$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft File: 2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json) Hash identifier: w5Ls3HzUYomjI7t7AMyCUK/3HuT18lTol2eN1stZ6Gw= Subject key identifier: 30:21:F2:D1:FD:56:0B:43:66:A3:1D:20:78:9B:EA:A4:A2:31:F5:91 Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE Certificate issuer: /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft Manifest number: 2A Signing time: Sun 05 Apr 2026 08:05:21 +0000 Manifest this update: Sun 05 Apr 2026 08:05:20 +0000 Manifest next update: Sun 12 Apr 2026 08:05:20 +0000 Files and hashes: 1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: Yjlis3yfFy3e7N4y5cRpiYZjfTfInbqFIejhbFMbJxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE Validity Not Before: Apr 5 08:05:20 2026 GMT Not After : Apr 12 08:05:20 2026 GMT Subject: CN=69d217c1-db91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:96:27:1f:44:06:66:1c:85:c8:1e:e0:d7: 11:55:fe:2f:4a:72:7d:94:d9:d5:ce:33:d7:68:80: 68:35:8c:ea:46:07:af:ac:60:c8:f0:80:a1:1b:0f: 8f:75:26:43:2f:91:db:4e:8a:76:c5:fc:ff:b2:19: a7:46:9b:ce:52:32:c1:ca:d5:5b:2f:61:9c:16:9f: bd:ca:39:51:de:39:6f:ef:69:9c:6f:be:3c:70:e7: fe:b0:13:ef:b5:ab:cb:03:b2:fb:f4:ee:3a:24:88: f7:ee:08:29:3a:36:95:44:ea:ec:a7:47:e8:89:40: 56:de:53:1d:17:eb:14:2d:08:8b:3e:e3:2e:06:0e: e8:c4:8e:e3:51:19:ae:50:a5:0f:0c:f2:dd:6e:5a: 0a:80:53:16:d5:f1:33:da:91:3e:14:f0:ab:49:1e: 6b:d8:7a:49:4f:45:4a:1b:22:9e:8e:5f:b7:e1:a6: 83:82:a6:9a:b0:63:5d:7d:90:e1:fc:af:f7:ee:ff: ce:3a:97:2d:97:0e:75:c6:52:c0:3e:1c:f6:c1:60: 98:0f:f8:a9:7f:9e:d5:6b:97:a8:86:c3:73:77:86: 5f:23:6e:31:e4:d1:cf:cf:05:8b:03:ca:15:f9:b9: f7:e4:c9:0a:21:61:99:c9:d2:66:15:4f:03:e4:bc: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:21:F2:D1:FD:56:0B:43:66:A3:1D:20:78:9B:EA:A4:A2:31:F5:91 X509v3 Authority Key Identifier: keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:64:56:a8:85:f8:0a:80:0f:3b:c2:60:43:8b:3d:44:94:bd: 06:ee:2c:16:33:bf:10:b6:f5:2f:1a:3b:fa:f5:90:de:3d:05: 47:f6:a8:a6:ca:25:8a:ea:1c:3d:de:dc:b8:3a:36:53:8b:19: 4e:a4:8f:58:6b:0f:d3:23:9e:f2:fb:0a:61:db:0a:26:0d:f1: 15:83:94:ba:35:d6:7d:ce:1d:8c:b1:e4:79:7d:37:16:cc:66: e7:ef:0b:34:8d:84:ce:d2:d1:e2:27:11:83:52:a6:97:85:eb: 89:75:a4:41:b8:5c:2d:23:11:29:1e:44:53:2d:08:57:a6:c6: 39:b2:5d:8b:f4:3a:d6:03:9f:0c:a5:11:45:ce:0e:b9:88:8d: 02:51:8f:9b:cd:38:b3:d4:02:62:65:3e:60:4d:2e:77:ee:76: f6:44:00:08:0f:a5:60:64:08:d2:cd:f5:93:cf:9b:56:c4:08: 84:4c:ca:25:d5:5d:a3:63:80:26:4c:9d:78:2a:2c:a7:2c:36: 7b:53:22:a4:21:61:49:50:b9:1f:45:47:f6:a9:a5:a7:f8:7d: b4:99:ff:09:5c:a5:54:41:e1:2d:29:da:1e:bb:29:6d:15:fb: 23:c6:7f:81:3a:e1:9a:32:1d:e9:8c:68:db:47:e9:74:96:c3: 8f:e0:e7:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODYwMTExMC8GA1UEBRMoRDk4RjZGREIwMDdGRkY4M0UxMTMwOEZBRDU1QTFFQUZB ODM4NzRDRTAeFw0yNjA0MDUwODA1MjBaFw0yNjA0MTIwODA1MjBaMBgxFjAUBgNV BAMTDTY5ZDIxN2MxLWRiOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDCJYnH0QGZhyFyB7g1xFV/i9Kcn2U2dXOM9dogGg1jOpGB6+sYMjwgKEbD491 JkMvkdtOinbF/P+yGadGm85SMsHK1VsvYZwWn73KOVHeOW/vaZxvvjxw5/6wE++1 q8sDsvv07jokiPfuCCk6NpVE6uynR+iJQFbeUx0X6xQtCIs+4y4GDujEjuNRGa5Q pQ8M8t1uWgqAUxbV8TPakT4U8KtJHmvYeklPRUobIp6OX7fhpoOCppqwY119kOH8 r/fu/846ly2XDnXGUsA+HPbBYJgP+Kl/ntVrl6iGw3N3hl8jbjHk0c/PBYsDyhX5 uffkyQohYZnJ0mYVTwPkvIs9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMCHy0f1W C0Nmox0geJvqpKIx9ZEwHwYDVR0jBBgwFoAU2Y9v2wB//4PhEwj61Voer6g4dM4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NjAxLzU5NEIyQzNDRjZB RjExRjA4OTZBQkM1RjQzNkY1NkJDLzJZOXYyd0JfXzRQaEV3ajYxVm9lcjZnNGRN NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlk5djJ3Ql9fNFBoRXdqNjFWb2VyNmc0ZE00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 NjAxLzU5NEIyQzNDRjZBRjExRjA4OTZBQkM1RjQzNkY1NkJDLzJZOXYyd0JfXzRQ aEV3ajYxVm9lcjZnNGRNNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1ZFaohfgKgA87wmBDiz1ElL0G7iwWM78QtvUvGjv69ZDePQVH9qimyiWK6hw9 3ty4OjZTixlOpI9Yaw/TI57y+wph2womDfEVg5S6NdZ9zh2MseR5fTcWzGbn7ws0 jYTO0tHiJxGDUqaXheuJdaRBuFwtIxEpHkRTLQhXpsY5sl2L9DrWA58MpRFFzg65 iI0CUY+bzTiz1AJiZT5gTS537nb2RAAID6VgZAjSzfWTz5tWxAiETMol1V2jY4Am TJ14KiynLDZ7UyKkIWFJULkfRUf2qaWn+H20mf8JXKVUQeEtKdoeuyltFfsjxn+B OuGaMh3pjGjbR+l0lsOP4Oer -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:14 2026 by rpki-client