$ rpki-client -vvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft File: 2CVmixrBt_OBXwe82lfnSMSWSpo.mft (raw, json) Hash identifier: EN58r4EiVhF4er4TTa4o1NeWezBOhTrpO2N/LA40+vI= Subject key identifier: FC:69:87:04:25:56:F2:87:04:65:78:9C:84:E3:01:FF:34:19:37:7C Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A Certificate issuer: /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft Manifest number: E4 Signing time: Fri 17 Apr 2026 06:12:51 +0000 Manifest this update: Fri 17 Apr 2026 06:12:50 +0000 Manifest next update: Fri 24 Apr 2026 06:12:50 +0000 Files and hashes: 1: 2CVmixrBt_OBXwe82lfnSMSWSpo.crl (hash: sTEWpuXa20Mf5RXnpbINqe/LXb1z1V2o10Rot2YBakM=) 2: 00078764E06811EF8716401DC4F9AE02.roa (hash: jAgpnq1+lwtrym5arlQne7Jb3Wult1dG/3ZGpOPdDZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Validity Not Before: Apr 17 06:12:50 2026 GMT Not After : Apr 24 06:12:50 2026 GMT Subject: CN=69e1cf63-5724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:12:ca:03:03:09:03:80:6a:1c:26:25:ea:9c: 6b:2d:af:76:40:8f:08:e7:f4:89:76:1f:7e:eb:48: cd:25:08:43:e4:46:2e:58:8f:7e:a6:4e:ef:1c:2c: a4:35:8e:05:a1:2f:8b:ad:88:31:64:94:e0:17:17: f1:74:dd:1b:02:66:bd:aa:44:55:1e:00:00:2d:cb: 37:12:96:4f:53:35:01:2b:a3:fd:38:30:de:91:11: 80:75:82:80:90:da:97:71:69:2a:a7:0b:55:ff:48: 61:eb:2d:92:25:ff:73:39:24:15:2a:a3:0c:e4:58: 02:8a:9b:8d:31:51:0d:70:a3:2f:37:00:07:15:bb: d7:63:fe:74:6d:f1:bd:38:19:a0:63:8b:f6:32:57: c9:f4:c0:5f:8d:22:50:ab:d7:07:9c:e4:c3:c2:59: fa:35:9a:cf:d6:a0:97:95:64:9a:56:62:9b:8e:0b: a3:47:a6:7f:03:a9:cb:f9:dc:64:83:7f:7f:9b:f0: 46:2a:8a:02:46:69:2a:0b:03:c6:e9:16:ff:cf:da: be:e8:f5:b5:86:28:a3:95:a7:67:b1:31:40:7c:02: df:30:86:2c:ed:c0:b0:48:f6:2c:39:7f:57:fc:9d: 52:dd:03:7b:2a:3b:52:4a:aa:5a:f9:c1:4e:e3:76: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:69:87:04:25:56:F2:87:04:65:78:9C:84:E3:01:FF:34:19:37:7C X509v3 Authority Key Identifier: keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e9:eb:4e:3c:0e:ae:dd:e7:f4:4e:c6:32:65:ed:a8:5f:1e: e1:58:53:f2:4a:f4:51:56:38:7b:b2:39:18:29:a7:3f:2a:f1: bc:d3:ae:e1:55:f6:83:62:5c:0d:e9:ee:7e:69:85:d5:e2:bc: ab:e7:be:0c:63:ab:3f:3b:91:41:bb:0e:bb:0a:f1:7e:05:44: 93:a2:a4:ce:4e:9e:62:d5:f5:ed:7f:3a:ed:1b:2d:23:78:2e: 10:13:01:93:74:cc:c1:87:56:00:7c:ef:44:42:ea:9d:ee:9a: 13:11:34:75:e2:4b:9f:5a:58:fa:57:c6:02:48:05:9b:c9:0c: ad:30:45:84:5e:c5:2f:e5:d0:ec:53:9e:58:e4:02:f7:4e:4c: a3:77:a0:7c:9b:a0:79:0e:3b:0a:e2:46:4d:87:9a:01:6c:9e: fd:b4:37:a7:f7:c5:ed:83:66:9a:ca:3d:43:8e:6e:37:e9:59: ac:e5:ab:44:1a:42:2b:be:bd:c2:bd:8e:65:fd:a5:50:d4:ff: ed:f0:73:6a:f1:b6:f2:43:bf:2b:c7:46:6c:b8:f4:e3:be:31: d4:fe:d7:88:42:5c:2b:f5:8f:c5:ee:b4:3a:83:b3:1f:1f:d1: 46:38:fd:99:4c:8f:81:4c:3f:5c:c8:65:78:eb:97:f1:c0:ce: c8:5e:30:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QzMxMTAvBgNVBAUTKEQ4MjU2NjhCMUFDMUI3RjM4MTVGMDdCQ0RBNTdFNzQ4 QzQ5NjRBOUEwHhcNMjYwNDE3MDYxMjUwWhcNMjYwNDI0MDYxMjUwWjAYMRYwFAYD VQQDEw02OWUxY2Y2My01NzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xLKAwMJA4BqHCYl6pxrLa92QI8I5/SJdh9+60jNJQhD5EYuWI9+pk7vHCyk NY4FoS+LrYgxZJTgFxfxdN0bAma9qkRVHgAALcs3EpZPUzUBK6P9ODDekRGAdYKA kNqXcWkqpwtV/0hh6y2SJf9zOSQVKqMM5FgCipuNMVENcKMvNwAHFbvXY/50bfG9 OBmgY4v2MlfJ9MBfjSJQq9cHnOTDwln6NZrP1qCXlWSaVmKbjgujR6Z/A6nL+dxk g39/m/BGKooCRmkqCwPG6Rb/z9q+6PW1hiijladnsTFAfALfMIYs7cCwSPYsOX9X /J1S3QN7KjtSSqpa+cFO43ZjiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxphwQl VvKHBGV4nITjAf80GTd8MB8GA1UdIwQYMBaAFNglZosawbfzgV8HvNpX50jElkqa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZDMy81QkY1MTkyQUUw NjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRfT0JYd2U4MmxmblNNU1dT cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDVm1peHJCdF9PQlh3ZTgybGZuU01TV1Nwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZDMy81QkY1MTkyQUUwNjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRf T0JYd2U4MmxmblNNU1dTcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARenrTjwOrt3n9E7GMmXtqF8e4VhT8kr0UVY4e7I5GCmnPyrxvNOu4VX2g2Jc DenufmmF1eK8q+e+DGOrPzuRQbsOuwrxfgVEk6Kkzk6eYtX17X867RstI3guEBMB k3TMwYdWAHzvRELqne6aExE0deJLn1pY+lfGAkgFm8kMrTBFhF7FL+XQ7FOeWOQC 905Mo3egfJugeQ47CuJGTYeaAWye/bQ3p/fF7YNmmso9Q45uN+lZrOWrRBpCK769 wr2OZf2lUNT/7fBzavG28kO/K8dGbLj0474x1P7XiEJcK/WPxe60OoOzHx/RRjj9 mUyPgUw/XMhleOuX8cDOyF4wsw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:46:45 2026 by rpki-client