$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: gr3K3ZjFdjsrmW2Fj8/9q3+BzgCbATR8UrWu92pbcis= Subject key identifier: 3E:81:EA:0F:E3:3B:F4:7A:D5:8D:06:CC:69:BF:D1:EA:08:77:53:41 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 013F Signing time: Fri 17 Apr 2026 05:00:12 +0000 Manifest this update: Fri 17 Apr 2026 05:00:12 +0000 Manifest next update: Fri 24 Apr 2026 05:00:12 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: L5rcpjw8/C74JyKKwWKh76xwezoVO3pBNY4JDViTSKs=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: shtxP/SBAQ2iT3UezvldJfibekIWgVIPJ+ZajU+8AuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Apr 17 05:00:12 2026 GMT Not After : Apr 24 05:00:12 2026 GMT Subject: CN=69e1be5c-c461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:51:c6:42:32:a2:72:70:a0:c5:fe:6e:c0: 15:e3:46:a3:a9:9d:f4:10:96:73:ea:6f:3a:73:d8: c2:79:d6:96:05:e9:60:66:f8:50:05:35:7f:2d:bb: a2:b2:c4:c1:c4:cf:f5:e4:3a:0c:29:e0:ac:4f:c1: 1b:ec:90:d0:67:15:13:3a:05:a8:ca:ba:35:29:d7: e5:ae:e6:7d:1b:67:8e:b4:64:43:10:5b:81:12:8f: 63:41:a7:08:c0:c3:73:99:2c:3a:a5:c3:ab:17:43: 92:93:0a:ca:7a:cf:90:00:1c:89:56:25:62:c6:bf: d8:0e:cc:c8:7d:f6:ad:36:f5:e1:5f:3c:4e:0d:59: 60:f3:24:9f:33:04:47:d1:0f:48:75:7c:1b:d0:d6: 9a:50:29:d0:69:c8:6b:7e:2f:fd:3b:ec:aa:9e:32: 18:f7:dc:58:35:8e:d8:8d:88:74:e6:78:c4:18:37: 75:cb:17:8c:3f:04:b9:0d:12:da:a9:e3:4b:8e:d9: 5e:f3:a1:23:ff:da:47:74:8e:e7:13:c5:30:69:71: 90:cc:ca:e8:2a:af:26:fe:4e:f7:fe:0e:30:f4:81: 06:33:29:e3:49:f5:36:45:4d:36:47:f1:75:d5:6c: c2:01:11:02:33:d6:a2:eb:69:52:96:d2:0e:1c:65: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:EA:0F:E3:3B:F4:7A:D5:8D:06:CC:69:BF:D1:EA:08:77:53:41 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0d:87:3c:d9:15:a0:bb:d6:33:27:8b:7c:b4:dd:41:c9:ff: 22:2a:90:60:fb:e2:98:3e:2d:7c:3c:22:6f:8c:73:9e:03:f0: df:de:2d:17:14:86:de:ab:67:fd:f5:39:7d:79:44:e1:80:d2: 58:ab:db:b4:56:eb:61:6a:62:90:a7:5d:00:48:13:35:de:6c: 30:55:01:a3:17:86:4a:69:19:32:26:c1:59:eb:78:b4:c9:73: b3:95:5a:d9:6c:7f:55:50:d1:9a:d5:ca:91:0e:fd:b7:84:28: 34:bb:59:f1:c7:ca:a2:c9:4d:03:61:94:55:90:fc:9c:bb:00: 82:90:03:8e:06:67:70:4f:0b:a1:09:fb:56:4c:62:d1:04:43: eb:1c:1b:74:c5:ad:56:6e:bd:1c:4d:88:70:c8:38:d1:9e:7d: 05:aa:6f:b4:e4:73:62:f8:50:cd:62:0b:b3:0b:ff:92:4b:29: 4e:b8:9e:07:02:2e:a9:32:74:8c:d3:a2:1a:40:e9:c7:95:22: 0a:55:25:dd:59:fd:a6:70:bf:f1:3e:9a:e5:40:05:25:36:14: e9:05:8c:3e:9d:4e:8d:18:e3:ca:b3:c1:30:80:a7:a6:43:1b: 42:5f:bd:e9:ea:31:84:e6:f4:26:dd:bf:9f:26:1a:7f:6d:23: 0e:cb:be:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjYwNDE3MDUwMDEyWhcNMjYwNDI0MDUwMDEyWjAYMRYwFAYD VQQDEw02OWUxYmU1Yy1jNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlydRxkIyonJwoMX+bsAV40ajqZ30EJZz6m86c9jCedaWBelgZvhQBTV/Lbui ssTBxM/15DoMKeCsT8Eb7JDQZxUTOgWoyro1KdflruZ9G2eOtGRDEFuBEo9jQacI wMNzmSw6pcOrF0OSkwrKes+QAByJViVixr/YDszIffatNvXhXzxODVlg8ySfMwRH 0Q9IdXwb0NaaUCnQachrfi/9O+yqnjIY99xYNY7YjYh05njEGDd1yxeMPwS5DRLa qeNLjtle86Ej/9pHdI7nE8UwaXGQzMroKq8m/k73/g4w9IEGMynjSfU2RU02R/F1 1WzCARECM9ai62lSltIOHGWFLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6B6g/j O/R61Y0GzGm/0eoId1NBMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdw2HPNkVoLvWMyeLfLTdQcn/IiqQYPvimD4tfDwib4xzngPw394tFxSG3qtn /fU5fXlE4YDSWKvbtFbrYWpikKddAEgTNd5sMFUBoxeGSmkZMibBWet4tMlzs5Va 2Wx/VVDRmtXKkQ79t4QoNLtZ8cfKoslNA2GUVZD8nLsAgpADjgZncE8LoQn7Vkxi 0QRD6xwbdMWtVm69HE2IcMg40Z59BapvtORzYvhQzWILswv/kkspTrieBwIuqTJ0 jNOiGkDpx5UiClUl3Vn9pnC/8T6a5UAFJTYU6QWMPp1OjRjjyrPBMICnpkMbQl+9 6eoxhOb0Jt2/nyYaf20jDsu+0g== -----END CERTIFICATE-----Generated at Fri Apr 17 07:20:50 2026 by rpki-client