$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: riAki/ultBfFqFVvSqshqdriRkw3/E17k8vuuRbxBNU= Subject key identifier: 5C:80:1A:EC:A1:67:F1:1C:C2:7C:22:94:21:37:96:A1:6A:70:EA:5C Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0EE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0EAE Signing time: Sat 18 Apr 2026 17:36:55 +0000 Manifest this update: Sat 18 Apr 2026 17:36:54 +0000 Manifest next update: Sat 25 Apr 2026 17:36:54 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: a8LOkvqk4bKXf8u8+KH3CGnoH6VqGqKvvHaoN+C7Zlg=) 2: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E+4UeHlGnBHL9IRmWm+TexcyHwom9b/OOAx0STjQIo0=) 3: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: IJy6vq3u18sfK/PaqQ4HkbGHvtQ0+WpPPGjw18M6VWY=) 4: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: jPTrigcWq4coxSH4UL7oP5hGP5jZz/yTxLEnnmOBFlo=) 5: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: xo+tt5lov3udnd3XAOiK90QcwkAcxMUW1iuUC+4M+z8=) 6: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: bKvSPuftAoTubmq1z1G2lBaSXWyaRfT8vN+YYMv11yI=) 7: 670DF186232111EB9896B783C4F9AE02.roa (hash: JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3810 (0xee2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Apr 18 17:36:54 2026 GMT Not After : Apr 25 17:36:54 2026 GMT Subject: CN=69e3c136-5074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9c:07:58:76:21:89:33:90:e1:19:72:07:fa: b0:74:02:15:11:1c:0b:40:72:5e:2e:b5:ae:03:5d: 58:9f:41:ad:28:e7:bb:fe:2d:26:8f:b5:49:8a:7e: 42:3e:40:8f:85:1e:62:3b:08:1f:75:9e:aa:81:8a: 2e:85:30:a1:2e:77:ba:5b:9b:51:d0:b3:94:de:ea: 13:52:3e:4c:4b:c9:86:1b:a1:26:fc:14:a6:1a:e9: f7:3f:2e:29:8b:c7:6e:c5:3c:43:68:44:07:3b:c2: 95:79:0b:22:ac:56:c1:14:34:40:dd:65:87:a7:8c: 13:60:09:7d:16:76:ea:82:7d:61:d5:f2:ee:36:06: bb:11:8b:5c:29:d1:02:a3:cd:b7:de:d3:11:8d:3f: d8:0e:74:9c:7e:67:e2:a3:65:4e:3a:b7:b1:7d:a7: 76:09:f4:a1:7c:73:fd:c8:3e:72:7b:ba:22:b1:a4: 88:48:7e:4d:1a:1d:46:cc:03:3a:42:53:10:3a:e2: b0:8d:2c:db:b6:85:b3:e2:11:b9:7b:32:c8:d9:20: 20:02:e0:08:be:14:ed:79:9b:20:0c:30:74:5b:aa: 58:9c:a0:d2:a0:38:d1:5c:b5:db:cf:fb:ca:7d:b8: 76:09:68:4b:b7:d6:c3:60:0c:4c:de:a1:d1:2b:60: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:80:1A:EC:A1:67:F1:1C:C2:7C:22:94:21:37:96:A1:6A:70:EA:5C X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:59:7c:b6:c3:0b:9e:1b:14:84:8c:4c:8d:2e:17:11:bc:1f: b8:1f:22:b9:d3:6b:eb:71:a0:4a:32:5f:42:20:3f:2e:08:8d: 25:75:81:ee:81:f2:8d:92:be:d1:af:35:c0:5d:97:47:77:7e: aa:88:a9:e5:ad:e3:3e:05:76:ee:aa:a4:e3:0d:08:82:bc:5b: 8e:79:58:47:7c:f4:76:eb:53:1a:9c:6b:5b:1a:77:3f:d0:2c: 3c:1a:c4:79:5b:40:86:6f:74:e9:dc:2a:37:f0:1c:e1:03:11: 23:87:6d:63:2b:fb:b3:64:f1:10:0d:4b:1b:d8:f1:97:5b:ed: a7:2f:86:83:38:09:cc:2e:a3:61:0f:67:92:91:20:9a:bc:51: 46:32:2f:7f:4d:5c:1a:74:f8:b6:c3:c5:b4:18:d8:4a:8b:c4: 07:17:e2:c9:8b:ef:5b:44:30:ec:ea:ea:0e:72:7b:22:9c:cd: 17:f0:15:44:f2:11:cd:be:40:11:b0:9e:b4:da:f0:fc:e9:fd: 16:f5:be:a6:54:b1:04:ce:c9:37:1f:75:80:96:6c:08:e1:de: 72:ca:fe:c4:0c:06:aa:90:28:0a:d9:8c:ad:4e:b3:90:2d:31: a3:71:22:b9:96:fd:87:31:ae:5f:b3:25:43:14:74:bb:d3:96: 3c:a4:bc:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwNDE4MTczNjU0WhcNMjYwNDI1MTczNjU0WjAYMRYwFAYD VQQDEw02OWUzYzEzNi01MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JwHWHYhiTOQ4RlyB/qwdAIVERwLQHJeLrWuA11Yn0GtKOe7/i0mj7VJin5C PkCPhR5iOwgfdZ6qgYouhTChLne6W5tR0LOU3uoTUj5MS8mGG6Em/BSmGun3Py4p i8duxTxDaEQHO8KVeQsirFbBFDRA3WWHp4wTYAl9Fnbqgn1h1fLuNga7EYtcKdEC o8233tMRjT/YDnScfmfio2VOOrexfad2CfShfHP9yD5ye7oisaSISH5NGh1GzAM6 QlMQOuKwjSzbtoWz4hG5ezLI2SAgAuAIvhTteZsgDDB0W6pYnKDSoDjRXLXbz/vK fbh2CWhLt9bDYAxM3qHRK2DzVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyAGuyh Z/EcwnwilCE3lqFqcOpcMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACll8tsMLnhsUhIxMjS4XEbwfuB8iudNr63GgSjJfQiA/LgiNJXWB7oHyjZK+ 0a81wF2XR3d+qoip5a3jPgV27qqk4w0IgrxbjnlYR3z0dutTGpxrWxp3P9AsPBrE eVtAhm906dwqN/Ac4QMRI4dtYyv7s2TxEA1LG9jxl1vtpy+GgzgJzC6jYQ9nkpEg mrxRRjIvf01cGnT4tsPFtBjYSovEBxfiyYvvW0Qw7OrqDnJ7IpzNF/AVRPIRzb5A EbCetNrw/On9FvW+plSxBM7JNx91gJZsCOHecsr+xAwGqpAoCtmMrU6zkC0xo3Ei uZb9hzGuX7MlQxR0u9OWPKS8sA== -----END CERTIFICATE-----Generated at Sun Apr 19 10:06:26 2026 by rpki-client