$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.mft File: EWNKZhmAGrreJLzmLnzChNHA3IE.mft (raw, json) Hash identifier: cUvMAzEQkMLTCiOyU38yDTgjMjwsy+Nd1KReYMFHlnw= Subject key identifier: 48:42:0C:59:74:6D:A6:D7:2A:A3:09:31:32:F6:49:4D:A4:33:13:C1 Authority key identifier: 11:63:4A:66:19:80:1A:BA:DE:24:BC:E6:2E:7C:C2:84:D1:C0:DC:81 Certificate issuer: /CN=A91E1637/serialNumber=11634A6619801ABADE24BCE62E7CC284D1C0DC81 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWNKZhmAGrreJLzmLnzChNHA3IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.mft Manifest number: 0D Signing time: Mon 21 Sep 2026 09:08:10 +0000 Manifest this update: Mon 21 Sep 2026 09:08:10 +0000 Manifest next update: Mon 28 Sep 2026 09:08:10 +0000 Files and hashes: 1: EWNKZhmAGrreJLzmLnzChNHA3IE.crl (hash: OS54hkBmaslNIf6g3QsvMzL7ggk/qleqmILTYZ8p99U=) 2: 10CF6CC4A5DD11F1B10D24C13711F970.roa (hash: YOcchpz6KoCPaVGaokvc4kqOrmQ1dBbA8kGZA7CnpW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.crl rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWNKZhmAGrreJLzmLnzChNHA3IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1637, serialNumber=11634A6619801ABADE24BCE62E7CC284D1C0DC81 Validity Not Before: Sep 21 09:08:10 2026 GMT Not After : Sep 28 09:08:10 2026 GMT Subject: CN=6ab0f3fa-5278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ba:38:4f:73:77:89:40:29:cb:24:a0:11:6e: 8b:dc:df:1c:c9:68:46:31:97:0c:97:d6:ac:13:94: 69:d4:69:07:08:95:3b:c7:45:6a:43:1c:a2:2d:eb: 80:8f:ac:d7:82:a2:9b:c3:61:5c:c6:b5:1d:84:27: 32:01:59:5b:91:1a:76:ce:ec:23:b0:bb:4e:10:39: 5e:8b:21:eb:68:c8:b3:f5:de:fa:de:70:1a:98:0a: bb:cc:be:24:11:5e:5a:5d:be:66:8d:d8:17:b3:e4: 96:8d:06:d3:9a:0f:c6:92:f8:d9:d0:61:d7:17:e4: 72:32:7b:95:7b:71:f4:67:51:d9:9b:2b:ef:0b:0d: 8d:66:3d:a4:37:62:66:e8:a9:a1:7f:1c:f5:a7:1e: ba:05:d1:85:c5:c4:6e:57:76:ae:39:f7:05:d2:43: 00:1b:af:58:f7:2d:35:bb:0c:b2:54:39:c3:e4:01: 3f:2a:5d:47:99:ff:71:1e:ba:bd:ef:ca:e3:0d:27: 61:31:b0:1c:af:68:5e:3a:cd:c1:6f:d8:0a:07:7e: 89:83:5d:a6:11:42:86:40:0f:9a:7d:f7:dd:ed:b7: 6e:24:f4:bb:3e:4b:30:ec:7a:14:12:70:32:6d:c6: 79:0d:3d:69:4b:f4:57:72:87:de:7f:f2:8d:93:e0: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:0C:59:74:6D:A6:D7:2A:A3:09:31:32:F6:49:4D:A4:33:13:C1 X509v3 Authority Key Identifier: keyid:11:63:4A:66:19:80:1A:BA:DE:24:BC:E6:2E:7C:C2:84:D1:C0:DC:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWNKZhmAGrreJLzmLnzChNHA3IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1637/D8CDA16AA5DC11F1953FE1BE3711F970/EWNKZhmAGrreJLzmLnzChNHA3IE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:25:93:76:75:73:e1:77:a3:06:ab:ee:6d:7a:eb:ff:09:41: 