$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json) Hash identifier: H/g+BdZDic4hfl2waqJNTARrcWErARr3CfycIpcE1gg= Subject key identifier: F5:D2:0C:87:90:0C:3C:62:10:BE:47:F6:69:8C:BB:A3:E9:B5:37:71 Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft Manifest number: C4 Signing time: Wed 15 Apr 2026 06:29:45 +0000 Manifest this update: Wed 15 Apr 2026 06:29:44 +0000 Manifest next update: Wed 22 Apr 2026 06:29:44 +0000 Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: McyyGtNJJQMqvYPK3lR7RF2VVnXB8LU4cmrZu91bw58=) 2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: tWtaLRbtDVtWiOlLn3BiRHdz2Yx30phG2bPvS2Dv5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Validity Not Before: Apr 15 06:29:44 2026 GMT Not After : Apr 22 06:29:44 2026 GMT Subject: CN=69df3058-816f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:0a:65:b2:aa:95:aa:6f:82:7a:90:5a:0e: 89:f7:e2:7e:6c:c5:52:99:ce:36:33:67:f7:1b:3e: e2:f0:52:7f:e0:de:92:47:b0:b9:73:b1:b0:01:03: 07:d2:15:54:46:bf:6b:cf:a6:be:09:8c:bd:dc:46: 47:d2:36:bc:96:98:14:22:d2:a8:4d:ff:64:e6:9c: 49:db:ca:b4:2d:fe:35:1d:53:88:28:10:bf:60:d4: 20:3a:1c:32:df:53:24:20:86:e9:ff:dc:cf:3b:35: ff:19:55:22:0f:20:f6:b4:06:db:40:4c:91:e8:c5: 2b:65:2e:dc:50:2e:4d:06:ff:9e:e7:e6:df:ca:87: b8:98:c2:f3:de:67:46:d5:ae:34:7c:74:a9:ff:f9: 46:a5:bb:ec:25:03:d9:ca:6e:d2:7c:b6:5b:17:d0: c6:15:dc:8c:e5:f3:6c:99:59:fc:ab:86:4c:4b:10: e4:af:88:67:81:17:63:0b:ba:ad:13:b0:2f:78:20: f1:45:c6:06:18:5e:1f:67:71:b8:95:0f:26:86:03: cd:8d:f1:4f:b5:2e:fe:85:72:d0:5b:d0:58:f6:46: cd:78:50:e3:7f:8c:56:dd:d4:b8:98:e5:a9:d9:cf: 32:ab:68:6b:af:1f:6c:5f:bf:9e:87:5f:d0:b1:8f: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D2:0C:87:90:0C:3C:62:10:BE:47:F6:69:8C:BB:A3:E9:B5:37:71 X509v3 Authority Key Identifier: keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:6c:85:e8:67:fe:d3:1f:fd:8c:69:4c:09:91:56:ec:84:fa: 16:41:37:86:5e:9e:1c:77:8e:c3:9a:bb:b1:56:1f:06:84:34: 07:54:0d:d1:8c:ff:0d:55:92:4d:88:fa:f9:79:7a:82:dd:1d: 11:da:b4:47:28:96:04:a0:33:f5:92:57:95:e6:4b:4d:69:ff: f4:0a:7e:62:76:32:33:85:e8:ad:4d:98:26:58:5e:90:0f:9d: f0:66:66:d3:6d:50:04:89:64:d1:23:90:32:24:8c:c2:c3:45: 4d:b6:45:50:7f:35:23:d6:98:b4:68:84:15:eb:f1:e2:ec:95: 4d:78:69:ca:a6:76:b2:aa:4d:66:1d:6d:d7:42:fa:40:14:c8: a4:25:ff:eb:83:76:15:af:2e:91:06:7a:40:05:25:ad:fb:34: ce:81:00:51:58:0f:71:a0:ac:b9:84:ca:6a:a2:52:13:0e:93: 0a:1c:95:0a:1b:9a:fd:e4:d5:0c:37:5f:22:18:29:da:cb:6f: 8e:0e:b3:9d:be:52:f6:a0:30:6a:be:74:96:36:1a:59:aa:40: d9:9d:6b:4c:7e:f2:8a:ad:f6:cb:a8:cb:95:7d:47:5f:03:94: e5:02:4b:71:99:c8:35:f1:d8:5c:07:84:4a:82:51:08:71:e3: 7a:ee:fd:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDQ0ExMTAvBgNVBAUTKERCMTNGQkFGN0IzQjM4REI3NjMwREIwQjk3Mzc0REFB RDAzMTVBREUwHhcNMjYwNDE1MDYyOTQ0WhcNMjYwNDIyMDYyOTQ0WjAYMRYwFAYD VQQDEw02OWRmMzA1OC04MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyYKZbKqlapvgnqQWg6J9+J+bMVSmc42M2f3Gz7i8FJ/4N6SR7C5c7GwAQMH 0hVURr9rz6a+CYy93EZH0ja8lpgUItKoTf9k5pxJ28q0Lf41HVOIKBC/YNQgOhwy 31MkIIbp/9zPOzX/GVUiDyD2tAbbQEyR6MUrZS7cUC5NBv+e5+bfyoe4mMLz3mdG 1a40fHSp//lGpbvsJQPZym7SfLZbF9DGFdyM5fNsmVn8q4ZMSxDkr4hngRdjC7qt E7AveCDxRcYGGF4fZ3G4lQ8mhgPNjfFPtS7+hXLQW9BY9kbNeFDjf4xW3dS4mOWp 2c8yq2hrrx9sX7+eh1/QsY86JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXSDIeQ DDxiEL5H9mmMu6PptTdxMB8GA1UdIwQYMBaAFNsT+697OzjbdjDbC5c3TarQMVre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkNDQS8yNDAxMEQ1MjBG NzAxMUYwOUUyRjdEMUZDNEY5QUUwMi8yeFA3cjNzN09OdDJNTnNMbHpkTnF0QXhX dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkNDQS8yNDAxMEQ1MjBGNzAxMUYwOUUyRjdEMUZDNEY5QUUwMi8yeFA3cjNzN09O dDJNTnNMbHpkTnF0QXhXdDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAomyF6Gf+0x/9jGlMCZFW7IT6FkE3hl6eHHeOw5q7sVYfBoQ0B1QN0Yz/DVWS TYj6+Xl6gt0dEdq0RyiWBKAz9ZJXleZLTWn/9Ap+YnYyM4XorU2YJlhekA+d8GZm 021QBIlk0SOQMiSMwsNFTbZFUH81I9aYtGiEFevx4uyVTXhpyqZ2sqpNZh1t10L6 QBTIpCX/64N2Fa8ukQZ6QAUlrfs0zoEAUVgPcaCsuYTKaqJSEw6TChyVChua/eTV DDdfIhgp2stvjg6znb5S9qAwar50ljYaWapA2Z1rTH7yiq32y6jLlX1HXwOU5QJL cZnINfHYXAeESoJRCHHjeu79OA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:02:07 2026 by rpki-client