$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: zZMbXiGMuaMUCoZfBysehw3JDSDoXUGxG0NM9eujtqg= Subject key identifier: 9A:FC:2B:80:0C:57:C4:C2:66:E3:78:6C:4E:54:BB:39:02:F1:B2:6F Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0C1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0BAF Signing time: Thu 16 Apr 2026 19:07:33 +0000 Manifest this update: Thu 16 Apr 2026 19:07:32 +0000 Manifest next update: Thu 23 Apr 2026 19:07:32 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: u6z0Bg3TvP2dODhhCryEGeKSGkrz7MgaAHZXMbU2ZzI=) 2: B66F0C58817111EFB121970CC4F9AE02.roa (hash: vY3JgYrHf50LIMon2cQ4xi3ayVXFANYUAF1HUUmukAc=) 3: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: uv7rdnmyI+gc1dDgRNGKvt12no6t8v6+Sh+LAKmYBS0=) 4: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: a5ETmaqpNy6qeOL+PmbuFg5Hvj7coJZt0e2vYVREM4A=) 5: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: w7eYnxJy/ErX8uBHC7lb97b71ahe13DgTz190X2OvQU=) 6: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: ZCVyWhNkXCNm36AW8HvL8obBGE1kXtO5k/l1MbGslew=) 7: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: FIe/ZxZ/czs73Iv9mGeR+sUl8NFbSaTBZOQUejuclqo=) 8: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: /IKxncGwcVAUWd16lVeAqQuGXRqTtvt9Ll/KgYku0+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3100 (0xc1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Apr 16 19:07:32 2026 GMT Not After : Apr 23 19:07:32 2026 GMT Subject: CN=69e13374-ffaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:f0:c1:b0:3d:a7:55:cb:0d:4b:fb:67:56: 07:eb:5f:58:36:4d:9f:f3:6c:93:e4:a0:f9:68:be: 5b:f4:a6:7b:c3:af:38:00:33:5e:26:47:ab:c5:3e: 79:8a:f0:b0:e6:94:a1:c5:ba:43:90:45:47:1e:57: 39:75:39:78:04:70:6c:f1:b0:2e:56:77:d3:ca:a5: 78:19:bc:5d:36:b7:87:3e:7b:4e:75:be:6d:97:6d: 35:e6:5e:4b:d8:82:7e:c9:fa:76:96:fc:c7:86:81: 7f:02:29:a5:67:fa:6e:59:a7:c8:3f:8f:e8:2b:04: fe:ca:25:3f:47:59:2f:5a:2a:43:c9:bb:8f:e2:2f: b8:d9:51:25:e7:06:d1:85:52:b5:ae:d8:bd:a9:36: f3:28:60:8d:40:50:dc:40:fd:14:7f:45:69:86:c6: 0e:d1:2f:2c:a2:e3:fc:68:d5:67:4d:1f:be:6b:37: 87:4f:34:54:78:24:e7:62:1d:41:5f:1d:b9:2f:26: 1b:d4:9e:78:3e:30:6b:60:36:43:f5:b0:0c:a5:7f: 96:69:e3:13:9f:49:c0:5e:77:cc:5a:d4:c7:c3:7f: a6:bc:44:42:0a:b2:d3:98:4d:09:05:b5:64:db:7d: 4e:0d:c0:a1:8e:7b:e3:e6:3b:92:fe:1a:b9:d1:25: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FC:2B:80:0C:57:C4:C2:66:E3:78:6C:4E:54:BB:39:02:F1:B2:6F X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:57:cb:75:6d:1b:74:0f:55:1c:23:ae:48:e6:a2:52:d4:ad: e0:34:79:c0:8e:69:58:d2:a4:dc:9c:7d:4a:03:71:19:d2:63: 35:95:b8:a7:ab:fd:f3:d9:8b:74:9a:d9:df:94:50:90:92:40: 6d:4d:9b:68:bc:27:f1:32:38:59:3e:35:93:fe:fc:d8:34:79: bd:b8:8b:e2:ee:e4:ef:1d:cf:58:93:3c:dd:eb:96:7e:b7:7f: a5:13:bd:a3:34:bd:88:9e:b7:8b:62:2f:5c:27:d3:7b:9c:38: 71:67:5c:59:8a:ca:30:a7:9d:74:ec:bf:cf:e1:fe:02:7a:00: c3:b4:b8:b5:ba:68:f4:b0:b2:e0:1f:f0:f5:a4:e0:e0:60:f3: 34:3f:ba:a9:c6:48:e8:dd:e5:c8:d0:d7:7c:56:e9:7a:12:c1: 34:74:b4:29:aa:88:e5:c6:b1:f1:48:36:8c:cb:f6:7c:5c:50: a8:4f:50:86:a1:15:92:65:46:48:c8:de:fa:1e:b5:32:d9:b7: 8a:18:3a:ec:59:89:eb:56:cc:cf:cb:4e:88:30:f4:82:6d:75: 85:7c:78:ad:b6:16:bc:d8:fe:54:94:05:45:3e:1b:46:10:f4: ce:8c:5c:21:ec:68:19:13:dc:09:4a:ca:7e:a2:b7:f5:fa:56: 40:26:55:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjYwNDE2MTkwNzMyWhcNMjYwNDIzMTkwNzMyWjAYMRYwFAYD VQQDEw02OWUxMzM3NC1mZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAXwwbA9p1XLDUv7Z1YH619YNk2f82yT5KD5aL5b9KZ7w684ADNeJkerxT55 ivCw5pShxbpDkEVHHlc5dTl4BHBs8bAuVnfTyqV4GbxdNreHPntOdb5tl2015l5L 2IJ+yfp2lvzHhoF/AimlZ/puWafIP4/oKwT+yiU/R1kvWipDybuP4i+42VEl5wbR hVK1rti9qTbzKGCNQFDcQP0Uf0VphsYO0S8souP8aNVnTR++azeHTzRUeCTnYh1B Xx25LyYb1J54PjBrYDZD9bAMpX+WaeMTn0nAXnfMWtTHw3+mvERCCrLTmE0JBbVk 231ODcChjnvj5juS/hq50SXUzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJr8K4AM V8TCZuN4bE5UuzkC8bJvMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASlfLdW0bdA9VHCOuSOaiUtSt4DR5wI5pWNKk3Jx9SgNxGdJjNZW4p6v989mL dJrZ35RQkJJAbU2baLwn8TI4WT41k/782DR5vbiL4u7k7x3PWJM83euWfrd/pRO9 ozS9iJ63i2IvXCfTe5w4cWdcWYrKMKeddOy/z+H+AnoAw7S4tbpo9LCy4B/w9aTg 4GDzND+6qcZI6N3lyNDXfFbpehLBNHS0KaqI5cax8Ug2jMv2fFxQqE9QhqEVkmVG SMje+h61Mtm3ihg67FmJ61bMz8tOiDD0gm11hXx4rbYWvNj+VJQFRT4bRhD0zoxc IexoGRPcCUrKfqK39fpWQCZV2g== -----END CERTIFICATE-----Generated at Fri Apr 17 02:52:57 2026 by rpki-client