$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft File: 2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json) Hash identifier: 2Il0/dW5lYHjEvJV6YpoCgtsafU98ylw8Fdhzr1Z4zQ= Subject key identifier: C2:00:78:35:7C:31:67:10:5A:AD:6C:33:CA:56:BF:90:4C:2C:9D:5F Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D Certificate issuer: /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Certificate serial: 353E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft Manifest number: 3535 Signing time: Thu 16 Apr 2026 14:56:59 +0000 Manifest this update: Thu 16 Apr 2026 14:56:58 +0000 Manifest next update: Thu 23 Apr 2026 14:56:58 +0000 Files and hashes: 1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: OR/6WB/JwTbq0n2oUJzflS/kBOXWNQGhvmIhdBXIQ8E=) 2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: OrYwlHpiSmZNjD507c7+5SVsF6TOXtHT7d2m6BJQ+nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13630 (0x353e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACB2, serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Validity Not Before: Apr 16 14:56:58 2026 GMT Not After : Apr 23 14:56:58 2026 GMT Subject: CN=69e0f8ba-712f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:c1:d6:7a:c1:57:54:31:21:f0:fa:9c:83: d9:65:88:89:a4:fe:1a:0e:bf:31:bf:04:f8:e8:3b: fc:14:55:c5:d7:50:da:55:6f:55:65:f1:1b:ed:9b: e8:37:e0:fd:69:2a:09:14:81:97:7c:91:20:2b:62: 32:7c:e7:3a:f9:26:31:34:ba:ac:6d:a6:d1:7c:24: 8a:43:be:b6:61:94:24:fc:df:6c:5e:07:eb:18:ca: 95:39:eb:ad:c6:1c:76:ba:9e:0d:8e:19:d0:13:9e: f4:5e:ca:6f:cf:d9:8c:46:8d:b3:0c:02:d0:7a:0b: 05:84:5d:8a:01:49:99:4b:67:ca:ab:bb:ed:fe:ce: d3:63:3c:87:72:91:a8:e6:37:6b:c2:92:43:86:22: c0:76:4b:e8:e7:6c:61:ec:23:7a:90:69:0c:c4:b1: 62:3a:d9:3d:6c:e7:8e:39:d1:bc:77:24:1a:ab:d2: f9:50:f4:c1:ad:de:5d:61:11:4d:bc:e2:55:b6:c4: eb:6c:ac:7c:6f:a7:a3:19:17:c1:20:2c:a4:6b:f3: d2:85:92:f5:d9:de:04:d2:85:e6:89:cf:4f:02:5b: 5a:11:a5:62:d4:f9:91:8f:4e:70:db:cf:fd:d2:a7: 80:bf:fb:77:ac:60:98:aa:31:ad:cd:c3:40:68:ad: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:78:35:7C:31:67:10:5A:AD:6C:33:CA:56:BF:90:4C:2C:9D:5F X509v3 Authority Key Identifier: keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:68:09:b9:db:eb:a1:07:3c:15:98:fa:cb:71:f1:9c:29:0b: f5:c0:3f:4e:2a:1d:c6:9e:cf:da:a2:d8:d2:05:b8:3b:8e:3a: 12:e8:a6:0f:23:a0:38:aa:8c:29:25:84:8c:ed:cb:97:f8:39: a4:c2:90:14:7b:6a:13:2b:79:be:cd:d7:24:c9:40:db:bf:a0: 13:82:45:5b:a3:bf:14:00:c5:12:96:f8:18:2b:83:79:95:2c: 31:dc:49:a0:80:c0:8a:db:c5:3d:ad:50:dd:91:91:7c:29:b4: b6:ec:4d:b3:66:bd:e6:81:d6:79:a9:29:a0:a7:ef:1a:ae:78: 86:77:5a:e2:38:d9:cc:d0:60:4f:58:a1:c6:04:12:5b:8d:ae: ed:9c:71:0d:af:5d:34:bc:1f:78:04:03:be:ad:be:26:cc:fc: f6:5d:39:20:5c:2e:af:01:4c:42:f8:a8:46:2d:16:f2:f9:25: c3:a7:d9:8c:1e:74:46:fa:83:8e:24:95:ae:4b:83:b5:c6:94: 27:bd:2a:ce:d8:10:ca:32:68:3a:00:97:b4:b3:90:6f:1c:4c: 8a:1f:0f:b4:14:00:7a:99:53:11:d4:08:1d:6b:9d:3b:1f:82: 21:07:5b:82:e4:5a:34:9c:c6:db:34:fa:62:2e:14:1d:3d:0f: 14:65:de:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDQjIxMTAvBgNVBAUTKEQ5RTlGOUY3M0VFNEY1QjFDREYxNzYyQzJERjM4MzI5 NTBBMzZCN0QwHhcNMjYwNDE2MTQ1NjU4WhcNMjYwNDIzMTQ1NjU4WjAYMRYwFAYD VQQDEw02OWUwZjhiYS03MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLzB1nrBV1QxIfD6nIPZZYiJpP4aDr8xvwT46Dv8FFXF11DaVW9VZfEb7Zvo N+D9aSoJFIGXfJEgK2IyfOc6+SYxNLqsbabRfCSKQ762YZQk/N9sXgfrGMqVOeut xhx2up4NjhnQE570Xspvz9mMRo2zDALQegsFhF2KAUmZS2fKq7vt/s7TYzyHcpGo 5jdrwpJDhiLAdkvo52xh7CN6kGkMxLFiOtk9bOeOOdG8dyQaq9L5UPTBrd5dYRFN vOJVtsTrbKx8b6ejGRfBICyka/PShZL12d4E0oXmic9PAltaEaVi1PmRj05w28/9 0qeAv/t3rGCYqjGtzcNAaK1UewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIAeDV8 MWcQWq1sM8pWv5BMLJ1fMB8GA1UdIwQYMBaAFNnp+fc+5PWxzfF2LC3zgylQo2t9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNCMi8zN0Q1QTNERTFE OUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azliSE44WFlzTGZPREtWQ2ph MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJlbjU5ejdrOWJITjhYWXNMZk9ES1ZDamEzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNCMi8zN0Q1QTNERTFEOUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azli SE44WFlzTGZPREtWQ2phMzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATmgJudvroQc8FZj6y3HxnCkL9cA/Tiodxp7P2qLY0gW4O446EuimDyOgOKqM KSWEjO3Ll/g5pMKQFHtqEyt5vs3XJMlA27+gE4JFW6O/FADFEpb4GCuDeZUsMdxJ oIDAitvFPa1Q3ZGRfCm0tuxNs2a95oHWeakpoKfvGq54hnda4jjZzNBgT1ihxgQS W42u7ZxxDa9dNLwfeAQDvq2+Jsz89l05IFwurwFMQvioRi0W8vklw6fZjB50RvqD jiSVrkuDtcaUJ70qztgQyjJoOgCXtLOQbxxMih8PtBQAeplTEdQIHWudOx+CIQdb guRaNJzG2zT6Yi4UHT0PFGXe4Q== -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:08 2026 by rpki-client