$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: l6Lwwm/0VOKgq3qb+/mjmOVnFVhq9aG5mWMHtH6kgg0= Subject key identifier: 1C:EE:53:A9:9D:8F:C5:B0:35:52:24:59:4E:AD:7D:FF:06:25:8B:53 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 04E1 Signing time: Thu 16 Apr 2026 23:42:33 +0000 Manifest this update: Thu 16 Apr 2026 23:42:33 +0000 Manifest next update: Thu 23 Apr 2026 23:42:33 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: rApTpVzM1rGHtmQer6ZLf8P+2Q643wNIoqTvLWMxSAo=) 2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: vqS90tievR3HU16OsLXcBKQDauAULDoOuFd6Vz6BI+U=) 3: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: ez7xnIQP2Ioo5zgea1e7sjsLohhlbtgkdaKlVhizArA=) 4: E03427482D2411F192A7D59AB8833773.roa (hash: 6XCUaJGME6Z9CZytyWw6X1X7WoldzofbdyDhfxUS80A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Apr 16 23:42:33 2026 GMT Not After : Apr 23 23:42:33 2026 GMT Subject: CN=69e173e9-4a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:1f:6a:4c:46:74:49:1e:44:5c:ee:31:91: 25:40:15:61:27:06:da:87:a6:b9:28:ce:6c:66:6b: b9:f3:41:ec:0f:3b:b5:64:1f:66:e3:f2:40:d0:e8: ad:69:70:c0:87:c6:48:4e:ab:6f:8d:0b:5c:e8:7c: dc:2b:b6:29:36:5b:60:43:cb:45:1c:b8:6f:de:4e: f5:4c:35:ec:2c:7d:e8:cb:b8:bf:b7:89:04:eb:7a: 8c:83:62:e3:6c:c0:9d:3f:40:22:58:c1:06:49:66: cc:ff:f3:a2:d1:8e:93:3c:4e:83:05:2c:21:74:f3: 1f:1e:7c:62:b3:e5:b0:c5:e7:1a:a2:2a:fc:ba:4c: 62:95:f1:12:91:c1:b6:85:5f:f8:d2:61:c4:63:0e: b1:b4:ea:98:02:a9:e2:29:b8:97:0f:d8:a5:06:a2: ca:e2:e7:b4:90:81:45:e4:42:63:ca:f5:c8:ba:ea: b6:16:37:9e:0e:e1:78:25:40:01:35:bb:a1:b6:20: f5:7c:b6:75:96:35:3f:a8:b1:c2:29:7a:02:45:b1: 5a:e0:9b:46:ec:1c:26:0c:77:84:d7:e0:1f:42:a1: ce:73:79:52:fa:12:f1:3f:80:35:3a:94:99:50:70: 54:16:98:9f:77:ba:96:fe:14:cb:62:42:74:b5:23: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:53:A9:9D:8F:C5:B0:35:52:24:59:4E:AD:7D:FF:06:25:8B:53 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:01:51:06:de:9c:06:80:d5:c2:53:26:eb:31:fb:c9:68:22: 9f:89:a5:47:12:28:72:b8:2a:12:2e:7a:4c:d9:96:65:68:63: 56:07:d8:18:c1:53:cb:39:a5:80:02:5b:ff:fa:4d:e4:46:50: 62:f5:82:56:aa:d5:49:ca:d9:85:b4:d5:f4:55:07:c4:62:ba: ab:0d:48:21:2a:78:61:36:63:8c:2d:1b:9c:5b:d4:07:1b:1b: f0:c7:05:0a:d2:56:d2:b2:5d:bc:dd:54:07:47:46:ba:93:b9: 9c:b2:97:fa:82:b0:ad:3d:ae:96:29:88:24:4b:5f:91:66:56: 4a:f3:da:fb:53:92:45:8f:ab:46:4e:1b:32:3f:88:d1:b7:47: 39:01:5e:83:7d:36:a4:2b:b4:bf:14:ab:2f:bb:5a:d5:6d:f6: 81:12:f9:ca:5a:8a:8c:37:75:71:a0:e9:cc:46:2a:0d:9a:14: f4:41:32:a7:43:41:dd:02:6f:89:f8:33:0f:91:4a:ba:22:bb: 88:09:26:31:a8:6a:9f:92:de:63:61:88:87:60:2a:d2:33:72: 55:5f:72:54:76:3c:3c:09:ee:ac:26:6b:bf:10:f4:e2:35:f1: 44:46:96:4f:1e:34:78:60:5a:c2:91:d2:43:08:c4:50:1c:17: c0:4f:15:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjYwNDE2MjM0MjMzWhcNMjYwNDIzMjM0MjMzWjAYMRYwFAYD VQQDEw02OWUxNzNlOS00YTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraMfakxGdEkeRFzuMZElQBVhJwbah6a5KM5sZmu580HsDzu1ZB9m4/JA0Oit aXDAh8ZITqtvjQtc6HzcK7YpNltgQ8tFHLhv3k71TDXsLH3oy7i/t4kE63qMg2Lj bMCdP0AiWMEGSWbM//Oi0Y6TPE6DBSwhdPMfHnxis+Wwxecaoir8ukxilfESkcG2 hV/40mHEYw6xtOqYAqniKbiXD9ilBqLK4ue0kIFF5EJjyvXIuuq2FjeeDuF4JUAB NbuhtiD1fLZ1ljU/qLHCKXoCRbFa4JtG7BwmDHeE1+AfQqHOc3lS+hLxP4A1OpSZ UHBUFpifd7qW/hTLYkJ0tSMxZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzuU6md j8WwNVIkWU6tff8GJYtTMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABwFRBt6cBoDVwlMm6zH7yWgin4mlRxIocrgqEi56TNmWZWhjVgfYGMFTyzml gAJb//pN5EZQYvWCVqrVScrZhbTV9FUHxGK6qw1IISp4YTZjjC0bnFvUBxsb8McF CtJW0rJdvN1UB0dGupO5nLKX+oKwrT2ulimIJEtfkWZWSvPa+1OSRY+rRk4bMj+I 0bdHOQFeg302pCu0vxSrL7ta1W32gRL5ylqKjDd1caDpzEYqDZoU9EEyp0NB3QJv ifgzD5FKuiK7iAkmMahqn5LeY2GIh2Aq0jNyVV9yVHY8PAnurCZrvxD04jXxREaW Tx40eGBawpHSQwjEUBwXwE8VNg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:12:44 2026 by rpki-client