$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json) Hash identifier: /YiYoyuoTGjXXCgDYY30yLF+xqLtuaw71ZFdtCOEUgs= Subject key identifier: 57:78:A7:79:84:79:7F:4A:82:49:C7:15:E8:92:64:56:73:2E:5C:3D Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59 Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59 Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft Manifest number: 045D Signing time: Fri 17 Apr 2026 14:31:11 +0000 Manifest this update: Fri 17 Apr 2026 14:31:10 +0000 Manifest next update: Fri 24 Apr 2026 14:31:10 +0000 Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: fV8DrxScnuF1f41TEB+pZW95RWICGpOT/+yMI1zOY6k=) 2: 97D35382924311EC927C972FC4F9AE02.roa (hash: aAWOfNb/dnXkGDMyjT0RYtdEn0OfU/UmCUamSuOloZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59 Validity Not Before: Apr 17 14:31:10 2026 GMT Not After : Apr 24 14:31:10 2026 GMT Subject: CN=69e2442f-c40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:8f:e4:1a:36:12:eb:18:95:93:bd:9c:18: 4b:6c:77:fc:af:e1:44:53:e9:a8:fb:27:e3:a1:37: 76:9b:77:82:b1:02:5a:a2:98:4d:4e:37:0d:c4:ab: 1c:d9:4f:04:ef:42:10:00:82:56:1e:42:b5:b5:b1: ef:db:c2:83:45:d2:d4:99:a0:9a:9d:91:50:d3:f1: b1:a8:00:d7:3d:9f:f5:3e:74:30:48:1a:68:02:24: aa:2b:5b:08:df:aa:a7:61:fc:8f:5d:f9:de:27:99: 55:01:67:09:8d:f6:49:99:5a:95:d2:9f:e0:30:e0: fd:db:54:83:88:ec:c2:e9:c0:29:f0:42:25:e8:6b: 8d:61:b3:67:e1:a3:69:6e:68:19:5c:1b:9e:12:24: 7c:56:14:5f:60:66:0a:a1:2f:d1:53:83:d2:cd:d9: cb:cc:ce:53:23:47:82:aa:5a:45:e4:59:ac:a2:8f: dc:36:fa:bc:fb:27:dc:d4:fa:a6:b6:39:4c:3c:ff: 3c:f9:b8:10:68:65:a4:d0:72:e1:2c:96:15:83:e0: d3:4b:0a:e3:4e:a8:ac:d6:23:5b:66:93:82:1a:e1: 01:e9:0b:98:f8:83:ba:4e:a7:cf:26:02:7f:5d:0f: 7b:5d:5f:dd:11:76:40:3d:94:95:10:5b:01:11:8b: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:78:A7:79:84:79:7F:4A:82:49:C7:15:E8:92:64:56:73:2E:5C:3D X509v3 Authority Key Identifier: keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:94:50:3a:32:be:61:a7:3d:fb:2e:ad:08:ca:41:dc:9f:b2: 01:d9:3f:62:49:b2:1d:6c:4d:5a:0c:66:87:cb:78:19:24:c7: 00:19:fe:82:5e:e6:ed:4b:0d:b6:54:11:84:3b:94:7e:91:43: 86:ce:ae:76:60:32:57:cf:c4:c8:8f:bb:a3:f4:0a:79:09:f3: 26:7c:7f:c6:2d:07:ad:6c:50:0d:96:be:20:0e:3d:b8:5c:f1: ce:0e:56:50:65:d2:8c:ac:34:24:21:8b:db:47:78:a8:be:5b: 8f:1c:bd:17:e0:fd:f7:18:61:42:2b:db:fd:7b:69:e7:6d:b1: 3b:94:a8:67:3a:c3:a5:b5:52:b2:54:91:85:04:71:d1:41:1c: fd:8c:20:9b:c6:e4:0c:af:8f:49:75:23:57:34:5d:36:54:f3: b2:2a:ab:f9:f2:76:07:4f:5e:b8:ef:75:f1:38:f2:44:4e:94: 0d:95:e2:9a:8e:a1:c5:97:9f:63:6b:8c:d6:91:fe:6e:2c:a0: 1e:ad:10:51:c6:18:f2:80:9d:0e:0f:07:00:e5:ce:33:40:fc: a1:7d:31:d4:09:3a:e2:b8:c1:76:f9:e3:30:e5:6f:31:46:84: f5:ba:1a:54:99:da:c0:b9:ac:b8:ee:d6:50:97:2e:a2:8e:5c: 55:6d:c9:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew NjlEMDRENTkwHhcNMjYwNDE3MTQzMTEwWhcNMjYwNDI0MTQzMTEwWjAYMRYwFAYD VQQDEw02OWUyNDQyZi1jNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokuP5Bo2EusYlZO9nBhLbHf8r+FEU+mo+yfjoTd2m3eCsQJaophNTjcNxKsc 2U8E70IQAIJWHkK1tbHv28KDRdLUmaCanZFQ0/GxqADXPZ/1PnQwSBpoAiSqK1sI 36qnYfyPXfneJ5lVAWcJjfZJmVqV0p/gMOD921SDiOzC6cAp8EIl6GuNYbNn4aNp bmgZXBueEiR8VhRfYGYKoS/RU4PSzdnLzM5TI0eCqlpF5Fmsoo/cNvq8+yfc1Pqm tjlMPP88+bgQaGWk0HLhLJYVg+DTSwrjTqis1iNbZpOCGuEB6QuY+IO6TqfPJgJ/ XQ97XV/dEXZAPZSVEFsBEYv5UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFd4p3mE eX9KgknHFeiSZFZzLlw9MB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ ZksxWHlPZW5SOG9HblFUVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5RQOjK+Yac9+y6tCMpB3J+yAdk/YkmyHWxNWgxmh8t4GSTHABn+gl7m7UsN tlQRhDuUfpFDhs6udmAyV8/EyI+7o/QKeQnzJnx/xi0HrWxQDZa+IA49uFzxzg5W UGXSjKw0JCGL20d4qL5bjxy9F+D99xhhQivb/Xtp522xO5SoZzrDpbVSslSRhQRx 0UEc/Ywgm8bkDK+PSXUjVzRdNlTzsiqr+fJ2B09euO918TjyRE6UDZXimo6hxZef Y2uM1pH+biygHq0QUcYY8oCdDg8HAOXOM0D8oX0x1Ak64rjBdvnjMOVvMUaE9boa VJnawLmsuO7WUJcuoo5cVW3J7g== -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:52 2026 by rpki-client