29:69:17:c2:37:bb:d5:0c:66:e9:1b:18:77:c7:59:81:7f:60: 8d:71:47:4d:f2:99:95:2a:2a:3b:29:14:d2:4c:2d:7f:19:35: 6e:d8:66:30:5b:36:81:44:cb:03:2d:80:f3:48:c2:b5:d7:75: 10:51:22:4f:cb:b6:4f:76:ca:1e:7b:71:c5:6f:e6:76:13:88: 62:cc:97:66:d6:6d:af:9c:ca:30:20:9c:8b:40:3b:ae:50:73: 56:2f:b5:69:bf:02:b7:6f:e1:33:66:42:56:dc:97:40:9a:91: d7:18:6d:ec:e4:bb:f9:a9:ac:23:cd:64:6d:ce:0b:81:fb:12: 5a:39:5a:12:3f:f7:51:38:63:99:6c:1b:bd:da:39:cc:c7:71: 94:57:cb:06:b0:06:1c:c5:b8:95:37:58:c5:95:54:15:d9:6b: de:e3:90:dc:65:9d:5d:67:cb:2f:a6:88:14:43:50:ac:fb:0b: 5b:06:65:41:80:e1:a7:31:6c:12:82:f1:da:7b:5b:c3:c4:0c: 35:17:e7:f1:bb:85:16:73:9c:fe:f9:cf:76:a6:a1:1a:5b:17: 9a:1f:da:e5:8c:83:d2:b1:f7:d0:44:ae:67:12:3a:d3:3d:ed: e8:6f:72:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTYzNzExMC8GA1UEBRMoMTE2MzRBNjYxOTgwMUFCQURFMjRCQ0U2MkU3Q0MyODRE MUMwREM4MTAeFw0yNjA5MjEwOTA4MTBaFw0yNjA5MjgwOTA4MTBaMBgxFjAUBgNV BAMTDTZhYjBmM2ZhLTUyNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoujhPc3eJQCnLJKARbovc3xzJaEYxlwyX1qwTlGnUaQcIlTvHRWpDHKIt64CP rNeCopvDYVzGtR2EJzIBWVuRGnbO7COwu04QOV6LIetoyLP13vrecBqYCrvMviQR XlpdvmaN2Bez5JaNBtOaD8aS+NnQYdcX5HIye5V7cfRnUdmbK+8LDY1mPaQ3Ymbo qaF/HPWnHroF0YXFxG5Xdq459wXSQwAbr1j3LTW7DLJUOcPkAT8qXUeZ/3Eeur3v yuMNJ2ExsByvaF46zcFv2AoHfomDXaYRQoZAD5p9993tt24k9Ls+SzDsehQScDJt xnkNPWlL9Fdyh95/8o2T4OkrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSEIMWXRt ptcqowkxMvZJTaQzE8EwHwYDVR0jBBgwFoAUEWNKZhmAGrreJLzmLnzChNHA3IEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxNjM3L0Q4Q0RBMTZBQTVE QzExRjE5NTNGRTFCRTM3MTFGOTcwL0VXTktaaG1BR3JyZUpMem1MbnpDaE5IQTNJ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVdOS1pobUFHcnJlSkx6bUxuekNoTkhBM0lFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx NjM3L0Q4Q0RBMTZBQTVEQzExRjE5NTNGRTFCRTM3MTFGOTcwL0VXTktaaG1BR3Jy ZUpMem1MbnpDaE5IQTNJRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnJZN2dXPhd6MGq+5teuv/CUEpaRfCN7vVDGbpGxh3x1mBf2CNcUdN8pmVKio7 KRTSTC1/GTVu2GYwWzaBRMsDLYDzSMK113UQUSJPy7ZPdsoee3HFb+Z2E4hizJdm 1m2vnMowIJyLQDuuUHNWL7VpvwK3b+EzZkJW3JdAmpHXGG3s5Lv5qawjzWRtzguB +xJaOVoSP/dROGOZbBu92jnMx3GUV8sGsAYcxbiVN1jFlVQV2Wve45DcZZ1dZ8sv pogUQ1Cs+wtbBmVBgOGnMWwSgvHae1vDxAw1F+fxu4UWc5z++c92pqEaWxeaH9rl jIPSsffQRK5nEjrTPe3ob3Ls -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:26 2026 by rpki-client