$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: DhDzIdK+toLuYgdutn0HEQlypARSzlviSzhhWtpOUYE= Subject key identifier: 46:F9:27:C3:94:30:C8:F7:F0:15:FA:8F:56:5A:E3:64:CB:4D:9E:B0 Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 070E Signing time: Sat 04 Apr 2026 21:45:50 +0000 Manifest this update: Sat 04 Apr 2026 21:45:49 +0000 Manifest next update: Sat 11 Apr 2026 21:45:49 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: zU6gFbpcSKxS27VlkQccj9LWD659IA9ZaZyJ/q9drXM=) 2: 88A31320809211EB938F4016C4F9AE02.roa (hash: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo=) 3: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: rQHi52MocQB/prtSJtGO8uedEqwHLU7/+mRUSwiw+1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Apr 4 21:45:49 2026 GMT Not After : Apr 11 21:45:49 2026 GMT Subject: CN=69d1868e-8185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:d2:a5:1b:29:7c:a0:b9:c2:b9:30:66:f4: 38:35:f4:de:c0:03:66:c5:26:a4:03:57:f8:3d:c2: 0d:15:84:6c:9f:40:53:81:33:9b:e9:72:2a:5a:6b: 1d:8a:f5:c9:b8:b5:b9:af:7a:3c:c8:1b:97:27:b2: 22:fc:0a:fa:de:e1:f8:27:11:d3:bc:0e:00:1f:0a: dd:c2:c2:71:f7:91:4a:16:28:e1:35:20:4c:24:00: fc:8d:20:90:5e:b9:91:9d:20:af:c7:91:41:d2:58: 92:97:c6:9d:8c:64:66:33:bb:e6:4e:bf:ab:c0:a9: 69:74:83:0f:7a:19:10:56:f7:fb:37:50:f7:c3:a2: 33:dd:97:ec:2b:1d:69:de:05:63:e5:f2:d0:19:6b: 4b:8e:3c:ea:cd:c2:b4:21:6c:8f:b4:17:6d:87:66: 39:ee:a0:12:1b:de:91:0f:70:1f:94:f1:f3:a3:c5: a1:a9:0e:b3:ad:00:d1:64:65:76:ec:a7:29:81:e4: a9:99:53:40:d1:df:5f:6c:cc:61:ab:95:64:b6:b9: 05:20:cf:82:ca:99:d4:b8:cd:81:15:6e:a1:f9:2e: 75:67:db:1a:0c:ca:f1:ec:c9:b2:65:5a:de:8f:ae: 46:e5:2b:b6:55:ed:2a:08:e6:a7:55:38:9f:6c:13: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F9:27:C3:94:30:C8:F7:F0:15:FA:8F:56:5A:E3:64:CB:4D:9E:B0 X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c1:2b:65:41:01:7a:3b:df:de:33:5c:49:cc:5f:0d:27:3d: b8:08:5b:71:46:4e:d5:3d:06:8d:fd:54:49:21:6d:52:e4:19: e1:7a:a8:8b:2b:c2:c3:5f:57:e7:47:9b:d4:a7:d4:1e:59:73: 5f:c5:31:74:07:fc:f0:7f:8f:92:45:6e:2f:66:f6:44:f1:74: 1a:a0:62:83:67:10:c8:2b:42:da:53:56:d5:f4:ca:c8:b1:44: f8:18:a1:78:e8:fa:c6:c2:cb:b8:f7:92:46:73:ad:1b:ff:7c: e4:cb:90:4e:7f:a5:23:78:8c:ab:17:79:be:8c:4e:0d:2b:be: e2:f4:01:97:8a:f1:70:ad:34:73:53:67:ba:9b:f1:43:bd:05: c1:4d:2f:8b:dd:10:ab:79:48:c9:d7:20:bc:67:54:ec:74:6d: 1a:52:e1:b1:bd:33:df:49:1d:b0:1c:99:4c:a7:6b:e5:04:64: 37:1c:d0:b0:c4:73:53:33:4c:74:22:92:54:da:3e:a9:5d:a5: 18:98:78:75:24:11:1b:38:63:f2:b0:8d:89:a1:74:cf:ab:b4: ab:05:1d:d6:12:b2:c5:e0:02:46:5b:e0:f7:15:52:f1:eb:ff: 51:78:bb:dd:36:78:f9:1a:10:f6:fc:c5:d5:79:8e:1b:82:91: 56:b5:57:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjYwNDA0MjE0NTQ5WhcNMjYwNDExMjE0NTQ5WjAYMRYwFAYD VQQDEw02OWQxODY4ZS04MTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gLSpRspfKC5wrkwZvQ4NfTewANmxSakA1f4PcINFYRsn0BTgTOb6XIqWmsd ivXJuLW5r3o8yBuXJ7Ii/Ar63uH4JxHTvA4AHwrdwsJx95FKFijhNSBMJAD8jSCQ XrmRnSCvx5FB0liSl8adjGRmM7vmTr+rwKlpdIMPehkQVvf7N1D3w6Iz3ZfsKx1p 3gVj5fLQGWtLjjzqzcK0IWyPtBdth2Y57qASG96RD3AflPHzo8WhqQ6zrQDRZGV2 7KcpgeSpmVNA0d9fbMxhq5VktrkFIM+CypnUuM2BFW6h+S51Z9saDMrx7MmyZVre j65G5Su2Ve0qCOanVTifbBMpgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEb5J8OU MMj38BX6j1Za42TLTZ6wMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAScErZUEBejvf3jNcScxfDSc9uAhbcUZO1T0Gjf1USSFtUuQZ4XqoiyvCw19X 50eb1KfUHllzX8UxdAf88H+PkkVuL2b2RPF0GqBig2cQyCtC2lNW1fTKyLFE+Bih eOj6xsLLuPeSRnOtG/985MuQTn+lI3iMqxd5voxODSu+4vQBl4rxcK00c1Nnupvx Q70FwU0vi90Qq3lIydcgvGdU7HRtGlLhsb0z30kdsByZTKdr5QRkNxzQsMRzUzNM dCKSVNo+qV2lGJh4dSQRGzhj8rCNiaF0z6u0qwUd1hKyxeACRlvg9xVS8ev/UXi7 3TZ4+RoQ9vzF1XmOG4KRVrVXNA== -----END CERTIFICATE-----Generated at Mon Apr 6 01:15:39 2026 by rpki-client