$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: iWAIWeY8ow/G/SQaTYyJi8ylx5bC/xy6tsJzDisxi2I= Subject key identifier: F1:38:74:0C:6E:20:7B:9D:EC:C8:1B:2D:60:68:2B:A0:67:52:7D:70 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0A27 Signing time: Sat 04 Apr 2026 19:37:41 +0000 Manifest this update: Sat 04 Apr 2026 19:37:40 +0000 Manifest next update: Sat 11 Apr 2026 19:37:40 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: 0oshYhNr7G/Lfek4xTDlbaNh0KixlBbTs/vISqn/DVU=) 2: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=) 3: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=) 4: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=) 5: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: SGPYvzHeLCeVexbh9lAx6+ESCRM1l3c2pzV/QopMYDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Apr 4 19:37:40 2026 GMT Not After : Apr 11 19:37:40 2026 GMT Subject: CN=69d16884-faf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:af:2c:b6:a3:db:80:70:b7:8f:a3:36:e2: 9d:21:0a:bf:a4:a3:53:71:6b:93:e2:de:81:4b:e4: 95:60:14:09:f8:49:60:9f:bb:58:07:12:42:85:fd: 9e:3d:db:82:eb:39:9e:ae:62:de:e4:fb:af:2c:f7: 76:b1:2d:71:20:de:86:e1:f8:dc:7b:84:22:ea:a2: ba:84:7b:17:04:e9:09:a6:2e:25:2c:b3:4a:fe:59: 48:da:7b:97:7c:4e:08:3b:a6:06:fb:82:a6:25:a6: 3c:ad:ba:c6:7f:7b:7e:65:f3:32:47:b7:a5:97:b9: 91:48:5f:16:d0:b8:db:7e:ec:7f:53:1e:99:43:05: b0:a8:84:65:2e:72:13:70:0b:16:34:8e:e7:7e:52: ad:83:fa:a5:2b:b8:99:7d:4f:69:a9:25:fb:41:b3: f8:2a:a6:bb:9a:53:ed:2a:b7:5a:7e:17:e6:2f:64: 27:94:28:8a:67:db:87:1d:1a:29:10:e5:da:a2:a6: a0:cc:91:80:b3:b6:c7:94:68:b9:d6:92:92:82:eb: 33:c8:f8:e1:e3:ad:a6:7c:e4:a6:e3:f9:89:b8:3b: 1a:54:4e:78:8f:e7:1e:3c:47:55:e7:0d:23:9f:36: 28:22:92:54:fb:69:6f:dc:89:29:86:e5:ad:27:61: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:38:74:0C:6E:20:7B:9D:EC:C8:1B:2D:60:68:2B:A0:67:52:7D:70 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:9f:d2:22:78:4c:6a:ff:93:ca:76:ef:ad:87:8f:25:15:de: af:80:92:20:df:69:98:bb:fe:e2:c1:48:98:bd:5e:df:48:c9: ce:50:f5:d8:46:77:44:f1:6b:a1:d6:55:de:af:2b:e2:12:71: 53:1e:3c:2b:6f:da:5e:cd:40:c0:98:9d:70:0b:a7:43:31:65: d3:a1:d8:e8:65:11:a3:8f:59:a3:86:81:ec:e1:20:05:d6:a4: 29:c9:ab:63:0a:b3:b9:5e:d2:62:df:99:77:4c:41:da:d8:21: 4c:99:85:60:e1:0a:3b:fd:46:06:70:40:49:87:ec:de:32:aa: be:c8:6d:de:16:4a:d7:a7:d4:2c:95:07:34:19:1e:11:17:a1: ed:b2:ca:7f:b8:23:c8:3f:ee:fd:80:fd:5d:17:49:27:27:d5: 4f:49:53:df:78:aa:34:c9:d3:c2:1c:56:a4:82:fe:20:ec:5c: ed:88:d0:3f:fd:6a:38:c9:b1:e1:bf:19:45:43:7a:37:88:bb: f2:13:a1:6d:c9:fa:96:2e:6a:9f:1b:7c:ff:44:26:9d:97:8a: 74:18:9a:99:d2:55:bb:4b:40:f7:56:62:69:99:30:79:75:80: 0b:43:40:0b:b7:d7:45:7d:a6:f6:43:ee:ee:3b:40:51:75:60: 33:f3:eb:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwNDA0MTkzNzQwWhcNMjYwNDExMTkzNzQwWjAYMRYwFAYD VQQDEw02OWQxNjg4NC1mYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrCvLLaj24Bwt4+jNuKdIQq/pKNTcWuT4t6BS+SVYBQJ+Elgn7tYBxJChf2e PduC6zmermLe5PuvLPd2sS1xIN6G4fjce4Qi6qK6hHsXBOkJpi4lLLNK/llI2nuX fE4IO6YG+4KmJaY8rbrGf3t+ZfMyR7ell7mRSF8W0Ljbfux/Ux6ZQwWwqIRlLnIT cAsWNI7nflKtg/qlK7iZfU9pqSX7QbP4Kqa7mlPtKrdafhfmL2QnlCiKZ9uHHRop EOXaoqagzJGAs7bHlGi51pKSguszyPjh462mfOSm4/mJuDsaVE54j+cePEdV5w0j nzYoIpJU+2lv3IkphuWtJ2FQ1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPE4dAxu IHud7MgbLWBoK6BnUn1wMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlp/SInhMav+TynbvrYePJRXer4CSIN9pmLv+4sFImL1e30jJzlD12EZ3RPFr odZV3q8r4hJxUx48K2/aXs1AwJidcAunQzFl06HY6GURo49Zo4aB7OEgBdakKcmr YwqzuV7SYt+Zd0xB2tghTJmFYOEKO/1GBnBASYfs3jKqvsht3hZK16fULJUHNBke EReh7bLKf7gjyD/u/YD9XRdJJyfVT0lT33iqNMnTwhxWpIL+IOxc7YjQP/1qOMmx 4b8ZRUN6N4i78hOhbcn6li5qnxt8/0QmnZeKdBiamdJVu0tA91ZiaZkweXWAC0NA C7fXRX2m9kPu7jtAUXVgM/PrGg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:46 2026 by rpki-client