$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: iHCzvYNIMZk4W3+F3Kb6b2eMZtsPUZGlv0hPtjDEMjU= Subject key identifier: 0E:0D:CD:75:C5:EB:E5:F3:BC:51:EA:4D:48:96:E9:9E:53:87:C3:29 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 02CB Signing time: Fri 17 Apr 2026 01:17:30 +0000 Manifest this update: Fri 17 Apr 2026 01:17:30 +0000 Manifest next update: Fri 24 Apr 2026 01:17:30 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: 8pOaS9RH8zwq2S+3VnsihfpVoVXNv1q3ZdJaeSe/THQ=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: 41XnV0Dfd97uGyPbDbqHHH2dJuzZIdcHH6ek0SjFVbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Apr 17 01:17:30 2026 GMT Not After : Apr 24 01:17:30 2026 GMT Subject: CN=69e18a2a-0f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:fc:2f:18:1b:8b:5e:98:3e:98:f4:77:46: cf:db:80:30:ff:48:79:f1:23:2a:26:80:59:d3:75: ad:f7:1d:76:36:b7:99:d3:48:d5:13:66:4d:2e:f3: 73:b2:14:9c:19:20:f5:f3:62:76:c9:bf:23:49:54: aa:2f:f3:41:68:2a:24:51:f7:90:fb:50:ea:c1:3a: d9:c5:fc:41:4c:45:3d:3e:89:2c:78:93:86:e7:84: ee:c0:6f:db:af:51:74:01:60:ea:29:88:6f:c3:d6: 39:93:21:cc:5a:4f:1a:c5:0f:0d:dc:0c:c9:75:c5: f6:fa:61:d9:a2:3a:66:a6:8f:fe:cf:16:3b:71:c1: e6:57:91:7f:be:66:0b:58:c9:f4:f3:1e:0b:ea:65: f4:1b:1e:75:e0:42:bc:d0:08:0c:f6:d2:58:28:5d: 6f:da:59:ad:19:a9:39:08:23:09:bf:de:de:95:d7: 51:b0:25:c7:55:50:1f:16:f8:15:00:a7:43:10:5f: cd:1e:a6:cd:cd:b5:9f:dd:45:cb:ec:1c:99:1c:b4: 0f:06:7b:92:09:7f:6f:1f:dd:2e:cf:bc:de:11:ec: 89:b9:68:ce:47:1a:81:e8:6b:ec:ad:ce:94:e4:27: 02:18:8c:ce:6f:ad:48:f7:48:99:4d:34:7b:30:30: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0D:CD:75:C5:EB:E5:F3:BC:51:EA:4D:48:96:E9:9E:53:87:C3:29 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:32:0c:e2:00:41:53:64:2d:33:3e:3f:eb:36:fd:23:cd:fd: 29:56:72:d2:06:c6:64:af:ef:da:3f:f2:0c:ce:37:ae:c1:39: b4:7f:ab:9b:2c:27:ed:dc:a7:2d:4a:8a:6a:f5:24:9f:fc:53: 10:30:8b:8c:f6:e7:67:28:ac:2b:c5:aa:82:78:b5:06:65:f7: 4c:76:8e:5e:fa:17:35:f7:fa:c1:33:4e:f6:19:70:8e:3a:1b: 18:df:ba:16:55:82:56:57:a6:72:d7:b2:c9:ba:39:0b:d8:49: 9b:e4:c7:49:d6:e5:d0:9c:ae:3c:b4:aa:f3:0a:03:b4:e0:1a: 94:e3:90:9f:9a:37:1f:63:ce:db:29:30:30:80:8e:bc:31:98: 90:f9:5b:f2:70:69:37:8a:a7:eb:12:29:0c:e1:60:16:f0:ba: 62:91:48:b9:5d:d4:64:06:ea:4c:ad:7d:4e:db:77:cb:00:88: d8:79:59:4c:9f:47:59:16:19:ef:36:ca:6b:3f:a1:30:3a:ad: cf:e2:7b:ea:dd:6e:00:b8:0a:03:a9:3f:5a:98:ae:ab:8a:ab: a5:eb:90:03:41:67:1e:fe:97:0b:44:61:e2:8b:8a:16:69:dd: c4:da:03:07:de:77:ba:65:1d:28:31:d4:5e:81:cb:85:71:76: 97:65:94:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjYwNDE3MDExNzMwWhcNMjYwNDI0MDExNzMwWjAYMRYwFAYD VQQDEw02OWUxOGEyYS0wZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAD8Lxgbi16YPpj0d0bP24Aw/0h58SMqJoBZ03Wt9x12NreZ00jVE2ZNLvNz shScGSD182J2yb8jSVSqL/NBaCokUfeQ+1DqwTrZxfxBTEU9PokseJOG54TuwG/b r1F0AWDqKYhvw9Y5kyHMWk8axQ8N3AzJdcX2+mHZojpmpo/+zxY7ccHmV5F/vmYL WMn08x4L6mX0Gx514EK80AgM9tJYKF1v2lmtGak5CCMJv97elddRsCXHVVAfFvgV AKdDEF/NHqbNzbWf3UXL7ByZHLQPBnuSCX9vH90uz7zeEeyJuWjORxqB6Gvsrc6U 5CcCGIzOb61I90iZTTR7MDBOoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4NzXXF 6+XzvFHqTUiW6Z5Th8MpMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnTIM4gBBU2QtMz4/6zb9I839KVZy0gbGZK/v2j/yDM43rsE5tH+rmywn7dyn LUqKavUkn/xTEDCLjPbnZyisK8Wqgni1BmX3THaOXvoXNff6wTNO9hlwjjobGN+6 FlWCVlemcteyybo5C9hJm+THSdbl0JyuPLSq8woDtOAalOOQn5o3H2PO2ykwMICO vDGYkPlb8nBpN4qn6xIpDOFgFvC6YpFIuV3UZAbqTK19Ttt3ywCI2HlZTJ9HWRYZ 7zbKaz+hMDqtz+J76t1uALgKA6k/Wpiuq4qrpeuQA0FnHv6XC0Rh4ouKFmndxNoD B953umUdKDHUXoHLhXF2l2WUvw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:27:01 2026 by rpki-client