$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft File: 2H4ClpVGrcVaesygjK2yh5vGmck.mft (raw, json) Hash identifier: 1CzlrlRETf04VLPv+IAyVbQCFltWifDqqOvz8Qv3sHM= Subject key identifier: 8F:F3:2F:EE:81:A5:30:53:99:F2:04:C4:EF:51:4A:2E:BC:73:1F:44 Authority key identifier: D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9 Certificate issuer: /CN=A9185B5F/serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft Manifest number: 0228 Signing time: Fri 17 Apr 2026 02:27:50 +0000 Manifest this update: Fri 17 Apr 2026 02:27:50 +0000 Manifest next update: Fri 24 Apr 2026 02:27:50 +0000 Files and hashes: 1: 2H4ClpVGrcVaesygjK2yh5vGmck.crl (hash: //Wk8WvZMipr/cWSWZ42puYbbNP6JTt8OeE+E2dPk/s=) 2: A4B0D326F0A311ED99A1471CC4F9AE02.roa (hash: h10z21e5Oy2p6gz6NvjFEykQ6dDt++dpQhjiOqNwnqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B5F, serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9 Validity Not Before: Apr 17 02:27:50 2026 GMT Not After : Apr 24 02:27:50 2026 GMT Subject: CN=69e19aa6-c8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dd:30:71:6c:e6:23:be:59:05:cf:3e:f8:b3: 49:bb:4d:bf:17:ca:92:0a:ef:ea:39:f3:65:39:93: 5f:e5:c4:cf:bc:e5:38:f8:a1:69:b3:e1:58:8b:ce: 32:df:5f:ae:62:6c:18:bc:bb:96:c1:bf:cd:d1:67: a9:61:68:c4:a0:f1:06:0a:1e:28:40:e8:64:e2:66: d9:98:27:db:74:1e:ef:65:41:b7:18:ec:e6:05:ff: bb:c8:28:be:12:1a:2d:36:e9:f9:58:b7:2e:e5:8b: 1f:21:0f:fe:20:7e:2a:71:9c:29:d4:a3:5a:cf:87: 8d:5b:6d:30:88:46:83:35:fe:71:58:a5:68:42:3c: 06:aa:51:de:89:14:a2:a3:2f:bf:59:bc:fd:5a:d9: ea:52:ed:bb:86:4d:28:1f:e7:33:ce:fa:3f:24:97: b9:c0:66:79:67:f6:7f:fd:71:45:b8:97:7d:14:13: 2b:12:e6:a3:b8:7b:90:c4:bf:0a:8f:8c:32:3e:1e: 74:ae:36:75:52:b4:62:e2:fe:30:43:b2:92:79:cb: e2:d6:16:ab:54:ac:9d:cb:99:f5:32:87:61:51:85: 41:b2:fb:45:a2:b8:a3:54:40:0a:65:65:06:ac:ee: 9c:3f:43:60:a6:86:de:ca:48:06:34:3f:79:c9:b2: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F3:2F:EE:81:A5:30:53:99:F2:04:C4:EF:51:4A:2E:BC:73:1F:44 X509v3 Authority Key Identifier: keyid:D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:de:64:17:16:9c:84:21:3d:e6:7a:29:35:6f:a0:00:f2:99: b2:d9:5c:fe:c1:fd:c0:58:f9:fa:59:7f:71:69:ff:b0:9f:8d: 82:96:c7:70:ef:74:b3:53:be:93:a0:a9:e2:52:58:0e:d5:9d: 42:99:3e:54:82:e4:5a:bc:8a:47:b9:ae:8e:dd:30:80:75:0f: ae:10:64:7c:b4:1f:97:a2:db:dc:79:40:0c:32:e7:49:79:be: 73:49:ad:79:f7:61:ae:8c:6e:a6:d3:f1:14:d6:d9:8a:5a:08: f0:f6:72:8a:f1:a6:d4:d5:23:13:e1:67:dd:26:9e:3c:da:3d: 62:44:e3:c3:9e:aa:0e:d5:44:6e:81:ca:27:36:fa:75:ce:87: 33:4c:6c:63:ad:04:23:d4:b0:0a:e0:f0:9e:2f:e8:62:fd:cd: 76:71:92:34:9b:4f:8c:4f:1f:48:a9:ca:91:10:3f:9d:aa:ee: 7e:58:d5:c2:50:24:cb:37:8b:17:1c:6a:79:d1:c3:f7:0a:ef: 51:b0:48:e4:f7:1d:46:f0:7e:68:07:80:7b:2b:c5:22:9c:68: a2:83:db:56:b4:b8:a6:b4:58:34:a3:46:73:04:83:eb:44:b7: 3a:e7:0c:8f:98:79:46:c6:e9:70:48:16:db:52:76:8f:6b:ff: 44:a9:f8:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNUYxMTAvBgNVBAUTKEQ4N0UwMjk2OTU0NkFEQzU1QTdBQ0NBMDhDQURCMjg3 OUJDNjk5QzkwHhcNMjYwNDE3MDIyNzUwWhcNMjYwNDI0MDIyNzUwWjAYMRYwFAYD VQQDEw02OWUxOWFhNi1jOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx90wcWzmI75ZBc8++LNJu02/F8qSCu/qOfNlOZNf5cTPvOU4+KFps+FYi84y 31+uYmwYvLuWwb/N0WepYWjEoPEGCh4oQOhk4mbZmCfbdB7vZUG3GOzmBf+7yCi+ EhotNun5WLcu5YsfIQ/+IH4qcZwp1KNaz4eNW20wiEaDNf5xWKVoQjwGqlHeiRSi oy+/Wbz9WtnqUu27hk0oH+czzvo/JJe5wGZ5Z/Z//XFFuJd9FBMrEuajuHuQxL8K j4wyPh50rjZ1UrRi4v4wQ7KSecvi1harVKydy5n1ModhUYVBsvtForijVEAKZWUG rO6cP0NgpobeykgGND95ybIz/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/zL+6B pTBTmfIExO9RSi68cx9EMB8GA1UdIwQYMBaAFNh+ApaVRq3FWnrMoIytsoebxpnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI1Ri84RTQxODAyMEYw OUIxMUVEQTYwNkJENjJDNEY5QUUwMi8ySDRDbHBWR3JjVmFlc3lnaksyeWg1dkdt Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJINENscFZHcmNWYWVzeWdqSzJ5aDV2R21jay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI1Ri84RTQxODAyMEYwOUIxMUVEQTYwNkJENjJDNEY5QUUwMi8ySDRDbHBWR3Jj VmFlc3lnaksyeWg1dkdtY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATN5kFxachCE95nopNW+gAPKZstlc/sH9wFj5+ll/cWn/sJ+NgpbHcO90s1O+ k6Cp4lJYDtWdQpk+VILkWryKR7mujt0wgHUPrhBkfLQfl6Lb3HlADDLnSXm+c0mt efdhroxuptPxFNbZiloI8PZyivGm1NUjE+Fn3SaePNo9YkTjw56qDtVEboHKJzb6 dc6HM0xsY60EI9SwCuDwni/oYv3NdnGSNJtPjE8fSKnKkRA/narufljVwlAkyzeL FxxqedHD9wrvUbBI5PcdRvB+aAeAeyvFIpxoooPbVrS4prRYNKNGcwSD60S3OucM j5h5RsbpcEgW21J2j2v/RKn47Q== -----END CERTIFICATE-----Generated at Fri Apr 17 16:01:00 2026 by rpki-client