$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: BfKsD2Y7PjZ+wEGm4PS1aM/3SDoeFC/Fb2W25JTZvds= Subject key identifier: 9B:7D:A8:BE:C9:8D:C4:13:A1:16:D4:93:3B:94:3B:03:33:EA:80:79 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0CAD Signing time: Thu 16 Apr 2026 17:46:48 +0000 Manifest this update: Thu 16 Apr 2026 17:46:47 +0000 Manifest next update: Thu 23 Apr 2026 17:46:47 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: ZFAc2zpX19bssZOXc2D0q+XPkuskno3uoYEiTrMqF+0=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: UbwOi9U9kZof7b43F/HRMpxGF4fX5ioRAi/qvaW/Bgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Apr 16 17:46:47 2026 GMT Not After : Apr 23 17:46:47 2026 GMT Subject: CN=69e12087-987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:7f:89:0f:37:e7:74:e6:0b:06:61:f9:09: 0b:51:a5:07:47:ab:91:ef:56:f5:a0:dd:99:97:87: ba:68:53:e0:1f:94:4f:84:4d:5a:d2:6a:6f:d6:f5: 86:f7:43:b3:5d:49:db:58:49:23:a0:21:3f:76:0c: 86:5b:38:b1:1c:72:87:ca:b0:31:15:88:41:96:61: 4c:b0:f0:54:a7:3d:98:cf:88:78:4c:d8:ef:7a:66: 1f:ae:04:99:0b:5c:7d:e5:6b:e2:f7:26:05:82:db: 7c:8b:03:cd:6a:da:a8:45:6c:05:02:15:bf:74:72: 0a:ee:fe:8d:42:ca:4c:09:0a:53:92:7b:00:82:1a: 32:b7:2f:65:3a:67:2c:32:21:e9:d2:9d:68:d4:c8: ef:b4:74:3b:84:d0:8f:05:26:b5:a5:d5:80:ba:02: 45:77:93:be:81:f4:73:e4:90:43:85:61:50:ca:83: a1:6e:e1:2e:5a:27:00:27:93:33:19:2f:22:ad:ac: 38:74:ea:ab:cc:ea:37:9a:e7:85:ac:d0:d7:a0:61: c6:05:87:ba:b6:76:c1:34:91:2b:6a:15:c6:b7:4f: 47:54:70:20:96:72:84:63:46:ce:3e:17:fb:93:4b: 0c:71:cf:96:27:7b:75:9f:70:37:e7:6a:bc:3e:1b: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7D:A8:BE:C9:8D:C4:13:A1:16:D4:93:3B:94:3B:03:33:EA:80:79 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f7:c6:b2:5a:4d:06:be:51:0e:7d:fd:ae:41:bd:d1:7e:25: 91:62:07:97:ea:e3:00:67:45:5c:9b:25:02:b9:b3:56:01:09: bc:99:76:c9:ba:19:4e:8a:e8:c9:ca:bb:93:b6:d2:4e:52:41: b6:7a:42:3c:5e:89:20:39:21:cf:45:d8:b8:1e:a1:77:24:a8: 9e:2c:8e:a1:b6:9c:0f:a3:b7:66:57:51:db:e5:24:aa:a1:4a: 91:de:7c:92:5e:d9:49:66:2b:5c:e1:a4:cb:33:ff:49:74:a1: b5:5c:c5:87:e6:7c:5e:23:40:50:fd:cb:8c:10:e2:95:48:d3: 31:48:38:d5:f1:e1:72:fc:f1:ff:57:91:71:92:14:e2:a9:b6: 86:e1:b7:21:03:f5:50:74:6b:0f:fc:28:0e:61:6a:71:7b:ba: 1f:19:c2:16:66:db:e1:b6:4b:90:c3:b2:d2:c2:c4:f9:12:e3: 3e:c9:05:29:8d:9a:b5:19:18:e4:ec:c8:ec:7d:30:6d:63:10: f8:f5:62:63:fb:2b:55:0c:68:5e:51:4d:65:a0:15:28:c9:35: e2:0f:7e:1f:22:6b:a3:34:5a:ad:25:a0:48:2c:93:61:35:15: 3c:7e:28:98:69:39:e8:f3:17:b9:0d:5f:7b:72:19:bd:52:4e: 1e:d5:91:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjYwNDE2MTc0NjQ3WhcNMjYwNDIzMTc0NjQ3WjAYMRYwFAYD VQQDEw02OWUxMjA4Ny05ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2l/iQ8353TmCwZh+QkLUaUHR6uR71b1oN2Zl4e6aFPgH5RPhE1a0mpv1vWG 90OzXUnbWEkjoCE/dgyGWzixHHKHyrAxFYhBlmFMsPBUpz2Yz4h4TNjvemYfrgSZ C1x95Wvi9yYFgtt8iwPNatqoRWwFAhW/dHIK7v6NQspMCQpTknsAghoyty9lOmcs MiHp0p1o1MjvtHQ7hNCPBSa1pdWAugJFd5O+gfRz5JBDhWFQyoOhbuEuWicAJ5Mz GS8iraw4dOqrzOo3mueFrNDXoGHGBYe6tnbBNJErahXGt09HVHAglnKEY0bOPhf7 k0sMcc+WJ3t1n3A352q8PhsAqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJt9qL7J jcQToRbUkzuUOwMz6oB5MB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEPfGslpNBr5RDn39rkG90X4lkWIHl+rjAGdFXJslArmzVgEJvJl2yboZToro ycq7k7bSTlJBtnpCPF6JIDkhz0XYuB6hdySoniyOobacD6O3ZldR2+UkqqFKkd58 kl7ZSWYrXOGkyzP/SXShtVzFh+Z8XiNAUP3LjBDilUjTMUg41fHhcvzx/1eRcZIU 4qm2huG3IQP1UHRrD/woDmFqcXu6HxnCFmbb4bZLkMOy0sLE+RLjPskFKY2atRkY 5OzI7H0wbWMQ+PViY/srVQxoXlFNZaAVKMk14g9+HyJrozRarSWgSCyTYTUVPH4o mGk56PMXuQ1fe3IZvVJOHtWRUQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:03:15 2026 by rpki-client