$ rpki-client -vvf rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft File: 6tKydVDbcXQNXPh2q1QLuGtfKjg.mft (raw, json) Hash identifier: hvPXzqdHEXZ9+9IUBLi/Wrf6vrmxkKYoAXl0VHGbhB0= Subject key identifier: C3:1E:E2:BF:A7:40:7D:C3:30:2A:3A:DD:FF:64:39:D2:6D:25:B9:5F Authority key identifier: EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38 Certificate issuer: /CN=A913CFCF/serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft Manifest number: 2A Signing time: Fri 17 Apr 2026 08:30:21 +0000 Manifest this update: Fri 17 Apr 2026 08:30:21 +0000 Manifest next update: Fri 24 Apr 2026 08:30:21 +0000 Files and hashes: 1: 6tKydVDbcXQNXPh2q1QLuGtfKjg.crl (hash: wWX2XU83FsjCrCVz1LLq1tj1D/UStmEXiT4DWJGbwk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CFCF, serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38 Validity Not Before: Apr 17 08:30:21 2026 GMT Not After : Apr 24 08:30:21 2026 GMT Subject: CN=69e1ef9d-781f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:e8:0f:e3:ec:9e:65:22:34:f2:bd:f9:86: bb:99:72:55:de:24:9e:db:8f:ce:45:d6:3b:f2:17: 5e:88:62:a0:ea:50:4e:08:49:32:0d:b9:48:16:80: 25:7e:f8:bb:3e:28:83:65:b1:ff:1c:3b:7f:4b:a7: e5:7c:02:b8:05:0d:a7:7c:80:39:21:49:7b:d2:f6: 06:bd:95:87:c6:6a:47:3c:bf:2a:6f:94:a9:13:67: 6d:68:b0:23:9a:e0:a4:89:ae:9d:68:65:a5:54:07: 40:fe:71:96:90:29:47:7f:86:3c:9c:5e:3c:54:42: 3c:ef:f5:11:bb:22:eb:f2:8a:97:b2:d9:30:d9:32: b1:b2:03:9b:d2:08:a1:48:bc:10:db:fc:16:9d:9b: 20:3a:ff:7c:1d:14:ad:3b:56:83:13:50:6f:c0:48: 71:73:98:bd:c4:f9:b0:81:37:d8:81:6c:38:52:4f: e5:81:77:1e:cd:34:03:e3:84:a7:99:d6:63:4f:b6: 9c:bc:26:9b:17:67:3d:e5:3a:23:98:f4:dd:be:b3: 6a:74:0a:bb:2a:f0:58:bc:92:7c:eb:15:40:78:c4: 61:b8:f7:82:4f:08:c8:f1:47:d9:fe:79:19:b8:a7: 28:34:96:d6:36:d0:96:ec:c5:7a:08:64:fd:b4:41: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1E:E2:BF:A7:40:7D:C3:30:2A:3A:DD:FF:64:39:D2:6D:25:B9:5F X509v3 Authority Key Identifier: keyid:EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:12:36:19:92:1d:c1:cd:c2:cb:72:e1:0c:2c:49:b7:33:8c: 57:4e:7a:d6:a4:f4:d3:7a:34:c8:12:e6:74:2c:25:88:f6:84: 06:ef:6b:5c:48:a3:6e:16:f3:3b:29:dc:47:21:df:12:38:47: 55:c2:b0:01:c7:1b:5e:68:74:9c:4d:47:c5:d7:13:f0:c0:92: d5:40:e9:a2:5d:5b:74:1e:51:a7:f7:80:cf:76:94:0e:f4:f3: b6:db:7f:c5:34:b3:58:5e:ec:18:c6:ec:30:36:37:7d:a7:86: fb:00:1f:bc:f0:ce:09:44:78:b4:af:29:e4:e8:19:7a:1e:56: 30:8e:ad:c1:72:a8:b6:de:e1:9c:3f:5d:89:3d:be:73:8a:fe: 9a:8f:20:7e:df:f2:45:5d:e6:b0:e5:04:da:81:71:e4:bb:97: f6:65:00:40:5b:fa:5e:c0:28:f1:17:a2:14:27:67:50:69:b8: cd:ff:cb:9b:0c:d0:bb:c6:55:86:54:11:4e:ee:bf:68:84:63: c1:2f:9d:ec:d2:89:53:ba:67:ec:5a:ac:0a:a5:c9:63:8f:48: b0:00:1d:f0:a4:42:a2:32:5c:7e:e7:23:77:7e:56:75:0c:1c: 1f:05:06:ec:47:a9:e2:86:8e:62:ed:a3:30:14:cf:3d:9d:d7: 86:66:68:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Q0ZDRjExMC8GA1UEBRMoRUFEMkIyNzU1MERCNzE3NDBENUNGODc2QUI1NDBCQjg2 QjVGMkEzODAeFw0yNjA0MTcwODMwMjFaFw0yNjA0MjQwODMwMjFaMBgxFjAUBgNV BAMTDTY5ZTFlZjlkLTc4MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxB+gP4+yeZSI08r35hruZclXeJJ7bj85F1jvyF16IYqDqUE4ISTINuUgWgCV+ +Ls+KINlsf8cO39Lp+V8ArgFDad8gDkhSXvS9ga9lYfGakc8vypvlKkTZ21osCOa 4KSJrp1oZaVUB0D+cZaQKUd/hjycXjxUQjzv9RG7Iuvyipey2TDZMrGyA5vSCKFI vBDb/BadmyA6/3wdFK07VoMTUG/ASHFzmL3E+bCBN9iBbDhST+WBdx7NNAPjhKeZ 1mNPtpy8JpsXZz3lOiOY9N2+s2p0Crsq8Fi8knzrFUB4xGG494JPCMjxR9n+eRm4 pyg0ltY20JbsxXoIZP20Qf8FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwx7iv6dA fcMwKjrd/2Q50m0luV8wHwYDVR0jBBgwFoAU6tKydVDbcXQNXPh2q1QLuGtfKjgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDRkNGL0QyRUE1Mjg0MDI5 NDExRjE5MUU2MEM3NDM2M0Q4QzY3LzZ0S3lkVkRiY1hRTlhQaDJxMVFMdUd0Zktq Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnRLeWRWRGJjWFFOWFBoMnExUUx1R3RmS2pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND RkNGL0QyRUE1Mjg0MDI5NDExRjE5MUU2MEM3NDM2M0Q4QzY3LzZ0S3lkVkRiY1hR TlhQaDJxMVFMdUd0ZktqZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtEjYZkh3BzcLLcuEMLEm3M4xXTnrWpPTTejTIEuZ0LCWI9oQG72tcSKNuFvM7 KdxHId8SOEdVwrABxxteaHScTUfF1xPwwJLVQOmiXVt0HlGn94DPdpQO9PO223/F NLNYXuwYxuwwNjd9p4b7AB+88M4JRHi0rynk6Bl6HlYwjq3Bcqi23uGcP12JPb5z iv6ajyB+3/JFXeaw5QTagXHku5f2ZQBAW/pewCjxF6IUJ2dQabjN/8ubDNC7xlWG VBFO7r9ohGPBL53s0olTumfsWqwKpcljj0iwAB3wpEKiMlx+5yN3flZ1DBwfBQbs R6niho5i7aMwFM89ndeGZmjP -----END CERTIFICATE-----Generated at Fri Apr 17 12:07:40 2026 by rpki-client