$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: 5GkysfAxG1NKMyvZVOnZYUVZ6nczUDNXlMXBzoAwMYM= Subject key identifier: 20:99:76:1C:13:93:6B:BE:D4:B4:8E:DE:41:56:0C:C1:25:4C:7A:50 Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 01D2 Signing time: Wed 25 Mar 2026 02:58:08 +0000 Manifest this update: Wed 25 Mar 2026 02:58:08 +0000 Manifest next update: Wed 01 Apr 2026 02:58:08 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: g1Pvzt5FdpWHpU6hYLoXNQyilqBbw/jXFkWDgKVlwcw=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: uVmZRSTc4x/K1CJySncdCGqBEzUNgcCUoJOuUTYwvwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Mar 25 02:58:08 2026 GMT Not After : Apr 1 02:58:08 2026 GMT Subject: CN=69c34f40-97f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:88:cc:a9:4c:1e:d3:53:b4:a0:3f:8c:a2: f4:45:de:44:a5:11:9a:66:9b:ba:6c:6e:5e:77:e2: 87:23:27:99:6b:d9:8d:ed:03:e8:f5:c1:2c:d4:cd: c4:91:99:c4:7c:84:34:dd:d7:f8:d0:ed:01:f6:a9: 52:9a:d5:9a:14:54:9c:f4:5e:a9:c3:cd:3b:14:ad: b0:cd:1b:a0:c8:4d:58:a8:86:76:7b:01:08:37:04: eb:03:f8:51:ad:0b:48:e3:14:d1:48:19:91:a1:53: fe:76:59:31:b7:26:c5:15:43:2a:66:ea:11:8e:26: ec:99:35:6f:aa:95:de:bc:74:81:49:40:83:f6:e5: 44:ec:c9:83:ab:07:31:58:34:80:50:46:af:3f:b6: a7:8c:8e:79:49:e0:10:b0:20:27:c4:f2:f8:fd:ff: 51:a4:50:d8:78:f5:0d:0b:2a:49:95:b9:77:4c:98: de:7f:e7:7a:c0:9a:62:c4:2c:59:be:8a:cc:e4:f0: b6:e5:e2:f9:d8:a9:1d:01:c9:b3:08:60:e9:ad:2a: 78:83:94:90:a6:30:34:06:12:5d:0a:ca:80:2d:38: 01:94:fa:b5:9b:2f:60:fd:f3:88:a2:43:e5:cd:68: 23:cd:65:18:d9:c3:4f:4a:01:3d:7e:44:13:76:37: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:76:1C:13:93:6B:BE:D4:B4:8E:DE:41:56:0C:C1:25:4C:7A:50 X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:72:cc:83:51:fc:b4:49:90:7e:8d:e1:78:45:16:17:4e:5d: 5b:b0:64:44:8e:5c:0e:7e:1c:f7:2f:f3:8e:3e:6a:2f:47:b7: 75:9a:ce:22:d7:05:31:04:45:ea:c6:87:b1:0b:31:15:96:cc: 7b:b6:59:0a:e2:1c:13:64:bb:a6:30:2d:14:1b:1a:66:44:e7: 2f:d7:4d:78:b5:c3:79:63:6e:a7:c8:76:3b:ca:90:ec:f0:5b: 14:71:ab:9b:4e:91:7e:18:a7:93:f5:1e:e1:a2:92:c5:fa:37: a8:82:c8:2e:6e:9f:be:eb:55:2b:10:3a:d9:5f:07:8d:31:00: 6b:1f:d3:e8:72:cc:e0:4e:8c:f3:48:df:ae:39:f3:d0:f8:6f: 28:7f:24:c3:bc:58:3a:91:42:d1:12:2c:53:38:15:cc:14:75: 43:49:eb:90:54:73:ef:ab:a3:e3:65:c0:eb:87:79:7b:42:17: 76:ab:4c:52:32:e0:e5:b1:50:6b:2d:4a:65:b6:65:05:b8:c2: 7e:61:42:65:61:88:88:a3:6c:94:7f:59:9d:93:69:82:5b:3c: 07:78:77:c3:32:2c:16:a9:8e:b8:00:87:32:91:f8:56:1a:8b: a7:b6:c3:2c:2d:1b:06:a6:d5:dd:aa:73:7e:1b:3c:b9:42:c2: 2e:0d:4a:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjYwMzI1MDI1ODA4WhcNMjYwNDAxMDI1ODA4WjAYMRYwFAYD VQQDEw02OWMzNGY0MC05N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv66IzKlMHtNTtKA/jKL0Rd5EpRGaZpu6bG5ed+KHIyeZa9mN7QPo9cEs1M3E kZnEfIQ03df40O0B9qlSmtWaFFSc9F6pw807FK2wzRugyE1YqIZ2ewEINwTrA/hR rQtI4xTRSBmRoVP+dlkxtybFFUMqZuoRjibsmTVvqpXevHSBSUCD9uVE7MmDqwcx WDSAUEavP7anjI55SeAQsCAnxPL4/f9RpFDYePUNCypJlbl3TJjef+d6wJpixCxZ vorM5PC25eL52KkdAcmzCGDprSp4g5SQpjA0BhJdCsqALTgBlPq1my9g/fOIokPl zWgjzWUY2cNPSgE9fkQTdjcxuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCZdhwT k2u+1LSO3kFWDMElTHpQMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX3LMg1H8tEmQfo3heEUWF05dW7BkRI5cDn4c9y/zjj5qL0e3dZrOItcFMQRF 6saHsQsxFZbMe7ZZCuIcE2S7pjAtFBsaZkTnL9dNeLXDeWNup8h2O8qQ7PBbFHGr m06Rfhink/Ue4aKSxfo3qILILm6fvutVKxA62V8HjTEAax/T6HLM4E6M80jfrjnz 0PhvKH8kw7xYOpFC0RIsUzgVzBR1Q0nrkFRz76uj42XA64d5e0IXdqtMUjLg5bFQ ay1KZbZlBbjCfmFCZWGIiKNslH9ZnZNpgls8B3h3wzIsFqmOuACHMpH4VhqLp7bD LC0bBqbV3apzfhs8uULCLg1KMQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:35 2026 by rpki-client