$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: b+r1T3lhMtaN3AeEyFKD0Lt69oAibFAF/vXt3FUGqWM= Subject key identifier: E6:AE:89:E8:89:D1:35:2B:21:B6:BA:A9:4B:E7:1C:EA:BB:1C:5D:87 Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 01D5 Signing time: Sun 19 Apr 2026 03:21:28 +0000 Manifest this update: Sun 19 Apr 2026 03:21:27 +0000 Manifest next update: Sun 26 Apr 2026 03:21:27 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: xwKHtuKOor7kAk030TScsnjnc3whQkmtl8o4+TcVR8I=) 2: E5502F78772411EE8659D21FC4F9AE02.roa (hash: iWRR6iY9QZD1NyR6qv1Bh3EIMXetM3tQT+2LgPrrecA=) 3: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: vXtCnwP0/IBHbxeworI8u9Bbw73TO07w64H/BbUCqCE=) 4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: wtmuHnFK2qYyBuP8+t+q2ozRUGymMFacY7+KrbbFs5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: Apr 19 03:21:27 2026 GMT Not After : Apr 26 03:21:27 2026 GMT Subject: CN=69e44a38-be85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:df:4e:ce:98:10:48:b2:c8:5d:93:34:c1: 3a:6d:2e:e7:ed:c9:21:02:3f:25:68:2d:37:0c:12: af:06:d4:28:3c:70:fb:24:67:ea:f6:fc:9e:90:dc: aa:60:30:fe:a5:da:6f:6e:b1:5c:84:7e:35:38:e3: 82:82:b5:b6:ed:e2:2c:c2:46:4a:63:3e:c2:4d:fc: 6e:b5:0e:09:c7:dc:13:cc:ee:2e:14:10:2a:1d:ff: fa:d6:f3:17:5b:8e:1c:ca:61:18:0c:37:8d:f4:6b: 1c:21:c1:57:31:43:68:10:cb:fc:20:65:dc:3d:71: 78:eb:63:1c:32:75:cf:e5:a8:bb:1d:fc:2c:cc:88: 71:e3:70:25:20:98:41:5d:d5:5d:38:30:f8:b5:9a: b1:70:4a:df:a7:77:2f:60:e1:81:77:64:a3:9b:72: 98:35:4e:59:b4:aa:48:32:e8:97:97:fc:80:28:ea: fd:5d:8f:1e:84:4b:96:e0:0b:b6:f0:0b:9c:90:7b: 59:ed:59:51:8e:c7:0e:4d:74:0b:fe:99:0a:12:20: 2d:e8:1d:34:ca:98:32:6b:eb:1f:d8:ca:bc:44:e8: bb:2c:5f:81:00:47:1f:74:ec:0e:0e:fa:a9:85:09: ad:e6:34:68:e7:d4:f7:64:06:92:aa:95:01:b9:33: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AE:89:E8:89:D1:35:2B:21:B6:BA:A9:4B:E7:1C:EA:BB:1C:5D:87 X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:1f:bd:2f:5d:53:fc:d6:32:18:21:23:4c:43:a2:d0:ed: 21:47:a1:23:21:cb:30:91:46:dd:cf:78:f7:02:e1:56:5c:e0: cd:41:4b:36:68:b1:47:58:d8:00:9e:6c:7c:7d:ff:a7:d3:54: 95:a6:c4:33:83:bf:bd:db:c7:6d:55:58:9d:09:9b:ed:1e:8d: d1:70:cf:28:19:e4:51:06:e4:df:cc:1e:ac:1d:2a:42:ab:4d: b7:ea:ff:b9:df:92:29:d6:07:35:da:52:52:e7:75:e2:be:70: 99:b7:60:fa:60:89:a4:3d:5f:a5:d3:85:68:95:0c:e9:73:f6: 20:eb:fd:09:dd:9e:22:07:7c:7c:11:3b:5c:05:bf:99:8b:cf: b5:17:36:99:a7:61:70:e5:9d:7f:bc:f7:d0:b5:70:c2:8e:cb: 28:0c:11:ba:5c:eb:15:6d:6b:d4:8b:b3:92:7f:0d:c1:6c:cd: 24:02:b2:c3:31:8c:17:e4:92:12:6e:13:2d:0f:87:b1:b8:f9: 66:57:83:0e:28:b1:22:dd:c9:13:a0:91:01:a5:91:9c:92:11: 14:df:99:91:49:42:0e:dc:fd:49:cd:90:6b:78:bc:e6:bb:68: 9b:0f:c7:97:85:07:e7:32:1d:ad:28:50:f0:17:f9:f5:72:0b: 18:89:30:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjYwNDE5MDMyMTI3WhcNMjYwNDI2MDMyMTI3WjAYMRYwFAYD VQQDEw02OWU0NGEzOC1iZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnk7fTs6YEEiyyF2TNME6bS7n7ckhAj8laC03DBKvBtQoPHD7JGfq9vyekNyq YDD+pdpvbrFchH41OOOCgrW27eIswkZKYz7CTfxutQ4Jx9wTzO4uFBAqHf/61vMX W44cymEYDDeN9GscIcFXMUNoEMv8IGXcPXF462McMnXP5ai7HfwszIhx43AlIJhB XdVdODD4tZqxcErfp3cvYOGBd2Sjm3KYNU5ZtKpIMuiXl/yAKOr9XY8ehEuW4Au2 8AuckHtZ7VlRjscOTXQL/pkKEiAt6B00ypgya+sf2Mq8ROi7LF+BAEcfdOwODvqp hQmt5jRo59T3ZAaSqpUBuTPhzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOauieiJ 0TUrIba6qUvnHOq7HF2HMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmM8fvS9dU/zWMhghI0xDotDtIUehIyHLMJFG3c949wLhVlzgzUFLNmixR1jY AJ5sfH3/p9NUlabEM4O/vdvHbVVYnQmb7R6N0XDPKBnkUQbk38werB0qQqtNt+r/ ud+SKdYHNdpSUud14r5wmbdg+mCJpD1fpdOFaJUM6XP2IOv9Cd2eIgd8fBE7XAW/ mYvPtRc2madhcOWdf7z30LVwwo7LKAwRulzrFW1r1Iuzkn8NwWzNJAKywzGMF+SS Em4TLQ+Hsbj5ZleDDiixIt3JE6CRAaWRnJIRFN+ZkUlCDtz9Sc2Qa3i85rtomw/H l4UH5zIdrShQ8Bf59XILGIkwAA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:59:55 2026 by rpki-client