$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: 9gYFdYWrnKdf1FO/L9qmL7efpNpYn4Y6xmkb9TVwIII= Subject key identifier: E3:61:B4:2E:69:C5:69:D1:B0:D0:A4:F4:51:CB:61:29:A5:8A:7B:0E Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0D05 Signing time: Tue 24 Mar 2026 17:59:39 +0000 Manifest this update: Tue 24 Mar 2026 17:59:39 +0000 Manifest next update: Tue 31 Mar 2026 17:59:39 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: PJZBE7rz0drEm8kvv0n2hvG6phZMF1HqnxWA+mxpFqY=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: J/Kqp0O4C6yL3lIuO4K9r9t6i4RJC0qvD2DF2Fp3Mt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: Mar 24 17:59:39 2026 GMT Not After : Mar 31 17:59:39 2026 GMT Subject: CN=69c2d10b-900b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:23:0e:0f:6f:e0:34:4c:99:9b:31:ed:5a: 3f:16:1f:cb:3e:84:7f:b4:2b:1a:84:9b:0d:e6:25: f3:d2:be:ac:2b:66:fb:4d:56:03:44:9f:9c:b3:d8: ef:c7:50:4a:16:b8:d4:e9:a1:e1:45:44:54:36:09: 3b:e2:36:d0:bc:8f:1d:ea:4f:04:e1:fe:4d:af:4f: 61:0d:e2:b6:97:39:97:91:7c:08:42:b0:16:b8:b6: be:c4:13:27:54:61:8a:85:a0:64:b1:30:a0:61:f8: 50:cc:e6:d8:3f:30:3e:f5:5c:29:aa:f1:44:40:c2: ff:1c:de:b1:34:bd:ae:c2:ea:f7:91:f8:a3:5c:3c: fb:f5:71:17:aa:46:c1:77:33:af:74:8b:dc:ca:a9: 74:76:59:4c:b7:e8:1b:9d:22:7f:3c:0d:41:d0:21: 0d:bc:55:18:e4:96:44:f2:75:13:de:8b:c4:80:46: c6:54:04:20:ab:59:c9:c4:7d:88:cb:34:aa:32:ee: a7:85:54:48:0f:95:83:98:c1:5c:64:c3:75:f9:ad: 9d:8f:79:ab:c4:9e:c8:03:a5:2a:05:5d:35:77:70: e3:86:15:69:a9:b0:ae:34:9e:76:ae:07:1c:e4:90: bc:24:28:9a:31:f7:55:93:2b:f3:54:01:14:37:74: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:61:B4:2E:69:C5:69:D1:B0:D0:A4:F4:51:CB:61:29:A5:8A:7B:0E X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fd:af:92:6e:fd:3c:c3:45:04:16:01:e1:a3:82:6d:3b:cf: a9:6d:59:43:1d:39:9d:ae:8d:88:2b:51:1d:b3:91:33:ae:9a: 4a:52:da:82:eb:44:2a:c0:66:7a:80:fe:28:e2:25:10:40:6b: 32:a1:6f:79:6e:a5:0d:a9:05:a0:c3:4e:53:6d:09:da:9e:f5: bb:bc:b5:dc:73:41:a4:03:95:30:f5:0b:a6:8d:5e:cf:c2:83: 37:1f:f2:b4:7b:89:a8:c6:19:9a:1c:b1:61:cb:03:d9:d5:ce: 2a:85:67:16:f8:87:de:0c:b3:22:d8:cb:05:fc:e6:eb:48:7f: f7:8f:62:bb:76:f5:89:dd:dc:e5:09:0e:31:d9:52:5a:d8:89: 05:66:91:ea:3c:ca:06:89:c6:ed:3e:f6:06:22:15:e4:ea:97: 6a:6a:29:0a:59:c0:87:66:1d:66:37:b1:e1:bb:ce:8a:84:8f: cd:42:60:8f:c9:a1:98:c7:6f:94:cb:6d:47:15:8e:c7:d1:15: cb:26:c6:e4:07:b6:7b:e2:fa:38:60:20:d2:92:9d:61:fc:71: bd:b1:55:58:50:e5:83:86:8b:3e:81:a4:04:8a:58:b6:c2:1e: e6:76:97:c1:1d:5c:02:d6:ad:2d:d6:18:3c:d9:55:99:9d:0f: 73:ae:95:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjYwMzI0MTc1OTM5WhcNMjYwMzMxMTc1OTM5WjAYMRYwFAYD VQQDEw02OWMyZDEwYi05MDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoIjDg9v4DRMmZsx7Vo/Fh/LPoR/tCsahJsN5iXz0r6sK2b7TVYDRJ+cs9jv x1BKFrjU6aHhRURUNgk74jbQvI8d6k8E4f5Nr09hDeK2lzmXkXwIQrAWuLa+xBMn VGGKhaBksTCgYfhQzObYPzA+9VwpqvFEQML/HN6xNL2uwur3kfijXDz79XEXqkbB dzOvdIvcyql0dllMt+gbnSJ/PA1B0CENvFUY5JZE8nUT3ovEgEbGVAQgq1nJxH2I yzSqMu6nhVRID5WDmMFcZMN1+a2dj3mrxJ7IA6UqBV01d3DjhhVpqbCuNJ52rgcc 5JC8JCiaMfdVkyvzVAEUN3STnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONhtC5p xWnRsNCk9FHLYSmlinsOMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmv2vkm79PMNFBBYB4aOCbTvPqW1ZQx05na6NiCtRHbORM66aSlLagutEKsBm eoD+KOIlEEBrMqFveW6lDakFoMNOU20J2p71u7y13HNBpAOVMPULpo1ez8KDNx/y tHuJqMYZmhyxYcsD2dXOKoVnFviH3gyzItjLBfzm60h/949iu3b1id3c5QkOMdlS WtiJBWaR6jzKBonG7T72BiIV5OqXamopClnAh2YdZjex4bvOioSPzUJgj8mhmMdv lMttRxWOx9EVyybG5Ae2e+L6OGAg0pKdYfxxvbFVWFDlg4aLPoGkBIpYtsIe5naX wR1cAtatLdYYPNlVmZ0Pc66VuQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:58:05 2026 by rpki-client