$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft File: 2KPIZydtR_ptDvLogh8Ps9MZcb8.mft (raw, json) Hash identifier: lP8FmrleS00+muvA/uGxu5goj9D15z3ZRdbXqbqpybs= Subject key identifier: 88:D2:04:11:D7:62:4C:09:F3:E5:18:88:18:7D:86:B5:7B:FE:FB:45 Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF Certificate issuer: /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft Manifest number: 11 Signing time: Wed 15 Apr 2026 08:37:19 +0000 Manifest this update: Wed 15 Apr 2026 08:37:18 +0000 Manifest next update: Wed 22 Apr 2026 08:37:18 +0000 Files and hashes: 1: 2KPIZydtR_ptDvLogh8Ps9MZcb8.crl (hash: 3/SWuZtR7oRVrvg3QWT1kQeUTOF+QC58GCKTEceSCUc=) 2: 1C7AB64E21BE11F191732FC01B3D8C67.roa (hash: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF Validity Not Before: Apr 15 08:37:18 2026 GMT Not After : Apr 22 08:37:18 2026 GMT Subject: CN=69df4e3e-7251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:e3:7a:d4:a0:18:b7:a4:dc:8e:48:c9:39: 61:76:78:ad:4c:28:28:15:95:89:72:1b:73:71:4d: ec:72:bc:bf:72:98:6b:61:1b:30:bd:14:80:c7:f7: ad:3a:5a:ab:b4:1e:57:bc:30:cf:40:92:06:dc:23: 49:74:cb:1e:5a:5f:f6:15:59:cc:c5:25:be:84:c9: 81:29:a7:40:1f:25:68:79:9d:bd:a5:8d:d2:76:59: 30:f7:ec:1f:a3:58:73:2c:5f:85:11:ff:c5:42:b0: 77:b6:87:a8:6d:c3:c1:c2:39:d0:16:ea:b2:b7:3e: e6:5b:3f:3d:ae:c3:28:b1:77:8a:9c:04:ff:73:a1: a6:b8:19:d0:3f:9f:0b:b9:d2:49:32:be:bc:fc:b1: 71:2f:fe:76:c8:95:5e:4a:cf:b5:f5:0c:5f:d6:77: 70:40:69:a9:40:33:25:59:2b:25:e1:71:8c:6c:ad: c6:fe:bb:e2:2f:c7:58:81:59:87:83:fb:cf:e2:8a: 3d:be:33:48:1d:06:e0:fe:b3:ce:e1:41:8b:23:56: 09:c8:9e:78:8a:74:d5:a8:40:99:c8:57:f7:b1:5d: 8b:5c:ba:0c:41:bc:d7:e5:af:b9:c9:02:3f:36:b3: d1:d0:df:22:c2:17:c0:a8:43:ac:dd:94:3c:d6:00: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D2:04:11:D7:62:4C:09:F3:E5:18:88:18:7D:86:B5:7B:FE:FB:45 X509v3 Authority Key Identifier: keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:91:af:31:6e:64:08:59:5f:89:d2:a8:df:d9:04:66:a6:8a: 0d:9d:e5:a7:b8:a8:dd:b8:78:db:4c:a2:ce:d7:6e:91:9a:fc: a6:51:bb:a3:ed:7a:55:d8:38:c6:85:cd:83:27:52:d1:ba:c1: bc:e8:dc:ea:ec:36:a2:f8:15:2b:33:bd:ae:d7:62:56:85:d2: 8a:69:92:9a:a3:68:01:dd:a6:5c:9a:65:b2:13:f3:a5:48:e7: f4:6c:0a:d3:95:53:41:51:3f:f7:f1:0d:d7:90:b4:61:97:65: bc:29:99:05:6f:2e:0b:10:7c:b3:f4:03:9c:a1:ce:f9:8c:d7: d1:83:23:a4:1c:e8:e8:74:5b:aa:aa:84:31:5e:37:c0:ac:fa: fe:ad:cd:66:80:82:cc:42:0e:c6:3b:bf:2a:03:01:c2:86:24: 69:3e:80:99:9e:ee:58:e2:52:45:4c:24:d8:12:2f:af:d7:19: 76:0f:8b:ff:23:d4:d6:27:54:f0:34:7f:84:04:57:c2:9d:ff: 73:67:e6:89:a6:82:23:84:c2:55:6d:68:81:64:ed:33:7f:2e: 4e:f6:1a:fa:16:c3:65:46:22:a2:e3:f7:b8:6b:e5:d8:1e:21: 06:1b:7e:a3:4f:8b:1e:33:2b:ac:d0:01:68:da:06:9c:63:d4: f8:73:1a:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzhFNTExMC8GA1UEBRMoRDhBM0M4NjcyNzZENDdGQTZEMEVGMkU4ODIxRjBGQjNE MzE5NzFCRjAeFw0yNjA0MTUwODM3MThaFw0yNjA0MjIwODM3MThaMBgxFjAUBgNV BAMTDTY5ZGY0ZTNlLTcyNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr2ON61KAYt6TcjkjJOWF2eK1MKCgVlYlyG3NxTexyvL9ymGthGzC9FIDH9606 Wqu0Hle8MM9AkgbcI0l0yx5aX/YVWczFJb6EyYEpp0AfJWh5nb2ljdJ2WTD37B+j WHMsX4UR/8VCsHe2h6htw8HCOdAW6rK3PuZbPz2uwyixd4qcBP9zoaa4GdA/nwu5 0kkyvrz8sXEv/nbIlV5Kz7X1DF/Wd3BAaalAMyVZKyXhcYxsrcb+u+Ivx1iBWYeD +8/iij2+M0gdBuD+s87hQYsjVgnInniKdNWoQJnIV/exXYtcugxBvNflr7nJAj82 s9HQ3yLCF8CoQ6zdlDzWAEU7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiNIEEddi TAnz5RiIGH2GtXv++0UwHwYDVR0jBBgwFoAU2KPIZydtR/ptDvLogh8Ps9MZcb8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3OEU1L0NCMkY4RUE0MjFC RDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9wdER2TG9naDhQczlNWmNi OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMktQSVp5ZHRSX3B0RHZMb2doOFBzOU1aY2I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 OEU1L0NCMkY4RUE0MjFCRDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9w dER2TG9naDhQczlNWmNiOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC/ka8xbmQIWV+J0qjf2QRmpooNneWnuKjduHjbTKLO126RmvymUbuj7XpV2DjG hc2DJ1LRusG86Nzq7Dai+BUrM72u12JWhdKKaZKao2gB3aZcmmWyE/OlSOf0bArT lVNBUT/38Q3XkLRhl2W8KZkFby4LEHyz9AOcoc75jNfRgyOkHOjodFuqqoQxXjfA rPr+rc1mgILMQg7GO78qAwHChiRpPoCZnu5Y4lJFTCTYEi+v1xl2D4v/I9TWJ1Tw NH+EBFfCnf9zZ+aJpoIjhMJVbWiBZO0zfy5O9hr6FsNlRiKi4/e4a+XYHiEGG36j T4seMyus0AFo2gacY9T4cxop -----END CERTIFICATE-----Generated at Fri Apr 17 10:10:40 2026 by rpki-client