$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json) Hash identifier: pMMTNJwT2U4D3LqsXqSWW6ExKjVipbsNAZu4YLGSLdc= Subject key identifier: E9:97:0F:EB:FA:F5:97:0C:80:DC:09:A1:BA:0A:DD:81:4E:E4:13:82 Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft Manifest number: 01C4 Signing time: Sun 05 Apr 2026 03:15:56 +0000 Manifest this update: Sun 05 Apr 2026 03:15:55 +0000 Manifest next update: Sun 12 Apr 2026 03:15:55 +0000 Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: JmWbuuDF/pn0vVS9+4nuWFrLXuqsp46+r1Ga34fQJSQ=) 2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: zfGF7KOCQQRDY2l23rBtYS3NirQreMdPDlzYfVapP6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Validity Not Before: Apr 5 03:15:55 2026 GMT Not After : Apr 12 03:15:55 2026 GMT Subject: CN=69d1d3ec-6d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:75:06:c2:47:81:ab:d5:be:14:b2:52:d8: e7:74:10:a2:a1:1e:fd:73:7d:4e:f1:b6:14:31:aa: 8f:e3:3c:1d:d4:49:be:35:76:4b:79:24:5a:a5:40: e6:c3:a6:37:fc:42:76:03:66:91:32:01:53:b3:6d: bd:06:9a:85:43:40:df:ae:39:8f:45:d2:f4:12:83: dd:20:16:75:ee:b3:5e:ec:5b:18:26:7d:ac:32:d7: 91:11:13:5a:bc:d4:45:5d:53:11:c9:3e:55:45:a9: a9:b2:1e:9d:31:36:1b:e1:31:65:7e:52:73:00:dd: 86:64:50:fb:e4:ac:e1:4c:cc:60:70:7f:c6:f3:66: 47:f2:9a:c2:30:18:38:b2:f6:27:85:f3:7d:5a:9b: 21:01:42:fa:3d:a3:3f:ac:64:58:f1:ef:87:19:39: 76:44:f6:e7:76:56:4c:f2:82:94:d0:2c:d6:6a:5d: 39:4b:d3:71:87:b4:be:bd:61:df:5f:e0:e4:0a:06: b8:2e:b5:80:e6:4a:e8:22:3a:f7:c7:8d:0a:e2:5b: c7:b9:2b:1a:0a:9a:e5:b3:3b:70:d8:a0:08:d9:25: 72:24:04:12:d0:b8:aa:d2:ed:1c:24:58:2d:41:c6: 4b:d7:4b:ac:f8:22:0b:ff:47:c2:84:29:2b:cf:0a: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:97:0F:EB:FA:F5:97:0C:80:DC:09:A1:BA:0A:DD:81:4E:E4:13:82 X509v3 Authority Key Identifier: keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2d:e4:54:05:03:ce:7f:91:4a:57:f3:80:52:05:72:d8:14: 9b:39:3a:36:ae:d3:be:6d:7c:ea:1e:f9:f6:24:fc:ab:02:02: 42:5d:cc:bf:12:1e:7e:24:4d:d7:7a:57:7a:e6:42:c2:5a:83: 17:4a:4d:94:55:ea:4b:6a:45:98:3c:26:b1:4b:52:16:e7:75: 70:76:e2:71:18:51:73:ce:a6:59:89:b2:37:4e:9e:75:be:80: 8c:0d:e8:bf:4d:c9:46:e8:e7:5b:13:0d:d4:06:56:37:73:45: 08:b0:f4:5f:c9:dc:41:0e:19:f6:fc:86:8c:32:9a:ed:18:a5: 0d:90:a3:26:0d:3a:a0:03:68:54:1b:2a:8c:58:5e:88:ab:df: 0a:66:de:8b:63:0b:95:4d:9c:a5:bd:67:1c:ff:59:82:43:65: d2:e1:8f:3f:a2:a2:c9:9c:a3:c2:a9:74:a9:4a:63:29:10:da: 0f:6d:57:05:0b:ad:b7:9f:9e:2c:a2:4b:ee:0c:a4:93:4e:f0: b6:f2:d7:6b:9a:56:fa:6a:0d:9b:42:bc:32:51:36:43:41:4c: 05:ec:3b:b4:f6:74:d4:b5:d2:ae:3c:4d:4d:24:96:81:52:a7: 29:32:d6:17:c6:ed:82:bc:46:e2:89:03:e4:11:d4:ed:3f:84: cb:49:8e:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE N0QzNUQwNzQwHhcNMjYwNDA1MDMxNTU1WhcNMjYwNDEyMDMxNTU1WjAYMRYwFAYD VQQDEw02OWQxZDNlYy02ZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqp1BsJHgavVvhSyUtjndBCioR79c31O8bYUMaqP4zwd1Em+NXZLeSRapUDm w6Y3/EJ2A2aRMgFTs229BpqFQ0DfrjmPRdL0EoPdIBZ17rNe7FsYJn2sMteRERNa vNRFXVMRyT5VRampsh6dMTYb4TFlflJzAN2GZFD75KzhTMxgcH/G82ZH8prCMBg4 svYnhfN9WpshAUL6PaM/rGRY8e+HGTl2RPbndlZM8oKU0CzWal05S9Nxh7S+vWHf X+DkCga4LrWA5kroIjr3x40K4lvHuSsaCprlsztw2KAI2SVyJAQS0Liq0u0cJFgt QcZL10us+CIL/0fChCkrzwq9ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmXD+v6 9ZcMgNwJoboK3YFO5BOCMB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs Z1gyYWRNeUJvRERYMDEwSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmi3kVAUDzn+RSlfzgFIFctgUmzk6Nq7Tvm186h759iT8qwICQl3MvxIefiRN 13pXeuZCwlqDF0pNlFXqS2pFmDwmsUtSFud1cHbicRhRc86mWYmyN06edb6AjA3o v03JRujnWxMN1AZWN3NFCLD0X8ncQQ4Z9vyGjDKa7RilDZCjJg06oANoVBsqjFhe iKvfCmbei2MLlU2cpb1nHP9ZgkNl0uGPP6KiyZyjwql0qUpjKRDaD21XBQutt5+e LKJL7gykk07wtvLXa5pW+moNm0K8MlE2Q0FMBew7tPZ01LXSrjxNTSSWgVKnKTLW F8btgrxG4okD5BHU7T+Ey0mOZg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:21 2026 by rpki-client