$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: Z8OxHBCfrDpZ/X0fIgG55H4qsZlJODVjW7a1z5HEUbI= Subject key identifier: 15:5E:3C:F3:04:91:92:F2:FF:C0:74:C1:4E:B7:3F:CE:84:2B:86:01 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 255B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 2543 Signing time: Sat 18 Apr 2026 15:41:49 +0000 Manifest this update: Sat 18 Apr 2026 15:41:48 +0000 Manifest next update: Sat 25 Apr 2026 15:41:48 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: J2FZUhn7H86BYwkKPKlRoOuS+UlKqv++njFzV37dj7w=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 15:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9563 (0x255b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Apr 18 15:41:48 2026 GMT Not After : Apr 25 15:41:48 2026 GMT Subject: CN=69e3a63d-dd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:65:cb:af:de:08:92:2e:87:1e:b6:7a:f6: c4:f8:87:23:30:88:86:16:6e:56:63:17:86:4a:d9: 29:86:c3:cd:cf:0c:f0:91:e2:77:ce:7c:45:eb:a5: ff:7c:8c:af:bd:c9:c5:94:e9:5d:a5:cc:e2:a2:53: 7a:7b:83:38:90:53:82:72:5f:70:e5:73:1a:6b:ea: d8:53:f6:2c:90:bb:c4:64:05:f4:25:7c:b9:f3:46: 73:7a:d8:7e:e3:eb:b6:78:c7:1b:ef:54:06:c4:d8: 90:b5:d7:e8:1a:ec:4f:4c:4c:65:57:8a:20:c5:88: 12:f9:35:89:ac:b8:98:5c:ea:bb:73:f7:57:d2:76: 96:14:b6:20:84:51:a4:57:08:71:2b:dc:07:98:57: 18:6f:71:10:96:cf:c4:ee:fd:d8:b0:24:aa:0f:fe: dc:a1:61:5e:f6:aa:49:e1:f1:70:2e:1a:d8:42:da: b8:e5:d6:99:a0:95:e8:54:e4:19:f8:90:9d:a4:a8: 64:8b:95:3c:28:d0:e3:b9:e9:4c:82:6a:6c:b8:1e: 6a:df:54:f1:4a:18:6c:2a:45:4a:68:53:8d:e0:14: 17:bc:1a:6a:a1:11:8a:99:fe:00:e8:64:f6:f5:39: 52:d7:12:0d:ba:ff:8c:7b:ce:a6:eb:1f:96:97:1c: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5E:3C:F3:04:91:92:F2:FF:C0:74:C1:4E:B7:3F:CE:84:2B:86:01 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d3:86:34:07:eb:34:7e:7f:74:29:97:22:89:04:dc:97:62: bb:04:92:71:1c:88:36:2b:5d:b9:47:e8:ea:0f:32:a4:6a:4e: 5c:78:7a:07:7c:1a:eb:b5:6a:eb:c7:c9:24:3b:f2:11:22:f8: 14:01:7a:cd:c4:38:8b:47:53:ed:a3:12:62:51:a4:a3:9a:37: 6d:96:62:32:e6:94:14:02:ba:d0:45:21:f7:f2:04:23:c3:a0: d4:b4:0e:5d:c7:b5:b0:8b:13:fc:09:c0:5e:ab:e3:9f:d0:2b: 43:fe:78:8c:f5:60:fb:a8:5a:bd:b0:96:c7:71:26:be:ca:9a: b0:00:11:7d:5e:ee:98:ac:ca:0a:25:a8:66:c3:27:7c:0c:55: 2f:5f:0d:3c:01:08:b5:8b:25:f9:00:1f:44:ad:88:59:6e:ca: 6f:09:f8:31:c2:9e:14:18:a2:d5:3e:73:3c:c7:c2:f5:70:8b: 92:7f:a6:f8:e1:40:e5:1c:93:c3:86:6a:a0:98:db:25:74:a5: 47:2a:2f:cc:2b:a8:82:d3:53:b0:42:09:2b:7e:3f:bc:0b:f3: e7:83:0e:07:fc:1f:28:e6:63:b5:69:aa:94:3c:22:ce:52:fd: cd:af:a3:f4:45:54:21:52:d6:fc:66:dd:c0:05:2a:4a:ae:3a: 97:91:3f:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjYwNDE4MTU0MTQ4WhcNMjYwNDI1MTU0MTQ4WjAYMRYwFAYD VQQDEw02OWUzYTYzZC1kZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp21ly6/eCJIuhx62evbE+IcjMIiGFm5WYxeGStkphsPNzwzwkeJ3znxF66X/ fIyvvcnFlOldpcziolN6e4M4kFOCcl9w5XMaa+rYU/YskLvEZAX0JXy580Zzeth+ 4+u2eMcb71QGxNiQtdfoGuxPTExlV4ogxYgS+TWJrLiYXOq7c/dX0naWFLYghFGk VwhxK9wHmFcYb3EQls/E7v3YsCSqD/7coWFe9qpJ4fFwLhrYQtq45daZoJXoVOQZ +JCdpKhki5U8KNDjuelMgmpsuB5q31TxShhsKkVKaFON4BQXvBpqoRGKmf4A6GT2 9TlS1xINuv+Me86m6x+WlxyGkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVePPME kZLy/8B0wU63P86EK4YBMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACdOGNAfrNH5/dCmXIokE3JdiuwSScRyINitduUfo6g8ypGpOXHh6B3wa67Vq 68fJJDvyESL4FAF6zcQ4i0dT7aMSYlGko5o3bZZiMuaUFAK60EUh9/IEI8Og1LQO Xce1sIsT/AnAXqvjn9ArQ/54jPVg+6havbCWx3EmvsqasAARfV7umKzKCiWoZsMn fAxVL18NPAEItYsl+QAfRK2IWW7Kbwn4McKeFBii1T5zPMfC9XCLkn+m+OFA5RyT w4ZqoJjbJXSlRyovzCuogtNTsEIJK34/vAvz54MOB/wfKOZjtWmqlDwizlL9za+j 9EVUIVLW/GbdwAUqSq46l5E/KQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:52:52 2026 by rpki-client