$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: U3RK18E9yHTBjDmlDJbuGOeC0WLWZvRXIv+xsLAR4b8= Subject key identifier: CE:1C:02:CB:7A:AE:2F:6F:4F:2C:7D:CC:41:BB:69:AC:B5:29:D7:D3 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0A54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0A2E Signing time: Sat 18 Apr 2026 19:41:05 +0000 Manifest this update: Sat 18 Apr 2026 19:41:04 +0000 Manifest next update: Sat 25 Apr 2026 19:41:04 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: lnIZqomE5gT1sdoTR6xpf3gF+zHY+qcWwruPF9w7rUI=) 2: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: SGPYvzHeLCeVexbh9lAx6+ESCRM1l3c2pzV/QopMYDM=) 3: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=) 4: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=) 5: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2644 (0xa54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Apr 18 19:41:04 2026 GMT Not After : Apr 25 19:41:04 2026 GMT Subject: CN=69e3de51-7a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:30:13:50:6a:f1:8b:3f:bf:4b:46:59:a9:d0: 83:c2:89:5a:6b:fd:5f:6a:56:df:ac:20:01:28:ec: 36:9b:d5:10:f7:63:c6:c5:f5:45:90:da:e2:eb:5b: 56:de:88:8e:58:ed:be:c0:e6:cc:52:a0:ad:a1:b0: 0e:40:16:9f:6e:50:a5:c5:16:ab:2f:d8:17:97:da: f3:c1:f6:88:c3:ed:30:d6:76:8c:82:22:e0:46:35: 0d:4e:3e:ec:ff:3b:25:1b:81:9e:21:d6:11:b1:28: 87:93:35:04:f4:14:0b:7d:23:1a:ec:55:2b:b0:93: f2:48:0d:c7:3c:1a:16:d9:0b:53:aa:28:75:1a:df: 6d:59:94:df:1c:f0:d3:0c:26:a8:30:e5:1e:87:1c: b4:ee:c1:b9:a7:cc:03:23:3f:59:64:ca:52:2f:8c: a1:65:0e:09:a0:76:76:28:cc:59:30:c1:9b:90:d9: f8:38:c1:39:46:e1:43:06:fa:20:0b:8e:ef:2d:c6: 1f:9b:a8:7b:83:aa:90:2a:71:41:95:b0:e0:31:9e: 9d:1a:12:85:e1:b2:08:fa:df:08:07:6f:6f:96:1e: 8a:eb:30:fa:8c:0f:cc:01:38:f1:40:4b:35:c7:c5: e4:eb:f7:15:49:7b:c3:45:5c:56:da:8d:54:46:5a: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1C:02:CB:7A:AE:2F:6F:4F:2C:7D:CC:41:BB:69:AC:B5:29:D7:D3 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:40:f1:cd:0b:eb:75:60:df:be:d9:af:ba:29:92:dd:ba:69: bb:e7:18:79:77:26:61:96:47:4f:8f:1c:af:c1:0c:33:f2:ff: 3c:3c:cb:f1:8a:57:f6:3e:f0:a5:fa:e7:a1:40:44:88:1e:7e: 33:e4:a8:bf:f4:40:6a:f5:bd:c0:b4:3f:2e:09:a5:b5:2f:c6: 61:f5:9f:5f:ac:6b:51:18:db:73:e3:2a:22:cf:4c:c5:b5:1d: fe:6c:9b:9f:05:8f:fd:4c:15:bd:89:2f:52:b6:62:22:3b:11: 8a:68:a6:9e:d9:ba:2b:1c:77:9e:8c:1a:d2:6b:42:c9:59:8a: 92:4d:70:69:98:9f:e3:8c:7f:93:a5:cc:7d:76:d0:9a:33:48: 2c:3d:a1:65:75:33:4d:09:c1:ee:e8:a0:d0:c4:0c:37:13:12: 74:af:16:9a:0d:93:25:73:71:4a:61:78:73:4e:47:9c:99:1c: ea:ae:6d:d3:11:d4:d9:94:e0:d3:98:f6:03:75:14:4c:93:c2: 25:79:c8:8a:53:3c:6f:3f:d4:db:a3:fa:9c:36:fc:a3:2f:59: 91:d1:01:50:6e:58:02:28:c2:f5:2d:77:59:06:e6:01:e3:6c: 89:4f:6e:42:36:50:a7:53:f6:6f:60:6a:13:93:30:f9:f4:36: b2:bd:e6:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwNDE4MTk0MTA0WhcNMjYwNDI1MTk0MTA0WjAYMRYwFAYD VQQDEw02OWUzZGU1MS03YTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jATUGrxiz+/S0ZZqdCDwolaa/1falbfrCABKOw2m9UQ92PGxfVFkNri61tW 3oiOWO2+wObMUqCtobAOQBafblClxRarL9gXl9rzwfaIw+0w1naMgiLgRjUNTj7s /zslG4GeIdYRsSiHkzUE9BQLfSMa7FUrsJPySA3HPBoW2QtTqih1Gt9tWZTfHPDT DCaoMOUehxy07sG5p8wDIz9ZZMpSL4yhZQ4JoHZ2KMxZMMGbkNn4OME5RuFDBvog C47vLcYfm6h7g6qQKnFBlbDgMZ6dGhKF4bII+t8IB29vlh6K6zD6jA/MATjxQEs1 x8Xk6/cVSXvDRVxW2o1URloXcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4cAst6 ri9vTyx9zEG7aay1KdfTMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIUDxzQvrdWDfvtmvuimS3bppu+cYeXcmYZZHT48cr8EMM/L/PDzL8YpX9j7w pfrnoUBEiB5+M+Sov/RAavW9wLQ/LgmltS/GYfWfX6xrURjbc+MqIs9MxbUd/myb nwWP/UwVvYkvUrZiIjsRimimntm6Kxx3nowa0mtCyVmKkk1waZif44x/k6XMfXbQ mjNILD2hZXUzTQnB7uig0MQMNxMSdK8Wmg2TJXNxSmF4c05HnJkc6q5t0xHU2ZTg 05j2A3UUTJPCJXnIilM8bz/U26P6nDb8oy9ZkdEBUG5YAijC9S13WQbmAeNsiU9u QjZQp1P2b2BqE5Mw+fQ2sr3mqw== -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:00 2026 by rpki-client