$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: o0zybzg45r8Nd6Gx0ViXP1JoDrheToEHd+pPNoJln4I= Subject key identifier: F0:FE:8C:96:47:EA:4F:8A:C0:56:71:F1:32:77:C2:B3:3E:8E:7F:22 Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: B0 Signing time: Fri 17 Apr 2026 06:51:01 +0000 Manifest this update: Fri 17 Apr 2026 06:51:00 +0000 Manifest next update: Fri 24 Apr 2026 06:51:00 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: crGKQ+z93BRAZjQhJ0tXOVJclyc7qAHAECa7/icIG38=) 2: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=) 3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Apr 17 06:51:00 2026 GMT Not After : Apr 24 06:51:00 2026 GMT Subject: CN=69e1d854-cdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:83:f2:df:8f:d3:94:f1:4f:5f:59:25:5c: 3e:da:1f:0e:11:03:09:67:55:96:a3:4c:a3:e2:5a: 4c:d6:ab:06:04:5c:9a:f9:45:9a:fa:63:4e:ec:35: e8:b5:ac:2f:43:f5:fc:73:0c:e8:2c:1a:0e:cd:ef: 57:37:88:3a:f9:76:90:05:4f:9f:9a:d4:84:e3:02: a8:bf:21:59:49:e5:ad:8c:54:26:58:d6:fc:9f:c7: ae:35:13:7b:50:78:42:59:68:21:31:60:3f:5e:38: c9:96:0b:01:79:7b:ef:48:9d:db:37:b8:9a:e3:14: 72:9c:9e:4b:0f:cc:f2:b5:87:a7:2a:f9:3e:32:16: 10:3f:16:ba:d9:37:17:2c:7a:de:0e:c9:10:eb:6c: 29:75:2e:67:50:ad:a7:33:c6:57:15:02:a7:02:72: ff:f1:c1:d2:2a:6a:ae:56:e5:77:b0:01:76:ae:43: 8b:19:cb:59:5d:62:d4:34:a7:ea:88:e7:73:7f:5d: 14:c5:ae:80:f7:6f:3b:6e:52:97:21:cc:83:cf:b6: 97:fb:59:35:f2:e4:0a:af:04:dc:d7:f2:04:de:54: 18:04:bf:95:02:39:17:8f:e4:5c:06:c7:63:d5:38: dc:9c:de:83:b7:b7:55:7b:7d:72:94:84:35:b0:de: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FE:8C:96:47:EA:4F:8A:C0:56:71:F1:32:77:C2:B3:3E:8E:7F:22 X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:37:c2:93:3f:e4:72:31:91:d6:27:7d:70:01:1d:cd:67:9e: df:33:c4:a9:79:f4:bc:86:4d:b8:ab:de:d9:33:eb:57:c2:60: b8:3a:d9:ed:12:02:b9:67:cc:29:fe:4b:17:85:23:17:9b:a7: c2:7d:8c:b3:1c:a9:69:6a:4f:a3:d3:67:2e:0d:cf:ea:dd:1d: 5c:5f:3a:56:01:39:81:04:cc:cc:53:01:0d:02:d5:35:d3:d1: 0b:4e:a9:90:10:38:30:c4:fd:31:8a:b3:90:c3:81:b4:13:98: 9b:4d:80:53:2b:d6:fd:e6:b6:da:f9:7a:44:44:c5:db:7d:86: 68:0a:05:c8:ce:34:e2:3a:25:bc:27:16:61:46:52:1a:41:e9: 17:15:e4:24:e4:d9:ea:25:4f:13:bc:0d:d9:c0:3f:64:77:d7: d3:35:49:4b:f2:e4:60:bd:60:9c:a3:70:b4:38:76:22:48:13: d0:5e:00:d3:09:24:e4:e6:2a:70:39:8c:1e:e9:cd:df:7a:0b: 37:da:69:74:41:ef:68:82:07:36:6e:32:51:a1:9e:3b:25:ed: b1:27:bf:d0:73:7c:10:df:3f:7a:00:06:08:19:2d:23:77:74: 98:d3:79:25:55:4a:9c:7e:e8:89:60:be:4a:b5:b1:08:9e:43: a1:fb:e9:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRDIxMTAvBgNVBAUTKEQ5MDRENTUyQzBFRjMyRjI0OUFCQTQ1OTdCRDg0QTE1 RUU1NTU1QzEwHhcNMjYwNDE3MDY1MTAwWhcNMjYwNDI0MDY1MTAwWjAYMRYwFAYD VQQDEw02OWUxZDg1NC1jZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0eD8t+P05TxT19ZJVw+2h8OEQMJZ1WWo0yj4lpM1qsGBFya+UWa+mNO7DXo tawvQ/X8cwzoLBoOze9XN4g6+XaQBU+fmtSE4wKovyFZSeWtjFQmWNb8n8euNRN7 UHhCWWghMWA/XjjJlgsBeXvvSJ3bN7ia4xRynJ5LD8zytYenKvk+MhYQPxa62TcX LHreDskQ62wpdS5nUK2nM8ZXFQKnAnL/8cHSKmquVuV3sAF2rkOLGctZXWLUNKfq iOdzf10Uxa6A9287blKXIcyDz7aX+1k18uQKrwTc1/IE3lQYBL+VAjkXj+RcBsdj 1TjcnN6Dt7dVe31ylIQ1sN5pyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPD+jJZH 6k+KwFZx8TJ3wrM+jn8iMB8GA1UdIwQYMBaAFNkE1VLA7zLySaukWXvYShXuVVXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVEMi9GMjQ1QjJENjMx MUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12SkpxNlJaZTloS0ZlNVZW Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVEMi9GMjQ1QjJENjMxMUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12 SkpxNlJaZTloS0ZlNVZWY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqjfCkz/kcjGR1id9cAEdzWee3zPEqXn0vIZNuKve2TPrV8JguDrZ7RICuWfM Kf5LF4UjF5unwn2MsxypaWpPo9NnLg3P6t0dXF86VgE5gQTMzFMBDQLVNdPRC06p kBA4MMT9MYqzkMOBtBOYm02AUyvW/ea22vl6RETF232GaAoFyM404jolvCcWYUZS GkHpFxXkJOTZ6iVPE7wN2cA/ZHfX0zVJS/LkYL1gnKNwtDh2IkgT0F4A0wkk5OYq cDmMHunN33oLN9ppdEHvaIIHNm4yUaGeOyXtsSe/0HN8EN8/egAGCBktI3d0mNN5 JVVKnH7oiWC+SrWxCJ5DofvpBQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:45:45 2026 by rpki-client