$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: qYMj80v5FTZtZcud+HYKxqRQQ13URqoc5XoUhqT6F1o= Subject key identifier: 5D:63:42:73:37:7E:79:A8:5D:F5:88:30:FF:E1:D9:00:CC:25:78:65 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 0375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 036F Signing time: Sun 05 Apr 2026 00:37:21 +0000 Manifest this update: Sun 05 Apr 2026 00:37:20 +0000 Manifest next update: Sun 12 Apr 2026 00:37:20 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: n91ixHqlM8BWaX7OFChgYcm1hr4KB4xEHMSO5ROgy1Q=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: eh2olN6asVC4zjOV+kS987T4rETGl4oNwPTcTkaLCEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 885 (0x375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Apr 5 00:37:20 2026 GMT Not After : Apr 12 00:37:20 2026 GMT Subject: CN=69d1aec0-c234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:fe:6e:02:a7:44:97:2f:07:4c:23:a0:d0: 21:8d:61:f2:c0:64:59:ac:50:cd:88:4c:1c:2f:92: a2:02:e1:ec:76:48:0c:ea:37:4f:b5:85:94:8d:b6: 23:9f:c8:5f:4e:71:20:af:1b:97:86:76:a9:d1:79: aa:05:85:c6:5a:fc:7c:e0:bf:a2:ea:0e:43:88:77: 25:43:fd:89:8f:21:e5:23:33:de:dd:d2:ee:95:cf: 5f:5d:7d:6c:13:1f:67:30:82:66:e1:96:c0:a4:10: a0:64:b0:03:05:ce:d5:68:d0:75:92:8e:44:37:c4: ae:28:9c:2d:34:5d:3e:ba:c2:de:25:73:f6:f1:4f: c2:1b:a2:de:99:69:74:fb:66:62:ce:54:83:a6:01: bf:d6:e1:64:29:9c:bc:fb:33:b2:13:4f:f4:9e:14: 18:5d:e0:49:cb:41:f0:ee:0f:b0:9f:4d:48:85:67: 8d:42:60:2a:aa:3a:e6:ac:e4:78:f3:9a:43:01:3d: d7:e9:9f:fc:05:18:be:ae:9f:6f:47:63:98:b9:c8: 86:a1:c8:5a:30:cb:4a:eb:11:c7:22:e5:06:90:e1: b0:61:50:e0:20:b8:62:18:17:13:d0:82:50:c4:9a: 40:69:79:d4:dd:49:1f:f9:12:16:d6:c0:4d:99:03: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:63:42:73:37:7E:79:A8:5D:F5:88:30:FF:E1:D9:00:CC:25:78:65 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:df:3d:81:b4:5a:db:76:25:62:6d:d1:bc:2d:d1:24:98:12: 9b:12:54:a1:d1:8f:72:d6:ee:d6:6f:06:3f:b7:ae:ce:74:22: 15:18:4d:4c:9f:37:4b:09:db:89:29:f2:90:4c:2c:68:9c:22: b4:22:5e:11:03:e9:46:3a:a1:66:de:e3:ef:65:fa:17:47:f8: cb:d3:11:3c:71:ec:3e:dc:3a:0e:b4:c7:12:67:c1:c4:f4:eb: 60:51:15:20:bd:cb:1d:4f:64:13:9e:fc:f9:f4:e4:20:c4:1c: 63:dc:e6:31:c3:ca:e5:9e:f1:54:58:9e:f9:3e:36:e7:00:a0: 35:e2:cc:bd:8d:ea:80:44:52:e2:3f:5d:45:0a:92:38:32:63: 94:c5:b8:6f:ab:5b:8e:b5:36:51:8d:e3:2c:57:b6:b5:04:a9: 5e:e4:04:2f:43:68:42:fd:eb:34:da:e2:09:4b:30:d8:f7:19: ef:54:d3:00:83:50:33:98:ed:46:d1:4b:46:3b:0d:bb:fc:46: b1:08:9c:fa:14:72:b4:b9:ef:ce:30:3b:2e:ca:43:5c:9f:2e: 21:13:dc:30:f7:52:0f:5c:4e:35:f3:8f:1c:1d:7f:64:0a:e3: 04:9d:f4:e8:24:85:b2:18:9c:77:2b:a8:7d:bd:7a:83:81:43: 47:14:b6:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjYwNDA1MDAzNzIwWhcNMjYwNDEyMDAzNzIwWjAYMRYwFAYD VQQDEw02OWQxYWVjMC1jMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tb+bgKnRJcvB0wjoNAhjWHywGRZrFDNiEwcL5KiAuHsdkgM6jdPtYWUjbYj n8hfTnEgrxuXhnap0XmqBYXGWvx84L+i6g5DiHclQ/2JjyHlIzPe3dLulc9fXX1s Ex9nMIJm4ZbApBCgZLADBc7VaNB1ko5EN8SuKJwtNF0+usLeJXP28U/CG6LemWl0 +2ZizlSDpgG/1uFkKZy8+zOyE0/0nhQYXeBJy0Hw7g+wn01IhWeNQmAqqjrmrOR4 85pDAT3X6Z/8BRi+rp9vR2OYuciGochaMMtK6xHHIuUGkOGwYVDgILhiGBcT0IJQ xJpAaXnU3Ukf+RIW1sBNmQPunwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1jQnM3 fnmoXfWIMP/h2QDMJXhlMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXt89gbRa23YlYm3RvC3RJJgSmxJUodGPctbu1m8GP7euznQiFRhNTJ83Swnb iSnykEwsaJwitCJeEQPpRjqhZt7j72X6F0f4y9MRPHHsPtw6DrTHEmfBxPTrYFEV IL3LHU9kE578+fTkIMQcY9zmMcPK5Z7xVFie+T425wCgNeLMvY3qgERS4j9dRQqS ODJjlMW4b6tbjrU2UY3jLFe2tQSpXuQEL0NoQv3rNNriCUsw2PcZ71TTAINQM5jt RtFLRjsNu/xGsQic+hRytLnvzjA7LspDXJ8uIRPcMPdSD1xONfOPHB1/ZArjBJ30 6CSFshicdyuofb16g4FDRxS2eA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:14 2026 by rpki-client