$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: Qxhz/HA45Daxvz7w4M/ACz5SgpUmNkMuxZrY5Q51LNw= Subject key identifier: 52:5B:97:74:88:56:B3:D4:F5:65:A9:57:E2:0D:29:40:B9:C9:F1:11 Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0F0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0F07 Signing time: Thu 26 Mar 2026 17:32:37 +0000 Manifest this update: Thu 26 Mar 2026 17:32:37 +0000 Manifest next update: Thu 02 Apr 2026 17:32:37 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: 8yYrC9yyIzW57s93eGnqFPRCmTLzlwnyZnsNUkB7CK0=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: VIZdhiYSpiKQJVRkddgrRD+Jy12svVReopMn7lF4O6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3855 (0xf0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Mar 26 17:32:37 2026 GMT Not After : Apr 2 17:32:37 2026 GMT Subject: CN=69c56db5-732b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:07:ed:9a:50:7c:e4:37:0f:8b:8e:42:b5: a3:3c:c6:ed:86:6c:e1:f0:3f:1c:86:ec:16:a5:d9: 56:2b:95:95:1b:2a:95:45:f0:a0:1e:15:46:97:71: 02:79:c4:c2:9e:79:7b:c1:b8:1f:ca:bc:7e:df:4a: 8b:e9:62:07:50:90:cb:b7:62:3e:cd:e9:c2:22:53: 30:3d:4e:14:c1:b4:b4:ed:5f:ae:cb:70:c4:f4:86: 0e:f5:1a:29:79:e6:54:c6:56:49:51:b1:ba:33:d0: 90:43:d2:ea:c0:17:e0:5f:94:86:6f:e5:fc:e0:86: 4c:85:23:83:e2:a5:b4:f0:a7:ec:e2:d9:6e:f7:8a: a7:3f:f6:cf:8d:26:a4:04:2f:9c:f8:b9:2c:0e:c3: 09:49:6f:47:25:01:35:65:71:be:62:34:37:20:b4: 47:f1:f9:b2:88:e1:6d:ea:d7:22:77:34:ec:d4:80: ca:95:94:05:40:3e:e6:b5:90:5e:03:24:b6:b3:97: a2:eb:7e:72:bd:eb:db:7d:5f:5c:8a:2d:ca:3c:c1: da:81:33:e2:d3:df:30:56:3e:ba:43:76:47:18:9e: a8:1b:fe:48:1f:d2:b5:49:d8:89:69:52:b0:bd:48: 95:f9:04:dc:df:1b:16:d9:a0:45:65:85:27:c0:ff: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5B:97:74:88:56:B3:D4:F5:65:A9:57:E2:0D:29:40:B9:C9:F1:11 X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:0d:81:26:f8:a9:69:33:33:54:c1:08:db:a4:b8:f8:d2:12: dd:b7:62:10:0f:73:28:d2:1d:b7:45:06:f4:c8:29:87:0b:8d: 1e:95:eb:86:74:9f:25:57:17:de:ee:f1:14:29:85:b4:29:d9: 38:0f:d4:45:e3:e2:f3:37:d1:3d:89:97:3e:41:0e:4c:93:7f: 46:44:36:ff:50:f2:75:a4:be:3a:56:80:25:d7:ca:7f:ee:27: 38:97:2c:49:a4:3b:6a:d8:83:6d:a7:7a:37:c7:fb:c9:a8:6c: a8:c0:aa:73:fd:83:89:42:80:7b:16:b5:a5:77:e8:e4:a4:af: 2b:ad:03:1d:84:0b:87:31:8d:1c:51:d9:ba:e4:75:f0:23:2a: 63:70:8c:74:0e:5e:7f:85:3b:c6:7c:96:cd:39:cf:94:d9:6e: 96:76:07:43:dc:41:a1:c0:61:26:11:98:82:5a:f2:70:57:e2: 58:3d:ec:d4:f2:b1:b1:37:de:54:90:00:44:b4:25:87:88:cc: 3c:7b:ae:72:f0:ed:54:f6:6c:c0:ef:b1:27:16:26:06:9c:04: 2e:e8:df:5b:d3:a3:8c:c2:23:5e:db:a6:e3:0c:88:80:0a:87: 24:38:17:4c:79:ed:13:22:7b:aa:50:29:3f:b9:4b:ba:b9:8f: 6a:8e:08:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjYwMzI2MTczMjM3WhcNMjYwNDAyMTczMjM3WjAYMRYwFAYD VQQDEw02OWM1NmRiNS03MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9cH7ZpQfOQ3D4uOQrWjPMbthmzh8D8chuwWpdlWK5WVGyqVRfCgHhVGl3EC ecTCnnl7wbgfyrx+30qL6WIHUJDLt2I+zenCIlMwPU4UwbS07V+uy3DE9IYO9Rop eeZUxlZJUbG6M9CQQ9LqwBfgX5SGb+X84IZMhSOD4qW08Kfs4tlu94qnP/bPjSak BC+c+LksDsMJSW9HJQE1ZXG+YjQ3ILRH8fmyiOFt6tcidzTs1IDKlZQFQD7mtZBe AyS2s5ei635yvevbfV9cii3KPMHagTPi098wVj66Q3ZHGJ6oG/5IH9K1SdiJaVKw vUiV+QTc3xsW2aBFZYUnwP9TmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJbl3SI VrPU9WWpV+INKUC5yfERMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoQ2BJvipaTMzVMEI26S4+NIS3bdiEA9zKNIdt0UG9MgphwuNHpXrhnSfJVcX 3u7xFCmFtCnZOA/URePi8zfRPYmXPkEOTJN/RkQ2/1DydaS+OlaAJdfKf+4nOJcs SaQ7atiDbad6N8f7yahsqMCqc/2DiUKAexa1pXfo5KSvK60DHYQLhzGNHFHZuuR1 8CMqY3CMdA5ef4U7xnyWzTnPlNlulnYHQ9xBocBhJhGYglrycFfiWD3s1PKxsTfe VJAARLQlh4jMPHuucvDtVPZswO+xJxYmBpwELujfW9OjjMIjXtum4wyIgAqHJDgX THntEyJ7qlApP7lLurmPao4I3w== -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:10 2026 by rpki-client