$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: SkRWatjRkZtclRfIexF2CkY/0mROVs1AFpJ0sm7rRQw= Subject key identifier: 85:50:B4:0E:CB:EB:70:B0:73:85:ED:41:32:8A:39:19:97:B4:E5:28 Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 0427 Signing time: Wed 25 Mar 2026 00:00:53 +0000 Manifest this update: Wed 25 Mar 2026 00:00:52 +0000 Manifest next update: Wed 01 Apr 2026 00:00:52 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: dtoMOcG5AujMnfXR2oF+yGX+Ishc+47p/HcqeKPVPN8=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: jD+RZZ+awTn3b0dsK5nF4kAR3h29O9n6oxGPNxy3s7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Mar 25 00:00:52 2026 GMT Not After : Apr 1 00:00:52 2026 GMT Subject: CN=69c325b5-2e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:78:63:f8:49:02:a4:2b:ab:29:9a:7d:2c: 59:e7:c5:9e:25:1e:38:19:27:f8:8a:3e:c5:ec:32: 52:15:ac:51:c7:8f:77:2d:5b:dc:8c:9c:a5:86:7f: b3:88:0a:5a:df:52:94:e4:5e:21:d5:30:9c:8e:5f: c3:5f:7c:2e:08:12:69:7c:9a:6c:0b:91:55:a9:c9: 1d:08:ca:b3:ba:30:20:32:89:cc:15:08:d9:20:9a: 6c:b2:36:22:5d:e1:06:dc:3b:b2:a1:35:bc:62:d9: 04:32:f8:03:f9:01:bb:c7:24:a7:42:74:73:24:7f: fa:ea:77:ef:d3:c7:01:ba:bf:f5:f9:31:86:8a:a4: 3f:b7:70:6a:a5:eb:51:02:14:a9:f4:47:6b:29:a1: 8f:f5:6a:c7:5c:1f:f5:99:3a:11:43:d3:1b:81:91: fc:28:d0:d5:01:e0:cb:c2:91:c9:b3:b8:4b:4c:ec: 09:74:0e:5f:c8:36:c0:bd:78:27:d2:9b:c6:3b:89: 3f:52:52:8e:e8:90:cf:3f:3b:4b:ba:d7:7d:39:79: ae:ea:0d:db:d9:a5:fb:0c:7a:70:21:79:79:5c:6d: 2f:3c:c7:c7:e4:fa:14:52:55:d9:da:a0:45:0a:4a: df:ca:10:d9:cb:81:15:1f:7e:99:52:ee:c0:91:13: 9a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:B4:0E:CB:EB:70:B0:73:85:ED:41:32:8A:39:19:97:B4:E5:28 X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d5:9d:25:96:54:13:e8:2b:d4:32:b5:5f:62:cd:e0:64:89: 0e:f7:a6:4c:30:ca:a4:ca:6d:1f:18:cb:54:dd:b3:56:8f:0c: a4:eb:5d:cc:2c:4a:c1:16:93:ba:93:a8:29:36:0f:3a:87:c2: e5:1a:60:50:d8:ea:63:b1:70:95:c4:79:97:60:fe:38:06:92: 71:61:f9:d1:5c:85:df:5a:85:93:8f:a3:00:d9:2e:bd:c4:83: d9:48:17:7d:2b:3e:62:62:a8:71:42:69:1a:15:53:e0:a2:aa: 11:bd:55:08:94:0e:0b:cb:e9:e8:23:c6:a9:1f:93:05:8b:b6: 6b:86:8f:8e:10:ed:e8:d2:9c:e7:43:41:78:00:b0:06:64:1c: 8f:84:67:3d:d1:ff:4c:58:58:3b:98:7d:d9:18:c5:95:7c:71: f6:30:66:fe:03:60:13:6f:cd:22:b0:20:ac:0b:49:f1:9d:00: 18:b2:c1:22:8f:38:5c:79:71:82:a0:19:9a:49:58:0b:44:c4: 19:b5:86:60:ca:b1:b3:b1:d1:22:be:e2:38:b2:8a:fa:ae:94: a0:f8:53:1b:04:70:c2:06:3a:a2:8f:42:94:0c:75:f9:4f:c8: 88:46:93:2b:56:58:f8:dd:c4:b7:98:24:4b:b5:3c:1d:eb:e0: e7:3b:f8:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjYwMzI1MDAwMDUyWhcNMjYwNDAxMDAwMDUyWjAYMRYwFAYD VQQDEw02OWMzMjViNS0yZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCh4Y/hJAqQrqymafSxZ58WeJR44GSf4ij7F7DJSFaxRx493LVvcjJylhn+z iApa31KU5F4h1TCcjl/DX3wuCBJpfJpsC5FVqckdCMqzujAgMonMFQjZIJpssjYi XeEG3DuyoTW8YtkEMvgD+QG7xySnQnRzJH/66nfv08cBur/1+TGGiqQ/t3BqpetR AhSp9EdrKaGP9WrHXB/1mToRQ9MbgZH8KNDVAeDLwpHJs7hLTOwJdA5fyDbAvXgn 0pvGO4k/UlKO6JDPPztLutd9OXmu6g3b2aX7DHpwIXl5XG0vPMfH5PoUUlXZ2qBF CkrfyhDZy4EVH36ZUu7AkROa4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVQtA7L 63Cwc4XtQTKKORmXtOUoMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAotWdJZZUE+gr1DK1X2LN4GSJDvemTDDKpMptHxjLVN2zVo8MpOtdzCxKwRaT upOoKTYPOofC5RpgUNjqY7FwlcR5l2D+OAaScWH50VyF31qFk4+jANkuvcSD2UgX fSs+YmKocUJpGhVT4KKqEb1VCJQOC8vp6CPGqR+TBYu2a4aPjhDt6NKc50NBeACw BmQcj4RnPdH/TFhYO5h92RjFlXxx9jBm/gNgE2/NIrAgrAtJ8Z0AGLLBIo84XHlx gqAZmklYC0TEGbWGYMqxs7HRIr7iOLKK+q6UoPhTGwRwwgY6oo9ClAx1+U/IiEaT K1ZY+N3Et5gkS7U8Hevg5zv4QQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:08 2026 by rpki-client