$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: QCR+SpcxZX2zbzkDgoLDi0gROVQaUgWCcOjo6KApHcU= Subject key identifier: 1E:3A:1D:04:E7:54:14:B1:15:6A:0B:46:DA:25:78:88:19:07:B0:8D Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 0253 Signing time: Fri 17 Apr 2026 02:06:23 +0000 Manifest this update: Fri 17 Apr 2026 02:06:22 +0000 Manifest next update: Fri 24 Apr 2026 02:06:22 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: 6xkvA57ZnRP8v6/205PfK6ZgFqASXOENPC5JR9GSFNs=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: PvZuO5e4GchVGqAm1QbEBiq8YBp2L+bhbVxt20o+A5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Apr 17 02:06:22 2026 GMT Not After : Apr 24 02:06:22 2026 GMT Subject: CN=69e1959f-5724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:2b:49:e5:7f:9c:db:e9:ab:62:18:f7:29: 43:60:23:b8:cf:b0:87:87:27:cd:ea:8b:e8:eb:f3: ba:1c:e9:95:ab:1f:8d:52:da:f8:7c:61:01:56:af: d5:6b:21:8b:21:25:84:f0:5b:c6:cb:1d:e5:74:b7: 4b:6c:14:0c:1e:dd:eb:d3:a8:68:67:7d:77:c3:7a: 03:65:40:ff:be:44:b5:e7:1c:f1:53:0e:30:72:dd: 76:e9:da:c8:e7:ff:27:65:ad:80:d9:ea:d9:60:ec: 22:95:86:22:ad:d5:a6:77:b6:c9:9d:36:17:7c:45: ad:d2:2b:86:a7:bc:ef:43:07:a1:d5:39:9a:a2:25: 94:d9:ce:29:8a:9c:5e:77:51:63:31:3e:19:07:9f: 55:ad:5a:a4:63:bd:d3:15:ca:6c:bb:e1:0b:1e:36: 6d:b0:9f:97:d4:f9:97:a7:3e:35:0b:eb:31:20:69: 93:4b:d4:b2:a5:c9:dd:1d:cd:7d:86:0d:78:f8:b9: bc:30:fd:0f:19:45:78:fe:f1:ba:37:79:20:aa:13: be:73:9f:22:80:81:49:d1:2e:9f:28:fc:ef:4b:ac: 9b:81:5a:58:5b:24:93:af:b4:cd:eb:87:1e:75:82: 3f:a2:9a:cd:25:90:b0:be:35:39:68:2c:1e:04:77: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3A:1D:04:E7:54:14:B1:15:6A:0B:46:DA:25:78:88:19:07:B0:8D X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:6b:d0:de:e3:d1:90:28:99:6d:59:6b:ab:0f:2a:50:0c:f3: 96:e1:69:14:c2:04:f3:8c:a3:39:6c:6c:67:d5:a3:54:ea:70: 98:d9:c6:72:d5:f7:69:78:58:af:4a:aa:e3:6c:8e:49:e4:52: 80:a6:41:38:36:25:12:4d:84:46:ea:f5:c7:96:49:7d:0b:37: 45:df:bb:3f:cd:6a:38:e0:1e:af:02:05:28:51:90:f1:f5:98: 8f:9a:a4:0c:03:b7:12:7c:04:53:20:26:77:f3:45:3f:d5:9f: 14:84:3e:64:0f:e6:56:bb:d6:fb:7a:59:d6:c7:dd:95:d9:aa: 23:f8:3d:01:23:9c:e3:a4:b0:43:95:2a:6e:2d:2b:3f:1f:43: e3:cb:6d:56:2c:87:d1:e9:72:f9:40:49:c5:d8:cd:d7:1c:51: ac:da:6b:e2:76:bf:12:6f:b3:a3:ed:7b:61:ba:44:53:cd:09: ee:bb:34:7c:3d:41:37:7d:2d:4d:f6:02:3a:08:fe:f6:a9:97: 9c:43:ae:d3:7f:48:90:1f:55:cb:51:31:0c:4a:b9:c4:b2:d8: 60:aa:51:09:bc:49:e1:4d:f9:d1:4c:4c:5b:a7:e8:ff:e0:04: d3:c4:95:89:11:c8:0d:2b:dd:45:30:52:85:73:69:ff:ad:95: be:0b:d5:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjYwNDE3MDIwNjIyWhcNMjYwNDI0MDIwNjIyWjAYMRYwFAYD VQQDEw02OWUxOTU5Zi01NzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj8rSeV/nNvpq2IY9ylDYCO4z7CHhyfN6ovo6/O6HOmVqx+NUtr4fGEBVq/V ayGLISWE8FvGyx3ldLdLbBQMHt3r06hoZ313w3oDZUD/vkS15xzxUw4wct126drI 5/8nZa2A2erZYOwilYYirdWmd7bJnTYXfEWt0iuGp7zvQweh1TmaoiWU2c4pipxe d1FjMT4ZB59VrVqkY73TFcpsu+ELHjZtsJ+X1PmXpz41C+sxIGmTS9SypcndHc19 hg14+Lm8MP0PGUV4/vG6N3kgqhO+c58igIFJ0S6fKPzvS6ybgVpYWySTr7TN64ce dYI/oprNJZCwvjU5aCweBHfClQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB46HQTn VBSxFWoLRtoleIgZB7CNMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiWvQ3uPRkCiZbVlrqw8qUAzzluFpFMIE84yjOWxsZ9WjVOpwmNnGctX3aXhY r0qq42yOSeRSgKZBODYlEk2ERur1x5ZJfQs3Rd+7P81qOOAerwIFKFGQ8fWYj5qk DAO3EnwEUyAmd/NFP9WfFIQ+ZA/mVrvW+3pZ1sfdldmqI/g9ASOc46SwQ5Uqbi0r Px9D48ttViyH0ely+UBJxdjN1xxRrNpr4na/Em+zo+17YbpEU80J7rs0fD1BN30t TfYCOgj+9qmXnEOu039IkB9Vy1ExDEq5xLLYYKpRCbxJ4U350UxMW6fo/+AE08SV iRHIDSvdRTBShXNp/62VvgvVog== -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:59 2026 by rpki-client