$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: AtQNA3e4P3xt66MmN3Z5P0j7G591ZBsDzIqhff7iJ/E= Subject key identifier: D7:07:51:34:03:E6:D7:B8:FE:96:33:3F:4F:E8:9E:0C:73:6E:18:77 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 04DB Signing time: Sat 04 Apr 2026 23:36:05 +0000 Manifest this update: Sat 04 Apr 2026 23:36:04 +0000 Manifest next update: Sat 11 Apr 2026 23:36:04 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: TRrFbmMOK+5o+jQZGzVBzwH1NR+WB3JeHdNEadZLZkU=) 2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: ez7xnIQP2Ioo5zgea1e7sjsLohhlbtgkdaKlVhizArA=) 3: E03427482D2411F192A7D59AB8833773.roa (hash: 6XCUaJGME6Z9CZytyWw6X1X7WoldzofbdyDhfxUS80A=) 4: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: vqS90tievR3HU16OsLXcBKQDauAULDoOuFd6Vz6BI+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Apr 4 23:36:04 2026 GMT Not After : Apr 11 23:36:04 2026 GMT Subject: CN=69d1a065-25bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:56:6d:f2:44:68:dc:11:db:8f:75:0a:69: eb:ef:6d:72:74:f8:46:d4:a4:70:c4:27:7a:a3:cb: ae:a9:d3:3c:0f:34:c8:e3:9e:d3:10:08:e8:e7:d8: 59:f1:24:3e:43:1c:96:d3:4c:8b:d6:a3:ea:cf:e9: a4:ac:33:9b:8f:87:7b:2a:c3:7c:bd:b9:e4:ac:55: e2:2a:7a:6d:61:a0:07:6d:a6:f5:0b:0b:7b:24:62: d7:6f:cc:c7:fc:2e:44:66:ea:9e:6b:b9:cb:7b:db: fa:7b:a9:cf:e1:40:05:4d:e2:0b:3c:47:c1:27:6c: f1:09:77:f5:d2:2b:ce:5f:1f:e5:6e:a6:6d:98:c0: e7:a6:7e:ce:7e:71:67:a4:8c:dd:42:a7:0a:c7:bf: 5b:40:a2:e6:71:c4:26:f0:0b:ae:4f:7f:db:1f:5c: 39:52:a2:5d:e5:6e:8b:48:38:0e:8a:3c:6e:52:a9: 45:55:8d:b9:f0:7c:56:2c:ba:a2:d5:02:c7:b6:36: 47:f6:70:5e:9b:c4:2d:0c:a6:9e:6d:de:fc:91:b9: d1:83:ad:3c:88:c4:37:c2:30:56:6a:d8:64:bd:e7: 6f:9b:fb:d1:5d:76:88:ff:fa:da:a1:76:a6:5e:ad: f9:bd:ac:8d:9c:bd:f7:5d:1d:07:08:cd:12:b3:05: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:07:51:34:03:E6:D7:B8:FE:96:33:3F:4F:E8:9E:0C:73:6E:18:77 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:fb:62:6f:c4:4a:01:a6:b6:c4:1d:1c:81:ea:23:f3:a5:2a: 30:3e:60:41:95:5e:48:02:d1:20:04:69:c6:b1:0b:e1:c9:9b: 2d:61:b2:85:ba:09:15:63:24:06:90:a1:76:38:a2:af:e7:9a: 5f:a8:89:11:34:37:32:4c:7e:79:09:d9:30:09:bc:48:b2:9d: 45:4d:e6:de:8f:18:18:d5:2b:67:a3:45:f5:6e:05:8a:56:62: c3:7a:bd:39:97:68:d8:8d:d4:a1:99:2d:73:de:9f:29:6d:60: 86:08:3d:1a:3b:73:7e:d0:64:ac:26:9b:a1:ce:29:de:84:06: 63:d5:ef:da:37:bb:09:c8:cd:a1:11:b8:17:b8:c5:a9:ad:96: 52:b3:60:5a:c9:f6:f2:1b:1a:25:c8:2b:5c:bd:5b:5a:c0:a5: a0:97:45:46:ee:77:ff:a5:8a:e4:1d:76:34:8b:86:db:ec:8c: 30:ff:eb:22:a2:c5:5d:f8:48:4c:dc:e3:f5:a9:cf:d5:cd:39: 70:f4:16:61:8c:7d:31:b0:bf:d1:7b:4d:61:2e:d6:b0:55:90: ba:87:84:db:b2:c9:ae:06:29:57:bd:d2:f2:6f:e9:67:a6:35: 9e:63:bb:d8:5f:7f:d4:6e:be:ab:74:fa:4d:74:a6:81:d1:8d: 1b:0b:c7:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjYwNDA0MjMzNjA0WhcNMjYwNDExMjMzNjA0WjAYMRYwFAYD VQQDEw02OWQxYTA2NS0yNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqohWbfJEaNwR2491Cmnr721ydPhG1KRwxCd6o8uuqdM8DzTI457TEAjo59hZ 8SQ+QxyW00yL1qPqz+mkrDObj4d7KsN8vbnkrFXiKnptYaAHbab1Cwt7JGLXb8zH /C5EZuqea7nLe9v6e6nP4UAFTeILPEfBJ2zxCXf10ivOXx/lbqZtmMDnpn7OfnFn pIzdQqcKx79bQKLmccQm8AuuT3/bH1w5UqJd5W6LSDgOijxuUqlFVY258HxWLLqi 1QLHtjZH9nBem8QtDKaebd78kbnRg608iMQ3wjBWathkvedvm/vRXXaI//raoXam Xq35vayNnL33XR0HCM0SswWSYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcHUTQD 5te4/pYzP0/ongxzbhh3MB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr/tib8RKAaa2xB0cgeoj86UqMD5gQZVeSALRIARpxrEL4cmbLWGyhboJFWMk BpChdjiir+eaX6iJETQ3Mkx+eQnZMAm8SLKdRU3m3o8YGNUrZ6NF9W4FilZiw3q9 OZdo2I3UoZktc96fKW1ghgg9GjtzftBkrCaboc4p3oQGY9Xv2je7CcjNoRG4F7jF qa2WUrNgWsn28hsaJcgrXL1bWsCloJdFRu53/6WK5B12NIuG2+yMMP/rIqLFXfhI TNzj9anP1c05cPQWYYx9MbC/0XtNYS7WsFWQuoeE27LJrgYpV73S8m/pZ6Y1nmO7 2F9/1G6+q3T6TXSmgdGNGwvHjA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:56:21 2026 by rpki-client