$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: JicYTMTrBN4G/9dPHhyxYSmL9xh+RWzYHeSN/qynboA= Subject key identifier: 49:09:74:83:29:95:C1:7E:BA:CB:A1:8D:66:4F:3D:60:1F:66:65:BE Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 0460 Signing time: Mon 06 Apr 2026 23:54:23 +0000 Manifest this update: Mon 06 Apr 2026 23:54:23 +0000 Manifest next update: Mon 13 Apr 2026 23:54:23 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: jLGzQGHy3VuKPeHW3X0AeKDcYADj+R18UqUpFyTLdCA=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: lRK5hM0+Ajz1Iu+TnpLxwj4NeRvEETgFEYDFPhqxkGM=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: SzKheHkyXGhCU9L9E9bj5O9UK/QqaZCVghpUUMIvziw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 23:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Apr 6 23:54:23 2026 GMT Not After : Apr 13 23:54:23 2026 GMT Subject: CN=69d447af-ac42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:31:e6:fb:d7:25:fc:a0:09:b7:5c:61:85: 0b:91:ed:09:fe:a8:1e:9c:69:96:81:0b:20:4d:79: b5:4a:f5:26:f5:6e:0b:22:bb:da:5a:f9:cd:f6:05: ce:eb:ad:3a:ab:09:ad:23:85:88:d4:a4:96:f3:3f: 03:5a:d8:0e:5a:32:e6:97:d8:24:ba:65:11:bc:52: 90:9f:83:95:a9:55:67:09:da:d7:c4:c5:63:07:9f: 9e:06:bf:24:16:00:bc:5f:a6:e2:18:a9:76:a1:23: 0c:9c:0a:57:6a:5a:cc:bc:fd:5a:da:e6:95:4b:37: 0c:68:83:73:ac:a9:27:5e:78:f6:80:37:35:d4:89: 10:0b:67:f8:7e:e3:90:a5:71:92:36:b5:fd:02:ba: c9:68:71:e9:a0:56:1b:89:c3:e1:65:63:60:fa:45: 1d:95:c5:48:38:16:39:08:2f:2a:33:37:89:df:7b: 62:ce:c4:b4:0d:a5:be:33:45:43:f9:3e:4e:00:8a: d4:99:cd:a1:14:0c:db:55:bf:cb:b4:eb:98:fe:13: c1:64:a4:e2:a3:6b:9b:f8:5d:e6:ba:4a:c2:18:86: b5:b3:8b:ff:c5:b4:df:a7:16:6c:1f:ab:23:d7:86: 4b:85:7e:03:ab:12:fd:f1:cc:2a:43:d7:1e:26:e0: d8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:09:74:83:29:95:C1:7E:BA:CB:A1:8D:66:4F:3D:60:1F:66:65:BE X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f2:4e:2e:c5:17:32:e2:e9:0d:7b:39:c0:db:0b:fd:05:c5: 12:8c:53:8a:d8:cb:70:41:e1:27:2f:86:e9:9b:ca:94:a4:a4: 19:cb:4b:d9:f1:d6:b8:2a:e1:d7:3c:5e:85:36:7b:cc:3b:95: 11:38:8c:1b:6c:4a:c5:4a:69:93:56:77:b3:ed:ed:4b:19:36: 68:fe:e4:f3:c4:ea:08:0a:49:11:28:c6:86:26:d2:50:99:40: 07:86:63:de:8b:64:9e:6b:9e:8f:db:56:35:93:9c:fb:58:71: e8:52:0e:a4:22:f3:38:b0:50:58:fd:1a:c9:86:08:ee:ef:0b: 41:fc:65:37:1f:5d:c7:3c:e3:b5:6f:5c:f2:7c:e8:f5:38:13: 24:c8:ab:0f:79:12:a7:f3:9b:0c:94:45:3e:d3:07:5f:a0:66: b8:41:d5:06:5d:37:82:89:1e:d9:92:6a:ce:19:c3:2c:cb:fc: c9:4f:f1:05:16:51:3c:aa:12:96:01:43:5a:ee:99:01:08:19: 0a:db:be:5f:7a:db:d0:f5:f2:ec:2f:fc:0b:e9:e0:1d:93:e0: dd:88:d9:e8:10:39:ab:a6:68:5b:93:09:e2:4b:d0:fa:82:09: 02:8f:68:79:ec:1d:fa:be:b3:e9:12:42:6b:15:51:e9:07:65: c0:b2:f6:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjYwNDA2MjM1NDIzWhcNMjYwNDEzMjM1NDIzWjAYMRYwFAYD VQQDEw02OWQ0NDdhZi1hYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoEx5vvXJfygCbdcYYULke0J/qgenGmWgQsgTXm1SvUm9W4LIrvaWvnN9gXO 6606qwmtI4WI1KSW8z8DWtgOWjLml9gkumURvFKQn4OVqVVnCdrXxMVjB5+eBr8k FgC8X6biGKl2oSMMnApXalrMvP1a2uaVSzcMaINzrKknXnj2gDc11IkQC2f4fuOQ pXGSNrX9ArrJaHHpoFYbicPhZWNg+kUdlcVIOBY5CC8qMzeJ33tizsS0DaW+M0VD +T5OAIrUmc2hFAzbVb/LtOuY/hPBZKTio2ub+F3mukrCGIa1s4v/xbTfpxZsH6sj 14ZLhX4DqxL98cwqQ9ceJuDYOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkJdIMp lcF+usuhjWZPPWAfZmW+MB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPJOLsUXMuLpDXs5wNsL/QXFEoxTitjLcEHhJy+G6ZvKlKSkGctL2fHWuCrh 1zxehTZ7zDuVETiMG2xKxUppk1Z3s+3tSxk2aP7k88TqCApJESjGhibSUJlAB4Zj 3otknmuej9tWNZOc+1hx6FIOpCLzOLBQWP0ayYYI7u8LQfxlNx9dxzzjtW9c8nzo 9TgTJMirD3kSp/ObDJRFPtMHX6BmuEHVBl03goke2ZJqzhnDLMv8yU/xBRZRPKoS lgFDWu6ZAQgZCtu+X3rb0PXy7C/8C+ngHZPg3YjZ6BA5q6ZoW5MJ4kvQ+oIJAo9o eewd+r6z6RJCaxVR6QdlwLL2LA== -----END CERTIFICATE-----Generated at Tue Apr 7 12:08:41 2026 by rpki-client