$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json) Hash identifier: 2xJ6aDObs/jOCMN1AHEbbiGNmnxrTp9U14u9wz3qCSE= Subject key identifier: 30:F1:3F:6E:7C:6B:3C:C0:09:43:B9:75:57:C5:B5:3A:B1:4A:8B:3D Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft Manifest number: 4D Signing time: Fri 17 Apr 2026 08:00:40 +0000 Manifest this update: Fri 17 Apr 2026 08:00:39 +0000 Manifest next update: Fri 24 Apr 2026 08:00:39 +0000 Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: NXM4HPMHOdSulGVCXm38WKK6uQfGW3FgF+2ZttHrJ5c=) 2: EDD5097ECB7411F0A2C24D4FC4F9AE02.roa (hash: VI4BpFGbspGtTWlGcHxr2/5wodjUlVSpAm9KmOWTHck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Validity Not Before: Apr 17 08:00:39 2026 GMT Not After : Apr 24 08:00:39 2026 GMT Subject: CN=69e1e8a8-1526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:c6:70:c8:87:32:10:b5:4e:68:62:1f:02: 10:23:be:23:3c:2e:47:a9:d4:86:ea:ee:98:8b:57: db:6e:82:c3:2f:8a:ce:3a:35:26:3e:2b:af:9c:2a: 2b:7b:49:52:ab:51:a9:42:7c:01:16:81:c4:39:5e: d6:ec:d2:18:c3:6d:03:b6:c0:03:b1:42:f5:ce:15: 43:1d:a0:d7:d9:ca:6e:60:19:9a:da:57:cb:5f:36: 57:51:93:44:a5:14:54:36:3d:ce:db:16:84:a5:13: b5:77:14:75:72:7a:b2:f1:5d:bf:99:e1:0a:a7:02: 0e:dc:45:4c:49:09:0b:77:2a:75:fb:60:15:c2:44: 65:ec:34:77:27:b8:39:2c:ab:c7:77:95:3e:b3:f4: 32:8d:42:90:e3:66:40:7a:4c:e1:a4:8c:33:cf:9f: d6:50:05:55:55:9e:d5:4e:9c:1d:44:8d:04:c0:f5: e3:c1:ad:7e:57:52:cf:3c:5f:bb:12:25:e9:00:00: 7c:2a:4c:86:72:c6:22:14:14:ae:94:9b:40:44:22: 0d:96:89:8c:df:73:b9:3a:34:d7:a4:b0:7d:2d:8d: a6:76:c1:d3:04:1d:3a:d6:0d:8d:a2:11:5f:54:1a: 16:15:8a:c8:8a:d6:bd:26:d8:f2:73:c2:15:08:5c: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F1:3F:6E:7C:6B:3C:C0:09:43:B9:75:57:C5:B5:3A:B1:4A:8B:3D X509v3 Authority Key Identifier: keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:34:72:30:f8:d7:81:05:43:51:db:58:98:63:84:b8:90:68: 90:12:2b:cb:7f:f1:84:ec:29:e9:27:85:97:11:3d:e3:48:99: 9b:04:57:3d:9e:d4:8a:8f:ab:0a:8d:c0:c8:9e:88:44:45:52: 15:b5:2f:02:f6:ba:66:87:60:92:58:ba:e7:88:88:ee:6e:e4: 12:0e:a1:1a:37:65:04:93:20:7b:ad:ae:a1:23:0a:c7:9c:2f: 23:58:5b:7e:00:9d:e8:d3:7a:d6:48:35:0c:52:a0:48:92:cb: 7c:04:92:b0:60:0d:58:29:77:9a:39:5e:49:28:35:39:66:94: 47:00:d2:60:23:aa:70:c3:a6:a7:dd:ac:60:2f:a7:8f:58:76: a8:ec:20:85:64:29:d2:50:f2:52:44:c2:ed:a2:dd:c3:bf:ab: 93:e3:c0:e4:7a:9a:bb:8c:38:61:a6:de:d2:d1:0c:34:e0:88: 18:3f:2f:e9:cc:eb:72:e8:db:4a:82:9b:04:83:9d:a9:30:0f: 28:17:11:65:de:71:da:d2:f2:ce:be:f7:ee:93:08:eb:b2:57: 52:80:55:1f:a8:50:50:f1:87:13:ca:52:a7:79:83:5f:07:e9: e2:45:1a:29:2c:5b:80:58:fa:ff:32:e0:74:a1:cd:a5:8e:51: 52:3e:14:bf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFNDExMC8GA1UEBRMoRDkzNUVDRjc5OTEzMUJFQzI0MzhEQTlERTgyQjY4NTg5 NjNDNzA1QzAeFw0yNjA0MTcwODAwMzlaFw0yNjA0MjQwODAwMzlaMBgxFjAUBgNV BAMTDTY5ZTFlOGE4LTE1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0OcZwyIcyELVOaGIfAhAjviM8Lkep1Ibq7piLV9tugsMvis46NSY+K6+cKit7 SVKrUalCfAEWgcQ5Xtbs0hjDbQO2wAOxQvXOFUMdoNfZym5gGZraV8tfNldRk0Sl FFQ2Pc7bFoSlE7V3FHVyerLxXb+Z4QqnAg7cRUxJCQt3KnX7YBXCRGXsNHcnuDks q8d3lT6z9DKNQpDjZkB6TOGkjDPPn9ZQBVVVntVOnB1EjQTA9ePBrX5XUs88X7sS JekAAHwqTIZyxiIUFK6Um0BEIg2WiYzfc7k6NNeksH0tjaZ2wdMEHTrWDY2iEV9U GhYVisiK1r0m2PJzwhUIXFLlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMPE/bnxr PMAJQ7l1V8W1OrFKiz0wHwYDVR0jBBgwFoAU2TXs95kTG+wkONqd6CtoWJY8cFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0U0LzAyMzJFNTQ4Q0I3 MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRYczk1a1RHLXdrT05xZDZDdG9XSlk4Y0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0U0LzAyMzJFNTQ4Q0I3MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13 a09OcWQ2Q3RvV0pZOGNGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5NHIw+NeBBUNR21iYY4S4kGiQEivLf/GE7CnpJ4WXET3jSJmbBFc9ntSKj6sK jcDInohERVIVtS8C9rpmh2CSWLrniIjubuQSDqEaN2UEkyB7ra6hIwrHnC8jWFt+ AJ3o03rWSDUMUqBIkst8BJKwYA1YKXeaOV5JKDU5ZpRHANJgI6pww6an3axgL6eP WHao7CCFZCnSUPJSRMLtot3Dv6uT48Dkepq7jDhhpt7S0Qw04IgYPy/pzOty6NtK gpsEg52pMA8oFxFl3nHa0vLOvvfukwjrsldSgFUfqFBQ8YcTylKneYNfB+niRRop LFuAWPr/MuB0oc2ljlFSPhS/ -----END CERTIFICATE-----Generated at Fri Apr 17 19:57:48 2026 by rpki-client