$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: 7xCH2HtYXhPQ/RZBQghTkc2ulND+QnF+o+6Wbq/yK0Q= Subject key identifier: 63:1C:22:0D:86:8E:5D:82:E0:47:5B:56:37:E9:3A:49:42:A1:39:CA Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 09E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 09DA Signing time: Sat 18 Apr 2026 19:45:40 +0000 Manifest this update: Sat 18 Apr 2026 19:45:40 +0000 Manifest next update: Sat 25 Apr 2026 19:45:40 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: 4sxU9zgaa+QAkcQmn5AznbqRxvc0KkQcXfDKTmRvDQE=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: fay/JELjYgS3QhNYNRW2VHw728nS5DEnngJONGdEkuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Apr 18 19:45:40 2026 GMT Not After : Apr 25 19:45:40 2026 GMT Subject: CN=69e3df64-1241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:d0:dc:f6:c8:9a:5b:d6:71:5d:70:80:3f: 79:41:4d:5c:03:1e:2c:3f:ab:c8:a7:85:53:a0:de: 18:f9:a9:44:a6:6a:40:3e:93:aa:5f:05:36:9a:87: aa:0c:e8:6c:db:ab:b4:a6:91:b5:af:1d:1c:47:30: 95:0b:3e:5b:18:7f:be:cd:4c:a1:ab:44:a2:52:05: c5:7d:4e:28:08:98:c6:2b:86:94:15:0a:3a:32:20: 62:56:f6:04:c7:dc:1e:c5:64:62:ac:5e:49:42:1e: 71:32:b1:2c:b8:36:2b:2b:15:09:f2:bd:f9:f7:cf: b3:94:10:6d:b4:fd:4b:b2:e2:bd:4b:dc:f0:20:68: d1:be:fe:91:88:e1:4a:d3:2a:84:40:f5:e5:9a:dc: c1:01:d2:74:74:ec:eb:81:8e:ac:a7:6d:1a:08:28: 55:c3:99:2e:d5:88:c7:ef:df:02:0d:4b:2e:a1:79: c3:65:0e:90:40:50:e9:b6:02:ec:53:11:57:11:96: b4:2d:24:ca:63:af:5c:63:a5:8a:91:e3:a4:2f:a6: 71:9e:fc:ca:f6:4a:a6:b1:57:e1:72:88:55:29:01: e3:87:c2:ec:cf:0c:64:e0:ea:67:75:48:61:94:51: 4c:2b:85:28:f2:17:1d:43:66:01:70:1a:6b:56:ef: 6e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1C:22:0D:86:8E:5D:82:E0:47:5B:56:37:E9:3A:49:42:A1:39:CA X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a8:4b:2f:cd:43:be:a8:f4:37:50:2f:2e:b1:91:00:64:69: 22:c5:51:13:7a:c7:a8:05:6d:e8:d6:67:12:79:3b:11:aa:2d: ce:e6:d0:a8:d0:41:c4:52:42:dc:12:5e:1d:e2:6b:a8:39:8a: c6:1d:23:67:8b:ce:b1:c4:f9:2c:a8:46:51:cb:ab:71:b2:26: f5:31:4a:5c:86:f3:13:97:9e:54:b0:0f:4a:b8:e9:ca:db:70: 1d:11:95:58:19:93:17:e6:18:20:07:13:c8:d0:34:d1:50:a7: c8:ab:af:07:9a:39:d3:15:ca:d5:d0:82:e6:c3:49:4b:a3:a6: 9d:d6:99:a4:24:fd:e5:ea:81:64:b6:72:fc:fe:cd:09:e1:ae: bf:e1:ae:29:5c:27:28:57:c9:8f:29:4e:f2:86:90:a6:bd:d8: 95:34:e2:a4:a9:b0:b4:58:38:fd:19:d0:f7:d1:1f:2f:be:0c: b9:87:60:06:bf:21:c3:eb:cf:87:93:61:80:d6:48:c5:50:1b: dc:59:55:50:57:98:4f:86:e5:fe:6e:7f:ef:c5:e2:db:aa:c8: 60:11:28:bf:80:cc:f0:52:2f:1b:51:61:8c:9a:cc:a6:3a:b7: df:ad:12:17:8e:15:d8:3e:9c:b2:68:44:d3:bf:a6:b9:76:7e: 4f:ed:29:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjYwNDE4MTk0NTQwWhcNMjYwNDI1MTk0NTQwWjAYMRYwFAYD VQQDEw02OWUzZGY2NC0xMjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqrQ3PbImlvWcV1wgD95QU1cAx4sP6vIp4VToN4Y+alEpmpAPpOqXwU2moeq DOhs26u0ppG1rx0cRzCVCz5bGH++zUyhq0SiUgXFfU4oCJjGK4aUFQo6MiBiVvYE x9wexWRirF5JQh5xMrEsuDYrKxUJ8r3598+zlBBttP1LsuK9S9zwIGjRvv6RiOFK 0yqEQPXlmtzBAdJ0dOzrgY6sp20aCChVw5ku1YjH798CDUsuoXnDZQ6QQFDptgLs UxFXEZa0LSTKY69cY6WKkeOkL6ZxnvzK9kqmsVfhcohVKQHjh8Lszwxk4OpndUhh lFFMK4Uo8hcdQ2YBcBprVu9uPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMcIg2G jl2C4EdbVjfpOklCoTnKMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFahLL81Dvqj0N1AvLrGRAGRpIsVRE3rHqAVt6NZnEnk7EaotzubQqNBBxFJC 3BJeHeJrqDmKxh0jZ4vOscT5LKhGUcurcbIm9TFKXIbzE5eeVLAPSrjpyttwHRGV WBmTF+YYIAcTyNA00VCnyKuvB5o50xXK1dCC5sNJS6OmndaZpCT95eqBZLZy/P7N CeGuv+GuKVwnKFfJjylO8oaQpr3YlTTipKmwtFg4/RnQ99EfL74MuYdgBr8hw+vP h5NhgNZIxVAb3FlVUFeYT4bl/m5/78Xi26rIYBEov4DM8FIvG1FhjJrMpjq3360S F44V2D6csmhE07+muXZ+T+0pzQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:52:26 2026 by rpki-client