$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: YJPRAK3OfqbjwKW3OPFxIr6AQtjku4WZUuu5QbeR9z8= Subject key identifier: C2:C8:93:77:3B:E8:A2:26:25:43:B3:A2:30:3B:88:D8:64:61:42:65 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 01E2 Signing time: Sun 05 Apr 2026 03:02:50 +0000 Manifest this update: Sun 05 Apr 2026 03:02:50 +0000 Manifest next update: Sun 12 Apr 2026 03:02:50 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: WHOZQH0NqTJD4REq6M8ka+9BywKUO0U3h0Kq6qIybvo=) 2: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: qiDIUEuwMcanplAnkX0trRydukOFcGtNb2ScPdRJPzg=) 3: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: COaMid1PJ7sNLHUQ6+TBJQt8v3jAUBZ7JzL1Rm6+wuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Apr 5 03:02:50 2026 GMT Not After : Apr 12 03:02:50 2026 GMT Subject: CN=69d1d0da-910c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:1f:2b:85:04:d1:95:bc:74:aa:f0:ec:dd: 40:9a:12:77:14:8c:49:4f:f5:06:bd:f1:3f:4e:92: bc:4a:62:6a:c3:c7:c6:36:71:db:38:15:64:14:6c: 95:e6:99:1c:00:91:8d:2c:d3:ab:38:97:9e:99:25: 7c:2f:d2:3f:c7:ed:2a:5f:fd:56:ea:26:2a:fe:c2: a6:24:50:cb:b3:5f:70:0b:91:ef:fc:2a:11:ee:6e: 13:04:5b:d4:e9:80:ad:e8:a2:a3:8e:6a:1e:ea:6f: 94:34:de:8c:05:52:0d:ab:d2:c5:2c:16:51:00:97: 8f:a6:96:54:2b:c1:cd:38:34:c1:df:ce:fd:0e:c2: 50:d5:94:ab:e8:8d:eb:dc:5c:41:a1:43:24:1d:99: 5d:37:53:04:22:87:b0:94:d0:91:db:0d:75:b6:ce: 9d:98:1a:bf:c1:a9:c0:97:fb:61:73:3c:7e:9a:fc: e2:80:4b:2d:6f:40:87:fd:c1:86:7b:2a:1e:39:01: d4:ba:70:f6:66:c1:ff:5a:7b:75:90:8b:1b:94:2c: 94:27:25:de:2f:1d:93:54:be:35:d7:5e:c1:7b:39: ae:47:97:00:b7:26:f6:5d:dd:cd:fd:ba:46:1a:41: d0:77:ad:71:66:4d:ef:b8:42:cb:4c:bf:05:2a:65: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C8:93:77:3B:E8:A2:26:25:43:B3:A2:30:3B:88:D8:64:61:42:65 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0b:5d:e3:03:26:1c:75:90:e5:43:c1:16:da:a3:b5:42:2c: 7c:30:99:7b:c9:cc:05:3a:c0:7c:8d:85:06:ea:4b:3b:d3:01: 7f:c8:47:a7:d0:36:df:15:95:cb:dd:77:4f:20:ea:ef:27:a9: 19:35:84:4d:78:21:66:af:f2:2f:76:53:f9:90:3f:81:40:4a: 0c:c0:86:4f:73:9e:b3:5a:28:b5:81:dc:19:4c:6f:33:fe:4c: db:53:58:48:88:bc:3e:b6:75:a5:d6:ca:26:b2:6c:95:bf:5a: 64:62:25:12:9c:76:7a:fc:7e:e2:f8:86:6c:bb:4d:18:eb:9e: fb:6d:e3:a6:4c:6f:26:a0:91:21:3a:a0:68:4c:14:56:80:43: 33:f3:4a:e4:ff:dd:71:17:fa:fa:64:de:97:3a:9d:87:09:09: 99:97:06:c1:82:23:bd:e7:bd:ea:36:55:10:d4:79:31:40:9c: 71:1f:c2:f7:31:d7:2a:4a:ab:49:fd:32:57:ff:43:06:30:9a: bb:eb:72:16:44:67:48:ac:75:a4:c1:2c:54:65:fb:ee:fa:69: d6:22:66:95:4a:30:88:e7:e6:83:2d:9d:20:c7:89:da:3e:5c: fa:0d:24:f9:b2:50:44:d6:3e:a2:56:ac:0a:04:3c:5d:a6:bc: 16:f2:2a:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjYwNDA1MDMwMjUwWhcNMjYwNDEyMDMwMjUwWjAYMRYwFAYD VQQDEw02OWQxZDBkYS05MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOYfK4UE0ZW8dKrw7N1AmhJ3FIxJT/UGvfE/TpK8SmJqw8fGNnHbOBVkFGyV 5pkcAJGNLNOrOJeemSV8L9I/x+0qX/1W6iYq/sKmJFDLs19wC5Hv/CoR7m4TBFvU 6YCt6KKjjmoe6m+UNN6MBVINq9LFLBZRAJePppZUK8HNODTB3879DsJQ1ZSr6I3r 3FxBoUMkHZldN1MEIoewlNCR2w11ts6dmBq/wanAl/thczx+mvzigEstb0CH/cGG eyoeOQHUunD2ZsH/Wnt1kIsblCyUJyXeLx2TVL41117BezmuR5cAtyb2Xd3N/bpG GkHQd61xZk3vuELLTL8FKmURiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLIk3c7 6KImJUOzojA7iNhkYUJlMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbgtd4wMmHHWQ5UPBFtqjtUIsfDCZe8nMBTrAfI2FBupLO9MBf8hHp9A23xWV y913TyDq7yepGTWETXghZq/yL3ZT+ZA/gUBKDMCGT3Oes1ootYHcGUxvM/5M21NY SIi8PrZ1pdbKJrJslb9aZGIlEpx2evx+4viGbLtNGOue+23jpkxvJqCRITqgaEwU VoBDM/NK5P/dcRf6+mTelzqdhwkJmZcGwYIjvee96jZVENR5MUCccR/C9zHXKkqr Sf0yV/9DBjCau+tyFkRnSKx1pMEsVGX77vpp1iJmlUowiOfmgy2dIMeJ2j5c+g0k +bJQRNY+olasCgQ8Xaa8FvIqTQ== -----END CERTIFICATE-----Generated at Sun Apr 5 21:09:22 2026 by rpki-client