$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: Ne7dLJedRoGUKLHnNtW/87ybszH9Pu99J/RD6zq//AA= Subject key identifier: 32:E7:66:7A:DB:67:D7:B8:27:28:28:E4:39:1B:40:80:9B:6C:4F:82 Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 020D Signing time: Mon 11 May 2026 03:00:24 +0000 Manifest this update: Mon 11 May 2026 03:00:23 +0000 Manifest next update: Mon 18 May 2026 03:00:23 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: RK2sabE02mk2tDBYma+tVskDfGApT3W+BEt5gU1bcw8=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: May 11 03:00:23 2026 GMT Not After : May 18 03:00:23 2026 GMT Subject: CN=6a014648-62c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:65:a7:30:3c:bb:c7:74:7f:fb:9e:e4:87: ff:ff:e2:83:24:bd:fd:19:9d:37:4d:36:f4:e7:74: 48:26:1e:c8:d4:73:63:27:a3:62:26:e5:16:64:42: 9a:86:43:9f:81:06:51:9b:96:34:56:45:2b:c2:03: 78:c3:39:29:58:8a:da:31:c9:e6:b0:ec:bd:72:e6: bf:4f:02:83:d3:a9:dd:6e:14:f8:47:f5:9f:85:6d: 97:e3:f1:c6:7b:1d:cc:9b:5b:83:ab:f8:04:09:32: 0b:7e:bc:e6:3b:03:7f:20:88:15:a3:eb:b6:2c:2a: 2d:2b:f7:a3:1d:51:b9:a7:5a:1b:23:b1:f5:f8:6d: ae:bf:ee:3f:2b:b4:94:10:b9:c0:2a:ad:0b:73:f4: 66:30:8a:4b:b4:e0:05:dd:b2:c5:ad:62:fd:c8:87: d9:10:ec:53:eb:23:10:dd:0c:34:3e:13:d3:e2:25: 0d:0b:4f:af:96:cf:fb:4e:46:77:56:95:9f:66:cf: bc:02:69:1c:0a:eb:2a:5c:40:f8:cb:7a:fe:9e:d9: b7:ac:39:a6:d2:21:7b:0b:a5:48:0b:7a:ca:59:70: 1e:09:02:f7:f4:06:c5:2d:d9:41:d7:5a:1f:f4:d9: ef:eb:32:b0:b0:a2:0e:37:f6:e7:aa:4d:92:e2:99: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:66:7A:DB:67:D7:B8:27:28:28:E4:39:1B:40:80:9B:6C:4F:82 X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:58:f6:24:ad:d6:57:a3:df:fa:5d:74:f0:e9:95:6e:0f:0b: 1c:93:17:e6:c2:d4:8e:d4:a1:8c:e4:df:70:5c:9f:a8:17:47: 44:1c:94:39:b8:23:df:91:0a:09:59:9f:ab:ea:2f:df:eb:ef: 5b:03:41:b5:f3:e6:a7:fa:d2:ab:b4:b7:b9:e8:fe:cf:a5:d8: b6:10:0d:26:5d:58:ba:e9:74:d7:18:c7:52:fa:1f:a0:d4:75: 52:4e:25:a9:85:37:71:71:a8:0e:05:a6:ca:15:a9:69:59:6d: 52:fc:09:71:5f:a3:2c:c0:13:c7:f5:7d:28:dc:1b:e6:a6:8a: e3:39:e4:fc:36:c9:15:37:44:e4:c8:6b:e5:b0:72:da:b6:74: fe:1e:39:2d:39:1c:54:a0:48:17:9d:5a:0a:79:50:9a:8d:78: 35:f6:5f:ce:67:3b:3a:ba:5c:35:c7:23:33:3e:57:3e:3a:89: 28:ad:0a:eb:54:80:40:3b:3d:47:51:04:a3:18:08:1c:c1:56: cf:3b:24:fa:7d:2b:95:b2:4c:c5:4b:a5:dc:f1:92:37:62:fe: 61:49:32:a0:df:5f:2a:17:05:81:1d:af:90:ea:7f:5c:26:58: 61:60:11:2d:fe:cb:3f:5d:a6:35:27:b1:b8:22:03:65:b1:77: 84:23:50:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjYwNTExMDMwMDIzWhcNMjYwNTE4MDMwMDIzWjAYMRYwFAYD VQQDEw02YTAxNDY0OC02MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqJlpzA8u8d0f/ue5If//+KDJL39GZ03TTb053RIJh7I1HNjJ6NiJuUWZEKa hkOfgQZRm5Y0VkUrwgN4wzkpWIraMcnmsOy9cua/TwKD06ndbhT4R/WfhW2X4/HG ex3Mm1uDq/gECTILfrzmOwN/IIgVo+u2LCotK/ejHVG5p1obI7H1+G2uv+4/K7SU ELnAKq0Lc/RmMIpLtOAF3bLFrWL9yIfZEOxT6yMQ3Qw0PhPT4iUNC0+vls/7TkZ3 VpWfZs+8AmkcCusqXED4y3r+ntm3rDmm0iF7C6VIC3rKWXAeCQL39AbFLdlB11of 9Nnv6zKwsKION/bnqk2S4pmzVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLnZnrb Z9e4Jygo5DkbQICbbE+CMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOlj2JK3WV6Pf+l108OmVbg8LHJMX5sLUjtShjOTfcFyfqBdHRByUObgj35EK CVmfq+ov3+vvWwNBtfPmp/rSq7S3uej+z6XYthANJl1Yuul01xjHUvofoNR1Uk4l qYU3cXGoDgWmyhWpaVltUvwJcV+jLMATx/V9KNwb5qaK4znk/DbJFTdE5Mhr5bBy 2rZ0/h45LTkcVKBIF51aCnlQmo14NfZfzmc7OrpcNccjMz5XPjqJKK0K61SAQDs9 R1EEoxgIHMFWzzsk+n0rlbJMxUul3PGSN2L+YUkyoN9fKhcFgR2vkOp/XCZYYWAR Lf7LP12mNSexuCIDZbF3hCNQYQ== -----END CERTIFICATE-----Generated at Wed May 13 03:12:25 2026 by rpki-client