$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: WH6Oe/KPGW30FGTkNLTaiRvPwdXR/SPgCPnBTci5R6M= Subject key identifier: 8E:73:B9:EC:C0:60:1B:48:BC:91:B7:DF:FC:13:B6:3A:2E:55:17:9F Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 0240 Signing time: Fri 17 Apr 2026 02:13:59 +0000 Manifest this update: Fri 17 Apr 2026 02:13:59 +0000 Manifest next update: Fri 24 Apr 2026 02:13:59 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: 7wQb8VwM3PnDiK69/2m/GyueVkbasUCu+dwi6aXx8dA=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: z68jUM3pwDuhNvw5K6zmL6nh/8X6Z+78EEQu+Tv6QwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Apr 17 02:13:59 2026 GMT Not After : Apr 24 02:13:59 2026 GMT Subject: CN=69e19767-b6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:3e:9f:6e:fb:da:ca:5c:ac:70:64:a3:6d: 72:8c:79:f0:85:55:80:fc:b5:c3:94:65:c8:f2:ba: 76:44:95:00:82:51:ca:b9:23:8c:80:0f:2b:09:16: b5:57:86:c0:43:12:94:b1:e9:fa:0e:e0:3d:67:9b: 39:2a:59:d8:86:82:9c:f9:5e:40:92:fc:bc:b4:ba: d8:b8:93:20:05:b7:c9:39:ae:92:02:21:5c:f7:e0: 3c:f3:48:f1:f3:61:d1:fc:60:82:d9:1b:92:c8:50: c9:e3:4b:8b:f6:ac:8d:58:7d:58:f1:fe:d1:0f:10: a5:12:7f:18:8d:82:5a:8c:34:df:93:7f:de:33:50: 84:e3:28:1f:99:cb:d0:e9:75:23:e7:07:3d:7d:fa: 67:ec:55:7f:1c:ce:e1:6c:d6:d3:1d:63:e4:ca:ae: d9:64:4e:e4:08:41:65:e1:86:8b:f7:ff:a1:a3:ee: c6:92:86:0e:23:d4:d0:55:25:da:7a:20:57:61:41: 66:07:54:4d:e7:50:51:9e:2e:49:be:3f:8f:34:3d: 9a:bf:4f:26:e9:54:17:a0:fc:28:55:6b:56:38:d2: f3:15:5a:ee:6d:b9:94:17:a3:ef:0f:4f:74:42:18: cc:43:45:62:6b:ea:82:5a:b7:8d:64:aa:97:7d:dd: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:73:B9:EC:C0:60:1B:48:BC:91:B7:DF:FC:13:B6:3A:2E:55:17:9F X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e6:bd:7f:ea:ec:fa:b3:b0:55:8b:5b:c4:bc:93:35:4f:22: eb:04:9d:d1:27:b0:09:b1:1f:03:5b:e8:1f:5c:fe:f4:23:d5: d5:fb:86:9d:4b:53:ac:80:44:4f:4c:5c:5c:31:d7:ea:22:a6: a2:c9:85:b0:7d:04:ad:76:b0:ec:84:92:fd:21:79:fc:36:d0: e3:4b:42:e3:05:4e:88:f9:18:f3:46:1f:f1:22:6f:4b:28:29: e7:cf:98:d9:9b:e1:42:a4:2d:21:47:de:24:60:d0:d6:26:b3: 86:2a:aa:ef:ee:3e:34:b0:b0:54:cb:27:7c:26:da:65:d8:e1: b9:d7:f2:e8:a6:37:da:c8:7a:36:22:79:af:1d:21:1c:db:93: 69:83:a6:2e:b3:fd:c6:1d:c2:3f:80:45:72:66:9e:34:78:ee: c5:be:18:90:a6:4e:ba:3e:ac:f9:56:a3:fe:c0:dc:e2:74:44: d8:1e:ab:d0:fa:8d:e9:d8:6e:2c:3a:e0:fe:ab:cf:53:c9:f4: 84:ba:50:75:22:81:b4:bc:37:a1:06:c8:31:1e:33:fd:26:e3: 4b:d3:ae:26:d2:e9:a0:d8:86:48:49:b0:89:94:7f:de:b2:b0: 68:a2:0d:69:ab:f4:fc:35:fd:8b:71:0d:9a:6b:1c:1f:b4:bf: a9:5b:78:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjYwNDE3MDIxMzU5WhcNMjYwNDI0MDIxMzU5WjAYMRYwFAYD VQQDEw02OWUxOTc2Ny1iNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSo+n2772spcrHBko21yjHnwhVWA/LXDlGXI8rp2RJUAglHKuSOMgA8rCRa1 V4bAQxKUsen6DuA9Z5s5KlnYhoKc+V5Akvy8tLrYuJMgBbfJOa6SAiFc9+A880jx 82HR/GCC2RuSyFDJ40uL9qyNWH1Y8f7RDxClEn8YjYJajDTfk3/eM1CE4ygfmcvQ 6XUj5wc9ffpn7FV/HM7hbNbTHWPkyq7ZZE7kCEFl4YaL9/+ho+7GkoYOI9TQVSXa eiBXYUFmB1RN51BRni5Jvj+PND2av08m6VQXoPwoVWtWONLzFVrubbmUF6PvD090 QhjMQ0Via+qCWreNZKqXfd31owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5zuezA YBtIvJG33/wTtjouVRefMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeua9f+rs+rOwVYtbxLyTNU8i6wSd0SewCbEfA1voH1z+9CPV1fuGnUtTrIBE T0xcXDHX6iKmosmFsH0ErXaw7ISS/SF5/DbQ40tC4wVOiPkY80Yf8SJvSygp58+Y 2ZvhQqQtIUfeJGDQ1iazhiqq7+4+NLCwVMsnfCbaZdjhudfy6KY32sh6NiJ5rx0h HNuTaYOmLrP9xh3CP4BFcmaeNHjuxb4YkKZOuj6s+Vaj/sDc4nRE2B6r0PqN6dhu LDrg/qvPU8n0hLpQdSKBtLw3oQbIMR4z/SbjS9OuJtLpoNiGSEmwiZR/3rKwaKIN aav0/DX9i3ENmmscH7S/qVt40g== -----END CERTIFICATE-----Generated at Fri Apr 17 14:14:35 2026 by rpki-client