$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: 9CXQn7wLIAI71cCdv8RggknshyyBwZpyigKFHdB8wDs= Subject key identifier: B9:7E:BD:3C:C2:78:4B:1E:D3:84:94:3A:CC:90:72:80:9A:90:FE:A7 Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: 024D Signing time: Fri 17 Apr 2026 02:12:49 +0000 Manifest this update: Fri 17 Apr 2026 02:12:48 +0000 Manifest next update: Fri 24 Apr 2026 02:12:48 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: yn6AnTOPGs8pamdkq3LwQP5ytPhlINaU1/eNAKp/8kw=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: k3WVwtkl6L7ZLGV3P7GhulqncgzNNGVUWm1IeT8xDNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: Apr 17 02:12:48 2026 GMT Not After : Apr 24 02:12:48 2026 GMT Subject: CN=69e19720-d558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:4d:cc:67:5a:e7:55:c5:fd:8d:28:96:35: bb:e5:fb:b9:6c:ce:ac:a8:7c:50:11:a0:9a:14:2a: e3:1f:bb:f3:66:7b:9f:97:73:00:5d:99:f2:1f:f5: d3:f6:9a:1c:ce:ca:4b:a5:1b:28:e3:45:9d:c0:fd: 73:0c:c7:d7:89:50:c1:75:b2:ff:5d:de:0e:20:bb: f5:ab:5f:ff:fc:f5:9f:33:ff:ca:56:20:a2:53:e1: 47:8b:8e:cf:57:33:c0:46:0a:db:af:04:69:e2:de: 6e:d6:de:8a:93:55:af:30:e6:f3:cf:19:e0:c8:51: c7:97:a6:41:ae:ea:b4:ea:2b:3a:c8:a4:c8:62:bd: 92:68:ba:a1:7a:5f:f5:75:ba:20:ae:9f:8e:65:6b: ac:6b:01:cc:1d:f9:75:3f:a0:6f:7b:d8:05:ab:b2: 56:ef:26:6f:71:47:52:90:b0:7f:8d:45:4a:55:b9: c8:18:1b:d3:a3:e8:ed:1e:5e:8e:2f:c2:a7:34:60: 0f:31:fb:fa:52:1a:69:7c:38:89:41:a8:12:c7:82: f9:80:a7:c0:30:43:0b:17:82:d2:5e:83:a2:fb:a0: 53:1b:88:80:9c:73:7d:b5:b3:40:61:17:0e:d1:05: c8:9e:55:8a:d3:2e:12:23:1c:29:dc:ff:11:e7:45: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7E:BD:3C:C2:78:4B:1E:D3:84:94:3A:CC:90:72:80:9A:90:FE:A7 X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:dc:18:19:88:a2:5e:3d:20:7c:67:52:2a:2d:45:6f:52:69: b7:3a:d7:54:da:35:1e:f6:c8:90:a6:fa:dd:09:24:8a:32:ee: 48:29:f4:a0:cc:1a:7e:a8:28:06:de:4a:a9:a8:8d:0c:f9:ad: ce:73:83:5e:d2:5f:14:fd:42:d2:ac:bb:4c:31:c0:44:4b:29: ad:57:81:41:64:0f:0a:00:d8:e7:11:c1:a8:0d:8a:fa:02:93: af:6c:e2:15:4d:55:2b:3a:e9:f7:e4:5f:3e:b0:da:e0:0e:a3: 60:67:4e:9f:bc:20:66:db:26:c0:0d:31:6e:1c:52:51:e3:31: 51:9d:ff:a7:6b:2d:94:2a:69:42:9f:f7:d3:8b:b7:eb:3f:1a: b5:15:9a:64:6a:68:69:80:1f:0e:67:db:b6:9b:bd:99:2c:e7: 58:54:a1:41:5f:30:85:f4:78:bc:a9:50:91:b8:af:8d:a4:fa: b4:68:ff:21:68:c8:3f:99:2b:71:f6:57:04:25:87:eb:00:7e: ce:2c:5e:da:c1:ab:a3:79:81:f6:e8:55:87:bc:d7:7a:ed:d5: f2:7a:e5:90:44:b4:84:e5:6a:d8:e4:58:55:29:25:c6:ae:1c: ed:c0:c2:69:cf:42:e5:da:bc:d6:66:17:77:2f:56:43:f7:49: 73:34:8c:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjYwNDE3MDIxMjQ4WhcNMjYwNDI0MDIxMjQ4WjAYMRYwFAYD VQQDEw02OWUxOTcyMC1kNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2FNzGda51XF/Y0oljW75fu5bM6sqHxQEaCaFCrjH7vzZnufl3MAXZnyH/XT 9poczspLpRso40WdwP1zDMfXiVDBdbL/Xd4OILv1q1///PWfM//KViCiU+FHi47P VzPARgrbrwRp4t5u1t6Kk1WvMObzzxngyFHHl6ZBruq06is6yKTIYr2SaLqhel/1 dbogrp+OZWusawHMHfl1P6Bve9gFq7JW7yZvcUdSkLB/jUVKVbnIGBvTo+jtHl6O L8KnNGAPMfv6UhppfDiJQagSx4L5gKfAMEMLF4LSXoOi+6BTG4iAnHN9tbNAYRcO 0QXInlWK0y4SIxwp3P8R50XLbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLl+vTzC eEse04SUOsyQcoCakP6nMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlNwYGYiiXj0gfGdSKi1Fb1JptzrXVNo1HvbIkKb63QkkijLuSCn0oMwafqgo Bt5KqaiNDPmtznODXtJfFP1C0qy7TDHAREsprVeBQWQPCgDY5xHBqA2K+gKTr2zi FU1VKzrp9+RfPrDa4A6jYGdOn7wgZtsmwA0xbhxSUeMxUZ3/p2stlCppQp/304u3 6z8atRWaZGpoaYAfDmfbtpu9mSznWFShQV8whfR4vKlQkbivjaT6tGj/IWjIP5kr cfZXBCWH6wB+zixe2sGro3mB9uhVh7zXeu3V8nrlkES0hOVq2ORYVSklxq4c7cDC ac9C5dq81mYXdy9WQ/dJczSMpg== -----END CERTIFICATE-----Generated at Sat Apr 18 03:05:50 2026 by rpki-client