$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: LStWyUx5Q+xvfrx9E5hCQrj6lc23fWE2qnSwo9HS3EQ= Subject key identifier: DF:88:8F:A8:2F:E6:D1:AC:CE:D5:9A:F4:C7:FE:CD:21:6A:92:FD:0D Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 024A Signing time: Fri 17 Apr 2026 02:30:34 +0000 Manifest this update: Fri 17 Apr 2026 02:30:34 +0000 Manifest next update: Fri 24 Apr 2026 02:30:34 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: vgl4t19/nhPCRC3OG0bSN+L84sK5GzMa9hvYtRXC9tQ=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: G33TYspXU2Fxzv5ILVfshRhaPdOVDek7NtRxACK31hc=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: m/7u6/cH3KIH4vE9NfTnYL7F2XJXhLpUKXKxJGJi1F4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Apr 17 02:30:34 2026 GMT Not After : Apr 24 02:30:34 2026 GMT Subject: CN=69e19b4a-85ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:61:b6:b2:f6:d1:ea:95:c9:e5:e9:0f:b5:49: 9d:37:c4:c3:cb:fa:cb:0d:de:37:94:76:8b:37:d5: 66:42:3b:ca:09:35:cb:9f:fd:d0:2c:d6:f9:f7:da: c6:4a:78:83:ad:31:2c:3e:fb:15:6d:b7:51:4a:d6: 60:7d:32:52:ef:2d:09:a2:74:8c:9d:94:02:4d:cd: e8:34:3f:f3:66:7c:ca:df:76:4c:f6:c6:39:ee:0f: 54:41:bf:cc:e7:cd:e1:90:86:89:aa:46:47:81:47: 1d:25:95:d2:56:b2:1c:90:4e:88:6b:51:20:c5:43: 82:a2:88:bb:52:38:5c:8d:14:c2:83:ca:8c:dc:b0: 99:87:ed:0c:88:dc:79:4d:64:f7:f7:43:36:fa:e0: fc:03:c1:e7:93:36:42:28:fa:39:8d:b6:32:b9:f9: e4:63:87:3f:a3:8b:c9:70:9d:47:a7:55:5b:ea:a9: 97:23:c1:4b:c9:5d:79:59:c0:9c:f5:72:85:97:a8: 16:f8:69:01:09:ff:e6:45:b1:ba:f4:79:32:ed:6b: 19:1e:60:3e:0a:17:5b:17:78:db:34:64:6a:ce:17: f1:b7:dc:2a:56:b4:c6:77:9b:1f:db:34:c5:bd:d7: 24:58:24:67:cc:61:92:bc:81:8e:2c:18:70:31:81: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:88:8F:A8:2F:E6:D1:AC:CE:D5:9A:F4:C7:FE:CD:21:6A:92:FD:0D X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:12:e6:47:ac:81:e8:0e:9c:b8:e9:f3:19:f1:09:86:a7:8e: ed:fc:4f:f9:96:06:88:f8:4e:c2:90:66:fd:25:13:ba:8e:ef: 21:2c:33:a6:3a:7b:39:e8:87:65:7c:c0:42:a2:b8:a6:e4:6f: d0:d5:ca:43:cc:2d:84:fb:be:4a:26:40:42:b1:52:ea:bb:d9: 8c:56:a1:75:57:8a:ea:ee:0a:03:89:8c:be:10:7e:9b:62:fc: 44:ff:a1:23:5f:e2:de:13:e7:4c:67:a3:46:39:d5:9f:27:0b: 86:7a:b4:2c:76:65:ac:53:45:f7:28:57:a8:73:c6:7f:c1:d6: 9c:1e:38:cf:a0:fe:62:90:2d:5f:6a:2e:16:7b:cb:c5:c2:4c: e2:44:be:2f:59:ab:46:a1:02:e6:26:7d:90:48:d1:a3:a0:fd: 33:38:28:1b:b7:ad:14:8a:43:5a:52:4d:f3:9f:df:95:b1:09: 6f:66:c4:96:c0:61:88:68:98:96:c1:fc:51:11:30:59:c6:0d: 18:05:a5:e4:a5:01:d2:61:f5:73:1d:d4:5a:25:d6:57:bc:18: 91:a8:a6:ae:0a:e3:49:be:24:9c:00:f5:0a:45:64:1d:f7:39: 49:66:a3:03:15:cb:f6:a0:8b:91:7d:7c:62:30:f9:65:58:1f: ec:4a:99:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjYwNDE3MDIzMDM0WhcNMjYwNDI0MDIzMDM0WjAYMRYwFAYD VQQDEw02OWUxOWI0YS04NWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9GG2svbR6pXJ5ekPtUmdN8TDy/rLDd43lHaLN9VmQjvKCTXLn/3QLNb599rG SniDrTEsPvsVbbdRStZgfTJS7y0JonSMnZQCTc3oND/zZnzK33ZM9sY57g9UQb/M 583hkIaJqkZHgUcdJZXSVrIckE6Ia1EgxUOCooi7UjhcjRTCg8qM3LCZh+0MiNx5 TWT390M2+uD8A8HnkzZCKPo5jbYyufnkY4c/o4vJcJ1Hp1Vb6qmXI8FLyV15WcCc 9XKFl6gW+GkBCf/mRbG69Hky7WsZHmA+ChdbF3jbNGRqzhfxt9wqVrTGd5sf2zTF vdckWCRnzGGSvIGOLBhwMYEeGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+Ij6gv 5tGsztWa9Mf+zSFqkv0NMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADxLmR6yB6A6cuOnzGfEJhqeO7fxP+ZYGiPhOwpBm/SUTuo7vISwzpjp7OeiH ZXzAQqK4puRv0NXKQ8wthPu+SiZAQrFS6rvZjFahdVeK6u4KA4mMvhB+m2L8RP+h I1/i3hPnTGejRjnVnycLhnq0LHZlrFNF9yhXqHPGf8HWnB44z6D+YpAtX2ouFnvL xcJM4kS+L1mrRqEC5iZ9kEjRo6D9MzgoG7etFIpDWlJN85/flbEJb2bElsBhiGiY lsH8UREwWcYNGAWl5KUB0mH1cx3UWiXWV7wYkaimrgrjSb4knAD1CkVkHfc5SWaj AxXL9qCLkX18YjD5ZVgf7EqZKQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:19:38 2026 by rpki-client