$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: eeNHklXOsAcqhZ9RUQTOgiAU6XMuIzmtueGdHw+zhxw= Subject key identifier: 55:5B:7A:60:2E:90:CC:F1:D1:91:A9:08:A7:DD:A7:DB:A5:0B:74:A1 Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 0248 Signing time: Fri 17 Apr 2026 02:10:53 +0000 Manifest this update: Fri 17 Apr 2026 02:10:52 +0000 Manifest next update: Fri 24 Apr 2026 02:10:52 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: xUOA1mk2wOoLQyx3MvqQwbS3ejCBeUUd7SSW6h0hjds=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: bO2Khb7UpFTYk62drwjeihb7yhCn+p7oDMwlC5AtqAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Apr 17 02:10:52 2026 GMT Not After : Apr 24 02:10:52 2026 GMT Subject: CN=69e196ac-707f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:f4:b2:84:e3:7e:c8:bb:3c:4c:ce:06:19: 50:8d:17:06:f3:54:12:fd:0a:d7:d7:f3:7c:d5:d5: b6:eb:fd:5a:29:a5:46:12:fc:0c:20:c9:1d:d2:13: a0:2e:da:c1:ca:8b:68:ad:af:b8:b4:48:ff:1a:c2: b5:19:4a:90:b3:5c:72:50:b6:4f:b5:fd:85:26:f5: 19:19:64:17:98:76:08:4b:7b:b1:6b:9e:15:c4:56: b0:a6:a4:95:81:f9:85:11:8d:7f:d9:88:65:2f:ee: 9a:11:73:d0:7c:10:63:e1:13:3d:88:45:a3:c0:47: d7:db:e3:86:79:d1:7e:db:4b:10:a4:0f:bd:44:4f: ac:83:b0:1c:be:93:30:88:37:2b:42:9a:eb:23:7b: 04:b3:1a:37:b6:72:e2:70:16:f4:04:85:04:6e:77: 96:a4:76:96:ad:b6:db:b4:3a:d8:18:6e:fd:91:a9: ee:21:89:c8:36:95:df:58:e6:5d:10:5a:54:47:dc: bf:99:a8:c9:66:d7:36:19:d6:b9:d7:8b:7a:f3:2e: cf:5a:6c:22:4c:9b:f7:3b:ac:b9:2e:c8:f8:5e:e6: e1:5a:cc:cb:29:59:0e:fb:d3:6a:f7:ef:71:3d:7a: 03:92:9e:9f:76:cc:28:d3:32:58:1d:7d:ac:cf:91: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5B:7A:60:2E:90:CC:F1:D1:91:A9:08:A7:DD:A7:DB:A5:0B:74:A1 X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e3:8a:a2:12:bc:40:82:42:c7:41:b0:5d:55:40:e2:3f:be: c8:f0:14:a6:62:68:0a:20:10:2f:b3:8f:b0:a2:df:0f:ef:bb: 22:c6:76:b9:32:fc:5f:4b:ce:7b:95:4a:60:35:e9:fb:d8:9d: a3:21:2b:f0:e4:8d:33:07:a3:44:63:6f:42:4f:f7:48:5f:b4: 26:f4:45:b1:c5:d6:e7:f3:71:80:ba:e3:bc:48:85:72:b4:2a: 75:47:c0:60:2d:f3:15:17:e1:76:e7:7b:f3:cb:2c:67:e3:44: 5f:13:f5:d5:ed:a3:c1:f4:86:4d:17:a4:41:d1:89:08:b5:8a: cf:9c:57:81:13:13:c6:89:af:ad:b9:50:ad:94:1f:f6:a3:3b: 37:ca:47:5c:fa:d1:e5:5b:89:28:e8:45:09:f0:53:d0:b8:0e: ef:35:71:ef:17:60:85:9c:9a:4d:82:8b:89:11:0c:0d:e4:a0: 85:12:16:24:68:c8:7e:7b:6a:e3:44:20:73:dd:6a:4a:11:69: a5:32:46:2a:35:19:a0:cc:8b:52:76:eb:3c:4a:b5:ce:de:e8: d5:03:6e:65:f1:96:5c:20:72:f6:05:10:f9:50:2e:f5:fa:81: 85:c4:5a:c9:bb:99:ac:94:9d:3a:06:55:ad:bb:4a:da:a1:33: a7:60:09:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjYwNDE3MDIxMDUyWhcNMjYwNDI0MDIxMDUyWjAYMRYwFAYD VQQDEw02OWUxOTZhYy03MDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ70soTjfsi7PEzOBhlQjRcG81QS/QrX1/N81dW26/1aKaVGEvwMIMkd0hOg LtrByotora+4tEj/GsK1GUqQs1xyULZPtf2FJvUZGWQXmHYIS3uxa54VxFawpqSV gfmFEY1/2YhlL+6aEXPQfBBj4RM9iEWjwEfX2+OGedF+20sQpA+9RE+sg7AcvpMw iDcrQprrI3sEsxo3tnLicBb0BIUEbneWpHaWrbbbtDrYGG79kanuIYnINpXfWOZd EFpUR9y/majJZtc2Gda514t68y7PWmwiTJv3O6y5Lsj4XubhWszLKVkO+9Nq9+9x PXoDkp6fdswo0zJYHX2sz5FlqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVbemAu kMzx0ZGpCKfdp9ulC3ShMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAeOKohK8QIJCx0GwXVVA4j++yPAUpmJoCiAQL7OPsKLfD++7IsZ2uTL8X0vO e5VKYDXp+9idoyEr8OSNMwejRGNvQk/3SF+0JvRFscXW5/NxgLrjvEiFcrQqdUfA YC3zFRfhdud788ssZ+NEXxP11e2jwfSGTRekQdGJCLWKz5xXgRMTxomvrblQrZQf 9qM7N8pHXPrR5VuJKOhFCfBT0LgO7zVx7xdghZyaTYKLiREMDeSghRIWJGjIfntq 40Qgc91qShFppTJGKjUZoMyLUnbrPEq1zt7o1QNuZfGWXCBy9gUQ+VAu9fqBhcRa ybuZrJSdOgZVrbtK2qEzp2AJKw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:23:06 2026 by rpki-client