$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: Ubu2ynpCQ8PON8+FM1AK5WHPMJ7xpSEHSOgch99jvvU= Subject key identifier: 99:D0:E2:71:60:D8:FD:1E:28:DF:FE:B6:06:88:16:16:18:A1:1B:B1 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 0231 Signing time: Sun 05 Apr 2026 02:13:00 +0000 Manifest this update: Sun 05 Apr 2026 02:13:00 +0000 Manifest next update: Sun 12 Apr 2026 02:13:00 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: hF8+TFNkTByYHgx0XHbSTeV1OhJ81QJq5g7m5arOy0s=) 2: C9E93DD2266E11F187DDE8D8AB833773.roa (hash: s8W6TqujPjuIn1Hph7kRfPdwxSDhp2e0AroV4FJ3gi0=) 3: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: Xp7KaekHk3CUTswk4L6T+ALf1W9IbKfjhj0abkYa7+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Apr 5 02:13:00 2026 GMT Not After : Apr 12 02:13:00 2026 GMT Subject: CN=69d1c52c-e62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:d9:3e:88:32:c4:6f:92:f2:4f:77:f2:28: 1b:4e:e7:6d:14:82:74:08:7d:19:8b:d2:30:90:af: 4a:0c:b1:57:ba:d9:bf:c9:72:b4:3e:4e:7e:28:cc: ee:5d:bd:fa:93:03:ad:62:60:35:81:b3:64:4b:52: 0c:e3:3d:79:e3:33:2c:6b:74:74:28:f3:fd:2c:41: ae:8d:28:33:a1:8e:b8:0f:c2:19:96:22:3a:b3:67: a3:fd:24:a1:c5:1c:ea:71:4c:3c:5d:79:06:7d:f7: ad:86:96:9e:a1:6f:5e:cd:aa:9f:53:c0:b3:58:fc: f7:b2:b9:3b:c3:b9:53:03:ad:4f:47:4c:9f:0d:48: 1e:fb:1f:16:87:e8:0d:20:42:ee:9b:1e:6f:11:31: 2a:b5:f4:b5:e0:90:3f:84:0d:0d:35:3a:4f:ba:ad: 52:46:1c:d1:ef:0a:43:81:eb:bf:10:cb:ec:91:57: f8:5e:6a:bd:ea:7a:e3:da:0e:30:4f:75:50:e1:d9: 64:a6:1d:17:3b:5c:1c:f6:9d:99:6e:54:fc:6d:26: cf:5e:6d:be:63:c9:4c:c6:93:4b:01:64:83:b2:ad: 9b:9d:11:df:bf:b1:2d:8f:0c:50:d3:57:da:46:09: fd:0b:e1:39:23:97:a8:d5:48:0a:c1:f1:63:24:5e: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D0:E2:71:60:D8:FD:1E:28:DF:FE:B6:06:88:16:16:18:A1:1B:B1 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a3:d8:60:7a:c2:8f:d9:b5:e3:20:13:c1:ab:d9:5b:94:2d: 32:71:3d:1d:5d:f2:a2:46:2d:58:c1:d7:4c:d9:fa:c6:3f:39: b0:36:03:bf:d1:e3:86:fd:a0:2e:04:b0:eb:92:ea:60:17:61: 58:eb:f5:8c:db:11:ea:85:8e:1d:a3:9d:08:c1:b8:b4:25:ea: fc:4b:92:d9:65:af:0b:43:8a:b8:70:57:2d:0e:30:77:19:e5: a7:f8:e3:46:0b:fb:55:ef:78:eb:0c:27:3a:24:25:7b:38:6e: ad:c6:e5:9d:44:34:1a:f6:bb:58:ea:9f:31:e1:ba:5e:e0:1c: 83:f4:cb:6b:bd:cd:eb:2b:df:6c:ed:15:29:18:a0:70:a7:03: 40:3f:81:a8:0e:03:8f:4b:34:dd:12:38:36:41:9f:e2:13:36: 3d:db:9f:4e:ba:ed:7c:a7:25:46:74:7e:96:e3:c9:9f:57:cb: bf:7b:03:69:d7:d4:83:11:5c:27:78:ca:8e:20:ad:a0:20:19: d9:fe:48:91:01:aa:a3:78:bf:98:9f:8c:fd:66:a8:73:b3:2a: b8:13:b3:70:46:36:26:ee:ba:72:3f:78:cf:10:17:ed:dc:b0: e3:68:41:fd:39:82:f1:cc:3e:d0:65:6b:3f:04:10:22:3e:8e: 49:72:55:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjYwNDA1MDIxMzAwWhcNMjYwNDEyMDIxMzAwWjAYMRYwFAYD VQQDEw02OWQxYzUyYy1lNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujjZPogyxG+S8k938igbTudtFIJ0CH0Zi9IwkK9KDLFXutm/yXK0Pk5+KMzu Xb36kwOtYmA1gbNkS1IM4z154zMsa3R0KPP9LEGujSgzoY64D8IZliI6s2ej/SSh xRzqcUw8XXkGffethpaeoW9ezaqfU8CzWPz3srk7w7lTA61PR0yfDUge+x8Wh+gN IELumx5vETEqtfS14JA/hA0NNTpPuq1SRhzR7wpDgeu/EMvskVf4Xmq96nrj2g4w T3VQ4dlkph0XO1wc9p2ZblT8bSbPXm2+Y8lMxpNLAWSDsq2bnRHfv7EtjwxQ01fa Rgn9C+E5I5eo1UgKwfFjJF6XrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnQ4nFg 2P0eKN/+tgaIFhYYoRuxMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApqPYYHrCj9m14yATwavZW5QtMnE9HV3yokYtWMHXTNn6xj85sDYDv9Hjhv2g LgSw65LqYBdhWOv1jNsR6oWOHaOdCMG4tCXq/EuS2WWvC0OKuHBXLQ4wdxnlp/jj Rgv7Ve946wwnOiQlezhurcblnUQ0Gva7WOqfMeG6XuAcg/TLa73N6yvfbO0VKRig cKcDQD+BqA4Dj0s03RI4NkGf4hM2PdufTrrtfKclRnR+luPJn1fLv3sDadfUgxFc J3jKjiCtoCAZ2f5IkQGqo3i/mJ+M/Waoc7MquBOzcEY2Ju66cj94zxAX7dyw42hB /TmC8cw+0GVrPwQQIj6OSXJV9g== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:47 2026 by rpki-client