1a:7d:8e:f9:b5:d4:53:a0:82:34: 3c:fd:69:ba:39:f0:ef:fc:4f:15:61:ac:07:c6:b2:5f:0a:ed: bb:5a:79:5b:8c:34:a3:40:3a:d7:16:71:1b:9f:17:d7:b7:75: a6:4d:2e:36:40:52:be:9d:b1:76:22:f0:dc:5d:4a:e7:51:d2: c8:4a:45:98:09:32:17:1d:02:f5:26:2f:74:60:80:c9:3e:4c: 87:9b:b6:30:44:89:84:2e:ff:9a:81:d6:04:ba:82:ab:df:42: 99:c5:78:ca:83:23:21:0d:42:f7:3d:51:fc:fb:1b:3b:5f:21: 64:4e:94:3d:1f:67:43:8f:b7:d6:b4:25:8f:e6:ad:66:37:48: 50:8f:3a:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5 M0RFQTIzNzUwHhcNMjYwMzI1MDQzMzU0WhcNMjYwNDAxMDQzMzU0WjAYMRYwFAYD VQQDEw02OWMzNjViMi04NmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzLMxmtKlgvENXdUTpyWkp5ERRCtPgv+ac5lqi+idv6KL2/nDV3TLIMbTi3M 8ES8ryiSPCRi49V89pCcx8hHKTBupyXxATum8+Tgl8tzu8Dv4xKoI/87f6Wb65i9 +cuS1+oMhIwg3t/hXSyh+eBjs78URRbuYMn9LWRKo1rF7uuARxvxggE1NyX1Y9Un 8tUtiH5PYwPqI1zKjxfxWPCJduxaxKLVsUDrFaAH1JhF8iba/Oir7VetSZSdPPEC lH/YhqhDarjOanW8sklHFpKKPImbfNPWJn+s/yIyDgFU/fSXMf3hiIzeFXC5Lj0h kHF2+Eq+YEK26KvDAyrneB2C+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIS6byo6 DeGq8ImWrlbmGMmbc7shMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG amZ4S01vVkE4Yk9UM3FJM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYvHfRnASzna/+kbHxlnXE2gS466N6nRKWTcKcHRgwK48YAsM5rQQT5/cMjzO vKOW1tADXat9RhDEbP0oFlSjYsHIjWzzHdq1dre4c7er9inD5dIjyT/XsO9zwtTJ GBSn5qEB57qiCn2zcCS7Gqju0lm6ixsafY75tdRToII0PP1pujnw7/xPFWGsB8ay Xwrtu1p5W4w0o0A61xZxG58X17d1pk0uNkBSvp2xdiLw3F1K51HSyEpFmAkyFx0C 9SYvdGCAyT5Mh5u2MESJhC7/moHWBLqCq99CmcV4yoMjIQ1C9z1R/PsbO18hZE6U PR9nQ4+31rQlj+atZjdIUI86oA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:52:19 2026 by rpki-client