$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json) Hash identifier: X3zfZhvp6ATGEEGupHtSEHJmyS8IqBJLIUTxOElEQVI= Subject key identifier: DA:15:D3:0B:C8:75:36:1D:D2:FA:BF:DE:92:FD:B4:52:CD:D0:F5:F9 Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0D13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft Manifest number: 0D07 Signing time: Sat 04 Apr 2026 17:58:02 +0000 Manifest this update: Sat 04 Apr 2026 17:58:01 +0000 Manifest next update: Sat 11 Apr 2026 17:58:01 +0000 Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: 0EIEUE3LgsUqjb71ddkyao6rjphZJGKL72F59ZsKjn8=) 2: 44FEC394589711F0B981A181C4F9AE02.roa (hash: XgVbFRUMdQn7YMgDUvllzDbhgw5VgTScVk8o1raBf8w=) 3: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (hash: ev3YW2NLkO0rjwyR3qqZhC4fRgKa7uqRJcOoJlN/Fyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3347 (0xd13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Apr 4 17:58:01 2026 GMT Not After : Apr 11 17:58:01 2026 GMT Subject: CN=69d1512a-509f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:fb:4e:d0:53:f6:a4:51:f5:7a:82:20:95: 43:6d:75:9b:ac:8b:48:e4:03:5f:6a:06:56:9d:2e: 15:2e:e1:1c:93:f0:17:79:50:41:ab:ba:65:84:c3: af:80:a0:4b:e9:d5:ea:0d:9c:1f:4f:6e:18:d0:6e: 06:b9:d1:01:44:32:5e:34:0d:c7:a5:43:fb:c2:46: 10:43:ef:91:bc:de:02:72:e5:36:76:41:7a:c1:aa: f8:70:8f:43:a8:5d:4d:2f:32:a8:f8:e2:7e:86:b0: d9:a9:d9:56:23:99:48:58:0f:66:ef:70:87:c1:21: 74:5e:d3:88:b4:c1:63:50:cb:f8:ba:56:5e:cc:bd: cc:d9:15:01:da:a0:87:cb:5b:3f:b4:7b:c4:5c:c1: 14:7a:0f:09:1d:8c:ab:92:f5:12:d4:1e:ff:23:49: 3d:76:d3:bc:9f:02:fd:aa:68:26:27:a6:01:1d:8e: b5:e1:7e:26:73:47:fb:f5:22:8a:21:c5:cc:4a:23: a3:e4:98:91:a2:77:6c:3b:e2:48:74:84:d4:ed:9a: 3a:0c:42:66:59:9c:c6:78:50:ee:81:8a:31:34:78: c8:cd:26:a9:8f:a3:0a:2c:07:c3:70:5a:1a:7a:d7: 11:47:f5:15:34:48:d0:c0:a0:6a:4a:fd:0c:68:15: 63:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:15:D3:0B:C8:75:36:1D:D2:FA:BF:DE:92:FD:B4:52:CD:D0:F5:F9 X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:72:62:da:a2:1d:10:0a:59:a2:f0:f9:72:09:71:f6:52:4a: 2e:da:1e:65:97:37:4b:4a:42:91:5d:b2:db:4b:a1:28:bc:48: 7f:86:1e:5a:dc:2d:9a:f1:81:03:91:65:3b:f8:ad:74:32:96: 6a:b4:01:ed:7f:0a:8c:a2:5a:b3:23:b3:20:91:82:10:8c:e9: 10:7e:b0:28:47:61:7e:ee:4f:04:47:a3:24:e7:3c:bd:15:d1: c8:5e:87:67:b6:2b:ec:bc:6c:ed:1d:53:7d:ee:13:cf:82:2a: 03:59:d8:91:ef:a6:80:d9:4d:f4:9a:67:f1:d0:0f:97:30:bf: 2e:54:d6:fe:b0:b6:ea:18:a3:7a:42:ca:f2:8d:42:f6:47:e3: 47:e7:ca:0c:f1:1e:67:ba:bd:71:78:fe:e0:e0:48:a6:39:1f: b4:32:46:8b:e9:11:4f:f9:57:df:d1:61:ec:9c:3d:ab:ff:93: c9:db:a8:36:f3:9a:bd:73:8f:de:84:60:ad:d2:61:c2:4e:65: 47:b2:31:1b:11:53:7b:cb:c4:08:70:d4:bc:54:60:06:47:3b: 6f:e6:d1:a7:7d:9d:6c:92:9d:23:03:85:2d:f4:62:e2:44:61: d0:a3:f9:9e:89:fe:58:f2:42:8b:9f:db:66:44:51:91:49:11: 3b:03:f6:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjYwNDA0MTc1ODAxWhcNMjYwNDExMTc1ODAxWjAYMRYwFAYD VQQDEw02OWQxNTEyYS01MDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmv7TtBT9qRR9XqCIJVDbXWbrItI5ANfagZWnS4VLuEck/AXeVBBq7plhMOv gKBL6dXqDZwfT24Y0G4GudEBRDJeNA3HpUP7wkYQQ++RvN4CcuU2dkF6war4cI9D qF1NLzKo+OJ+hrDZqdlWI5lIWA9m73CHwSF0XtOItMFjUMv4ulZezL3M2RUB2qCH y1s/tHvEXMEUeg8JHYyrkvUS1B7/I0k9dtO8nwL9qmgmJ6YBHY614X4mc0f79SKK IcXMSiOj5JiRondsO+JIdITU7Zo6DEJmWZzGeFDugYoxNHjIzSapj6MKLAfDcFoa etcRR/UVNEjQwKBqSv0MaBVjowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoV0wvI dTYd0vq/3pL9tFLN0PX5MB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU2Ni83MDYzOUVGQ0ZGNkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JS N1B0b1I2R3dkREs5aDdHZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA3Ji2qIdEApZovD5cglx9lJKLtoeZZc3S0pCkV2y20uhKLxIf4YeWtwtmvGB A5FlO/itdDKWarQB7X8KjKJasyOzIJGCEIzpEH6wKEdhfu5PBEejJOc8vRXRyF6H Z7Yr7Lxs7R1Tfe4Tz4IqA1nYke+mgNlN9Jpn8dAPlzC/LlTW/rC26hijekLK8o1C 9kfjR+fKDPEeZ7q9cXj+4OBIpjkftDJGi+kRT/lX39Fh7Jw9q/+TyduoNvOavXOP 3oRgrdJhwk5lR7IxGxFTe8vECHDUvFRgBkc7b+bRp32dbJKdIwOFLfRi4kRh0KP5 non+WPJCi5/bZkRRkUkROwP2Eg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:16 2026 by rpki-client