$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: WqzRuTtOTPAQrFd1HXw8IgQ1tXFOMgujsYk3AT+x+y8= Subject key identifier: 5D:A6:A6:C0:86:1B:F4:74:6F:BE:3D:12:C4:81:28:D3:A9:8D:A0:CF Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 067A Signing time: Mon 20 Apr 2026 22:27:25 +0000 Manifest this update: Mon 20 Apr 2026 22:27:24 +0000 Manifest next update: Mon 27 Apr 2026 22:27:24 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: HKtY1HN5p9GRZxvMmmqNFiOcu7+vaHIH+KEze0BPks4=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: /3x4vYPiXoG8rAiPY7APpgt+Ap9Ktaa/xQN8yrKkbXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 22:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Apr 20 22:27:24 2026 GMT Not After : Apr 27 22:27:24 2026 GMT Subject: CN=69e6a84d-4840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:80:55:18:da:9d:8a:3f:bb:c6:1b:51:b1: 8b:de:04:6a:50:79:e7:16:0b:73:7f:61:2b:38:55: 86:49:ab:ec:3c:44:2c:1b:17:e8:d6:b3:54:3b:81: 18:a7:c3:12:5e:af:2d:35:f1:4c:ca:a8:7e:b5:10: 94:cc:80:61:83:47:4c:b9:f9:06:0b:07:35:d4:e5: 33:c2:d9:b3:4e:97:a2:7b:28:67:24:32:31:ab:b4: e9:56:1d:cf:f0:56:af:4c:23:d9:ff:07:45:e9:5d: 73:0b:7c:d4:37:c1:09:86:0d:d7:83:86:cb:ac:1e: 3b:4c:ee:64:1c:4d:68:07:b2:61:73:bd:29:b1:02: 60:12:77:32:2d:84:e0:20:96:e2:30:ca:6a:f7:47: aa:44:4a:e3:34:31:3e:4a:c5:6e:9a:85:d6:08:d7: 0c:fb:22:16:f1:8a:2f:cd:83:cb:08:d2:80:1c:81: 3d:8f:8c:10:a7:55:d7:79:cc:6b:c1:86:3d:c4:cf: dc:79:e0:2c:50:2f:27:0f:86:99:49:66:54:6e:a4: 94:c8:b9:11:f1:fb:5f:e1:2a:39:c4:c5:95:97:32: 6d:c4:cc:82:bc:1b:82:73:17:84:06:fc:46:37:59: 5c:3d:14:3e:b9:00:67:fd:26:a6:2e:71:d8:9d:87: ec:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A6:A6:C0:86:1B:F4:74:6F:BE:3D:12:C4:81:28:D3:A9:8D:A0:CF X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:2e:1a:b1:d3:67:8b:b7:26:c2:8d:be:5d:79:65:ef:60:c2: af:ef:87:ee:f6:4f:37:d0:e2:05:5e:a6:2e:bf:f0:b0:11:24: ce:b4:9e:93:b2:d4:32:62:5b:0e:84:e8:c4:27:66:0c:81:06: 3b:ae:40:85:eb:1b:9a:f1:54:2a:94:63:8c:ff:0e:53:68:df: c6:ab:d2:19:03:7c:05:87:a4:8a:4c:b8:9b:4e:16:35:a4:ee: b1:f9:e4:23:3c:b9:69:57:e9:d9:0e:9c:9d:4b:ec:89:b1:45: 65:79:72:d6:8f:c4:4b:80:61:17:83:7b:54:78:82:36:1d:0a: bd:87:34:d1:52:b6:90:73:6b:14:f6:9e:a5:31:b6:5c:ca:99: 24:6f:0a:83:af:1f:33:38:d5:3a:3f:7b:a5:ee:b1:ba:dd:10: fc:72:e3:f7:d0:e7:b8:aa:46:6a:05:3f:88:f8:9c:33:2a:e7: c6:37:fc:4c:9b:4c:60:08:15:07:ed:d3:88:58:0b:e2:d2:3f: a0:f6:75:1b:c2:17:20:fd:93:ec:2b:63:72:d9:99:25:cd:bc: da:d9:ca:18:ad:ff:73:fd:7b:df:f4:8d:4c:87:b4:25:10:49: 07:ce:3a:23:63:5d:e7:9f:10:6d:10:7d:81:09:69:3a:9d:ba: 6e:b8:77:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjYwNDIwMjIyNzI0WhcNMjYwNDI3MjIyNzI0WjAYMRYwFAYD VQQDEw02OWU2YTg0ZC00ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4qAVRjanYo/u8YbUbGL3gRqUHnnFgtzf2ErOFWGSavsPEQsGxfo1rNUO4EY p8MSXq8tNfFMyqh+tRCUzIBhg0dMufkGCwc11OUzwtmzTpeieyhnJDIxq7TpVh3P 8FavTCPZ/wdF6V1zC3zUN8EJhg3Xg4bLrB47TO5kHE1oB7Jhc70psQJgEncyLYTg IJbiMMpq90eqRErjNDE+SsVumoXWCNcM+yIW8YovzYPLCNKAHIE9j4wQp1XXecxr wYY9xM/ceeAsUC8nD4aZSWZUbqSUyLkR8ftf4So5xMWVlzJtxMyCvBuCcxeEBvxG N1lcPRQ+uQBn/SamLnHYnYfsmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2mpsCG G/R0b749EsSBKNOpjaDPMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJC4asdNni7cmwo2+XXll72DCr++H7vZPN9DiBV6mLr/wsBEkzrSek7LUMmJb DoToxCdmDIEGO65AhesbmvFUKpRjjP8OU2jfxqvSGQN8BYekiky4m04WNaTusfnk Izy5aVfp2Q6cnUvsibFFZXly1o/ES4BhF4N7VHiCNh0KvYc00VK2kHNrFPaepTG2 XMqZJG8Kg68fMzjVOj97pe6xut0Q/HLj99DnuKpGagU/iPicMyrnxjf8TJtMYAgV B+3TiFgL4tI/oPZ1G8IXIP2T7CtjctmZJc282tnKGK3/c/173/SNTIe0JRBJB846 I2Nd558QbRB9gQlpOp26brh3kA== -----END CERTIFICATE-----Generated at Wed Apr 22 07:27:12 2026 by rpki-client