$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: JguZH6HkaRhVupp33C1sYz6T0RyJRCcPaLB43wwQzA8= Subject key identifier: 06:25:6B:1D:73:A7:1F:C9:C8:12:6B:9A:70:5A:CF:D3:AB:F9:33:5C Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0CC1 Signing time: Thu 16 Apr 2026 18:24:12 +0000 Manifest this update: Thu 16 Apr 2026 18:24:11 +0000 Manifest next update: Thu 23 Apr 2026 18:24:11 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: yNFkCw6u3VhiEyynGfKb1wL5iGm4kNbPrclAY8fgWXI=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: DDz9ughOCNkxK48b2+kTl6B6v6gBnr7afj8fRQjJsr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Apr 16 18:24:11 2026 GMT Not After : Apr 23 18:24:11 2026 GMT Subject: CN=69e1294c-a33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:1d:ad:09:5a:ff:5c:31:58:5f:cc:17:01: 10:30:ff:8e:f0:fd:e6:64:d3:2a:96:ea:b0:a9:e3: d8:ab:47:40:93:ab:30:31:8d:ec:90:69:e1:e3:c9: f3:a8:7e:cc:49:1e:e7:0a:f5:65:3b:3a:20:92:bd: 2f:41:2c:db:a2:59:29:fa:27:d7:ba:9c:b4:9c:53: 50:13:fa:67:a3:19:dc:9e:6d:ab:cd:3d:38:93:fa: 2b:6f:ce:ec:d4:fa:14:3c:88:f4:b4:6b:55:15:89: f6:7e:d6:46:90:1e:40:48:45:fc:b0:83:64:84:89: f6:85:de:89:c0:c0:8c:1b:bf:eb:e4:e0:57:92:97: d3:9d:fe:cf:e6:89:cd:67:a3:4a:b8:76:2f:60:d7: e6:cd:19:21:3b:fd:6f:a3:83:54:e9:ff:60:4b:e5: 1f:f7:ab:18:c4:3d:0f:f4:fb:01:26:54:2e:ad:90: 8d:40:70:d2:5a:98:94:e2:5e:8f:11:2a:1f:f8:b0: 6d:42:86:fe:4a:8b:f8:27:72:a8:03:e3:99:ec:76: d0:3d:6a:24:be:c5:21:e2:e3:2f:cf:f4:4b:aa:74: 90:12:53:1a:38:ef:ef:06:ca:c6:40:a1:66:77:06: c3:50:c4:3f:1d:fb:a1:0e:a5:52:c4:0d:3e:b0:28: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:25:6B:1D:73:A7:1F:C9:C8:12:6B:9A:70:5A:CF:D3:AB:F9:33:5C X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ce:76:db:e1:64:7e:6d:50:33:c6:70:80:1b:6b:db:a5:2a: 0c:f0:c7:35:82:22:8b:78:a8:9a:b7:40:e2:8f:e8:fc:ee:ba: de:bf:54:5d:13:c2:95:3b:d5:74:49:8f:e7:8f:1d:de:a0:b5: cd:3c:d6:59:21:d2:67:6b:3d:35:86:54:3c:56:6f:88:ef:ae: 7f:bf:88:55:83:5e:ec:9c:8a:09:8e:b8:ed:a0:02:e1:1e:94: 75:6c:f5:0a:5b:2e:8d:54:b5:6e:b6:63:8f:e0:55:c5:9a:f6: 4c:a4:2e:01:de:e5:b5:77:0b:42:6e:21:45:41:7b:b7:89:74: bb:01:11:80:e7:fb:38:51:28:59:ad:71:83:87:ea:bf:f0:a7: 3e:81:70:70:b6:38:6e:5b:3d:0a:3f:2b:8e:29:a1:36:b8:86: 24:45:80:ab:24:fd:ec:2c:d4:90:8b:aa:e6:22:7b:1c:69:e6: 02:ef:7e:0f:f0:7d:12:63:b3:eb:d5:a5:57:ce:d5:15:26:c6: af:0a:90:aa:b7:08:c6:87:07:80:5f:5e:e9:6a:a5:b7:4c:0b: b5:b0:5f:b9:71:b3:75:53:70:54:ba:10:dd:18:84:54:e9:a2: ad:e6:94:28:c0:53:c6:df:f8:02:29:af:81:07:90:0f:79:2e: e1:c8:9b:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjYwNDE2MTgyNDExWhcNMjYwNDIzMTgyNDExWjAYMRYwFAYD VQQDEw02OWUxMjk0Yy1hMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUEdrQla/1wxWF/MFwEQMP+O8P3mZNMqluqwqePYq0dAk6swMY3skGnh48nz qH7MSR7nCvVlOzogkr0vQSzbolkp+ifXupy0nFNQE/pnoxncnm2rzT04k/orb87s 1PoUPIj0tGtVFYn2ftZGkB5ASEX8sINkhIn2hd6JwMCMG7/r5OBXkpfTnf7P5onN Z6NKuHYvYNfmzRkhO/1vo4NU6f9gS+Uf96sYxD0P9PsBJlQurZCNQHDSWpiU4l6P ESof+LBtQob+Sov4J3KoA+OZ7HbQPWokvsUh4uMvz/RLqnSQElMaOO/vBsrGQKFm dwbDUMQ/HfuhDqVSxA0+sCiVXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYlax1z px/JyBJrmnBaz9Or+TNcMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACM522+Fkfm1QM8ZwgBtr26UqDPDHNYIii3iomrdA4o/o/O663r9UXRPClTvV dEmP548d3qC1zTzWWSHSZ2s9NYZUPFZviO+uf7+IVYNe7JyKCY647aAC4R6UdWz1 ClsujVS1brZjj+BVxZr2TKQuAd7ltXcLQm4hRUF7t4l0uwERgOf7OFEoWa1xg4fq v/CnPoFwcLY4bls9Cj8rjimhNriGJEWAqyT97CzUkIuq5iJ7HGnmAu9+D/B9EmOz 69WlV87VFSbGrwqQqrcIxocHgF9e6Wqlt0wLtbBfuXGzdVNwVLoQ3RiEVOmireaU KMBTxt/4AimvgQeQD3ku4cibdA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:02:54 2026 by rpki-client