$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: jFq1yjY6O7AQRq3Fp5dSyg2LFlptDgLbq+Ar47sNitY= Subject key identifier: 80:75:52:7E:AE:41:71:62:9C:47:D4:8D:15:98:77:77:87:8F:8B:67 Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0EA0 Signing time: Thu 26 Mar 2026 17:40:07 +0000 Manifest this update: Thu 26 Mar 2026 17:40:06 +0000 Manifest next update: Thu 02 Apr 2026 17:40:06 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: AS99cvXbPY1Tiu/wb/WyVe5wJgVErwjKlUpGz3V7fo4=) 2: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: aigYc/n/JGvIbVIQwDO9bKK+eMUG5TvhV7PY2a5Qs6I=) 3: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: XHrlt6xoD1A14UELLtFlgRu6lNHev3zfVPKKrggxdO4=) 4: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: XQHNZu9WrDOHXcrOnwFedWqMNY7Ym61M7N8j6VKuPNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3769 (0xeb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Mar 26 17:40:06 2026 GMT Not After : Apr 2 17:40:06 2026 GMT Subject: CN=69c56f77-bae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:ea:a3:9e:e7:43:d9:cb:be:25:ed:1a:ea: e3:b1:be:44:97:a1:2f:25:5c:f9:d9:3a:6d:57:0b: 26:5a:57:ea:e1:e8:76:37:ec:e4:b7:51:cb:26:c5: 9d:c9:04:09:28:04:d5:cc:67:bd:67:06:eb:49:3f: b6:7f:80:12:ab:5b:0b:96:55:dd:c2:2f:42:c1:4f: bc:6d:3e:3f:54:83:42:d4:0c:02:cc:f7:d8:59:61: fd:17:5d:b2:17:96:df:d6:90:a3:e1:ed:45:f4:83: ea:b2:7b:45:2c:3b:49:cb:2e:b5:04:d3:71:e0:78: fc:9d:9c:a2:6c:4b:df:8d:52:1d:c7:d0:4d:0c:5d: 74:85:82:54:ab:ea:85:22:88:80:9b:c4:b7:35:3a: a2:08:d3:97:94:87:04:ca:f7:a2:5d:49:e3:8f:f7: 9b:81:4a:ca:11:d8:ca:1c:c1:59:ef:1f:ac:ef:ba: af:43:77:4f:91:67:b4:5e:9c:21:af:75:7d:b0:d5: 8c:6e:86:40:6f:56:f2:9a:fd:bd:52:3b:5c:f5:a8: e7:1b:de:d0:05:bb:a8:e9:a6:ee:de:d1:16:ff:5b: 93:ca:e0:a7:78:c9:4e:ee:72:9e:f7:81:84:8d:af: e0:0e:e7:f7:5d:7b:d6:5e:cd:0b:54:6a:82:01:b8: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:75:52:7E:AE:41:71:62:9C:47:D4:8D:15:98:77:77:87:8F:8B:67 X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d9:dc:1f:4d:8e:75:dc:76:e4:d3:c0:87:10:39:b3:12:6e: 15:73:7a:15:e4:f6:c7:dc:cf:08:b7:c0:ad:37:52:2c:f2:e8: 85:eb:80:25:b2:aa:bf:b0:5c:8d:17:86:db:1d:e4:c8:62:ce: 0d:45:78:02:ab:42:0c:d5:f6:24:fb:41:41:7c:a6:a7:03:fb: 17:c5:4f:d6:ed:72:04:a6:6e:fe:52:07:8b:49:56:52:81:e9: 6b:b8:2c:74:37:8e:01:1b:6a:18:42:63:2c:44:48:a6:f4:3e: 11:cc:40:f1:a5:25:56:c3:fa:68:6c:9c:00:49:ef:39:cd:b7: 0e:0f:4d:b9:d2:03:30:ee:82:65:2c:2e:45:b3:da:a0:dd:ab: af:a2:d5:63:b4:89:36:34:db:2a:80:3c:d2:9b:bf:57:9d:7b: 6f:82:f0:af:55:30:d3:a0:27:9b:bb:5d:ba:3a:04:d1:2e:fd: 26:0c:ce:bf:e4:65:8c:33:a7:e6:b7:e5:42:21:38:cd:77:63: d8:51:45:69:f8:37:08:ea:49:0e:0d:8d:5a:ea:2f:80:4c:37: 55:7d:a8:10:ab:6f:59:ee:64:a6:3a:c2:2d:66:5e:dd:91:f2: 1f:4a:17:a3:a8:c9:d9:8d:92:a5:28:1c:fe:ac:3b:49:ff:62: cd:4b:b3:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjYwMzI2MTc0MDA2WhcNMjYwNDAyMTc0MDA2WjAYMRYwFAYD VQQDEw02OWM1NmY3Ny1iYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNfqo57nQ9nLviXtGurjsb5El6EvJVz52TptVwsmWlfq4eh2N+zkt1HLJsWd yQQJKATVzGe9ZwbrST+2f4ASq1sLllXdwi9CwU+8bT4/VINC1AwCzPfYWWH9F12y F5bf1pCj4e1F9IPqsntFLDtJyy61BNNx4Hj8nZyibEvfjVIdx9BNDF10hYJUq+qF IoiAm8S3NTqiCNOXlIcEyveiXUnjj/ebgUrKEdjKHMFZ7x+s77qvQ3dPkWe0Xpwh r3V9sNWMboZAb1bymv29Ujtc9ajnG97QBbuo6abu3tEW/1uTyuCneMlO7nKe94GE ja/gDuf3XXvWXs0LVGqCAbg41QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIB1Un6u QXFinEfUjRWYd3eHj4tnMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtncH02Oddx25NPAhxA5sxJuFXN6FeT2x9zPCLfArTdSLPLoheuAJbKqv7Bc jReG2x3kyGLODUV4AqtCDNX2JPtBQXympwP7F8VP1u1yBKZu/lIHi0lWUoHpa7gs dDeOARtqGEJjLERIpvQ+EcxA8aUlVsP6aGycAEnvOc23Dg9NudIDMO6CZSwuRbPa oN2rr6LVY7SJNjTbKoA80pu/V517b4Lwr1Uw06Anm7tdujoE0S79JgzOv+RljDOn 5rflQiE4zXdj2FFFafg3COpJDg2NWuovgEw3VX2oEKtvWe5kpjrCLWZe3ZHyH0oX o6jJ2Y2SpSgc/qw7Sf9izUuzHg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:34:12 2026 by rpki-client