$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: kiMuTP1L5J/BuKDNe26Ocb6hF8HKCUVJ50nTr0ZsuSw= Subject key identifier: 20:49:5A:D9:89:D6:17:8B:18:62:2A:F9:0D:BF:65:F4:05:53:34:CD Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 0678 Signing time: Thu 16 Apr 2026 22:27:47 +0000 Manifest this update: Thu 16 Apr 2026 22:27:47 +0000 Manifest next update: Thu 23 Apr 2026 22:27:47 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: +g9PZjK5mBFE79MLYIeP6ph7+N50uFsB1QOt4NLAtFA=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: /3x4vYPiXoG8rAiPY7APpgt+Ap9Ktaa/xQN8yrKkbXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Apr 16 22:27:47 2026 GMT Not After : Apr 23 22:27:47 2026 GMT Subject: CN=69e16263-8698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:d1:c3:02:b8:25:75:f8:ab:23:da:27:01: 92:65:61:74:17:07:96:f5:0e:7d:23:d4:c3:6a:ad: c1:a4:ed:d5:40:c3:df:c5:72:d0:c2:d0:6e:ef:0e: ff:fe:01:a8:01:4a:b2:60:32:b1:e8:35:7f:b9:7b: 81:c9:d2:3b:b0:73:9c:48:83:d0:e2:8e:04:11:76: 55:3e:bc:73:11:7a:9f:bd:c4:fa:b6:f7:3d:98:b0: d0:1a:82:dc:14:b1:d0:b1:75:c2:bb:fa:98:dc:c5: 16:39:af:04:31:97:16:5f:87:b9:e6:95:79:9f:b9: 8e:9c:ad:d9:01:22:69:e4:4a:87:ce:86:3b:2b:13: 61:0a:da:2d:e2:e3:68:25:f8:75:4c:da:1f:fa:bf: f2:2c:c5:09:11:8c:6a:6e:06:8f:a6:4c:7c:bc:bd: e3:59:46:b7:ef:24:4d:a1:0d:8b:de:63:8d:08:d6: 9f:2f:f4:37:c3:d0:08:16:70:93:b2:1b:8d:0f:ff: 79:b3:83:92:9c:68:6f:71:4d:a6:ef:ae:3b:84:3e: 01:d5:8a:1b:c8:73:26:4d:d2:e3:68:ee:65:ca:b8: 63:18:3f:66:50:c2:09:fa:49:8d:00:28:35:d6:8b: ba:78:3b:97:2d:16:63:8e:e6:2c:61:f5:f4:30:95: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:49:5A:D9:89:D6:17:8B:18:62:2A:F9:0D:BF:65:F4:05:53:34:CD X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:37:3f:35:62:6f:ed:75:60:fd:e7:40:34:43:4d:5d:4f:ae: 90:f3:54:9f:22:2d:69:07:07:6c:7a:ae:bc:45:9a:62:8a:1d: 59:75:c9:dd:54:d1:f3:71:d7:9a:61:f7:79:e2:e6:1e:66:98: ef:4d:42:08:a8:f7:b7:42:8a:ea:0f:58:b8:52:0e:b3:22:28: 20:8b:ec:3c:6e:36:e3:ba:d7:67:c9:1d:d0:d8:78:31:eb:c0: 9a:21:eb:f6:d3:43:d8:ff:cf:0d:b3:55:b2:5c:31:e6:c3:82: b9:b6:48:4d:f8:49:ed:15:a4:1c:ac:43:98:b7:9d:13:95:4e: a3:8b:14:ba:71:55:e9:e6:af:51:a9:70:f7:af:2f:57:05:50: f0:e9:49:53:d0:f8:8d:1c:3e:f1:ef:ec:d0:23:56:73:2d:42: d0:05:3d:5d:4f:c7:25:af:01:67:42:19:aa:75:f9:7d:ca:b3: fd:bc:0a:45:d9:a3:01:28:75:89:15:b6:67:b7:3c:97:bc:a5: a6:28:b7:ab:a6:44:57:66:ee:8c:61:85:6e:db:5b:c6:36:3b: f8:2c:9d:ae:ad:45:72:33:a2:fe:8c:6d:b4:4e:2c:27:fa:f0: cc:ef:99:d0:eb:22:0e:e5:41:5b:88:a9:f6:32:21:cd:cf:0a: 96:0d:d0:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjYwNDE2MjIyNzQ3WhcNMjYwNDIzMjIyNzQ3WjAYMRYwFAYD VQQDEw02OWUxNjI2My04Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuljRwwK4JXX4qyPaJwGSZWF0FweW9Q59I9TDaq3BpO3VQMPfxXLQwtBu7w7/ /gGoAUqyYDKx6DV/uXuBydI7sHOcSIPQ4o4EEXZVPrxzEXqfvcT6tvc9mLDQGoLc FLHQsXXCu/qY3MUWOa8EMZcWX4e55pV5n7mOnK3ZASJp5EqHzoY7KxNhCtot4uNo Jfh1TNof+r/yLMUJEYxqbgaPpkx8vL3jWUa37yRNoQ2L3mONCNafL/Q3w9AIFnCT shuND/95s4OSnGhvcU2m7647hD4B1YobyHMmTdLjaO5lyrhjGD9mUMIJ+kmNACg1 1ou6eDuXLRZjjuYsYfX0MJWtKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBJWtmJ 1heLGGIq+Q2/ZfQFUzTNMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlDc/NWJv7XVg/edANENNXU+ukPNUnyItaQcHbHquvEWaYoodWXXJ3VTR83HX mmH3eeLmHmaY701CCKj3t0KK6g9YuFIOsyIoIIvsPG4247rXZ8kd0Nh4MevAmiHr 9tND2P/PDbNVslwx5sOCubZITfhJ7RWkHKxDmLedE5VOo4sUunFV6eavUalw968v VwVQ8OlJU9D4jRw+8e/s0CNWcy1C0AU9XU/HJa8BZ0IZqnX5fcqz/bwKRdmjASh1 iRW2Z7c8l7ylpii3q6ZEV2bujGGFbttbxjY7+Cydrq1FcjOi/oxttE4sJ/rwzO+Z 0OsiDuVBW4ip9jIhzc8Klg3Q3Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:37:41 2026 by rpki-client